last executing test programs: 23.028688963s ago: executing program 3 (id=301): r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = timerfd_create(0x1, 0x0) timerfd_settime(r4, 0x2, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="a00000001a00010000000000000000351c140000000000000000000084001300"/155], 0xa0}}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r7 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b7d0510"], 0xe) syz_usb_disconnect(0xffffffffffffffff) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) readv(r8, &(0x7f00000004c0)=[{0x0}], 0x1) prctl$PR_MCE_KILL(0x42, 0x1, 0x1) 19.303381634s ago: executing program 3 (id=310): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x8, 0xfffd}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x0, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xfebb, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@newsa={0x148, 0x10, 0x7, 0x0, 0x0, {{@in=@private=0xa010101, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80, 0x2}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@algo_aead={0x4c, 0x12, {{'morus1280-sse2\x00'}, 0x0, 0xa0}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x148}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0xa8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 18.043147065s ago: executing program 3 (id=314): socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x400000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) r3 = timerfd_create(0x0, 0x80800) timerfd_gettime(r3, &(0x7f0000000000)) 16.524892823s ago: executing program 3 (id=316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0x0, 0x220, 0x220, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6gre0\x00', {0x80, 0xd80, 0x1d, 0x9, 0x1, 0xd, 0x60, 0x20, 0xc0}, {0xfffffffffffffffb}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'vlan0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x32, 0x79, 0x5, 0x44}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000180)=0x7fffffff, 0x38) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x1, 0x200000, @loopback, 0xfffffffd}, 0x1c) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)=@keyring) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x100}]}]}, 0x20}}, 0x40040) socket$inet6_tcp(0xa, 0x1, 0x0) 12.681909448s ago: executing program 4 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000280)={0x339, @time={0x0, 0xffffffff}, 0x6, {0x9, 0x80}, 0x6, 0x0, 0x4}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8881f5c0a000) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x30, 0x0, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x803, 0x56}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, 0x0) 11.451075848s ago: executing program 4 (id=323): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 11.34771576s ago: executing program 4 (id=325): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) 9.396326578s ago: executing program 4 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002000004fe0000060000"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0xf, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000240)="cbb2945152756987ee248a32494c", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') pread64(r6, &(0x7f0000000500)=""/15, 0xf, 0x40100000087) 9.390255358s ago: executing program 1 (id=329): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000340)={[{}]}, 0x7, 0x4f7, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc4042, 0xe7) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000280)="25f9", 0x2}], 0x1) 7.591702043s ago: executing program 4 (id=333): r0 = io_uring_setup(0x7272, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x1, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) 7.476279756s ago: executing program 1 (id=334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce476", 0x5, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') read$eventfd(r4, &(0x7f0000000100), 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0xea5bc50b6199d77e) chdir(0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0xc9, 0x9, 0x3, 0xa, @local, @loopback, 0x7, 0x1, 0x40, 0xe}}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) pwritev(r6, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000340)='O6\\', 0x3}], 0x2, 0x7, 0x1ff) 7.359353768s ago: executing program 4 (id=336): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0x0, 0x220, 0x220, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6gre0\x00', {0x80, 0xd80, 0x1d, 0x9, 0x1, 0xd, 0x60, 0x20, 0xc0}, {0xfffffffffffffffb}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'vlan0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x32, 0x79, 0x5, 0x44}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000180)=0x7fffffff, 0x38) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x1, 0x200000, @loopback, 0xfffffffd}, 0x1c) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)=@keyring) 6.527133719s ago: executing program 1 (id=338): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x2, 0x0, 0x3) connect$x25(r0, &(0x7f0000000a80), 0x12) 5.427073826s ago: executing program 1 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0xfffffffd, 0x3, 0x20f, 0x88, &(0x7f0000000040)="40639ebeaa2a64606b03f1d2e55a08d25ad300392b28a178cab61a8d65734aad9b1391ea8c9cf947e86a6ed829f3d0c3d60cc1dfd5a7cf7ec826b5501134ff8115a648966016a0d8efe753ba0c353e9f6a552d9913dee0546df79a248836d23b93ea04c29eaeb862540b39dbfbec0fbfd45143dd7f4a87f1b70af8fab7d922c70f670d3f7b853d8d7464beefb1478d7864de34dfaadba7a54c7def45a2680b3ba8e02aa4a499b4f7d0d78a56477b3d6d17ab2e7593b17314a395f3a39eb22e6b55b90e8799845e19161ef51308796b10e6a981d5bf8e19d453171bc2571b0f909905e81a598a14dcaa712e08aa373adb7aabdc223a79c1b54f52abd23989e7e78b2b9aea804b5272b1a54292a17141745a7c1df9d3e3bf4107cb5bcadf1cba3017606ccc16c00726ccde758f548795790dd853f382c0b89c17be40be968ab759c9e6f649e8fbd4abcdd8f825c00b968a909a2948d153f40662564cac1d22b29f0a8f63191c24da9a6d52317e7b1529ace3b5c2f1474019b8402196abade9afbb6c0e9cdf49c7a0aac8eb744962a9a7c7c220e1160faa2d20c2738b58e37c944a9117c4b23e2073b48d33b25bc3ac8c2936ecd4709504317c9faca518a80c77ad41dbb2a9a677267543cb6b71be9b705281d15572e5e4a0b44ea5734e0b507b41ab482cc76c15f705ea20109948903d726e65b40c2d1fe325aafcd570ce1d514776a7f30293b0e1d45f727a50d421daa4b72e6b20e3468c4526297b1ac70c5ea00321aedb156baadd4fbe15cdf32832fbe49729be9476c4cfc754583d9a9c4feee5b9719fbe7f2cc113440480e1ced18991dd289b923d138a3eba8fbf0870dad7ed2e59d47235b3600a5329310626f50d720bc98f42bd9da55188df97f1c5c3c4c075a04f8e40880223affabf9f7eac86c72eee7287194668d07e3c857e622bbc6d0bb6412daf831d07162d988e221cff9fbeb1d8901f74e1ab28573a9195e81f133baf721e4d678688d887a105b8cb4cfe85b832f42e68de803cc5224ae16280ba8e10d1f8237115190d95259699c9df1fdf27d6a313ba4382d966b20253cce553980959a6e217b4fc34531cec0b8a69f3a51d87b406c4846952161903038d305ec5b605a4425fa2641c3c84010001004984f76d6a2f40fef46b816de903b8cc01cdb18248a8536f40f65d0374d477c999c2dcac197f347b13bf173d09c8b65cb52bc8a9e6e5b0c42f814d313049e534540b282db73176bb2b661d084ec1570c6ddfd7e04f49e36983c718341f873fd09c1368221046dd9fc1636d904a57d8756dbd77d66d5bc41441c9a4fd9115ecbb579753879521b6e57454c24bba41c1268f03d8cdfc6abae233dda6d34fba42cbd4d62df7b33805a8a71e84358bb573385b9a6501fa95d830c9f58628cbf2a825a09ba51f7b25433488a46678a12be35a"}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002780), 0x2280) fcntl$setstatus(r4, 0x4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x42, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 4.883040879s ago: executing program 1 (id=341): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000008140)={0x2020}, 0x207f) 4.654012295s ago: executing program 1 (id=342): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) dup3(r5, r0, 0x80000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 4.622431376s ago: executing program 3 (id=343): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x1, 0x4, 0x4}, 0x50) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/4086, 0xff6}], 0x1, 0x176, 0x402) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000004401000000000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r6, 0xc07, 0x1, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040084}, 0xc050) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f000089a000/0x1000)=nil, 0x1000) 4.215441806s ago: executing program 2 (id=344): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c"], 0x1c}, 0x1, 0x0, 0x0, 0x5001}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4804) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000280)={0x400, 0x1422, 0xa}) memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.964320692s ago: executing program 2 (id=345): socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x400000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) r3 = timerfd_create(0x0, 0x80800) timerfd_gettime(r3, &(0x7f0000000000)) 3.902983143s ago: executing program 0 (id=346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce476", 0x5, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') read$eventfd(r4, &(0x7f0000000100), 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0xea5bc50b6199d77e) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00898fa629d0d7c08e8145e19228a550d44aa0ca182c2b72c1e6e7c70ccc7fed45a250472b4fcee025f1ecbbbd15e993af320fb24412139623cd6e828317413152fa483de4d2e1e44495db085e255243cc4448fdbad1947145b8b5303070fc1a56253bf5d5a068f699307a0b40c44652f65acf747b925dc88e54db7f9f77b3cda87a6a6219f7adb2b24b5a65daccb6c976bf3a578f48ec695fc57ff7b3b9c62ff20aada72b3d63c8af096209c6b4ab70016cb5911b06c1ce058f4725b4254eb5bcbe2313d6c03db545917e381fcd204ba7f05100a00248fc54e2a4891df0eaff80fc73a971dce8525cdf15"], 0x1, 0x17e, &(0x7f0000000240)="$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") chdir(0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0xc9, 