last executing test programs: 7.980520055s ago: executing program 4 (id=235): recvmmsg(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2101, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0xffff, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r0, 0x5056) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) accept(r0, 0x0, 0x0) 7.924075969s ago: executing program 4 (id=237): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r1}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[], 0x0) 7.740796719s ago: executing program 4 (id=238): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r4}, 0x0, &(0x7f0000000740)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, 0x0, &(0x7f0000000240)}, 0x20) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) socket$inet6(0xa, 0x2, 0x0) 6.624881974s ago: executing program 1 (id=243): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180)={[{@init_itable_val={'init_itable', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x584, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000002c0)={0x0, 0x6930, 0x5, 0x1}) 5.289683772s ago: executing program 3 (id=245): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x208000, &(0x7f0000000980)={[{@resuid}, {}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000017c0)=ANY=[], 0x32600) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) 5.090433153s ago: executing program 1 (id=247): r0 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r0, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) close(r0) 4.963954061s ago: executing program 0 (id=249): syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x490, &(0x7f0000000580)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 4.872377966s ago: executing program 1 (id=250): gettid() timer_create(0x6, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) 4.780518242s ago: executing program 2 (id=252): socket$kcm(0x10, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x4, 0x7, 0x5}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000440)={r2, 0x63, "6b75336aade043bc89002c1871ee0fe95c8e9ec786adcdf213e3ce4fbc222ace1f2f24a51b1f4bb53f847a953db17c74a43249739163066b921e73bd1b3f31c34335635aa7c25258d0878bbb3b4f97bea526c12ac87f9939f17f33ec22848900baa5c5"}, &(0x7f0000000500)=0x6b) setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x3) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x7) 4.536566256s ago: executing program 0 (id=253): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x800000a1e) 3.59929953s ago: executing program 2 (id=254): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000442f00fc010000000000000000000000fba20000000000000000000000000000000001"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.592586201s ago: executing program 4 (id=255): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a54000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc080001"], 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="040100001000"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={r1}, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0xf000000) 2.478457705s ago: executing program 4 (id=256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.428555078s ago: executing program 2 (id=257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000019ffffff0000000000000004180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0xfe4, &(0x7f0000001e00)=""/4068, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40588c0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) fadvise64(r2, 0x2, 0x0, 0x4) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0xfff0, 0x0, 0x10000047}, 0x0) 2.372744552s ago: executing program 1 (id=258): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000001680)={0x8, 0x7}) 2.360246033s ago: executing program 0 (id=259): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x7ffe, 0x7, {0x3, 0xbb}, 0x3d, 0x2, 0x9}) 2.252715299s ago: executing program 1 (id=260): socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sysinfo(0x0) 2.005435223s ago: executing program 3 (id=261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r1}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[], 0x0) 1.963334915s ago: executing program 0 (id=262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x197, 0x7, 0x9}}}}]}, 0x44}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) 1.875860561s ago: executing program 2 (id=263): pipe(&(0x7f00000045c0)) r0 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000140)=0x5, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="f4ea826888b91b2030ad16d9f42962086cf9067522169c1c5399fbd613623c5b1a792dd181819f30eb32971edc4208cfbe60ed9d9d77ba74f35e6974943db32b076e48db3106ebbcf8c778d6c98d85fa916702eecb86acaa96ce21ff87475638817c2a43ee31242e03afdec9c0ea14bca3e3d55d345b5de7bd9c606a70db1aba26cc5ff923b22217eca11cc631cdf3c04156b01610bd63baff8f7e254849c5cc7b94b11bb8708803e4a19323df9abf7ee619703820a4b8828f245a96287621b3f30e55bba1", 0xc5}], 0x1) 1.875200181s ago: executing program 3 (id=264): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf251100000008000100", @ANYRES32=0x0, @ANYBLOB="0a0015"], 0x2c}, 0x1, 0x0, 0x0, 0x2001c845}, 0x4000) 1.636069994s ago: executing program 2 (id=265): socket$kcm(0x10, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x4, 0x7, 0x5}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000440)={r2, 0x63, "6b75336aade043bc89002c1871ee0fe95c8e9ec786adcdf213e3ce4fbc222ace1f2f24a51b1f4bb53f847a953db17c74a43249739163066b921e73bd1b3f31c34335635aa7c25258d0878bbb3b4f97bea526c12ac87f9939f17f33ec22848900baa5c5"}, &(0x7f0000000500)=0x6b) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, 0x0, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x3) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x7) 1.634948634s ago: executing program 3 (id=266): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0xff, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000e5ff00f2170e65e3f50327e422000000000000000200800000001100", 0x39}, 0x60) close(0x4) 1.618103366s ago: executing program 0 (id=267): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a54000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc080001"], 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="040100001000"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={r1}, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0xf000000) 481.437082ms ago: executing program 1 (id=268): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0x34, @any, 0x0, 0x2}, 0xe) listen(r0, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) 480.195002ms ago: executing program 4 (id=269): gettid() timer_create(0x6, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) 462.334983ms ago: executing program 0 (id=270): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x53a8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 428.497665ms ago: executing program 3 (id=271): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) 168.69369ms ago: executing program 3 (id=272): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e200a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) 0s ago: executing program 2 (id=273): socket$nl_route(0x10, 0x3, 0x0) syz_open_pts(0xffffffffffffffff, 0x20800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f00000003c0)="352f1938", 0x4, 0xebec93e830f96115, 0x1}) io_uring_enter(r1, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2d89ec2496853abc959940fc801cf367a2a0b62c7939", @ANYRES16=r5, @ANYBLOB="04002cbd7000fedbdf25010000000500040003000000080008007f000001"], 0x24}, 0x1, 0x0, 0x0, 0x6008805}, 0x41) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=@framed={{}, [@ldst={0x2, 0x1, 0x3, 0xb, 0x0, 0x6, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0xb}, 0x94) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) connect$inet6(r6, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r9, 0x2, 0x6}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. [ 50.581065][ T4171] cgroup: Unknown subsys name 'net' [ 50.719291][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.880243][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.751691][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 53.792354][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 53.818838][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 53.890891][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 53.911752][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.919482][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.927646][ T4185] device bridge_slave_0 entered promiscuous mode [ 