last executing test programs: 9.20928223s ago: executing program 2 (id=178): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x10e, &(0x7f0000000300)={[{@errors_remount}, {@lazytime}, {@oldalloc}, {@block_validity}, {@block_validity}, {@oldalloc}]}, 0x1, 0x46b, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40106614, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.404974595s ago: executing program 2 (id=182): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r0, r3, 0x4}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000940), &(0x7f0000000080)=@tcp=r2}, 0x20) 8.308580963s ago: executing program 2 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) 7.36094053s ago: executing program 2 (id=194): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) write$input_event(r1, &(0x7f0000000000)={{0x0, 0x2710}, 0x5, 0xfbfc}, 0x61) 6.473628172s ago: executing program 2 (id=197): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) write$cgroup_type(r1, 0x0, 0x0) 4.945226257s ago: executing program 2 (id=207): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x3000000, &(0x7f0000000000), 0x4) 3.576142729s ago: executing program 3 (id=219): syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000103, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f0810000000e8c94ef56491ee54", 0xf) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) lgetxattr(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYRES16=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0xfffffffe, 0x4}, 0x8}, 0xfffffffffffffddf) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000500, 0xee00, &(0x7f0000000540)) 2.500788606s ago: executing program 1 (id=223): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r1}}]}, 0x28}}, 0x0) 2.484874247s ago: executing program 4 (id=224): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x10e, &(0x7f0000000300)={[{@errors_remount}, {@lazytime}, {@oldalloc}, {@block_validity}, {@block_validity}, {@oldalloc}]}, 0x1, 0x46b, &(0x7f0000000c00)="$eJzs3M9vFFUcAPDvTFug/LAVUeSHWkVjI9rSgsrBi0YTD5qYeMFjbQtBCjW0JkKIojF4NCTejUcT/wJPejHqycSrnrwYEmK4CJ7WzO5Mu7vslmVZOsX9fJKh78284b1v37zZN/PaBtC3xrJ/kojtEfF7RIzUso0Fxmpfrl+7MHvj2oXZJCqVt/9OquX+uXZhtihanLctz4ynEelnSexrUe/SufOnZhYW5s/m+cnl0+9PLp07/9zJ0zMn5k/Mn5k+evTI4akXX5h+vidx3p+1de9Hi/v3vP7O5Tdnj11+9+dvkyL+pjh6ZGytg09VKj2urlw76tLJ4EpySymNoWMDEZF111B1/I/EQKx23ki89mmpjQPuqkquzeGLFeB/LImyWwCUo/igz55/i239Zh/lu/py7QEoi/t6vtWODEaalxlqer7tpbGIOHbx36+yLe7OewgAgAbfZ/OfZ1vN/9J4qK7cffna0Gi+lrIzIh6IiF0R8WBEtezuiHj4NutvXiS5ef6TXukqsA5l87+X8rWtxvlfMfuL0YE8t6Ma/1By/OTC/KH8ezIeQ5uz/NQadfzw6m9ftDtWP//Ltqz+Yi6Yt+PK4ObGc+ZmlmfuJOZ6Vz+J2DvYKv5kZSUgiYg9EbG3yzpOPvPN/nbHbh3/Gga7bFCdytcRT9f6/2I0xV9I1l6fnNwSC/OHJour4ma//HrprXb131H8PZD1/9aW1/9K/KNJ/Xrt0u3XcemPz9s+00x0df2v7tiUf/1wZnn57FTEpuSNWqPr90+vnlvki/JZ/OMHWo//nbH6ndgXEdlF/EhEPBoRj+V993hEPBERB1qHlz06xk+vPPleu/g3Qv/PNfX/aGORpv5fTWyK5j2tEwOnfvyu8X9cTXZ2/ztSTY3nezq5/3XSru6uZgAAALj3pBGxPZJ0YiU9nE5M1H6Gf1dsTRcWl5YPHl/84Mxc7XcERmMoLd50jdS9D53KH+uL/HRT/nD+3vjLgeFqfmJ2cWGu7OChz227afyn1fGf+Wug7NYBd10P1tGAe1Td+E/KbAew/nz+Q/8y/qF/tRj/w2W0A1h/rT7/Py6hHcD6axr/lv2gj3j+h/5l/EP/qh//fgAA+sbScNz6l+RbJbZEN2fVEjcO/rm7q0olNk4i0ts/a2SjNL45kXQ5CjpNbC87wHZ/miO/DbQ4VPKNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEf+CwAA///x7OQx") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40106614, 0x0) 2.352827708s ago: executing program 3 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000300", @ANYRES32=r3, @ANYBLOB="0c0050800800070002"], 0x34}}, 0x0) 2.351799958s ago: executing program 1 (id=226): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0x0, 0x10000002000003, 0x0, 0x0, 0x700}) 2.265752685s ago: executing program 1 (id=228): syz_open_procfs(0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000c40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1}, [{0x3, 0x0, 0x10001, 0x0, 0x0, 0x800}]}, 0x78) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02000201100007006000000002000020d3"]) 2.229682358s ago: executing program 0 (id=229): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/110, 0x26}], 0x1, 0xfffffffc, 0x0) 2.173305553s ago: executing program 3 (id=230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x0, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r7, &(0x7f0000000880)="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", 0x23d, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000180)=""/179, 0x240, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.173196713s ago: executing program 0 (id=231): socket$packet(0x11, 0x2, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a00831300"/19], 0x20}}, 0x0) 2.024958775s ago: executing program 4 (id=232): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x541b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "195847a0aa45de6b85eae3efca1b99bbc529f7cf", "39e8599818f836f17fc62ac05f77a36d35695c8b"}) 2.024527115s ago: executing program 1 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 2.002314147s ago: executing program 0 (id=234): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x24}}, 0x0) 1.949284541s ago: executing program 4 (id=235): syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000103, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f0810000000e8c94ef56491ee54be0e1c2074ed27", 0x16) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) lgetxattr(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYRES16=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0xfffffffe, 0x4}, 0x8}, 0xfffffffffffffddf) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000500, 0xee00, &(0x7f0000000540)) 1.325271032s ago: executing program 3 (id=236): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="f42a7e72c3d4eba891629578b6a313bd67f64b198201cc353680dd91a6f4bf871a8b6bc16a049f1491a5f52b1cc1589ca310bf3e05db72403388440dc9d62df83637f9480e56e8285705be7477e2d74d981a3ddda12114ef7655e262a285fb831ba905765b3fd9822b28dc9cc25fd0", 0x6f}], 0x1}}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x404) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}], 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08010000", @ANYRES16=r7, @ANYBLOB="05000000450000000000000600070000000300", @ANYRES32=r8, @ANYBLOB="080005000c000000080005000900000005005300000000001c00e700af9c63e5a52435bed416ac96cac0a5dc4069b7c27b0fe09614001780040001000400020004000400040003001c00e7000c64c06d5b9afe9364ab56818174c962f4264724d7b571df0a00e800ffffffffffff00000a00e80008021100000000001c00e700f6cabdd2272d231c614a31a454e7372e68d5b134e0f7ac8820001780040001000400040004000100040005000400050004000500040005000a00e80008021100000100001c00e7007b6605cd55008c10a6ecfdeae7df4f4c69f4ce0f2715ca660a00e8000802110000000000"], 