0x9, 0x3, 0xa, @local, @loopback, 0x7, 0x1, 0x40, 0xe}}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) pwritev(r6, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000340)='O6\\', 0x3}], 0x2, 0x7, 0x1ff) 2.995927835s ago: executing program 2 (id=347): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x0, 0xffffffad, 0x190, 0x0, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x0, 0x7}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'ip6erspan0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000004c0)=[{r1, 0x1007}, {r1, 0x4004}], 0x2, 0x0, 0x0, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f0000000180)={0x2f, 0x40000020, 0xf2ad}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'bond_slave_1\x00', &(0x7f0000000380)=@ethtool_gstrings={0x1b, 0x1}}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x10, 0x200, &(0x7f0000000d80)="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"}) 2.941358907s ago: executing program 0 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce476", 0x5, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') read$eventfd(r4, &(0x7f0000000100), 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0xea5bc50b6199d77e) chdir(0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0xc9, 0x9, 0x3, 0xa, @local, @loopback, 0x7, 0x1, 0x40, 0xe}}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) pwritev(r6, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000340)='O6\\', 0x3}], 0x2, 0x7, 0x1ff) 2.044689929s ago: executing program 0 (id=349): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x300fff2) 1.925128142s ago: executing program 2 (id=350): r0 = io_uring_setup(0x7272, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x1, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) 1.924515442s ago: executing program 2 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0xfffffffd, 0x3, 0x20f, 0x88, &(0x7f0000000040)="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"}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002780), 0x2280) fcntl$setstatus(r4, 0x4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x42, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 1.166127661s ago: executing program 0 (id=352): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x4, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x0, 0x91, 0x4, 0x4, 0xd, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x8, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x44007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0x81, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x10438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x2, 0x5, 0x5, 0x491, 0x9, 0x1200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x8, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0xffffffff, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x60a0, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0xa, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0xff, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x5, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x80006, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x663f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0xd]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xc004}, 0xc080) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 995.532675ms ago: executing program 2 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0x0, 0x220, 0x220, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6gre0\x00', {0x80, 0xd80, 0x1d, 0x9, 0x1, 0xd, 0x60, 0x20, 0xc0}, {0xfffffffffffffffb}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'vlan0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x32, 0x79, 0x5, 0x44}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000180)=0x7fffffff, 0x38) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x1, 0x200000, @loopback, 0xfffffffd}, 0x1c) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)=@keyring) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x100}]}]}, 0x20}}, 0x40040) socket$inet6_tcp(0xa, 0x1, 0x0) 851.183999ms ago: executing program 0 (id=354): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/253], 0x119) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) dup3(r1, r0, 0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 422.199619ms ago: executing program 3 (id=355): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 0s ago: executing program 0 (id=356): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000100)={0x7}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. [ 50.993708][ T4176] cgroup: Unknown subsys name 'net' [ 51.139156][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.321972][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.539877][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 53.653562][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 53.685193][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.692293][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.701712][ T4189] device bridge_slave_0 entered promiscuous mode [ 53.713005][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.720348][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.728442][ T4189] device bridge_slave_1 entered promiscuous mode [ 53.745904][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 53.789558][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.802149][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.818263][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 53.827017][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.834339][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.842306][ T4190] device bridge_slave_0 entered promiscuous mode [ 53.856702][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.863768][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.872157][ T4190] device bridge_slave_1 entered promiscuous mode [ 53.919192][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.930876][ T4189] team0: Port device team_slave_0 added [ 53.956848][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.970010][ T4189] team0: Port device team_slave_1 added [ 53.984558][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.991888][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.001858][ T4198] device bridge_slave_0 entered promiscuous mode [ 54.022891][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.033785][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.060525][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.074762][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.081813][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.090199][ T4198] device bridge_slave_1 entered promiscuous mode [ 54.104862][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.111815][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.138244][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.167359][ T4190] team0: Port device team_slave_0 added [ 54.179156][ T4202] chnl_net:caif_netlink_parms(): no params data found [ 54.191368][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.198571][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.206364][ T4193] device bridge_slave_0 entered promiscuous mode [ 54.215215][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.224435][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.231488][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.239760][ T4193] device bridge_slave_1 entered promiscuous mode [ 54.248228][ T4190] team0: Port device team_slave_1 added [ 54.271651][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.313718][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.320789][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.346854][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.363272][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.370288][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.396605][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.409990][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.430195][ T4198] team0: Port device team_slave_0 added [ 54.437493][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.459650][ T4189] device hsr_slave_0 entered promiscuous mode [ 54.466655][ T4189] device hsr_slave_1 entered promiscuous mode [ 54.480555][ T4198] team0: Port device team_slave_1 added [ 54.518609][ T4193] team0: Port device team_slave_0 added [ 54.527258][ T4193] team0: Port device team_slave_1 added [ 54.533510][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.540676][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.548526][ T4202] device bridge_slave_0 entered promiscuous mode [ 54.556749][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.563804][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.571808][ T4202] device bridge_slave_1 entered promiscuous mode [ 54.592178][ T4190] device hsr_slave_0 entered promiscuous mode [ 54.599027][ T4190] device hsr_slave_1 entered promiscuous mode [ 54.606493][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.614703][ T4190] Cannot create hsr debugfs directory [ 54.644122][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.654800][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.681044][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.702845][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.709865][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.735893][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.753430][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.760816][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.786983][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.798470][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.805722][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.831720][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.851996][ T4202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.888338][ T4202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.900232][ T4193] device hsr_slave_0 entered promiscuous mode [ 54.907191][ T4193] device hsr_slave_1 entered promiscuous mode [ 54.913874][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.921504][ T4193] Cannot create hsr debugfs directory [ 54.972556][ T4202] team0: Port device team_slave_0 added [ 54.987539][ T4198] device hsr_slave_0 entered promiscuous mode [ 54.995221][ T4198] device hsr_slave_1 entered promiscuous mode [ 55.001672][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.009352][ T4198] Cannot create hsr debugfs directory [ 55.021249][ T4202] team0: Port device team_slave_1 added [ 55.093654][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.100988][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.127965][ T4202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.163567][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.170644][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.196748][ T4202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.273525][ T4202] device hsr_slave_0 entered promiscuous mode [ 55.280680][ T4202] device hsr_slave_1 entered promiscuous mode [ 55.287480][ T4202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.295209][ T4202] Cannot create hsr debugfs directory [ 55.355137][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 55.360007][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 55.361638][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 55.367472][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 55.389108][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 55.415667][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.439126][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.448259][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.459395][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.475738][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.491107][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.500061][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.513845][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.569090][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.578630][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.603039][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.619853][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.670246][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.691553][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.705923][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.715784][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.748920][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.757878][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.776839][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.792507][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.803518][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.827422][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.838723][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.864986][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.879999][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.889910][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.900186][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.907458][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.917154][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.930169][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.939620][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.946737][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.954516][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.963054][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.972743][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.982275][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.991366][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.000879][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.010459][ T4202] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.020953][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.037232][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.045918][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.053862][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.062924][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.072182][ T4202] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.082012][ T4202] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.096484][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.106837][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.117062][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.124354][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.136364][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.147600][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.159763][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.168380][ T4202] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.182110][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.190735][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.199408][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.207608][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.216652][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.230809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.241541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.250123][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.257191][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.268580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.304390][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.312975][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.323494][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.331110][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.341591][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.350649][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.360686][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.369522][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.376669][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.386494][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.413375][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.430849][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.440319][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.456258][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.471621][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.481847][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.491001][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.499871][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.509402][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.518044][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.526665][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.540738][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.548726][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.557117][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.565775][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.573921][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.582838][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.592398][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.601488][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.613871][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.622235][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.640186][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.648702][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.658918][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.672284][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.683797][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.694451][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.702739][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.719098][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.751603][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.770141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.780818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.789862][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.796992][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.809275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.818641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.827140][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.834231][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.842188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.854315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.882248][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.892326][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.916113][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.929612][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.957344][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.970193][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.980849][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.990526][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.999153][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.006712][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.015213][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.023471][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.032106][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.045833][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.068199][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.077472][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.087345][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.095666][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.108606][ T4202] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.125307][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.137272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.146488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.155862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.166634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.175746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.183527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.206203][ T4189] device veth0_vlan entered promiscuous mode [ 57.218614][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.231605][ T4198] device veth0_vlan entered promiscuous mode [ 57.244869][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.256261][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.265588][ T1263] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.272671][ T1263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.281583][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.289558][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.297571][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.306336][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.315314][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.323860][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.333470][ T1263] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.340544][ T1263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.348629][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.358575][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.366907][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.378922][ T4189] device veth1_vlan entered promiscuous mode [ 57.400511][ T4198] device veth1_vlan entered promiscuous mode [ 57.409787][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.419754][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.432947][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.443335][ T4237] Bluetooth: hci0: command 0x041b tx timeout [ 57.453572][ T4237] Bluetooth: hci4: command 0x041b tx timeout [ 57.456360][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.460255][ T4237] Bluetooth: hci2: command 0x041b tx timeout [ 57.470055][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.473832][ T4237] Bluetooth: hci3: command 0x041b tx timeout [ 57.488201][ T4237] Bluetooth: hci1: command 0x041b tx timeout [ 57.488504][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.502729][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.545605][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.553752][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.562290][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.571739][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.581256][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.590090][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.599506][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.608517][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.618743][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.626588][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.642829][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.651276][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.661943][ T4189] device veth0_macvtap entered promiscuous mode [ 57.674045][ T4189] device veth1_macvtap entered promiscuous mode [ 57.685587][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.699180][ T4202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.716374][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.743747][ T4198] device veth0_macvtap entered promiscuous mode [ 57.762667][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.771093][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.779597][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.788411][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.797770][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.806887][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.815956][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.824335][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.832572][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.842803][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.850811][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.861768][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.883223][ T4193] device veth0_vlan entered promiscuous mode [ 57.892741][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.906550][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.946819][ T4198] device veth1_macvtap entered promiscuous mode [ 57.964153][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.972885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.996028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.014146][ T4193] device veth1_vlan entered promiscuous mode [ 58.029026][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.044373][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.053405][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.063105][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.087965][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.098876][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.111073][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.123518][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.134153][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.145893][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.168627][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.178556][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.187639][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.196681][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.217961][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.227045][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.237435][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.246593][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.268864][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.278712][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.293277][ T4193] device veth0_macvtap entered promiscuous mode [ 58.311656][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.324141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.334009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.347082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.356066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.364521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.371997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.380209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.388468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.396283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.416162][ T4190] device veth0_vlan entered promiscuous mode [ 58.444427][ T4193] device veth1_macvtap entered promiscuous mode [ 58.515133][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.518051][ T4190] device veth1_vlan entered promiscuous mode [ 58.523122][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.541160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.550114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.558997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.568453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.577796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.593914][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.605484][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.616341][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.627148][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.638992][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.651047][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.662823][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.673292][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.683977][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.695364][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.710539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.721444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.731735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.740878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.768960][ T4202] device veth0_vlan entered promiscuous mode [ 58.775946][ T301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.782754][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.783757][ T301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.793783][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.811594][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.820833][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.835097][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.843718][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.851926][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.860462][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.902614][ T4202] device veth1_vlan entered promiscuous mode [ 58.912455][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.912491][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.921085][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.936546][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.941108][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.945872][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.969382][ T4190] device veth0_macvtap