last executing test programs: 14.267647298s ago: executing program 0 (id=178): socket$alg(0x26, 0x5, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10100) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x3) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000580)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f00000003c0)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b7080000000000000301090292"], 0x0) 14.064953899s ago: executing program 1 (id=179): r0 = syz_io_uring_setup(0x47ea, &(0x7f0000000700)={0x0, 0xddbd, 0x1, 0xfffeffff, 0x156}, &(0x7f0000000540), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000180)=[0xbd5f, 0x1000], 0x2) 13.866426211s ago: executing program 1 (id=180): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 12.634991533s ago: executing program 1 (id=181): bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000100), 0x5005) mount(&(0x7f0000000080)=@md0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='rpc_pipefs\x00', 0x1010040, 0x0) 10.46512121s ago: executing program 3 (id=183): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) 10.131490839s ago: executing program 3 (id=185): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 10.131038489s ago: executing program 0 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x36, 0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffcba) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$eJzsmb9rFEEUx78zu7e3iaJYaGFzFgEjmL3dPZU0IrGxigiJiOVh1pC4ycndIbmAkPwB/gGCf4dFKgs7OwsrCxWEFF5pIUJGZnfmdm7X9e5csPF9ILPf+fXmvdnZN5ADQRD/LV8+f//04vby+lUAp7GAumo/tvQIG9wY//GlVVPy7e6Z50d5ewyAEFndnrC+A+DNigUcpGaFyGb/EMCCsrkOnmjJfXBcUfoBGDztq8hmR2B4qJq3Dd2ZUyKO2KNOvPF4K458WQSyCGXRAsSY/8NDhg0ArlqCGf73BvtP2jHQTUUcaVETep1CV0645V2pwHb5/iX+rXDcNLaAA2d1v6eevrF/ATgCpVtgWFN6GXV4ntdQ1Sgw4r9oZ/at9LUZ8U8OMhXuLIOri3NLVe3cmjHA34oTUeg6QPUAnb96BbMK+flNHiz9mH0J3ijOcibZcStvHcu3yA961HJhePSuOOvrWMuH1bIlGP7pCZ9KJIkLQKHr/Xwcr2YtOq91e4PzY3YupftzN3/Y9AksPRI4vqOGXDbyk23cCs3+ztNmb7C/tLXT3ow2o90wbN3wr/n+9bAp7x2/mWToP+Q/N8lP84b9WslYhznYa/f73WAP6HeDUT1MSyPjrr3ufBul+eEhx+JPIfT1koStLkqWW4OpP/5KPqVatEqdJwiCIAiCIAiCIAiCIAiCmJI6cApogEH9r/JE/1olCtjhPTybA34FAAD//5X3XDw=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x54056, 0x0, 0x3) 10.016425166s ago: executing program 2 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000012850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)=r4}, 0x20) 8.980590876s ago: executing program 0 (id=188): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x1e58, 0x13001, 0x0, 0x373}, &(0x7f0000000100), &(0x7f0000000140)) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000240)='./file0\x00', r7, &(0x7f0000000100)='./file0\x00', 0x4) io_uring_enter(r5, 0x1, 0x71a3, 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000004c0)=""/174, 0xae}], 0x1}, 0xffffffff}], 0x1, 0x102, 0x0) sendto$inet(r0, &(0x7f0000000380)="d7", 0x1, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 7.179708461s ago: executing program 0 (id=189): unshare(0x42000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e22, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x209, 0x0, 0x0, 0xfdffffffffffffff, 0x0, 0x0, 0x71cf0b8c, 0x0, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000007f00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x3fd, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0x1, 0xfffffffe, 0x0, 0xfffffffb, 0x5, 0x10003, 0x0, 0x516, 0x80, 0x4800, 0x300000, 0x8, 0xe, 0x4623f, 0x2, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xf, 0x3, 0xba55, 0x8da8, 0x2, 0x202, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0xd, 0x80000000, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x2, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0x4, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x5, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0xfffd, 0x3, 0x7fff, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7fff, 0x3ff, 0x0, 0xfffffffe, 0x5, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xe, 0x3, 0x379, 0x9, 0x2, 0x5, 0x7, 0x7, 0x2, 0x1, 0x1, 0x8, 0xb, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xcd3, 0x407, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x2, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x3, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x12005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x4, 0x7d, 0x401, 0x7], [0x108e, 0xffff, 0x3, 0x3, 0x8a, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x5, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x203fa6, 0x3, 0x0, 0x5, 0x3, 0x6, 0xe47, 0x2, 0x3, 0x4, 0x200, 0x284e, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x6, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0x7fffffff, 0xfffffff8, 0x401, 0x3, 0x200, 0xfc5, 0x4, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001cc0)) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, 0x0) getpid() r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) stat(&(0x7f0000001dc0)='./file0\x00', 0x0) 7.099102686s ago: executing program 3 (id=191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 6.951215304s ago: executing program 3 (id=192): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 6.903126147s ago: executing program 4 (id=193): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000200)={0x1, 0x4, 0x81, 0x3, @vifc_lcl_ifindex, @local}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000692000/0x4000)=nil, 0x0}, 0x68) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 6.807478953s ago: executing program 1 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_emit_ethernet(0x86, &(0x7f00000001c0)=ANY=[], 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f00000001c0)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xee01]) keyctl$setperm(0x5, r5, 0x202408) keyctl$chown(0x4, r5, 0xee01, 0x0) keyctl$setperm(0x5, r5, 0x20925) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118) write$cgroup_devices(r6, &(0x7f0000001140)=ANY=[@ANYBLOB="61bb"], 0x9) timer_settime(r3, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x9}}, 0x0) 5.712165106s ago: executing program 2 (id=195): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 5.709500097s ago: executing program 3 (id=196): r0 = getpgrp(0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000600)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES8=r0], 0x0, &(0x7f0000000340)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x4, "b3bcd3bc", "e800"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x10, 0x7, 0x7, 0xe, 0x38b, 0xba6}}}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1f37b000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x801, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080)=0xf, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) write$binfmt_misc(r4, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 5.616058272s ago: executing program 4 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4.367352405s ago: executing program 1 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x36, 0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffcba) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x20) fadvise64(r5, 0x54056, 0x0, 0x3) 4.360605115s ago: executing program 4 (id=199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2000005, r0, 0xfe}, 0x38) 4.107461851s ago: executing program 4 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x16}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lseek(0xffffffffffffffff, 0x100, 0x2) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500), &(0x7f0000000000)) 3.289770768s ago: executing program 2 (id=201): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 3.09323649s ago: executing program 1 (id=202): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000040341d040000000000000109022400010000000009040000010300000009210600000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_012={0x1, 0x1, 0x4, 'c'}, @global=@item_012={0x1, 0x1, 0xb, '6'}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) 2.519277893s ago: executing program 4 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffffdc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000580)=[@request_death], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0xfffffffe, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0xd46, 0x6, 0x5, 0x5, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0x7, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x9876, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0x1, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x7, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xcd, 0xb, 0xc, 0xfffffffb], [0xa3, 0x6, 0x4, 0x9, 0x1003, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xb, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x807, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x200, 0xfffffffd, 0xffffffff, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x80005], [0x6, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0x3, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0xe245, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0xc4, &(0x7f0000000140)=""/196, 0x41100}, 0x94) 2.430864398s ago: executing program 2 (id=204): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0xe0000}, 0xfffffdef) r1 