53.948827][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 53.959571][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.966848][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.975106][ T4185] device bridge_slave_1 entered promiscuous mode [ 54.032917][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.040180][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.048361][ T4191] device bridge_slave_0 entered promiscuous mode [ 54.059879][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.067594][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.075839][ T4184] device bridge_slave_0 entered promiscuous mode [ 54.090353][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.102171][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.111606][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.118712][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.126791][ T4191] device bridge_slave_1 entered promiscuous mode [ 54.143428][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.150729][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.158914][ T4184] device bridge_slave_1 entered promiscuous mode [ 54.201255][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.208501][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.216371][ T4197] device bridge_slave_0 entered promiscuous mode [ 54.229484][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.236618][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.244895][ T4197] device bridge_slave_1 entered promiscuous mode [ 54.257089][ T4185] team0: Port device team_slave_0 added [ 54.270862][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.282683][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.299577][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.321617][ T4185] team0: Port device team_slave_1 added [ 54.335935][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.355742][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.362812][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.370984][ T4196] device bridge_slave_0 entered promiscuous mode [ 54.385516][ T4191] team0: Port device team_slave_0 added [ 54.397801][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.407453][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.414733][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.422553][ T4196] device bridge_slave_1 entered promiscuous mode [ 54.442004][ T4191] team0: Port device team_slave_1 added [ 54.449835][ T4184] team0: Port device team_slave_0 added [ 54.457143][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.467183][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.474198][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.500178][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.517842][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.524936][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.550933][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.568316][ T4184] team0: Port device team_slave_1 added [ 54.587797][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.613345][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.620383][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.646391][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.664980][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.671946][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.698468][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.711409][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.729014][ T4197] team0: Port device team_slave_0 added [ 54.735789][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.742732][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.769259][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.788373][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.795417][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.821412][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.848871][ T4197] team0: Port device team_slave_1 added [ 54.871557][ T4196] team0: Port device team_slave_0 added [ 54.880046][ T4196] team0: Port device team_slave_1 added [ 54.910681][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.917726][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.943686][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.960005][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.967537][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.993587][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.009385][ T4185] device hsr_slave_0 entered promiscuous mode [ 55.016149][ T4185] device hsr_slave_1 entered promiscuous mode [ 55.029551][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.036942][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.063011][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.084904][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.091872][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.118866][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.144602][ T4184] device hsr_slave_0 entered promiscuous mode [ 55.151265][ T4184] device hsr_slave_1 entered promiscuous mode [ 55.158118][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.165951][ T4184] Cannot create hsr debugfs directory [ 55.189484][ T4197] device hsr_slave_0 entered promiscuous mode [ 55.196306][ T4197] device hsr_slave_1 entered promiscuous mode [ 55.202678][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.210619][ T4197] Cannot create hsr debugfs directory [ 55.218415][ T4191] device hsr_slave_0 entered promiscuous mode [ 55.225389][ T4191] device hsr_slave_1 entered promiscuous mode [ 55.232272][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.239905][ T4191] Cannot create hsr debugfs directory [ 55.337827][ T4196] device hsr_slave_0 entered promiscuous mode [ 55.344869][ T4196] device hsr_slave_1 entered promiscuous mode [ 55.351289][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.359388][ T4196] Cannot create hsr debugfs directory [ 55.484906][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 55.484906][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 55.485361][ T4173] Bluetooth: hci2: command 0x0409 tx timeout [ 55.514449][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 55.564317][ T4173] Bluetooth: hci3: command 0x0409 tx timeout [ 55.614444][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.628559][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.638524][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.648304][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.692813][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.720926][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.741976][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.753144][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.800410][ T4197] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.809954][ T4197] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.829356][ T4197] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.837952][ T4197] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.867547][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.917448][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.929564][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.938420][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.950674][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.960923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.971475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.995568][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.028518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.037723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.051004][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.071548][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.081868][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.102129][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.111520][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.120088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.130140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.139908][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.147169][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.155624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.166798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.175357][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.182390][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.190227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.199054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