entered promiscuous mode [ 58.978864][ T301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.988658][ T301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.988984][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.004010][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.013323][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.036769][ T4190] device veth1_macvtap entered promiscuous mode [ 59.056698][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.073044][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.083039][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.113437][ T4202] device veth0_macvtap entered promiscuous mode [ 59.140173][ T4202] device veth1_macvtap entered promiscuous mode [ 59.170463][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.191960][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.206154][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.218445][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.231000][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.250900][ T4267] loop3: detected capacity change from 0 to 1024 [ 59.256217][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.270496][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.295537][ T4267] EXT4-fs (loop3): Ignoring removed orlov option [ 59.303653][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.323328][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.332006][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.351050][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.355788][ T4267] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 59.388605][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.418647][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.428910][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.441998][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.452175][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.463114][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.473348][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.484148][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.495674][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.525093][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 59.532396][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 59.541055][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.544724][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.556074][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 59.568586][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.569498][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 59.586864][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 59.595581][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.605814][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.609317][ T4267] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.4: Invalid inode table block 0 in block_group 0 [ 59.616961][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.639670][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.650493][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.661764][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.676985][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.690996][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.701497][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.716077][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.729821][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.742355][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.754113][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.765258][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.781887][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.792351][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.808122][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.819532][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.836024][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.851871][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.867619][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.888034][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.901308][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.911216][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.930819][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.942491][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.968274][ T4202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.978097][ T4202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.987694][ T4202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.997976][ T4202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.036655][ T1263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.046244][ T1263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.072092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.177970][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.208118][ T4279] loop1: detected capacity change from 0 to 1024 [ 60.218338][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.325178][ T4281] loop0: detected capacity change from 0 to 16 [ 60.351447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.454149][ T4281] erofs: (device loop0): mounted with root inode @ nid 36. [ 60.545503][ T4279] EXT4-fs (loop1): Ignoring removed orlov option [ 60.796582][ T4279] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,nobarrier,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,block_validity,,errors=continue. Quota mode: none. [ 60.856250][ T1263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.866532][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.901843][ T1263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.933373][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.984500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.016155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.024986][ T4290] loop3: detected capacity change from 0 to 512 [ 61.071009][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.104817][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.186002][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.234974][ T4290] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 61.248306][ T4290] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.277535][ T4293] loop0: detected capacity change from 0 to 512 [ 61.313788][ T4290] capability: warning: `syz.3.7' uses 32-bit capabilities (legacy support in use) [ 61.382632][ T4293] EXT4-fs (loop0): Ignoring removed orlov option [ 61.391096][ T4293] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 61.406602][ T4293] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.8: corrupted in-inode xattr [ 61.430111][ T4297] loop4: detected capacity change from 0 to 512 [ 61.458579][ T4305] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.476113][ T4297] ======================================================= [ 61.476113][ T4297] WARNING: The mand mount option has been deprecated and [ 61.476113][ T4297] and is ignored by this kernel. Remove the mand [ 61.476113][ T4297] option from the mount to silence this warning. [ 61.476113][ T4297] ======================================================= [ 61.476979][ T4293] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.8: couldn't read orphan inode 15 (err -117) [ 61.770660][ T4293] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 62.116598][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 62.122720][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 62.139070][ T4297] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 62.145321][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 62.171741][ T4297] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 62.207659][ T4297] EXT4-fs (loop4): orphan cleanup on readonly fs [ 62.224586][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 62.248276][ T4297] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.5: attempt to clear invalid blocks 1024 len 1 [ 62.287980][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 62.344492][ T4297] EXT4-fs (loop4): Remounting filesystem read-only [ 62.367420][ T4297] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.5: bg 0: block 361: padding at end of block bitmap is not set [ 62.429305][ T4297] EXT4-fs (loop4): Remounting filesystem read-only [ 62.451699][ T4297] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 62.457196][ T4320] loop2: detected capacity change from 0 to 256 [ 62.467870][ T4297] EXT4-fs (loop4): Remounting filesystem read-only [ 62.474749][ T4297] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5: invalid indirect mapped block 1811939328 (level 0) [ 62.490103][ T4297] EXT4-fs (loop4): Remounting filesystem read-only [ 62.497073][ T4297] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5: invalid indirect mapped block 2185560079 (level 1) [ 62.511774][ T4297] EXT4-fs (loop4): Remounting filesystem read-only [ 62.530398][ T4297] EXT4-fs (loop4): 1 truncate cleaned up [ 62.585540][ T4322] loop0: detected capacity change from 0 to 512 [ 62.591021][ T4320] FAT-fs (loop2): Directory bread(block 64) failed [ 62.603004][ T4297] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none. [ 62.612068][ T4320] FAT-fs (loop2): Directory bread(block 65) failed [ 62.653089][ T4320] FAT-fs (loop2): Directory bread(block 66) failed [ 62.660983][ T4320] FAT-fs (loop2): Directory bread(block 67) failed [ 62.671101][ T4322] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 62.691688][ T4320] FAT-fs (loop2): Directory bread(block 68) failed [ 62.698483][ T4320] FAT-fs (loop2): Directory bread(block 69) failed [ 62.706086][ T4320] FAT-fs (loop2): Directory bread(block 70) failed [ 62.712663][ T4320] FAT-fs (loop2): Directory bread(block 71) failed [ 62.716330][ T4322] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.12: invalid indirect mapped block 256 (level 1) [ 62.720186][ T4320] FAT-fs (loop2): Directory bread(block 72) failed [ 62.741540][ T4320] FAT-fs (loop2): Directory bread(block 73) failed [ 62.796116][ T4322] EXT4-fs (loop0): Remounting filesystem read-only [ 62.804508][ T4264] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.820431][ T4322] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.12: invalid indirect mapped block 2683928664 (level 1) [ 62.835853][ T4322] EXT4-fs (loop0): Remounting filesystem read-only [ 62.849479][ T4322] EXT4-fs (loop0): 1 truncate cleaned up [ 62.855623][ T4322] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,auto_da_alloc=0x000000000000000c,errors=remount-ro,nodioread_nolock,discard,usrjquota=.jqfmt=vfsv1,noauto_da_alloc,jqfmt=vfsv0,resuid=0x0000000000000000,,. Quota mode: writeback. [ 62.984947][ T4325] loop4: detected capacity change from 0 to 1024 [ 63.036438][ T4328] loop1: detected capacity change from 0 to 1024 [ 63.067274][ T4325] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 63.084486][ T4264] usb 4-1: Using ep0 maxpacket: 8 [ 63.112683][ T4328] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 63.129856][ T4325] EXT4-fs (loop4): Ignoring removed oldalloc option [ 63.138051][ T4325] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.144902][ T4330] exfat: Deprecated parameter 'utf8' [ 63.149690][ T4325] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53617!=20869) [ 63.166712][ T4325] jbd2_journal_init_inode: Cannot locate journal superblock [ 63.174027][ T4325] EXT4-fs (loop4): Could not load journal inode [ 63.182408][ T4328] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.193982][ T4330] exfat: Deprecated parameter 'namecase' [ 63.285529][ T4264] usb 4-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 63.303531][ T4264] usb 4-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 63.341449][ T4330] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0232f1a3, utbl_chksum : 0xe619d30d) [ 63.427781][ T4264] usb 4-1: config 0 interface 0 has no altsetting 0 [ 63.674620][ T4272] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 64.338791][ T4272] EXT4-fs (loop1): Remounting filesystem read-only [ 64.594020][ T4272] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 65.124173][ C0] sched: RT throttling activated [ 65.124650][ T4264] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 65.138976][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.635307][ T4264] usb 4-1: config 0 descriptor?? [ 65.665212][ T26] audit: type=1800 audit(1784127553.268:2): pid=4322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 65.766936][ T4264] usb 4-1: can't set config #0, error -71 [ 65.780303][ T4272] EXT4-fs (loop0): Remounting filesystem read-only [ 65.819646][ T4264] usb 4-1: USB disconnect, device number 2 [ 65.866542][ T4345] binder: 4344:4345 ioctl c0306201 200000000080 returned -14 [ 65.908394][ T4348] set_capacity_and_notify: 1 callbacks suppressed [ 65.908408][ T4348] loop3: detected capacity change from 0 to 256 [ 65.942310][ T4345] binder: 4344:4345 ioctl c0306201 2000000003c0 returned -14 [ 66.004972][ T4348] exfat: Deprecated parameter 'utf8' [ 66.010420][ T4348] exfat: Deprecated parameter 'namecase' [ 67.085460][ T4348] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0232f1a3, utbl_chksum : 0xe619d30d) [ 67.340108][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.349788][ T4354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.372611][ T4355] syz.4.20 (4355) used greatest stack depth: 20912 bytes left [ 68.025218][ T4369] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.869202][ T4377] loop0: detected capacity change from 0 to 4096 [ 68.971040][ T4377] EXT4-fs (loop0): Test dummy encryption mode enabled [ 69.028194][ T4377] EXT4-fs (loop0): inline encryption not supported [ 69.069570][ T4377] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 69.146034][ T4377] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 69.185221][ T4377] System zones: 0-5 [ 69.248432][ T4377] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 69.788090][ T1326] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.854874][ T4403] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET) [ 69.875375][ T4404] loop0: detected capacity change from 0 to 512 [ 69.919227][ T4264] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 69.950933][ T4404] EXT4-fs (loop0): Ignoring removed bh option [ 69.978353][ T4404] EXT4-fs (loop0): inline encryption not supported [ 70.015376][ T4404] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 70.015376][ T4404] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 70.015376][ T4404] [ 70.069687][ T1326] usb 5-1: Using ep0 maxpacket: 32 [ 70.115834][ T4404] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.184833][ T4404] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 70.200872][ T1326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 183, changing to 11 [ 70.232400][ T1326] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 70.274562][ T1326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.284545][ T4404] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.33: bg 0: block 248: padding at end of block bitmap is not set [ 70.305726][ T1326] usb 5-1: config 0 descriptor?? [ 70.314247][ T4264] usb 4-1: Using ep0 maxpacket: 16 [ 70.439996][ T4404] Quota error (device loop0): write_blk: dquota write failed [ 70.465004][ T4264] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 70.542143][ T4264] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 70.577970][ T4404] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 70.683424][ T4404] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.33: Failed to acquire dquot type 1 [ 70.708235][ T4264] usb 4-1: config 1 interface 0 has no altsetting 0 [ 70.890942][ T4404] EXT4-fs (loop0): 1 truncate cleaned up [ 70.952382][ T4404] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,inlinecrypt,nouser_xattr,,errors=continue. Quota mode: writeback. [ 71.129459][ T4264] usb 4-1: string descriptor 0 read error: -22 [ 71.141591][ T4264] usb 4-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 71.224747][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.284924][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.291503][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.534295][ T1326] usb 5-1: string descriptor 0 read error: -71 [ 71.952765][ T4426] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.33: deleted inode referenced: 12 [ 72.548547][ T4431] syz.0.33 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 73.149179][ T4404] syz.0.33 (4404) used greatest stack depth: 20896 bytes left [ 73.244471][ T1326] usbhid 5-1:0.0: can't add hid device: -71 [ 73.254415][ T1326] usbhid: probe of 5-1:0.0 failed with error -71 [ 73.387030][ T1326] usb 5-1: USB disconnect, device number 2 [ 73.896553][ T4452] device syzkaller0 entered promiscuous mode [ 73.905766][ T4264] usb 4-1: can't set config #1, error -71 [ 73.914576][ T4264] usb 4-1: USB disconnect, device number 3 [ 73.954358][ T1326] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.152844][ T4460] loop3: detected capacity change from 0 to 512 [ 74.205301][ T1326] usb 5-1: Using ep0 maxpacket: 16 [ 74.361276][ T4460] EXT4-fs (loop3): Unrecognized mount option "subj_role=+^[]@/+\)(%" or missing value [ 74.444555][ T1326] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.699426][ T1326] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.274601][ T1326] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.283712][ T1326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.384483][ T1326] usb 5-1: Product: syz [ 75.399047][ T1326] usb 5-1: Manufacturer: syz [ 75.403674][ T1326] usb 5-1: SerialNumber: syz [ 75.774561][ T1326] usb 5-1: 0:2 : does not exist [ 76.140553][ T1326] usb 5-1: USB disconnect, device number 3 [ 77.239133][ T4492] netlink: 'syz.4.61': attribute type 1 has an invalid length. [ 77.239209][ T4492] netlink: 'syz.4.61': attribute type 2 has an invalid length. [ 78.131946][ T4493] device syzkaller1 entered promiscuous mode [ 78.252436][ T4505] device syzkaller0 entered promiscuous mode [ 78.334440][ T4512] netlink: 'syz.1.67': attribute type 1 has an invalid length. [ 78.357667][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.392967][ T4512] netlink: 'syz.1.67': attribute type 2 has an invalid length. [ 78.604561][ T4508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'. [ 78.621099][ T4515] netlink: 'syz.3.66': attribute type 6 has an invalid length. [ 78.632932][ T4515] netlink: 72 bytes leftover after parsing attributes in process `syz.3.66'. [ 78.840928][ T4527] loop4: detected capacity change from 0 to 128 [ 78.919475][ T4527] FAT-fs (loop4): Unrecognized mount option "ldS [ 78.919475][ T4527] ] 0HY& ^·$*oIeϦՏL5 4coOeuRθZBE2V-х3cҕ p4 [ 86.326914][ T4183] loop2: p4 size 8388608 extends beyond EOD, truncated [ 86.764372][ T4584] loop2: p1 < > p4 [ 86.784593][ T4584] loop2: p4 size 8388608 extends beyond EOD, truncated [ 86.986766][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 87.016230][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 87.022879][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.048832][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.072962][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.086713][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 87.087963][ T4611] device bridge_slave_0 left promiscuous mode [ 87.109464][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 87.111893][ T4613] loop2: detected capacity change from 