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x48) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4092, 0x1011}], 0x1000000000000006, 0x0, 0x0, 0xf) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x161, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 1.148677493s ago: executing program 3 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x41}, 0x50) 319.307701ms ago: executing program 4 (id=206): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) 319.040751ms ago: executing program 2 (id=207): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000002c0)={0x800080, 0x80, 0x8, 0xc, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0xc, 0x43, 0x558}) 250.602555ms ago: executing program 0 (id=208): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) read$alg(r2, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001080)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="46513ae8f118ac7fa95223442419d9e09e2053", 0x13}], 0x1, &(0x7f0000000800)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24018000}], 0x1, 0x404c0d1) 11.465309ms ago: executing program 0 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_emit_ethernet(0x86, &(0x7f00000001c0)=ANY=[], 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f00000001c0)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xee01]) keyctl$setperm(0x5, r5, 0x202408) keyctl$chown(0x4, r5, 0xee01, 0x0) keyctl$setperm(0x5, r5, 0x20925) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118) write$cgroup_devices(r6, &(0x7f0000001140)=ANY=[@ANYBLOB="61bb"], 0x9) timer_settime(r3, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x9}}, 0x0) 0s ago: executing program 2 (id=210): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r1, &(0x7f00000003c0), 0x0, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x8000000) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x10940, 0xc0) openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000001780)=""/4096}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. [ 53.613735][ T4171] cgroup: Unknown subsys name 'net' [ 53.757006][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.100471][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.866034][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 56.968980][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 57.002688][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.009801][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.018547][ T4190] device bridge_slave_0 entered promiscuous mode [ 57.047463][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 57.059857][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.066979][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.074759][ T4190] device bridge_slave_1 entered promiscuous mode [ 57.096221][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 57.106326][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 57.127326][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.139234][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.220547][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.230125][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.238503][ T4186] device bridge_slave_0 entered promiscuous mode [ 57.256903][ T4190] team0: Port device team_slave_0 added [ 57.267157][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.274658][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.282888][ T4186] device bridge_slave_1 entered promiscuous mode [ 57.299211][ T4190] team0: Port device team_slave_1 added [ 57.325138][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.332397][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.340155][ T4184] device bridge_slave_0 entered promiscuous mode [ 57.366672][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.382601][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.389910][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.398741][ T4184] device bridge_slave_1 entered promiscuous mode [ 57.412943][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.422186][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.429240][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.437129][ T4185] device bridge_slave_0 entered promiscuous mode [ 57.469402][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.476822][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.502952][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.514660][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.521924][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.529686][ T4185] device bridge_slave_1 entered promiscuous mode [ 57.536851][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.544060][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.552287][ T4191] device bridge_slave_0 entered promiscuous mode [ 57.561271][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.570372][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.577527][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.585800][ T4191] device bridge_slave_1 entered promiscuous mode [ 57.605624][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.612730][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.638758][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.661121][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.672356][ T4186] team0: Port device team_slave_0 added [ 57.693036][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.703962][ T4186] team0: Port device team_slave_1 added [ 57.716533][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.733677][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.745680][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.783731][ T4184] team0: Port device team_slave_0 added [ 57.796551][ T4190] device hsr_slave_0 entered promiscuous mode [ 57.803240][ T4190] device hsr_slave_1 entered promiscuous mode [ 57.821295][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.828253][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.854218][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.866861][ T4184] team0: Port device team_slave_1 added [ 57.882679][ T4185] team0: Port device team_slave_0 added [ 57.890607][ T4191] team0: Port device team_slave_0 added [ 57.897010][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.904081][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.930094][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.962895][ T4185] team0: Port device team_slave_1 added [ 57.970116][ T4191] team0: Port device team_slave_1 added [ 58.022373][ T4186] device hsr_slave_0 entered promiscuous mode [ 58.029475][ T4186] device hsr_slave_1 entered promiscuous mode [ 58.036513][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.044520][ T4186] Cannot create hsr debugfs directory [ 58.056388][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.063746][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.089865][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.107183][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.114387][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.140415][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.162025][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.168990][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.195076][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.206662][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.213829][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.240452][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.252381][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.259331][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.285495][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.317222][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.324186][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.350108][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.404549][ T4184] device hsr_slave_0 entered promiscuous mode [ 58.411636][ T4184] device hsr_slave_1 entered promiscuous mode [ 58.418182][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.426131][ T4184] Cannot create hsr debugfs directory [ 58.440044][ T4191] device hsr_slave_0 entered promiscuous mode [ 58.447374][ T4191] device hsr_slave_1 entered promiscuous mode [ 58.454173][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.462017][ T4191] Cannot create hsr debugfs directory [ 58.491472][ T4185] device hsr_slave_0 entered promiscuous mode [ 58.498188][ T4185] device hsr_slave_1 entered promiscuous mode [ 58.505138][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.513651][ T4185] Cannot create hsr debugfs directory [ 58.671361][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 58.673361][ T2240] Bluetooth: hci4: command 0x0409 tx timeout [ 58.678444][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 58.689732][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 58.701161][ T2240] Bluetooth: hci1: command 0x0409 tx timeout [ 