.208129][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.215252][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.223107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.231408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.261288][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.272964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.285392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.293714][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.300795][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.309595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.320036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.329357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.338173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.377251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.386944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.397881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.408125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.418190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.426839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.437301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.446193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.455144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.463779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.472778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.481188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.495005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.503414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.513226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.521984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.536905][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.548975][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.560989][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.576156][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.591571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.600391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.635342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.655057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.682318][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.698193][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.719888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.730640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.744024][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.751157][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.787837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.800304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.808676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.817774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.826554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.839403][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.848214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.858071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.867198][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.874349][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.882711][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.895279][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.915866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.925033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.935555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.942973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.950862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.959886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.987038][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.997570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.006324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.016419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.029692][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.036823][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.050459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.059329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.068032][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.075105][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.082807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.092411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.100898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.111903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.120785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.138890][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.150127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.160589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.169237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.178597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.186455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.195297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.203587][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.210669][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.218952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.248181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.258132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.266651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.276333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.285639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.294855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.303141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.311919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.320934][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.328052][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.336718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.345574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.354586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.363191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.378501][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.389766][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.432566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.441539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.452785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.461692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.471547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.480289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.490313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.498922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.507780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.521298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.529392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.538291][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.561998][ T4185] device veth0_vlan entered promiscuous mode [ 57.569180][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 57.576394][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 57.582633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.591525][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 57.598698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.614193][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 57.622613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.637130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.650851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.654678][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 57.662606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.680093][ T4191] device veth0_vlan entered promiscuous mode [ 57.691555][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.703740][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.720891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.729958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.739077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.747715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.756674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.765306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.773526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.783060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.816564][ T4185] device veth1_vlan entered promiscuous mode [ 57.835350][ T4191] device veth1_vlan entered promiscuous mode [ 