0 to 256 [ 87.136025][ T4611] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.170208][ T4611] device bridge_slave_1 left promiscuous mode [ 87.178473][ T4611] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.201284][ T4611] bond0: (slave bond_slave_0): Releasing backup interface [ 87.222683][ T4611] bond0: (slave bond_slave_1): Releasing backup interface [ 87.247117][ T4613] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.253259][ T4616] Zero length message leads to an empty skb [ 87.289003][ T4613] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 87.317928][ T4611] team0: Port device team_slave_0 removed [ 87.330995][ T4613] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 87.362468][ T4611] team0: Port device team_slave_1 removed [ 87.380715][ T4611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.390579][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.416130][ T4611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.432764][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.551079][ T4620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 87.657726][ T4623] netlink: 'syz.0.102': attribute type 2 has an invalid length. [ 87.677246][ T4623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.102'. [ 87.786070][ T4631] netlink: 'syz.0.104': attribute type 1 has an invalid length. [ 87.873278][ T4631] bond1 (unregistering): Released all slaves [ 89.371591][ T4657] device syzkaller0 entered promiscuous mode [ 89.386135][ T4662] loop3: detected capacity change from 0 to 256 [ 89.400454][ T4663] loop2: detected capacity change from 0 to 16 [ 89.427990][ T4662] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.467999][ T4662] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 89.517780][ T4662] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 89.552717][ T4663] erofs: (device loop2): mounted with root inode @ nid 36. [ 89.906317][ T4232] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 89.951850][ T4683] loop3: detected capacity change from 0 to 512 [ 90.066860][ T4683] FAT-fs (loop3): bogus logical sector size 1 [ 90.082078][ T4683] FAT-fs (loop3): Can't find a valid FAT filesystem [ 90.305153][ T4232] usb 1-1: config 1 has an invalid descriptor of length 185, skipping remainder of the config [ 90.325170][ T4232] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 91.356409][ T4232] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 92.590245][ T4232] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.614267][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 92.642590][ T4232] usb 1-1: SerialNumber: syz [ 92.774412][ T4232] usb 1-1: can't set config #1, error -71 [ 92.833420][ T4232] usb 1-1: USB disconnect, device number 2 [ 93.119598][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 93.186097][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 93.253120][ T4724] loop0: detected capacity change from 0 to 256 [ 93.301726][ T4726] netlink: 224 bytes leftover after parsing attributes in process `syz.3.131'. [ 93.311147][ T4726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.131'. [ 93.326457][ T4724] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.342970][ T4724] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 93.381092][ T4724] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 93.591244][ T26] audit: type=1800 audit(1784127581.198:3): pid=4724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.130" name="file1" dev="loop0" ino=1048610 res=0 errno=0 [ 94.626013][ T4744] device syzkaller0 entered promiscuous mode [ 96.255103][ T4772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.146'. [ 96.274891][ T4770] device syzkaller1 entered promiscuous mode [ 96.729413][ T4777] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.736954][ T4777] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.995521][ T4777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.046186][ T4777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.059138][ T4790] netlink: 'syz.2.153': attribute type 1 has an invalid length. [ 97.074642][ T4790] netlink: 'syz.2.153': attribute type 2 has an invalid length. [ 97.210827][ T4356] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 97.364572][ T4777] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.373457][ T4777] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.382576][ T4777] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.391716][ T4777] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.466027][ T4781] netlink: 'syz.4.150': attribute type 1 has an invalid length. [ 97.841940][ T4808] device syzkaller0 entered promiscuous mode [ 97.873984][ T4812] tc action pedit offset 132 out of bounds [ 97.992439][ T4792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.238346][ T4822] device syzkaller0 entered promiscuous mode [ 98.248434][ T4822] 0: reclassify loop, rule prio 0, protocol 800 [ 98.377770][ T4825] raw_sendmsg: syz.2.164 forgot to set AF_INET. Fix it! [ 98.576107][ T4833] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.688983][ T4837] loop0: detected capacity change from 0 to 16 [ 98.766011][ T4837] erofs: (device loop0): mounted with root inode @ nid 36. [ 99.459101][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 99.495412][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 99.511589][ T4846] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.556042][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 99.588350][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 99.592072][ T4852] loop2: detected capacity change from 0 to 128 [ 99.639283][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 99.802575][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 99.846987][ T4852] FAT-fs (loop2): Unrecognized mount option "ldS [ 99.846987][ T4852] ] 0HY& ^·$*oIeϦՏL5 4coOeuRθZBE2V-х3cҕ HID v0.00 Device [syz1] on syz0 [ 147.163273][ T5270] BTRFS info (device loop0): enabling ssd optimizations [ 150.828459][ T5328] device syzkaller0 entered promiscuous mode [ 152.037000][ T5344] loop4: detected capacity change from 0 to 2048 [ 154.065632][ T4986] loop4: p1 < > p4 [ 154.094611][ T4986] loop4: p4 size 8388608 extends beyond EOD, truncated [ 154.909972][ T5344] loop4: p1 < > p4 [ 154.915512][ T5344] loop4: p4 size 8388608 extends beyond EOD, truncated [ 155.641278][ T2304] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 155.968437][ T2304] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.332375][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 156.423458][ T4986] udevd[4986]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 156.589406][ T4986] udevd[4986]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 156.602816][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 158.638928][ T5376] loop4: detected capacity change from 0 to 32768 [ 158.753297][ T5398] netlink: 32 bytes leftover after parsing attributes in process `syz.3.310'. [ 158.806578][ T5376] XFS (loop4): Mounting V5 Filesystem [ 159.091860][ T5376] XFS (loop4): Ending clean mount [ 159.254243][ T4232] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.308699][ T5376] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 159.373425][ T5376] XFS (loop4): Unmount and run xfs_repair [ 159.396261][ T5376] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 159.423627][ T5376] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 159.456466][ T5376] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 159.512866][ T5376] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 159.542666][ T5376] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 159.567420][ T5376] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 159.624317][ T5376] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 159.644265][ T5376] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 159.668007][ T4232] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 159.668052][ T5376] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 159.688292][ T4232] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.727972][ T5376] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 159.890276][ T4190] XFS (loop4): Unmounting Filesystem [ 161.376396][ T4232] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 161.400348][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.419239][ T4232] usb 2-1: Product: syz [ 161.423511][ T4232] usb 2-1: Manufacturer: syz [ 161.449196][ T4232] usb 2-1: SerialNumber: syz [ 161.655435][ T4232] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 161.894504][ T3546] bcm5974 2-1:1.0: could not read from device [ 161.934596][ T4232] bcm5974 2-1:1.0: could not read from device [ 161.974338][ T3546] bcm5974 2-1:1.0: could not read from device [ 161.984799][ T4232] input: failed to attach handler mousedev to device input6, error: -5 [ 162.034496][ T3546] bcm5974 2-1:1.0: could not read from device [ 162.051862][ T4232] usb 2-1: USB disconnect, device number 4 [ 162.081156][ T3546] bcm5974 2-1:1.0: could not read from device [ 162.391603][ T5424] loop4: detected capacity change from 0 to 2048 [ 163.286792][ T4182] loop4: p1 < > p4 [ 163.294938][ T4182] loop4: p4 size 8388608 extends beyond EOD, truncated [ 163.341037][ T5424] loop4: p1 < > p4 [ 163.346012][ T5424] loop4: p4 size 8388608 extends beyond EOD, truncated [ 163.453072][ T3561] loop4: p1 < > p4 [ 163.460405][ T3561] loop4: p4 size 8388608 extends beyond EOD, truncated [ 163.548510][ T4986] udevd[4986]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 163.562674][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 163.636108][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 163.653644][ T4986] udevd[4986]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 163.818944][ T4986] udevd[4986]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 163.832267][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 163.982220][ T5433] device syzkaller0 entered promiscuous mode [ 168.402085][ T5462] loop1: detected capacity change from 0 to 512 [ 168.743466][ T5467] loop4: detected capacity change from 0 to 2048 [ 168.823218][ T5467] loop4: p1 < > p4 [ 168.907503][ T5467] loop4: p4 size 8388608 extends beyond EOD, truncated [ 169.074627][ T5462] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.329: bg 0: block 5: invalid block bitmap [ 169.111154][ T3561] loop4: p1 < > p4 [ 169.139939][ T3561] loop4: p4 size 8388608 extends beyond EOD, truncated [ 169.168272][ T5462] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 169.234240][ T5462] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.329: invalid indirect mapped block 3 (level 2) [ 169.331449][ T5462] EXT4-fs (loop1): 1 orphan inode deleted [ 169.366384][ T5471] device syzkaller0 entered promiscuous mode [ 169.375533][ T5462] EXT4-fs (loop1): 1 truncate cleaned up [ 169.381208][ T5462] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: writeback. [ 170.161281][ T26] audit: type=1800 audit(1784127657.768:4): pid=5462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.329" name="file0" dev="loop1" ino=18 res=0 errno=0 [ 170.238224][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 170.251066][ T4986] udevd[4986]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 170.345178][ T4986] udevd[4986]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 170.380863][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 173.334043][ T13] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 173.373930][ T13] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 174.377453][ T5527] loop0: detected capacity change from 0 to 16 [ 174.488988][ T5527] erofs: (device loop0): mounted with root inode @ nid 36. [ 175.773037][ T2304] Bluetooth: hci2: command 0x0406 tx timeout [ 175.804481][ T2304] Bluetooth: hci0: command 0x0406 tx timeout [ 175.832680][ T2304] Bluetooth: hci4: command 0x0406 tx timeout [ 175.869109][ T2304] Bluetooth: hci3: command 0x0406 tx timeout [ 175.886132][ T2304] Bluetooth: hci1: command 0x0406 tx timeout [ 175.955680][ T5547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.351'. [ 178.124703][ T5565] [ 178.127114][ T5565] ====================================================== [ 178.134168][ T5565] WARNING: possible circular locking dependency detected [ 178.141202][ T5565] syzkaller #0 Not tainted [ 178.145614][ T5565] ------------------------------------------------------ [ 178.152632][ T5565] syz.0.356/5565 is trying to acquire lock: [ 178.158520][ T5565] ffff8880795e0f98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 178.168985][ T5565] [ 178.168985][ T5565] but task is already holding lock: [ 178.176345][ T5565] ffff8880795e13f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 178.185667][ T5565] [ 178.185667][ T5565] which lock already depends on the new lock. [ 178.185667][ T5565] [ 178.196075][ T5565] [ 178.196075][ T5565] the existing dependency chain (in reverse order) is: [ 178.205114][ T5565] [ 178.205114][ T5565] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 178.212937][ T5565] __mutex_lock_common+0x1e5/0x2400 [ 178.219017][ T5565] mutex_lock_nested+0x17/0x20 [ 178.224311][ T5565] hci_dev_do_close+0x5f/0x1020 [ 178.229692][ T5565] hci_rfkill_set_block+0x101/0x180 [ 178.235409][ T5565] rfkill_set_block+0x1c1/0x3c0 [ 178.240776][ T5565] rfkill_fop_write+0x453/0x560 [ 178.246138][ T5565] vfs_write+0x304/0xd70 [ 178.250880][ T5565] ksys_write+0x153/0x260 [ 178.255710][ T5565] do_syscall_64+0x4c/0xa0 [ 178.260628][ T5565] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.267019][ T5565] [ 178.267019][ T5565] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 178.275009][ T5565] __mutex_lock_common+0x1e5/0x2400 [ 178.280731][ T5565] mutex_lock_nested+0x17/0x20 [ 178.286012][ T5565] rfkill_register+0x2f/0x970 [ 178.291188][ T5565] hci_register_dev+0x459/0x980 [ 178.296550][ T5565] vhci_create_device+0x32e/0x5c0 [ 178.302071][ T5565] vhci_write+0x389/0x440 [ 178.307032][ T5565] vfs_write+0x748/0xd70 [ 178.311875][ T5565] ksys_write+0x153/0x260 [ 178.316711][ T5565] do_syscall_64+0x4c/0xa0 [ 178.321673][ T5565] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.328061][ T5565] [ 178.328061][ T5565] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 178.335952][ T5565] __mutex_lock_common+0x1e5/0x2400 [ 178.341674][ T5565] mutex_lock_nested+0x17/0x20 [ 178.346933][ T5565] vhci_send_frame+0x88/0x100 [ 178.352107][ T5565] hci_send_frame+0x1a9/0x2e0 [ 178.357280][ T5565] hci_tx_work+0x9b5/0x16d0 [ 178.362293][ T5565] process_one_work+0x867/0xff0 [ 178.367666][ T5565] worker_thread+0xad7/0x12a0 [ 178.373221][ T5565] kthread+0x42e/0x520 [ 178.377882][ T5565] ret_from_fork+0x1f/0x30 [ 178.383032][ T5565] [ 178.383032][ T5565] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 178.392221][ T5565] __lock_acquire+0x2c66/0x7b50 [ 178.397587][ T5565] lock_acquire+0x19e/0x400 [ 178.402591][ T5565] __flush_work+0x116/0x210 [ 178.407601][ T5565] hci_dev_do_close+0x201/0x1020 [ 178.413057][ T5565] hci_rfkill_set_block+0x101/0x180 [ 178.418766][ T5565] rfkill_set_block+0x1c1/0x3c0 [ 178.424208][ T5565] rfkill_fop_write+0x453/0x560 [ 178.430361][ T5565] vfs_write+0x304/0xd70 [ 178.435133][ T5565] ksys_write+0x153/0x260 [ 178.439967][ T5565] do_syscall_64+0x4c/0xa0 [ 178.444890][ T5565] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.451281][ T5565] [ 178.451281][ T5565] other info that might help us debug this: [ 178.451281][ T5565] [ 178.461537][ T5565] Chain exists of: [ 178.461537][ T5565] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 178.461537][ T5565] [ 178.476451][ T5565] Possible unsafe locking scenario: [ 178.476451][ T5565] [ 178.483877][ T5565] CPU0 CPU1 [ 178.489400][ T5565] ---- ---- [ 178.494741][ T5565] lock(&hdev->req_lock); [ 178.499133][ T5565] lock(rfkill_global_mutex); [ 178.506394][ T5565] lock(&hdev->req_lock); [ 178.513321][ T5565] lock((work_completion)(&hdev->tx_work)); [ 178.519286][ T5565] [ 178.519286][ T5565] *** DEADLOCK *** [ 178.519286][ T5565] [ 178.527407][ T5565] 2 locks held by syz.0.356/5565: [ 178.532406][ T5565] #0: ffffffff8d6d3c28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 178.542473][ T5565] #1: ffff8880795e13f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 178.552183][ T5565] [ 178.552183][ T5565] stack backtrace: [ 178.558059][ T5565] CPU: 1 PID: 5565 Comm: syz.0.356 Not tainted syzkaller #0 [ 178.565325][ T5565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 178.575454][ T5565] Call Trace: [ 178.578727][ T5565] [ 178.581816][ T5565] dump_stack_lvl+0x188/0x250 [ 178.586493][ T5565] ? load_image+0x410/0x410 [ 178.590988][ T5565] ? show_regs_print_info+0x20/0x20 [ 178.596189][ T5565] ? print_circular_bug+0x12b/0x1a0 [ 178.601453][ T5565] check_noncircular+0x296/0x330 [ 178.606371][ T5565] ? look_up_lock_class+0x71/0x110 [ 178.611459][ T5565] ? add_chain_block+0x9b0/0x9b0 [ 178.616458][ T5565] ? lockdep_lock+0xf1/0x1f0 [ 178.621024][ T5565] ? mark_lock+0x94/0x320 [ 178.625327][ T5565] ? _find_first_zero_bit+0xd1/0xf0 [ 178.630501][ T5565] __lock_acquire+0x2c66/0x7b50 [ 178.635336][ T5565] ? add_chain_block+0x9b0/0x9b0 [ 178.640372][ T5565] ? lockdep_unlock+0x143/0x2e0 [ 178.645323][ T5565] ? verify_lock_unused+0x140/0x140 [ 178.650513][ T5565] ? mark_lock+0x94/0x320 [ 178.654943][ T5565] ? __lock_acquire+0x1305/0x7b50 [ 178.660029][ T5565] lock_acquire+0x19e/0x400 [ 178.664528][ T5565] ? __flush_work+0xfa/0x210 [ 178.669139][ T5565] ? verify_lock_unused+0x140/0x140 [ 178.674436][ T5565] ? read_lock_is_recursive+0x10/0x10 [ 178.679796][ T5565] __flush_work+0x116/0x210 [ 178.684284][ T5565] ? __flush_work+0xfa/0x210 [ 178.688979][ T5565] ? flush_work+0x20/0x20 [ 178.693301][ T5565] ? rcu_lock_release+0x5/0x20 [ 178.698181][ T5565] ? __lock_acquire+0x7b50/0x7b50 [ 178.703198][ T5565] hci_dev_do_close+0x201/0x1020 [ 178.708127][ T5565] hci_rfkill_set_block+0x101/0x180 [ 178.713308][ T5565] ? rcu_lock_release+0x20/0x20 [ 178.718148][ T5565] rfkill_set_block+0x1c1/0x3c0 [ 178.722985][ T5565] rfkill_fop_write+0x453/0x560 [ 178.727815][ T5565] ? rfkill_fop_read+0x560/0x560 [ 178.732728][ T5565] ? common_file_perm+0xf0/0x1c0 [ 178.737642][ T5565] ? fsnotify_perm+0x5d/0x560 [ 178.742298][ T5565] ? security_file_permission+0x75/0xa0 [ 178.747819][ T5565] ? rfkill_fop_read+0x560/0x560 [ 178.752741][ T5565] vfs_write+0x304/0xd70 [ 178.756978][ T5565] ? file_end_write+0x250/0x250 [ 178.761811][ T5565] ? __fget_files+0x402/0x470 [ 178.766464][ T5565] ? __fdget_pos+0x1e2/0x370 [ 178.771055][ T5565] ? ksys_write+0x70/0x260 [ 178.775458][ T5565] ksys_write+0x153/0x260 [ 178.779778][ T5565] ? __ia32_sys_read+0x80/0x80 [ 178.784517][ T5565] ? lockdep_hardirqs_on+0x94/0x140 [ 178.789839][ T5565] do_syscall_64+0x4c/0xa0 [ 178.794283][ T5565] ? clear_bhb_loop+0x30/0x80 [ 178.798964][ T5565] ? clear_bhb_loop+0x30/0x80 [ 178.803623][ T5565] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.809524][ T5565] RIP: 0033:0x7f9b341d3e59 [ 178.813918][ T5565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.833512][ T5565] RSP: 002b:00007f9b3242c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.842048][ T5565] RAX: ffffffffffffffda RBX: 00007f9b3445bfa0 RCX: 00007f9b341d3e59 [ 178.850016][ T5565] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 178.857968][ T5565] RBP: 00007f9b34269e6f R08: 0000000000000000 R09: 0000000000000000 [ 178.866009][ T5565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.874044][ T5565] R13: 00007f9b3445c038 R14: 00007f9b3445bfa0 R15: 00007ffde6068398 [ 178.882094][ T5565]