58.805064][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.820285][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.829539][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.840186][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.883209][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.892715][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.914976][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.924147][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.956636][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.983163][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.992338][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.001745][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.066970][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.076031][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.086579][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.097650][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.166947][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.176994][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.186909][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.197175][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.219405][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.238966][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.253548][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.263753][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.294392][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.307006][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.316450][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.328044][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.335443][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.346540][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.362665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.372082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.380572][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.387691][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.397325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.416123][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.426338][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.435731][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.448917][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.462246][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.470563][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.479649][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.510272][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.520681][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.529575][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.536686][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.545383][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.555811][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.564479][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.571572][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.579176][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.602381][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.609418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.618410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.630447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.641208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.649587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.662640][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.687112][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.696377][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.707680][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.722697][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.735205][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.746642][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.755326][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.763602][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.774116][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.782782][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.797468][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.805553][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.818654][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.833227][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.843424][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.853747][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.886107][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.897852][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.910311][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.922011][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.930453][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.937572][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.945898][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.956743][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.965906][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.974848][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.983954][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.991092][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.999229][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.008169][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.017757][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.026564][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.035566][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.042690][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.050578][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.060326][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.068997][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.076069][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.088826][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.110393][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.119025][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.132716][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.140725][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.155270][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.165279][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.178858][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.189495][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.200364][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.222509][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.248815][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.257801][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.268085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.279149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.288935][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.296066][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.314208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.322923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.331703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.340051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.348950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.393545][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.405583][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.417225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.429050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.445115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.456781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.466447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.476323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.485347][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.492456][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.500017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.509434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.518238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.527388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.536169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.544580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.553348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.561911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.570169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.578049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.595945][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.609754][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.634431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.644202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.655055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.668918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.680569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.691198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.703926][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.717884][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.730029][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.744612][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.758822][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.762036][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 60.780952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.789398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.804893][ T4242] Bluetooth: hci4: command 0x041b tx timeout [ 60.820971][ T4242] Bluetooth: hci3: command 0x041b tx timeout [ 60.835013][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.851000][ T4242] Bluetooth: hci0: command 0x041b tx timeout [ 60.861629][ T4242] Bluetooth: hci2: command 0x041b tx timeout [ 60.874084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.892747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.958124][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.991416][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.998907][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.030616][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.043743][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.053996][ T4190] device veth0_vlan entered promiscuous mode [ 61.069819][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.092232][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.114549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.126706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.134362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.143765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.157899][ T4190] device veth1_vlan entered promiscuous mode [ 61.180488][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.195291][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.211955][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.245189][ T4191] device veth0_vlan entered promiscuous mode [ 61.260971][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.268915][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.284357][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.297336][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.322711][ T4190] device veth0_macvtap entered promiscuous mode [ 61.341716][ T4191] device veth1_vlan entered promiscuous mode [ 61.354215][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.364034][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.372631][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.380564][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.389510][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.403836][ T4190] device veth1_macvtap entered promiscuous mode [ 61.435764][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.443881][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.452953][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.462802][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.470208][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.486161][ T4184] device veth0_vlan entered promiscuous mode [ 61.494857][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.510069][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.518977][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.527861][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.535937][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.547799][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.565330][ T4191] device veth0_macvtap entered promiscuous mode [ 61.578373][ T4191] device veth1_macvtap entered promiscuous mode [ 61.586849][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.600073][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.608940][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.618457][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.627100][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.636889][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.645683][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.654892][ T4186] device veth0_vlan entered promiscuous mode [ 61.676950][ T4184] device veth1_vlan entered promiscuous mode [ 61.685523][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.694637][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.702469][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.710191][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.722819][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.747389][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.758146][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.769456][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.780211][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.788561][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.797362][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.807220][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.816203][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.826568][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.835758][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.847282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.855771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.865936][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.875981][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.884954][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.894661][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.908532][ T4186] device veth1_vlan entered promiscuous mode [ 61.916500][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.927621][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.938653][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.952202][ T4185] device veth0_vlan entered promiscuous mode [ 61.958766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.967345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.977169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.985372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.994512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.028206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.038442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.048133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.060577][ T4184] device veth0_macvtap entered promiscuous mode [ 62.072306][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.081223][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.089927][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.099506][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.116540][ T4184] device veth1_macvtap entered promiscuous mode [ 62.143161][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.152013][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.166663][ T4185] device veth1_vlan entered promiscuous mode [ 62.230181][ T4185] device veth0_macvtap entered promiscuous mode [ 62.245934][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.259167][ T4216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.269739][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.277828][ T4216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.288668][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.297663][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.306549][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.314805][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.325832][ T4186] device veth0_macvtap entered promiscuous mode [ 62.336360][ T4185] device veth1_macvtap entered promiscuous mode [ 62.348524][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.360252][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.370576][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.381358][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.394007][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.403595][ T4186] device veth1_macvtap entered promiscuous mode [ 62.411747][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.423005][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.433580][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.444504][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.456625][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.472644][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.480573][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.488746][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.497711][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.508412][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.518198][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.527185][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.562930][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.575174][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.584976][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.594314][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.607099][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.618656][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.629282][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.639961][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.650183][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.661283][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.673141][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.694072][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.694549][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.714330][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.715017][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.733812][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.744492][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.755278][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.765907][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.776034][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.786680][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.798232][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.808638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.817466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.826656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.834917][ T4262] Bluetooth: hci3: command 0x040f tx timeout [ 62.839473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.842122][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 62.856484][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 62.864419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.894466][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.907518][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.919671][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 62.927136][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.932276][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 62.946138][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.958051][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.974554][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.987007][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.999138][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.012255][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.019822][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.030667][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.040718][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.052022][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.062044][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.074038][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.084704][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.095352][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.107217][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.119413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.128278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.138083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.147079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.156514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.169471][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.184282][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.206159][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.216476][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.258614][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.276758][ T4291] input: syz1 as /devices/virtual/input/input5 [ 63.295843][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.308876][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.320820][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.409722][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.451148][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.495567][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.532379][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.559211][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.570928][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.575683][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.597991][ T4216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.612192][ T4216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.625215][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.654564][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.686988][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.818450][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.855754][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.882890][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.894785][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.906094][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.907779][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.986641][ T4302] loop2: detected capacity change from 0 to 16 [ 64.078203][ T4302] erofs: (device loop2): mounted with root inode @ nid 36. [ 64.099076][ T4302] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 64.114890][ T4302] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 64.129892][ T4302] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 64.140124][ T4302] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 64.149256][ T4302] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 64.159469][ T4302] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 64.169028][ T4302] erofs: (device loop2): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 64.178663][ T4302] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 64.207643][ T4302] erofs: (device loop2): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 64.219780][ T4303] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 64.229189][ T4303] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 64.241468][ T4302] attempt to access beyond end of device [ 64.241468][ T4302] loop2: rw=524288, want=32, limit=16 [ 64.324618][ T4301] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.515649][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.643267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.652463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.686842][ T4301] loop3: detected capacity change from 0 to 256 [ 64.781235][ T4301] ======================================================= [ 64.781235][ T4301] WARNING: The mand mount option has been deprecated and [ 64.781235][ T4301] and is ignored by this kernel. Remove the mand [ 64.781235][ T4301] option from the mount to silence this warning. [ 64.781235][ T4301] ======================================================= [ 64.827893][ T4312] loop2: detected capacity change from 0 to 128 [ 64.845203][ T4310] loop1: detected capacity change from 0 to 1024 [ 64.920611][ T4312] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 64.922087][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 64.922182][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 64.922229][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 64.927949][ T4312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.931466][ T4310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.000997][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 65.001039][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 65.230804][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 65.240822][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 65.249846][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 65.258834][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 65.267908][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 65.276918][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 65.285891][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 65.294866][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 65.303857][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 65.312841][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.588012][ T4362] loop2: detected capacity change from 0 to 128 [ 69.739069][ T4362] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 69.907141][ T4356] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 69.937387][ T4356] FAT-fs (loop2): Filesystem has been set read-only [ 69.947515][ T4356] attempt to access beyond end of device [ 69.947515][ T4356] loop2: rw=524288, want=2073, limit=128 [ 69.983771][ T4356] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 70.001132][ T4356] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 70.022019][ T4356] attempt to access beyond end of device [ 70.022019][ T4356] loop2: rw=0, want=2073, limit=128 [ 70.043728][ T26] audit: type=1800 audit(1769889058.326:2): pid=4356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.19" name="file2" dev="loop2" ino=1048590 res=0 errno=0 [ 70.071078][ T4356] syz.2.19 (4356) used greatest stack depth: 21016 bytes left [ 72.869983][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.900435][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.073843][ T4400] loop0: detected capacity change from 0 to 128 [ 75.616603][ T4400] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 75.771148][ T4397] loop4: detected capacity change from 0 to 256 [ 75.844579][ T4397] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000e8a2, chksum : 0xd7c774f0, utbl_chksum : 0xe619d30d) [ 76.055859][ T4404] process 'syz.1.33' launched './file0' with NULL argv: empty string added [ 76.109416][ T4406] loop0: detected capacity change from 0 to 1024 [ 76.275942][ T4406] hfsplus: catalog name length corrupted [ 79.677470][ T4433] loop1: detected capacity change from 0 to 16 [ 79.734120][ T4433] erofs: (device loop1): mounted with root inode @ nid 36. [ 80.540152][ T4440] attempt to access beyond end of device [ 80.540152][ T4440] loop1: rw=524288, want=48, limit=16 [ 80.551946][ T4440] attempt to access beyond end of device [ 80.551946][ T4440] loop1: rw=524288, want=40, limit=16 [ 81.470151][ T4451] loop3: detected capacity change from 0 to 8 [ 81.478750][ T23] cfg80211: failed to load regulatory.db [ 84.525217][ T4479] loop2: detected capacity change from 0 to 1024 [ 85.121140][ T4480] hfsplus: xattr searching failed [ 85.467019][ T4486] loop0: detected capacity change from 0 to 256 [ 85.647527][ T4486] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 85.745635][ T4490] loop3: detected capacity change from 0 to 256 [ 85.816470][ T4490] exfat: Deprecated parameter 'utf8' [ 86.467037][ T4484] usb usb7: usbfs: process 4484 (syz.1.54) did not claim interface 0 before use [ 86.510811][ T4490] exfat: Unknown parameter 'keep_last_dots' [ 86.733335][ T4494] loop2: detected capacity change from 0 to 128 [ 87.152748][ T4501] loop3: detected capacity change from 0 to 1024 [ 87.196595][ T4501] hfsplus: catalog name length corrupted [ 87.284330][ T4494] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 87.325506][ T4494] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 87.373998][ T4494] FAT-fs (loop2): Filesystem has been set read-only [ 87.401625][ T4494] attempt to access beyond end of device [ 87.401625][ T4494] loop2: rw=524288, want=2073, limit=128 [ 87.502974][ T4494] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 87.520874][ T4494] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 87.590551][ T4494] attempt to access beyond end of device [ 87.590551][ T4494] loop2: rw=0, want=2073, limit=128 [ 87.617036][ T26] audit: type=1800 audit(1769889075.896:3): pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.57" name="file2" dev="loop2" ino=1048592 res=0 errno=0 [ 87.626903][ T4508] loop3: detected capacity change from 0 to 1024 [ 88.559080][ T4508] EXT4-fs (loop3): Ignoring removed bh option [ 88.691158][ T2240] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 89.000036][ T4508] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 89.244985][ T2240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.275441][ T2240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.587333][ T2240] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 89.873946][ T2240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.962794][ T2240] usb 3-1: config 0 descriptor?? [ 90.072103][ T4192] Bluetooth: Wrong link type (-57) [ 90.081217][ T2240] usb 3-1: can't set config #0, error -71 [ 90.103681][ T2240] usb 3-1: USB disconnect, device number 2 [ 91.485461][ T4538] loop3: detected capacity change from 0 to 512 [ 91.524002][ T4524] input: syz1 as /devices/virtual/input/input8 [ 91.556596][ T4538] EXT4-fs (loop3): Ignoring removed nobh option [ 91.605096][ T4538] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 91.716338][ T4538] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.68: iget: bad i_size value: 38620345925642 [ 91.745500][ T4538] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.68: couldn't read orphan inode 15 (err -117) [ 91.854375][ T4538] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,minixdf,,errors=continue. Quota mode: writeback. [ 91.958936][ T4538] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.68: bg 0: block 5: invalid block bitmap [ 92.615778][ T4553] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 93.472783][ T4556] loop1: detected capacity change from 0 to 1024 [ 94.009276][ T4573] loop2: detected capacity change from 0 to 1024 [ 96.388947][ T4192] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 96.399366][ T4192] CPU: 1 PID: 4192 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 96.406924][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.416997][ T4192] Workqueue: hci3 hci_rx_work [ 96.421718][ T4192] Call Trace: [ 96.425015][ T4192] [ 96.427963][ T4192] dump_stack_lvl+0x188/0x250 [ 96.432660][ T4192] ? show_regs_print_info+0x20/0x20 [ 96.437889][ T4192] ? load_image+0x400/0x400 [ 96.442454][ T4192] sysfs_create_dir_ns+0x26a/0x290 [ 96.447588][ T4192] ? sysfs_warn_dup+0xa0/0xa0 [ 96.452277][ T4192] ? process_one_work+0x85f/0x1010 [ 96.457403][ T4192] ? do_raw_spin_unlock+0x11d/0x230 [ 96.462621][ T4192] kobject_add_internal+0x6e0/0xd90 [ 96.467838][ T4192] kobject_add+0x160/0x230 [ 96.472272][ T4192] ? kobject_init+0x1d0/0x1d0 [ 96.476969][ T4192] ? klist_children_get+0x50/0x50 [ 96.482011][ T4192] ? get_device_parent+0x121/0x3f0 [ 96.487143][ T4192] device_add+0x483/0xfb0 [ 96.491508][ T4192] hci_conn_add_sysfs+0xd1/0x1e0 [ 96.496472][ T4192] le_conn_complete_evt+0xc48/0x15c0 [ 96.501781][ T4192] ? cs_le_create_conn+0x5e0/0x5e0 [ 96.506917][ T4192] ? __mutex_trylock_common+0x155/0x260 [ 96.512503][ T4192] hci_le_meta_evt+0x285/0x3c90 [ 96.517390][ T4192] ? hci_event_packet+0x37b/0x1370 [ 96.522532][ T4192] ? __lock_acquire+0x7d10/0x7d10 [ 96.527592][ T4192] ? hci_remote_host_features_evt+0x280/0x280 [ 96.533694][ T4192] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 96.539342][ T4192] ? mark_lock+0x94/0x320 [ 96.543682][ T4192] ? mutex_unlock+0x10/0x10 [ 96.548201][ T4192] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 96.554211][ T4192] ? lock_chain_count+0x20/0x20 [ 96.559089][ T4192] ? __rwlock_init+0x140/0x140 [ 96.563874][ T4192] hci_event_packet+0xe48/0x1370 [ 96.568844][ T4192] ? lockdep_hardirqs_on+0x94/0x140 [ 96.574068][ T4192] ? rcu_lock_release+0x20/0x20 [ 96.578956][ T4192] ? hci_send_to_monitor+0x9c/0x4a0 [ 96.584177][ T4192] hci_rx_work+0x255/0xa10 [ 96.588710][ T4192] process_one_work+0x85f/0x1010 [ 96.593677][ T4192] ? worker_detach_from_pool+0x240/0x240 [ 96.599322][ T4192] ? lockdep_hardirqs_off+0x70/0x100 [ 96.604629][ T4192] ? _raw_spin_lock_irq+0xb7/0xf0 [ 96.609670][ T4192] ? _raw_spin_lock_irqsave+0x100/0x100 [ 96.615257][ T4192] ? wq_worker_running+0x97/0x170 [ 96.620304][ T4192] worker_thread+0xaa6/0x1290 [ 96.625020][ T4192] kthread+0x436/0x520 [ 96.629101][ T4192] ? rcu_lock_release+0x20/0x20 [ 96.633961][ T4192] ? kthread_blkcg+0xd0/0xd0 [ 96.638568][ T4192] ret_from_fork+0x1f/0x30 [ 96.643016][ T4192] [ 96.657416][ T4192] kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 96.676111][ T4192] Bluetooth: hci3: failed to register connection device [ 96.927267][ T4594] loop1: detected capacity change from 0 to 16 [ 97.014212][ T4594] erofs: (device loop1): mounted with root inode @ nid 36. [ 97.025732][ T4594] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 97.040427][ T4594] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 97.051827][ T4594] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 97.061926][ T4594] erofs: (device loop1): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 97.071037][ T4594] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 97.080276][ T4594] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 97.089701][ T4594] erofs: (device loop1): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 97.098805][ T4594] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 97.108996][ T4594] erofs: (device loop1): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 97.118409][ T4594] attempt to access beyond end of device [ 97.118409][ T4594] loop1: rw=524288, want=32, limit=16 [ 97.286442][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.377163][ T4591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.84'. [ 97.457236][ T4591] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 97.531411][ T4596] loop0: detected capacity change from 0 to 2048 [ 97.539004][ T4596] UDF-fs: bad mount option "gid=ˆxrget" or missing value [ 97.577012][ T4598] loop4: detected capacity change from 0 to 128 [ 97.721788][ T4600] loop2: detected capacity change from 0 to 2048 [ 97.806077][ T4600] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.376709][ T4634] loop1: detected capacity change from 0 to 1024 [ 102.463985][ T4634] EXT4-fs (loop1): inline encryption not supported [ 102.470524][ T4634] EXT4-fs (loop1): Ignoring removed nobh option [ 102.520899][ T4634] EXT4-fs (loop1): Ignoring removed bh option [ 102.527089][ T4634] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.691672][ T4634] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,nodelalloc,sysvgroups,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 106.310911][ T4670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 106.352631][ T4670] syz_tun: refused to change device tx_queue_len [ 106.417442][ T4672] loop3: detected capacity change from 0 to 1024 [ 106.534826][ T4672] EXT4-fs (loop3): Ignoring removed nobh option [ 106.561043][ T4672] EXT4-fs (loop3): inline encryption not supported [ 106.580831][ T4672] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.703939][ T4676] loop2: detected capacity change from 0 to 4096 [ 106.747106][ T4672] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,jqfmt=vfsold,journal_dev=0x0000000000000800,nobh,inlinecrypt,grpquota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 106.857595][ T4676] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 106.869611][ T4682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 106.896863][ T4672] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3887: comm syz.3.106: Allocating blocks 385-513 which overlap fs metadata [ 106.937337][ T4676] UDF-fs: Scanning with blocksize 512 failed [ 106.967060][ T4676] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.068883][ T4680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.146310][ T4672] EXT4-fs (loop3): pa ffff888025595a80: logic 16, phys. 129, len 24 [ 