57.855676][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.875638][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.901251][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.909180][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.931427][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.946336][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.953848][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.971756][ T4191] device veth0_macvtap entered promiscuous mode [ 58.006161][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.029621][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.038686][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.053422][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.077034][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.090889][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.102771][ T4191] device veth1_macvtap entered promiscuous mode [ 58.125471][ T4185] device veth0_macvtap entered promiscuous mode [ 58.136988][ T4185] device veth1_macvtap entered promiscuous mode [ 58.171161][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.184824][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.197183][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.210098][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.221820][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.229733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.238085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.246962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.255052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.262443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.270321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.279225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.289015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.297767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.331382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.342655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.351664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.361562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.371071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.379602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.388323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.396311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.406100][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.426157][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.436757][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.448231][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.457657][ T4197] device veth0_vlan entered promiscuous mode [ 58.474786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.488568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.497847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.506601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.518480][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.527596][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.538052][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.547045][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.562048][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.572930][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.581782][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.590913][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.610505][ T4197] device veth1_vlan entered promiscuous mode [ 58.618607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.626960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.637523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.647111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.656952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.665713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.673433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.716271][ T4196] device veth0_vlan entered promiscuous mode [ 58.723346][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.731693][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.740217][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.749428][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.757582][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.790286][ T4196] device veth1_vlan entered promiscuous mode [ 58.801572][ T4184] device veth0_vlan entered promiscuous mode [ 58.813326][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.825935][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.835933][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.868894][ T4197] device veth0_macvtap entered promiscuous mode [ 58.894324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.902473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.918339][ T4184] device veth1_vlan entered promiscuous mode [ 58.933316][ T4197] device veth1_macvtap entered promiscuous mode [ 58.992877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.006517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.022030][ T4184] device veth0_macvtap entered promiscuous mode [ 59.031822][ T4196] device veth0_macvtap entered promiscuous mode [ 59.041344][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.053559][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.064813][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.070624][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.082977][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.096166][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.107639][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.115417][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.123451][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.132413][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.141194][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.149955][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.160709][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.169823][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.179701][ T1215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.190401][ T1215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.191128][ T4196] device veth1_macvtap entered promiscuous mode [ 59.219762][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.232518][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.241196][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.252609][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.262486][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.273717][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.285576][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.295481][ T4184] device veth1_macvtap entered promiscuous mode [ 59.308334][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.319417][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.329547][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.340267][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.350942][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.362180][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.373330][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.384748][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.392921][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.401676][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.410854][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.419597][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.430326][ T4197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.439565][ T4197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.448374][ T4197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.457194][ T4197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.486235][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.497287][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.503519][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.506068][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.520408][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.532987][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.543114][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.554553][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.565801][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.576096][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.588010][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.598582][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.609480][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.619968][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.630661][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.640830][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.651532][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.662617][ T4295] Bluetooth: hci4: command 0x040f tx timeout [ 59.666661][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.669111][ T4295] Bluetooth: hci0: command 0x040f tx timeout [ 59.681927][ T4295] Bluetooth: hci2: command 0x040f tx timeout [ 59.688550][ T4295] Bluetooth: hci1: command 0x040f tx timeout [ 59.696219][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.704372][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.712879][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.713595][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.730595][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.738386][ T4295] Bluetooth: hci3: command 0x040f tx timeout [ 59.739329][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.753267][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.762327][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.772822][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.783108][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.792907][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.801924][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.835252][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.851972][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.869364][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.880623][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.893068][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.903719][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.913618][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.924244][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.935195][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.005747][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.021160][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.040199][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.053691][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.062704][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.072148][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.159393][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.202042][ T1215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.260721][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.270916][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.287902][ T1215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.297914][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.333280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.342052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.350327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.368124][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.383043][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.396609][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.407757][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.427571][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.441099][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.479009][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.492780][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.533095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.558998][ T4309] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.109596][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.119959][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 61.543135][ T4326] loop0: detected capacity change from 0 to 512 [ 61.613085][ T4331] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 61.631334][ T4326] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 61.677893][ T4326] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 61.708770][ T4326] EXT4-fs (loop0): group descriptors corrupted! [ 61.725201][ T4303] Bluetooth: hci1: command 0x0419 tx timeout [ 61.738168][ T4303] Bluetooth: hci2: command 0x0419 tx timeout [ 61.753734][ T4303] Bluetooth: hci0: command 0x0419 tx timeout [ 61.789980][ T4303] Bluetooth: hci4: command 0x0419 tx timeout [ 61.797701][ T4337] device syzkaller0 entered promiscuous mode [ 61.814842][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 61.929795][ T4344] capability: warning: `syz.4.13' uses 32-bit capabilities (legacy support in use) [ 61.951844][ T4344] program syz.4.13 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.961963][ T4326] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8'. [ 61.972605][ T4326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8'. [ 62.341067][ T4350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 63.244456][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.644673][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.814619][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.883279][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 64.141150][ T4376] netlink: 32 bytes leftover after parsing attributes in process `syz.0.25'. [ 64.175409][ T4378] device syzkaller0 entered promiscuous mode [ 64.231692][ T4383] loop2: detected capacity change from 0 to 512 [ 64.238808][ T4378] Zero length message leads to an empty skb [ 64.445648][ T4383] ======================================================= [ 64.445648][ T4383] WARNING: The mand mount option has been deprecated and [ 64.445648][ T4383] and is ignored by this kernel. Remove the mand [ 64.445648][ T4383] option from the mount to silence this warning. [ 64.445648][ T4383] ======================================================= [ 65.208522][ T4395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 65.974900][ T4383] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2756: inode #11: comm syz.2.27: corrupted xattr block 95 [ 66.222319][ T4383] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2806: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 66.276625][ T4383] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.27: bg 0: block 7: invalid block bitmap [ 66.319319][ T4383] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 66.343651][ T4383] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2922: inode #11: comm syz.2.27: corrupted xattr block 95 [ 66.373720][ T4388] capability: warning: `syz.0.26' uses deprecated v2 capabilities in a way that may be insecure [ 66.392078][ T4383] EXT4-fs warning (device loop2): ext4_evict_inode:302: xattr delete (err -117) [ 66.405174][ T4383] EXT4-fs (loop2): 1 orphan inode deleted [ 66.424141][ T4383] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.374371][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32'. [ 67.415010][ T4406] device bridge_slave_1 left promiscuous mode [ 67.440914][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.512614][ T4406] device bridge_slave_0 left promiscuous mode [ 67.525833][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.152576][ T4441] Illegal XDP return value 4294967294, expect packet loss! [ 68.314520][ T4447] loop4: detected capacity change from 0 to 256 [ 68.671853][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 68.688717][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 68.698465][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 68.721268][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 68.747629][ T4447] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 69.061988][ T4455] xt_hashlimit: size too large, truncated to 1048576 [ 69.077816][ T4447] tipc: Failed to remove unknown binding: 66,0,0/0:3960670984/3960670985 [ 69.151933][ T4463] tipc: Failed to remove unknown binding: 66,0,0/0:3960670984/3960670985 [ 69.691267][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.020185][ T4480] device syzkaller0 entered promiscuous mode [ 70.064303][ T21] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.073177][ T21] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 70.114133][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.123138][ T21] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.304241][ T21] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.313379][ T21] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.335339][ T21] usb 5-1: Product: syz [ 70.339545][ T21] usb 5-1: Manufacturer: syz [ 70.343765][ T4482] process 'syz.2.56' launched '/dev/fd/5' with NULL argv: empty string added [ 70.437875][ T21] cdc_wdm 5-1:1.0: skipping garbage [ 70.453012][ T21] cdc_wdm 5-1:1.0: skipping garbage [ 70.460308][ T21] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 70.692701][ T21] usb 5-1: USB disconnect, device number 2 [ 71.012891][ T26] audit: type=1326 audit(1769634309.476:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915e0aceb9 code=0x7ffc0000 [ 71.080259][ T26] audit: type=1326 audit(1769634309.506:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915e0aceb9 code=0x7ffc0000 [ 71.139164][ T26] audit: type=1326 audit(1769634309.506:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915e0aceb9 code=0x7ffc0000 [ 71.198250][ T26] audit: type=1326 audit(1769634309.506:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f915e0aceb9 code=0x7ffc0000 [ 71.263290][ T26] audit: type=1326 audit(1769634309.516:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915e0aceb9 code=0x7ffc0000 [ 71.293600][ T26] audit: type=1326 audit(1769634309.516:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915e0aceb9 code=0x7ffc0000 [ 71.321066][ T26] audit: type=1326 audit(1769634309.516:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915e0aceb9 code=0x7ffc0000 [ 71.363577][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.383563][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.425845][ T26] audit: type=1326 audit(1769634309.516:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f915e0aceb9 code=0x7ffc0000 [ 71.496904][ T26] audit: type=1326 audit(1769634309.516:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915e0aceb9 code=0x7ffc0000 [ 71.534382][ T26] audit: type=1326 audit(1769634309.516:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f915e0aceb9 code=0x7ffc0000 [ 71.978545][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 72.067833][ T4524] sg_write: data in/out 26332/1 bytes for SCSI command 0xbd-- guessing data in; [ 72.067833][ T4524] program syz.1.71 not setting count and/or reply_len properly [ 72.724832][ T4532] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.341853][ T4575] loop3: detected capacity change from 0 to 512 [ 75.483154][ T4575] EXT4-fs (loop3): Ignoring removed bh option [ 75.690397][ T4575] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 75.996890][ T4575] EXT4-fs (loop3): 1 truncate cleaned up [ 76.003029][ T4575] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 76.446455][ T1107] cfg80211: failed to load regulatory.db [ 76.529824][ T4592] loop1: detected capacity change from 0 to 8192 [ 78.013733][ T4610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 78.313419][ T4622] loop4: detected capacity change from 0 to 256 [ 78.427618][ T4622] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 78.485738][ T4622] tipc: Failed to remove unknown binding: 66,0,0/0:2184710625/2184710626 [ 78.508664][ T4622] tipc: Failed to remove unknown binding: 66,0,0/0:2184710625/2184710626 [ 78.809381][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.889551][ T4629] loop3: detected capacity change from 0 to 128 [ 78.945333][ T4629] FAT-fs (loop3): Unrecognized mount option "shortname=mixedÿÿÿÿÿÿÿÿ" or missing value [ 79.044704][ T4629] loop3: detected capacity change from 0 to 2048 [ 79.180147][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.188348][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.236534][ T4174] loop3: p1 < > p3 [ 79.345025][ T4635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.523979][ T4174] loop3: p3 size 134217728 extends beyond EOD, truncated [ 79.795654][ T4629] loop3: p1 < > p3 [ 79.804858][ T4629] loop3: p3 size 134217728 extends beyond EOD, truncated [ 79.844771][ T7] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.884095][ T7] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 79.899847][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.916517][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.223923][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 80.238943][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 80.348526][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 80.376304][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 80.644286][ T7] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.945948][ T7] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.955360][ T4666] sctp: [Deprecated]: syz.3.116 (pid 4666) Use of int in max_burst socket option. [ 80.955360][ T4666] Use struct sctp_assoc_value instead [ 80.981890][ T7] usb 5-1: Product: syz [ 80.996436][ T7] usb 5-1: Manufacturer: syz [ 81.770268][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 82.239667][ T4674] program syz.3.118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.311966][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 82.317761][ T7] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 82.326626][ T7] usb 5-1: USB disconnect, device number 3 [ 82.415373][ T4677] loop1: detected capacity change from 0 to 512 [ 82.500345][ T4275] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 82.522312][ T4677] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.544596][ T4677] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 82.631356][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.639533][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.774812][ T4677] EXT4-fs error (device loop1): mb_free_blocks:1876: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 82.842096][ T4684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.869290][ T4677] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #11: comm syz.1.119: corrupted inode contents [ 82.952543][ T4677] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #11: comm syz.1.119: mark_inode_dirty error [ 83.030825][ T4677] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.119: invalid indirect mapped block 1 (level 1) [ 83.038533][ T4275] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.181800][ T4677] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #11: comm syz.1.119: corrupted inode contents [ 83.230690][ T4677] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 83.267320][ T4677] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #11: comm syz.1.119: corrupted inode contents [ 83.340353][ T4677] EXT4-fs error (device loop1): ext4_truncate:4279: inode #11: comm syz.1.119: mark_inode_dirty error [ 83.362116][ T4677] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 83.397730][ T4677] EXT4-fs (loop1): 1 truncate cleaned up [ 83.403450][ T4677] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.475559][ T4681] hid-generic 0000:0000:0000.0001: pid 4681 passed too short report [ 83.660798][ T4698] loop0: detected capacity change from 0 to 256 [ 83.721646][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 83.721660][ T26] audit: type=1800 audit(1769634322.186:13): pid=4698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.126" name="file1" dev="loop0" ino=1048591 res=0 errno=0 [ 83.765093][ T4698] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 83.804203][ T4698] FAT-fs (loop0): Filesystem has been set read-only [ 83.824964][ T4698] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 83.867704][ T4701] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 85.217031][ T4718] loop0: detected capacity change from 0 to 256 [ 85.350963][ T4718] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 85.400508][ T4718] tipc: Failed to remove unknown binding: 66,0,0/0:2257764635/2257764636 [ 85.430888][ T4718] tipc: Failed to remove unknown binding: 66,0,0/0:2257764635/2257764636 [ 85.784164][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.184387][ T7] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.202109][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 86.209777][ T7] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 86.237468][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.264189][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.424420][ T7] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.454967][ T7] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.463004][ T7] usb 1-1: Product: syz [ 86.487698][ T7] usb 1-1: Manufacturer: syz [ 86.555133][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 86.564145][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 86.569403][ T7] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 86.727483][ T4740] loop1: detected capacity change from 0 to 8192 [ 86.762341][ T7] usb 1-1: USB disconnect, device number 2 [ 86.819592][ T26] audit: type=1800 audit(1769634325.286:14): pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.140" name="file1" dev="loop1" ino=1048592 res=0 errno=0 [ 88.342274][ T4756] loop0: detected capacity change from 0 to 512 [ 88.391707][ T4756] EXT4-fs (loop0): Ignoring removed bh option [ 88.422275][ T4756] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 88.524675][ T4756] EXT4-fs (loop0): 1 truncate cleaned