107.154830][ T4672] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 8 [ 107.174943][ T4676] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 107.219057][ T4676] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1328) has too big (2088) entry at pos 0 [ 107.469873][ T4684] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 107.489805][ T4684] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1328) has too big (2088) entry at pos 0 [ 109.271026][ T26] audit: type=1326 audit(1769889096.706:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4687 comm="syz.1.105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd2a264eb9 code=0x0 [ 109.274164][ T4686] loop0: detected capacity change from 0 to 2048 [ 109.984992][ T4698] xt_nat: multiple ranges no longer supported [ 110.588253][ T4686] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.656500][ T4704] loop2: detected capacity change from 0 to 2048 [ 110.683122][ T4704] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 110.783314][ T4704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.866123][ T4707] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.897624][ T4714] Zero length message leads to an empty skb [ 111.970999][ T26] audit: type=1326 audit(1769889100.256:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f47f9eb9 code=0x7ffc0000 [ 111.993208][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.043828][ T26] audit: type=1326 audit(1769889100.286:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd0f47f9eb9 code=0x7ffc0000 [ 112.096507][ T26] audit: type=1326 audit(1769889100.286:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f47f9eb9 code=0x7ffc0000 [ 112.119889][ T26] audit: type=1326 audit(1769889100.286:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd0f47f9eb9 code=0x7ffc0000 [ 112.171866][ T26] audit: type=1326 audit(1769889100.286:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f47f9eb9 code=0x7ffc0000 [ 113.310868][ T26] audit: type=1326 audit(1769889100.296:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fd0f47f9eb9 code=0x7ffc0000 [ 113.333961][ T26] audit: type=1326 audit(1769889100.296:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.0.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f47f9eb9 code=0x7ffc0000 [ 113.481052][ T13] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 113.490148][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.567732][ T13] usb 3-1: config 0 descriptor?? [ 113.641003][ T13] usb 3-1: can't set config #0, error -71 [ 113.655064][ T13] usb 3-1: USB disconnect, device number 3 [ 113.992134][ T4726] loop2: detected capacity change from 0 to 16 [ 114.362171][ T4731] capability: warning: `syz.4.123' uses deprecated v2 capabilities in a way that may be insecure [ 115.460990][ T4726] erofs: (device loop2): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 115.506117][ T4733] loop3: detected capacity change from 0 to 256 [ 115.612059][ T4733] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 116.744083][ T4745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.129'. [ 120.350444][ T4778] loop0: detected capacity change from 0 to 1024 [ 121.326441][ T4785] loop1: detected capacity change from 0 to 1764 [ 121.428639][ T4785] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 121.705916][ T4184] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 121.786232][ T4184] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 124.326304][ T4820] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.334452][ T4820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.807631][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 124.821742][ T4824] syz.0.155 uses obsolete (PF_INET,SOCK_PACKET) [ 124.952160][ T4830] hub 8-0:1.0: USB hub found [ 124.958837][ T4830] hub 8-0:1.0: 1 port detected [ 125.823511][ T4832] loop4: detected capacity change from 0 to 1024 [ 126.089156][ T4839] loop3: detected capacity change from 0 to 16 [ 126.508407][ T4839] erofs: (device loop3): mounted with root inode @ nid 36. [ 126.523335][ T4836] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 126.533119][ T4836] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 126.621818][ T4832] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,errors=remount-ro,abort,. Quota mode: none. [ 126.639163][ T4844] bridge0: port 3(veth0_to_bridge) entered blocking state [ 126.734525][ T4832] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #12: block 7: comm syz.4.149: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 126.739228][ T4844] bridge0: port 3(veth0_to_bridge) entered disabled state [ 126.762979][ T4832] EXT4-fs (loop4): Remounting filesystem read-only [ 126.777948][ T4832] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #12: block 7: comm syz.4.149: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 126.798299][ T4844] device veth0_to_bridge entered promiscuous mode [ 126.807447][ T4844] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 126.827572][ T4832] EXT4-fs (loop4): Remounting filesystem read-only [ 126.879111][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.369220][ T4864] loop0: detected capacity change from 0 to 128 [ 129.594438][ T4883] loop4: detected capacity change from 0 to 16 [ 130.240003][ T4883] erofs: (device loop4): mounted with root inode @ nid 36. [ 130.254386][ T4878] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 130.281193][ T4878] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 130.365393][ T4887] loop0: detected capacity change from 0 to 128 [ 130.759472][ T4887] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.793817][ T4887] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.292868][ T4216] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.365885][ T4889] loop2: detected capacity change from 0 to 2048 [ 131.487262][ T4889] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.884442][ T4292] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 133.231095][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.320895][ T4292] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.429186][ T4292] usb 1-1: config 0 has no interfaces? [ 133.490875][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 133.611956][ T23] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.623603][ T4292] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 133.686727][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.713927][ T4292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 133.820950][ T23] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 133.863128][ T4292] usb 1-1: SerialNumber: syz [ 133.976619][ T4292] usb 1-1: config 0 descriptor?? [ 133.981854][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.030599][ T23] usb 5-1: config 0 descriptor?? [ 134.244700][ T4262] usb 1-1: USB disconnect, device number 2 [ 134.457086][ T4900] loop4: detected capacity change from 0 to 8 [ 135.417969][ T23] hid (null): unknown global tag 0xc [ 135.423845][ T23] hid (null): report_id 13876 is invalid [ 135.429816][ T23] hid (null): unknown global tag 0xc [ 135.512608][ T23] hid (null): unknown global tag 0xd [ 135.531317][ T23] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 135.542611][ T23] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 135.549605][ T23] cougar 0003:060B:500A.0001: unexpected long global item [ 135.558095][ T23] cougar 0003:060B:500A.0001: parse failed [ 135.563996][ T23] cougar: probe of 0003:060B:500A.0001 failed with error -22 [ 135.708751][ T7] usb 5-1: USB disconnect, device number 2 [ 135.826646][ T4930] loop0: detected capacity change from 0 to 16 [ 135.870835][ T1106] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 136.162808][ T4930] erofs: (device loop0): mounted with root inode @ nid 36. [ 136.182390][ T4930] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 136.204718][ T4930] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 138.333967][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.340298][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.381248][ T1106] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 138.414341][ T1106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.461397][ T1106] usb 4-1: Product: syz [ 138.465619][ T1106] usb 4-1: Manufacturer: syz [ 138.470239][ T1106] usb 4-1: SerialNumber: syz [ 138.514130][ T1106] usb 4-1: config 0 descriptor?? [ 138.561729][ T1106] usb 4-1: can't set config #0, error -71 [ 138.580825][ T1106] usb 4-1: USB disconnect, device number 2 [ 138.877177][ T4945] fuse: Bad value for 'fd' [ 139.855280][ T4947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.193'. [ 141.494772][ T4967] loop1: detected capacity change from 0 to 16 [ 142.152674][ T4967] erofs: (device loop1): mounted with root inode @ nid 36. [ 142.166766][ T4964] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 142.181167][ T4964] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 142.190536][ T4964] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 142.200657][ T4964] erofs: (device loop1): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 142.210604][ T4964] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 142.219725][ T4964] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 142.229146][ T4964] erofs: (device loop1): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 142.238225][ T4964] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 142.248605][ T4964] erofs: (device loop1): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 142.258097][ T4964] attempt to access beyond end of device [ 142.258097][ T4964] loop1: rw=524288, want=32, limit=16 [ 143.155685][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 143.165378][ T4980] loop2: detected capacity change from 0 to 512 [ 144.639578][ T4980] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.811150][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.853891][ T4980] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.204: invalid indirect mapped block 4294967295 (level 1) [ 144.879326][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.928000][ T7] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 144.947756][ T4980] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.204: invalid indirect mapped block 4294967295 (level 1) [ 144.982390][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.042815][ T7] usb 2-1: config 0 descriptor?? [ 145.063725][ T4980] EXT4-fs (loop2): 2 truncates cleaned up [ 145.080502][ T4980] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 145.159594][ T4980] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.204: bg 0: block 5: invalid block bitmap [ 145.530333][ T7] hid (null): global environment stack underflow [ 145.560273][ T7] hid-led 0003:1D34:0004.0002: global environment stack underflow [ 145.587269][ T7] hid-led 0003:1D34:0004.0002: item 0 1 1 11 parsing failed [ 145.605326][ T7] hid-led: probe of 0003:1D34:0004.0002 failed with error -22 [ 145.769957][ T4998] [ 145.772391][ T4998] ====================================================== [ 145.779412][ T4998] WARNING: possible circular locking dependency detected [ 145.786442][ T4998] syzkaller #0 Not tainted [ 145.790861][ T4998] ------------------------------------------------------ [ 145.797884][ T4998] syz.4.206/4998 is trying to acquire lock: [ 145.803830][ T4998] ffff888077ca8b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 145.814290][ T4998] [ 145.814290][ T4998] but task is already holding lock: [ 145.821670][ T4998] ffff888077ca8ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 145.831008][ T4998] [ 145.831008][ T4998] which lock already depends on the new lock. [ 145.831008][ T4998] [ 145.841416][ T4998] [ 145.841416][ T4998] the existing dependency chain (in reverse order) is: [ 145.850443][ T4998] [ 145.850443][ T4998] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 145.858112][ T4998] __mutex_lock_common+0x1e3/0x2400 [ 145.863860][ T4998] mutex_lock_nested+0x17/0x20 [ 145.869165][ T4998] hci_dev_do_close+0x5f/0x1030 [ 145.874562][ T4998] hci_rfkill_set_block+0x10a/0x190 [ 145.880302][ T4998] rfkill_set_block+0x1c6/0x420 [ 145.885700][ T4998] rfkill_fop_write+0x452/0x560 [ 145.891094][ T4998] vfs_write+0x30b/0xd60 [ 145.895874][ T4998] ksys_write+0x152/0x260 [ 145.900745][ T4998] do_syscall_64+0x4c/0xa0 [ 145.905708][ T4998] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.912143][ T4998] [ 145.912143][ T4998] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 145.920155][ T4998] __mutex_lock_common+0x1e3/0x2400 [ 145.925903][ T4998] mutex_lock_nested+0x17/0x20 [ 145.931207][ T4998] rfkill_register+0x33/0x8a0 [ 145.936429][ T4998] hci_register_dev+0x452/0x970 [ 145.941820][ T4998] vhci_create_device+0x32c/0x5c0 [ 145.947385][ T4998] vhci_write+0x391/0x450 [ 145.952246][ T4998] vfs_write+0x745/0xd60 [ 145.957022][ T4998] ksys_write+0x152/0x260 [ 145.961886][ T4998] do_syscall_64+0x4c/0xa0 [ 145.966835][ T4998] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.973258][ T4998] [ 145.973258][ T4998] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 145.981086][ T4998] __mutex_lock_common+0x1e3/0x2400 [ 145.986820][ T4998] mutex_lock_nested+0x17/0x20 [ 145.992143][ T4998] vhci_send_frame+0x88/0x100 [ 145.997369][ T4998] hci_send_frame+0x1a9/0x2e0 [ 146.002579][ T4998] hci_tx_work+0x9f9/0x1710 [ 146.007612][ T4998] process_one_work+0x85f/0x1010 [ 146.013092][ T4998] worker_thread+0xaa6/0x1290 [ 146.018307][ T4998] kthread+0x436/0x520 [ 146.022924][ T4998] ret_from_fork+0x1f/0x30 [ 146.027881][ T4998] [ 146.027881][ T4998] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 146.037139][ T4998] __lock_acquire+0x2c42/0x7d10 [ 146.042550][ T4998] lock_acquire+0x19e/0x400 [ 146.047607][ T4998] __flush_work+0x116/0x210 [ 146.052645][ T4998] hci_dev_do_close+0x1e7/0x1030 [ 146.058115][ T4998] hci_rfkill_set_block+0x10a/0x190 [ 146.063850][ T4998] rfkill_set_block+0x1c6/0x420 [ 146.069232][ T4998] rfkill_fop_write+0x452/0x560 [ 146.074628][ T4998] vfs_write+0x30b/0xd60 [ 146.079406][ T4998] ksys_write+0x152/0x260 [ 146.084319][ T4998] do_syscall_64+0x4c/0xa0 [ 146.089326][ T4998] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.095759][ T4998] [ 146.095759][ T4998] other info that might help us debug this: [ 146.095759][ T4998] [ 146.105995][ T4998] Chain exists of: [ 146.105995][ T4998] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 146.105995][ T4998] [ 146.120965][ T4998] Possible unsafe locking scenario: [ 146.120965][ T4998] [ 146.128423][ T4998] CPU0 CPU1 [ 146.133802][ T4998] ---- ---- [ 146.139178][ T4998] lock(&hdev->req_lock); [ 146.143626][ T4998] lock(rfkill_global_mutex); [ 146.150920][ T4998] lock(&hdev->req_lock); [ 146.157878][ T4998] lock((work_completion)(&hdev->tx_work)); [ 146.163884][ T4998] [ 146.163884][ T4998] *** DEADLOCK *** [ 146.163884][ T4998] [ 146.172034][ T4998] 2 locks held by syz.4.206/4998: [ 146.177071][ T4998] #0: ffffffff8d6c47c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 146.187198][ T4998] #1: ffff888077ca8ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 146.196975][ T4998] [ 146.196975][ T4998] stack backtrace: [ 146.202884][ T4998] CPU: 0 PID: 4998 Comm: syz.4.206 Not tainted syzkaller #0 [ 146.210190][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.220272][ T4998] Call Trace: [ 146.223562][ T4998] [ 146.226504][ T4998] dump_stack_lvl+0x188/0x250 [ 146.231221][ T4998] ? load_image+0x400/0x400 [ 146.235754][ T4998] ? show_regs_print_info+0x20/0x20 [ 146.240986][ T4998] ? print_circular_bug+0x12b/0x1a0 [ 146.246204][ T4998] check_noncircular+0x296/0x330 [ 146.251169][ T4998] ? look_up_lock_class+0x71/0x110 [ 146.256303][ T4998] ? add_chain_block+0x940/0x940 [ 146.261257][ T4998] ? lockdep_lock+0xf1/0x1f0 [ 146.265866][ T4998] ? mark_lock+0x94/0x320 [ 146.270212][ T4998] __lock_acquire+0x2c42/0x7d10 [ 146.275099][ T4998] ? lockdep_unlock+0x143/0x2e0 [ 146.279968][ T4998] ? mark_lock+0x94/0x320 [ 146.284318][ T4998] ? verify_lock_unused+0x140/0x140 [ 146.289563][ T4998] ? __lock_acquire+0x12e8/0x7d10 [ 146.294614][ T4998] lock_acquire+0x19e/0x400 [ 146.299135][ T4998] ? __flush_work+0xfa/0x210 [ 146.303743][ T4998] ? verify_lock_unused+0x140/0x140 [ 146.308962][ T4998] ? __mutex_trylock_common+0x155/0x260 [ 146.314531][ T4998] ? read_lock_is_recursive+0x10/0x10 [ 146.319941][ T4998] __flush_work+0x116/0x210 [ 146.324458][ T4998] ? __flush_work+0xfa/0x210 [ 146.329062][ T4998] ? flush_work+0x20/0x20 [ 146.333411][ T4998] ? hci_leds_update_powered+0x148/0x160 [ 146.339066][ T4998] ? rcu_lock_release+0x5/0x20 [ 146.343846][ T4998] ? __lock_acquire+0x7d10/0x7d10 [ 146.348901][ T4998] hci_dev_do_close+0x1e7/0x1030 [ 146.353858][ T4998] ? _raw_spin_unlock+0x40/0x40 [ 146.358727][ T4998] hci_rfkill_set_block+0x10a/0x190 [ 146.363954][ T4998] ? rcu_lock_release+0x20/0x20 [ 146.368834][ T4998] rfkill_set_block+0x1c6/0x420 [ 146.373752][ T4998] rfkill_fop_write+0x452/0x560 [ 146.378634][ T4998] ? rfkill_fop_read+0x4d0/0x4d0 [ 146.383588][ T4998] ? common_file_perm+0xc0/0x1c0 [ 146.388674][ T4998] ? fsnotify_perm+0x5d/0x560 [ 146.393373][ T4998] ? security_file_permission+0x75/0xa0 [ 146.398938][ T4998] ? rfkill_fop_read+0x4d0/0x4d0 [ 146.403996][ T4998] vfs_write+0x30b/0xd60 [ 146.408283][ T4998] ? file_end_write+0x250/0x250 [ 146.413149][ T4998] ? __fget_files+0x40f/0x480 [ 146.417841][ T4998] ? __fdget_pos+0x1e2/0x370 [ 146.422439][ T4998] ? ksys_write+0x71/0x260 [ 146.426905][ T4998] ksys_write+0x152/0x260 [ 146.431256][ T4998] ? __ia32_sys_read+0x80/0x80 [ 146.436045][ T4998] ? lockdep_hardirqs_on+0x94/0x140 [ 146.441277][ T4998] do_syscall_64+0x4c/0xa0 [ 146.445706][ T4998] ? clear_bhb_loop+0x30/0x80 [ 146.450402][ T4998] ? clear_bhb_loop+0x30/0x80 [ 146.455097][ T4998] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.461015][ T4998] RIP: 0033:0x7f950914ceb9 [ 146.465450][ T4998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.485078][ T4998] RSP: 002b:00007f95073a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.493538][ T4998] RAX: ffffffffffffffda RBX: 00007f95093c7fa0 RCX: 00007f950914ceb9 [ 146.501532][ T4998] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 146.509615][ T4998] RBP: 00007f95091bac1f R08: 0000000000000000 R09: 0000000000000000 [ 146.517599][ T4998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.525592][ T4998] R13: 00007f95093c8038 R14: 00007f95093c7fa0 R15: 00007ffd971ae918 [ 146.533588][ T4998] [ 146.751753][ T7] usb 2-1: USB disconnect, device number 2