up [ 88.530363][ T4756] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 88.695622][ T26] audit: type=1800 audit(1769634327.166:15): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.146" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 88.849491][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.922463][ T4770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.071422][ T4776] loop3: detected capacity change from 0 to 1024 [ 89.192574][ T4776] EXT4-fs (loop3): inline encryption not supported [ 89.239545][ T4784] loop4: detected capacity change from 0 to 512 [ 89.252281][ T4776] EXT4-fs (loop3): Ignoring removed oldalloc option [ 89.261778][ T4776] EXT4-fs (loop3): inline encryption not supported [ 89.268375][ T4776] EXT4-fs (loop3): Ignoring removed orlov option [ 89.305720][ T4776] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,inlinecrypt,auto_da_alloc,oldalloc,sysvgroups,nodioread_nolock,data_err=ignore,grpquota,auto_da_alloc,inlinecrypt,norecovery,jqfmt=vfsv1,orlov,,errors=continue. Quota mode: writeback. [ 89.440186][ T4784] EXT4-fs (loop4): orphan cleanup on readonly fs [ 89.476726][ T4784] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.145: EA inode hash validation failed [ 90.601921][ T4784] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.655026][ T4784] EXT4-fs (loop4): 1 orphan inode deleted [ 90.678615][ T4784] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,delalloc,. Quota mode: writeback. [ 90.941764][ T4800] loop1: detected capacity change from 0 to 512 [ 90.994246][ T4800] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.081908][ T4800] EXT4-fs (loop1): 1 truncate cleaned up [ 91.109456][ T4800] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,nobarrier,,errors=continue. Quota mode: none. [ 91.135483][ T4805] netlink: 'syz.4.160': attribute type 4 has an invalid length. [ 91.168743][ T4800] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.159: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 91.287704][ T4800] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 91.311132][ T4800] EXT4-fs warning (device loop1): ext4_rename_delete:3792: inode #2: comm syz.1.159: Deleting old file: nlink 4, error=-117 [ 91.440054][ T4818] loop4: detected capacity change from 0 to 1024 [ 91.504364][ T4818] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 91.521296][ T4818] EXT4-fs (loop4): orphan cleanup on readonly fs [ 91.571802][ T4818] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 91.585967][ T4818] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 91.604286][ T4818] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 91.627586][ T4818] EXT4-fs (loop4): 1 truncate cleaned up [ 91.635293][ T4818] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.797865][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 92.805604][ T4838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 94.802534][ T4852] netlink: 'syz.1.172': attribute type 3 has an invalid length. [ 94.835274][ T4852] netlink: 'syz.1.172': attribute type 3 has an invalid length. [ 95.107735][ T4862] loop3: detected capacity change from 0 to 1024 [ 95.168538][ T4893] loop1: detected capacity change from 0 to 256 [ 95.381820][ T4862] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 95.470778][ T4862] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 96.580731][ T4931] loop4: detected capacity change from 0 to 512 [ 97.929961][ T4931] EXT4-fs (loop4): Ignoring removed nobh option [ 98.053409][ T4931] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 98.144331][ T4931] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.169898][ T4951] loop3: detected capacity change from 0 to 512 [ 98.360425][ T4951] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.451675][ T4951] ext4 filesystem being mounted at /42/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.628132][ T26] audit: type=1800 audit(1769634337.096:16): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.184" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 99.120129][ T4965] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.205912][ T4973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 99.286939][ T4965] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.457572][ T4965] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.574206][ T4965] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.964937][ T4965] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.020240][ T4965] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.086190][ T4965] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.131329][ T4965] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.053973][ T5000] loop3: detected capacity change from 0 to 1024 [ 102.816514][ T5009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 103.248479][ T5000] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 103.277656][ T5000] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.366284][ T5014] loop1: detected capacity change from 0 to 128 [ 103.450980][ T5016] loop4: detected capacity change from 0 to 128 [ 103.513134][ T5014] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.531752][ T5014] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.853723][ T5032] loop4: detected capacity change from 0 to 256 [ 103.917383][ T5032] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 103.990021][ T5032] tipc: Failed to remove unknown binding: 66,0,0/0:2716652927/2716652928 [ 104.014693][ T5032] tipc: Failed to remove unknown binding: 66,0,0/0:2716652927/2716652928 [ 105.716663][ T5060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 105.977029][ T5070] device dummy0 entered promiscuous mode [ 105.993344][ T5070] device vlan2 entered promiscuous mode [ 108.507000][ T5095] loop0: detected capacity change from 0 to 1024 [ 108.584003][ T5095] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.638334][ T5124] loop3: detected capacity change from 0 to 512 [ 109.882027][ T5124] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.239931][ T5124] EXT4-fs (loop3): orphan cleanup on readonly fs [ 110.270950][ T5124] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 110.281645][ T5124] EXT4-fs (loop3): 1 truncate cleaned up [ 110.295551][ T5124] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,delalloc,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 110.431514][ T5133] loop1: detected capacity change from 0 to 1024 [ 110.456804][ T5129] loop2: detected capacity change from 0 to 8192 [ 110.530336][ T5129] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 110.557991][ T5129] FAT-fs (loop2): Filesystem has been set read-only [ 110.572156][ T5133] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000008,journal_dev=0x00000000000000ff,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none. [ 110.601559][ T5129] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 111.710942][ T5129] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 111.719429][ T5129] attempt to access beyond end of device [ 111.719429][ T5129] loop2: rw=0, want=57848, limit=8192 [ 111.774480][ T5129] Buffer I/O error on dev loop2, logical block 57847, async page read [ 111.782759][ T5129] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 111.824305][ T26] audit: type=1800 audit(1769634350.296:17): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.243" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 111.852396][ T5129] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 111.871669][ T5129] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 111.890014][ T26] audit: type=1800 audit(1769634350.356:18): pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.241" name="file2" dev="loop2" ino=1048604 res=0 errno=0 [ 111.942568][ T5129] syz.2.241 (5129) used greatest stack depth: 20112 bytes left [ 112.119255][ T5155] loop0: detected capacity change from 0 to 512 [ 112.311120][ T5155] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.331461][ T5155] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.333028][ T5168] loop0: detected capacity change from 0 to 128 [ 113.370886][ T5170] loop3: detected capacity change from 0 to 1024 [ 113.422013][ T5170] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 113.424391][ T26] audit: type=1800 audit(1769634351.876:19): pid=5168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.253" name="bus" dev="loop0" ino=1048605 res=0 errno=0 [ 113.451326][ T5170] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.554800][ T5177] attempt to access beyond end of device [ 114.554800][ T5177] loop0: rw=0, want=241, limit=128 [ 114.579863][ T5170] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,bsddf,mb_optimize_scan=0x0000000000000001,noload,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 114.606851][ T5182] loop2: detected capacity change from 0 to 128 [ 114.687072][ T5182] netlink: 'syz.2.257': attribute type 10 has an invalid length. [ 114.725118][ T154] attempt to access beyond end of device [ 114.725118][ T154] loop0: rw=1, want=1041, limit=128 [ 114.911422][ T5182] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 114.973216][ T5188] attempt to access beyond end of device [ 114.973216][ T5188] loop2: rw=1, want=1041, limit=128 [ 115.249655][ T5197] netlink: 'syz.3.264': attribute type 21 has an invalid length. [ 115.299686][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.264'. [ 116.853112][ T5222] netlink: 14 bytes leftover after parsing attributes in process `syz.3.272'. [ 117.018069][ T5222] team0 (unregistering): Port device team_slave_0 removed [ 117.065781][ T5222] team0 (unregistering): Port device team_slave_1 removed [ 117.200517][ T5226] [ 117.202873][ T5226] ====================================================== [ 117.209889][ T5226] WARNING: possible circular locking dependency detected [ 117.216916][ T5226] syzkaller #0 Not tainted [ 117.221325][ T5226] ------------------------------------------------------ [ 117.228336][ T5226] syz.2.273/5226 is trying to acquire lock: [ 117.234227][ T5226] ffff888075630b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 117.244671][ T5226] [ 117.244671][ T5226] but task is already holding lock: [ 117.252029][ T5226] ffff888075630ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 117.261344][ T5226] [ 117.261344][ T5226] which lock already depends on the new lock. [ 117.261344][ T5226] [ 117.271833][ T5226] [ 117.271833][ T5226] the existing dependency chain (in reverse order) is: [ 117.280841][ T5226] [ 117.280841][ T5226] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 117.288489][ T5226] __mutex_lock_common+0x1e3/0x2400 [ 117.294217][ T5226] mutex_lock_nested+0x17/0x20 [ 117.299509][ T5226] hci_dev_do_close+0x5f/0x1030 [ 117.304886][ T5226] hci_rfkill_set_block+0x10a/0x190 [ 117.310606][ T5226] rfkill_set_block+0x1c6/0x420 [ 117.315990][ T5226] rfkill_fop_write+0x452/0x560 [ 117.321362][ T5226] vfs_write+0x30b/0xd60 [ 117.326126][ T5226] ksys_write+0x152/0x260 [ 117.330990][ T5226] do_syscall_64+0x4c/0xa0 [ 117.335925][ T5226] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.342353][ T5226] [ 117.342353][ T5226] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 117.350350][ T5226] __mutex_lock_common+0x1e3/0x2400 [ 117.356073][ T5226] mutex_lock_nested+0x17/0x20 [ 117.361461][ T5226] rfkill_register+0x33/0x8a0 [ 117.366675][ T5226] hci_register_dev+0x452/0x970 [ 117.372113][ T5226] vhci_create_device+0x32c/0x5c0 [ 117.377657][ T5226] vhci_write+0x391/0x450 [ 117.382507][ T5226] vfs_write+0x745/0xd60 [ 117.387268][ T5226] ksys_write+0x152/0x260 [ 117.392130][ T5226] do_syscall_64+0x4c/0xa0 [ 117.397050][ T5226] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.403457][ T5226] [ 117.403457][ T5226] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 117.411256][ T5226] __mutex_lock_common+0x1e3/0x2400 [ 117.416972][ T5226] mutex_lock_nested+0x17/0x20 [ 117.422239][ T5226] vhci_send_frame+0x88/0x100 [ 117.427420][ T5226] hci_send_frame+0x1a9/0x2e0 [ 117.432609][ T5226] hci_tx_work+0x9f9/0x1710 [ 117.437609][ T5226] process_one_work+0x85f/0x1010 [ 117.443066][ T5226] worker_thread+0xaa6/0x1290 [ 117.448250][ T5226] kthread+0x436/0x520 [ 117.452820][ T5226] ret_from_fork+0x1f/0x30 [ 117.457738][ T5226] [ 117.457738][ T5226] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 117.466920][ T5226] __lock_acquire+0x2c42/0x7d10 [ 117.472276][ T5226] lock_acquire+0x19e/0x400 [ 117.477276][ T5226] __flush_work+0x116/0x210 [ 117.482274][ T5226] hci_dev_do_close+0x1e7/0x1030 [ 117.487723][ T5226] hci_rfkill_set_block+0x10a/0x190 [ 117.493418][ T5226] rfkill_set_block+0x1c6/0x420 [ 117.498859][ T5226] rfkill_fop_write+0x452/0x560 [ 117.504296][ T5226] vfs_write+0x30b/0xd60 [ 117.509037][ T5226] ksys_write+0x152/0x260 [ 117.513860][ T5226] do_syscall_64+0x4c/0xa0 [ 117.518787][ T5226] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.525181][ T5226] [ 117.525181][ T5226] other info that might help us debug this: [ 117.525181][ T5226] [ 117.535386][ T5226] Chain exists of: [ 117.535386][ T5226] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 117.535386][ T5226] [ 117.550334][ T5226] Possible unsafe locking scenario: [ 117.550334][ T5226] [ 117.557759][ T5226] CPU0 CPU1 [ 117.563101][ T5226] ---- ---- [ 117.568442][ T5226] lock(&hdev->req_lock); [ 117.572835][ T5226] lock(rfkill_global_mutex); [ 117.580094][ T5226] lock(&hdev->req_lock); [ 117.587011][ T5226] lock((work_completion)(&hdev->tx_work)); [ 117.592969][ T5226] [ 117.592969][ T5226] *** DEADLOCK *** [ 117.592969][ T5226] [ 117.601086][ T5226] 2 locks held by syz.2.273/5226: [ 117.606082][ T5226] #0: ffffffff8d6c47c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 117.616178][ T5226] #1: ffff888075630ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 117.625923][ T5226] [ 117.625923][ T5226] stack backtrace: [ 117.631805][ T5226] CPU: 1 PID: 5226 Comm: syz.2.273 Not tainted syzkaller #0 [ 117.639065][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.649109][ T5226] Call Trace: [ 117.652371][ T5226] [ 117.655293][ T5226] dump_stack_lvl+0x188/0x250 [ 117.659956][ T5226] ? load_image+0x400/0x400 [ 117.664442][ T5226] ? show_regs_print_info+0x20/0x20 [ 117.669622][ T5226] ? print_circular_bug+0x12b/0x1a0 [ 117.674819][ T5226] check_noncircular+0x296/0x330 [ 117.679735][ T5226] ? look_up_lock_class+0x71/0x110 [ 117.684828][ T5226] ? add_chain_block+0x940/0x940 [ 117.689742][ T5226] ? lockdep_lock+0xf1/0x1f0 [ 117.694385][ T5226] ? mark_lock+0x94/0x320 [ 117.698696][ T5226] __lock_acquire+0x2c42/0x7d10 [ 117.703530][ T5226] ? lockdep_unlock+0x143/0x2e0 [ 117.708360][ T5226] ? mark_lock+0x94/0x320 [ 117.712664][ T5226] ? verify_lock_unused+0x140/0x140 [ 117.717840][ T5226] ? __lock_acquire+0x12e8/0x7d10 [ 117.722941][ T5226] lock_acquire+0x19e/0x400 [ 117.727425][ T5226] ? __flush_work+0xfa/0x210 [ 117.731994][ T5226] ? verify_lock_unused+0x140/0x140 [ 117.737172][ T5226] ? __mutex_trylock_common+0x155/0x260 [ 117.742707][ T5226] ? read_lock_is_recursive+0x10/0x10 [ 117.748083][ T5226] __flush_work+0x116/0x210 [ 117.752569][ T5226] ? __flush_work+0xfa/0x210 [ 117.757140][ T5226] ? flush_work+0x20/0x20 [ 117.761454][ T5226] ? hci_leds_update_powered+0x148/0x160 [ 117.767064][ T5226] ? rcu_lock_release+0x5/0x20 [ 117.771811][ T5226] ? __lock_acquire+0x7d10/0x7d10 [ 117.776820][ T5226] hci_dev_do_close+0x1e7/0x1030 [ 117.781741][ T5226] ? _raw_spin_unlock+0x40/0x40 [ 117.786574][ T5226] hci_rfkill_set_block+0x10a/0x190 [ 117.791752][ T5226] ? rcu_lock_release+0x20/0x20 [ 117.796582][ T5226] rfkill_set_block+0x1c6/0x420 [ 117.801597][ T5226] rfkill_fop_write+0x452/0x560 [ 117.806430][ T5226] ? rfkill_fop_read+0x4d0/0x4d0 [ 117.811350][ T5226] ? common_file_perm+0xc0/0x1c0 [ 117.816272][ T5226] ? fsnotify_perm+0x5d/0x560 [ 117.820927][ T5226] ? security_file_permission+0x75/0xa0 [ 117.826538][ T5226] ? rfkill_fop_read+0x4d0/0x4d0 [ 117.831454][ T5226] vfs_write+0x30b/0xd60 [ 117.835679][ T5226] ? file_end_write+0x250/0x250 [ 117.840508][ T5226] ? __fget_files+0x40f/0x480 [ 117.845166][ T5226] ? __fdget_pos+0x1e2/0x370 [ 117.849733][ T5226] ? ksys_write+0x71/0x260 [ 117.854126][ T5226] ksys_write+0x152/0x260 [ 117.858450][ T5226] ? __ia32_sys_read+0x80/0x80 [ 117.863206][ T5226] ? lockdep_hardirqs_on+0x94/0x140 [ 117.868584][ T5226] do_syscall_64+0x4c/0xa0 [ 117.872989][ T5226] ? clear_bhb_loop+0x30/0x80 [ 117.877648][ T5226] ? clear_bhb_loop+0x30/0x80 [ 117.882321][ T5226] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.888204][ T5226] RIP: 0033:0x7fd13a958eb9 [ 117.892705][ T5226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.912606][ T5226] RSP: 002b:00007fd138b93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.921001][ T5226] RAX: ffffffffffffffda RBX: 00007fd13abd4090 RCX: 00007fd13a958eb9 [ 117.928953][ T5226] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 117.936911][ T5226] RBP: 00007fd13a9c6c1f R08: 0000000000000000 R09: 0000000000000000 [ 117.944863][ T5226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.952813][ T5226] R13: 00007fd13abd4128 R14: 00007fd13abd4090 R15: 00007ffe6dc408a8 [ 117.960773][ T5226] [ 118.175354][ T5240] device syzkaller0 entered promiscuous mode