0x108}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r8, @ANYBLOB="11002a00dd0b6162636465666768696aff6d000010002d800a0000000202020202020000"], 0x40}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="7490e8b2f1b948675d4a0700be000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf257f00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900001000001d0000000a00f50050505050505000000a00340002020202020200000a00f50008021100000100000a003400010101010101000014005500790f797105ff193ad50b1b230198aebe060048002b000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r7, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7b29, 0x18}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x58}, 0x1, 0x0, 0x0, 0x24040040}, 0x40001) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r10, @ANYBLOB="04490280b812e58223ed2c179363926efd1afd19c86e628bebc9e86813ec188b1f312cf8b0f3fa935c21b8cf7628b18c57f02df3c9261aead4af0f70ac052c93451774"], 0x20}}, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="08002cbd7000fbdbdf2504000000ec44020003000000080002000700000030000680060005004e2100000800030000000000060005004e22000014000400fe8000000020000000000000000000aa080002000800000005000500810000000800020003000000"], 0x6c}}, 0x8180) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x0, 0x47}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r11, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x4041810) 1.307984233s ago: executing program 0 (id=237): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r1}}]}, 0x28}}, 0x0) 1.081269322s ago: executing program 1 (id=238): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000480)={[{@check_relaxed}, {@dmode={'dmode', 0x3d, 0x9}}, {@utf8}, {@block={'block', 0x3d, 0x800}}, {@hide}, {@map_acorn}, {@map_normal}, {@map_off}, {@cruft}, {@map_off}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x2, 0x9f8, &(0x7f0000002e80)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 1.080940852s ago: executing program 0 (id=239): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0x0, 0x10000002000003, 0x0, 0x0, 0x700}) 391.412708ms ago: executing program 3 (id=240): syz_emit_ethernet(0x36, &(0x7f0000003940)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "00e81e", 0x0, 0x0, 0x0, @local, @local}}}}, 0x0) 330.809463ms ago: executing program 4 (id=241): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x8, 0x4) 237.559011ms ago: executing program 3 (id=242): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x2000000, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001800e70200000000000000000a100000000300000000000014000100ff05"], 0x38}}, 0x0) close(r2) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, r7, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @void, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x40}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) socket$rds(0x15, 0x5, 0x0) 236.620861ms ago: executing program 0 (id=243): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) read$nci(r1, &(0x7f0000000200)=""/100, 0x64) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000000)={0x2, '\x00\x00'}, 0x3) write$nci(0xffffffffffffffff, 0x0, 0x0) read$nci(r1, &(0x7f00000002c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r1, &(0x7f0000000380)=""/100, 0x64) write$nci(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="41e52cf946c2cdc9"], 0x4) read$nci(r1, &(0x7f0000000500)=""/100, 0x64) write$nci(r1, &(0x7f0000000900)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, "e8fbfcb6a5a7a14fe890b6c0122bb5f14fc3a06475ed582b6c6ad220e326ce30ce5a1248d57426958ca4e8c8a99f59dc639978aa2b33d6d466480f4b061fd96c26324d6fab7f2d13d840daa294b52f53c4e93ab43d8cc839a7b444adaf7ef1150b9654652887dca3c60372a0641753bf78cf005939b522f2ee5e6657ca5ec014632b175c7e52348b2512ba3424"}}, 0x92) read$nci(0xffffffffffffffff, &(0x7f00000005c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r6 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f0000000280)=0x401, 0x4) r7 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg(r7, &(0x7f0000008240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) read$nci(r1, &(0x7f0000000680)=""/100, 0x64) write$nci(r1, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}]}, 0x2c}}, 0x0) syz_usbip_server_init(0x1) syz_socket_connect_nvme_tcp() 137.206349ms ago: executing program 4 (id=244): syz_open_procfs(0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02000201100007006000000002000020d3"]) 113.206611ms ago: executing program 1 (id=245): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b706000014000000b7030000000000008500000005000000bc690000000000003509010000000000950000000400000084060000000000007b9af8ff00000000b5090200000000007baaf0ff00000000bfa600000000000007080000f8ffffffbf6400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056040000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r2, r0}, 0xc) 0s ago: executing program 4 (id=246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x0, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r7, &(0x7f0000000880)="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", 0x23d, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000180)=""/179, 0x240, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. syzkaller login: [ 41.231119][ T4215] cgroup: Unknown subsys name 'net' [ 41.481948][ T4215] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.784532][ T4215] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 42.789654][ T4226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 42.792411][ T4226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 42.794920][ T4226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 42.798507][ T4226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 42.801114][ T4226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 42.803355][ T4226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 42.829689][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 42.832406][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 42.834763][ T4228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 42.838767][ T4228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 42.842183][ T4228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 42.850240][ T4233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 42.852564][ T4233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 42.855729][ T4233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 42.858520][ T4233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 42.869055][ T4226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 42.879304][ T4233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 42.881620][ T4233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 42.897542][ T4233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 42.907277][ T4233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 42.911134][ T4233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 42.917546][ T4226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 42.919545][ T4228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 42.920011][ T4226] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 42.922197][ T4228] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 42.923788][ T4226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 42.925716][ T4228] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 42.934458][ T4228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 42.936880][ T4228] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 42.938946][ T4228] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 43.100394][ T4225] chnl_net:caif_netlink_parms(): no params data found [ 43.199579][ T4231] chnl_net:caif_netlink_parms(): no params data found [ 43.202929][ T4238] chnl_net:caif_netlink_parms(): no params data found [ 43.223301][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.225381][ T4225] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.228780][ T4225] device bridge_slave_0 entered promiscuous mode [ 43.238092][ T4234] chnl_net:caif_netlink_parms(): no params data found [ 43.252655][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.254606][ T4225] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.257542][ T4225] device bridge_slave_1 entered promiscuous mode [ 43.310495][ T4225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.328262][ T4225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.335118][ T4231] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.337504][ T4231] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.339807][ T4231] device bridge_slave_0 entered promiscuous mode [ 43.370498][ T4231] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.372532][ T4231] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.375214][ T4231] device bridge_slave_1 entered promiscuous mode [ 43.384142][ T4229] chnl_net:caif_netlink_parms(): no params data found [ 43.389457][ T4225] team0: Port device team_slave_0 added [ 43.393548][ T4234] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.395391][ T4234] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.397976][ T4234] device bridge_slave_0 entered promiscuous mode [ 43.405636][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.407702][ T4238] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.410186][ T4238] device bridge_slave_0 entered promiscuous mode [ 43.415180][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.417399][ T4238] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.420004][ T4238] device bridge_slave_1 entered promiscuous mode [ 43.423214][ T4225] team0: Port device team_slave_1 added [ 43.424927][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.426940][ T4234] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.429437][ T4234] device bridge_slave_1 entered promiscuous mode [ 43.455103][ T4231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.480443][ T4225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.482323][ T4225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.490169][ T4225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.495933][ T4234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.499849][ T4231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.503438][ T4234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.509272][ T4238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.516726][ T4225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.518801][ T4225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.525465][ T4225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.540491][ T4238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.562586][ T4231] team0: Port device team_slave_0 added [ 43.569194][ T4229] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.571091][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.573656][ T4229] device bridge_slave_0 entered promiscuous mode [ 43.583957][ T4238] team0: Port device team_slave_0 added [ 43.588015][ T4238] team0: Port device team_slave_1 added [ 43.591304][ T4234] team0: Port device team_slave_0 added [ 43.600565][ T4231] team0: Port device team_slave_1 added [ 43.608544][ T4229] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.610497][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.613055][ T4229] device bridge_slave_1 entered promiscuous mode [ 43.615666][ T4238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.618210][ T4238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.625005][ T4238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.639190][ T4234] team0: Port device team_slave_1 added [ 43.654942][ T4238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.657101][ T4238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.663975][ T4238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.677158][ T4231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.678964][ T4231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.685953][ T4231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.699260][ T4229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.739088][ T4225] device hsr_slave_0 entered promiscuous mode [ 43.767501][ T4225] device hsr_slave_1 entered promiscuous mode [ 43.827641][ T4231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.829544][ T4231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.836393][ T4231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.841237][ T4229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.853805][ T4234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.855617][ T4234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.862724][ T4234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.871963][ T4234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.873838][ T4234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.880907][ T4234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.893116][ T4229] team0: Port device team_slave_0 added [ 43.896433][ T4229] team0: Port device team_slave_1 added [ 43.938707][ T4238] device hsr_slave_0 entered promiscuous mode [ 43.977516][ T4238] device hsr_slave_1 entered promiscuous mode [ 44.027089][ T4238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.029275][ T4238] Cannot create hsr debugfs directory [ 44.102391][ T4229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.104361][ T4229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.111588][ T4229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.158543][ T4231] device hsr_slave_0 entered promiscuous mode [ 44.207404][ T4231] device hsr_slave_1 entered promiscuous mode [ 44.246925][ T4231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.249000][ T4231] Cannot create hsr debugfs directory [ 44.298557][ T4234] device hsr_slave_0 entered promiscuous mode [ 44.367232][ T4234] device hsr_slave_1 entered promiscuous mode [ 44.416868][ T4234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.418989][ T4234] Cannot create hsr debugfs directory [ 44.420934][ T4229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.422752][ T4229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.429781][ T4229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.548614][ T4229] device hsr_slave_0 entered promiscuous mode [ 44.587109][ T4229] device hsr_slave_1 entered promiscuous mode [ 44.636896][ T4229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.639049][ T4229] Cannot create hsr debugfs directory [ 44.789941][ T4225] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.829862][ T4225] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.847758][ T4233] Bluetooth: hci0: command tx timeout [ 44.873779][ T4225] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.920865][ T4225] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.927177][ T4228] Bluetooth: hci2: command tx timeout [ 44.928751][ T4228] Bluetooth: hci1: command tx timeout [ 45.006009][ T4231] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.008187][ T4233] Bluetooth: hci4: command tx timeout [ 45.009840][ T4233] Bluetooth: hci3: command tx timeout [ 45.048270][ T4238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.089504][ T4238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.128611][ T4238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.179944][ T4238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.219734][ T4231] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.287363][ T4231] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.319576][ T4231] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.392167][ T4225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.415787][ T4234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.449694][ T4234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.515030][ T4234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.539775][ T4234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.568870][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.572176][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.576362][ T4229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 45.618901][ T4229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 45.659522][ T4225] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.661509][ T4229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.713053][ T4229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.781238][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.784300][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.787945][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.789907][ T4270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.792549][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.795098][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.798741][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.800609][ T4270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.802916][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.808929][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.840297][ T4238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.844108][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.847611][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.850440][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.853273][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.874472][ T4238] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.881963][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.885178][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.887954][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.890392][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.899704][ T4225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.902507][ T4225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.908607][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.911283][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.914470][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.917417][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.920603][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.930792][ T4234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.939131][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.941743][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.944204][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.946156][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.954735][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.958099][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.961040][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.962912][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.994557][ T4231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.003988][ T4231] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.008109][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.010559][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.013331][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.016061][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.024832][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.028242][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.030566][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.043920][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.046347][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.049093][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.051578][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.053929][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.056311][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.059211][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.061633][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.063560][ T4270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.066741][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.087570][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.090459][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.092813][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.094679][ T4270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.102192][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.104982][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.108524][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.111385][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.114313][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.118226][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.120794][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.123299][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.130191][ T4234] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.134334][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.137256][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.139689][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.142063][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.144623][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.147230][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.149180][ T4270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.151907][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.169976][ T4238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.173323][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.175890][ T4231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.180417][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.194977][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.198180][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.200669][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.203237][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.205753][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.209483][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.211926][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.213770][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.216006][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.235526][ T4229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.271041][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.274122][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.277047][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.279594][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.282349][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.284887][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.289208][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.291677][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.294212][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.302396][ T4225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.310692][ T4229] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.320477][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.325365][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.328234][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.330314][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.332399][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.335525][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.348919][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.351503][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.354041][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.355915][ T4270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.368013][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.370854][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.373273][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.375107][ T4270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.416330][ T4238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.419554][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.421924][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.424470][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.437340][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.440094][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.442804][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.444834][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.464666][ T4229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.468990][ T4229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.476045][ T4225] device veth0_vlan entered promiscuous mode [ 46.493009][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.495856][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.501235][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.504769][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.507708][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.510237][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.512922][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.515421][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.518435][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.520938][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.523505][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.526035][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.529044][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.531161][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.544332][ T4231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.547323][ T4225] device veth1_vlan entered promiscuous mode [ 46.552423][ T4234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.567270][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.569792][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.572178][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.574562][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.580468][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.583028][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.585121][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.616371][ T4238] device veth0_vlan entered promiscuous mode [ 46.625269][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.628834][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.631347][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.633929][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.636556][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.669478][ T4238] device veth1_vlan entered promiscuous mode [ 46.688239][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.690832][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.693243][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.695893][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.704300][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.708706][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.717037][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.719258][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.723979][ T4231] device veth0_vlan entered promiscuous mode [ 46.727610][ T4229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.730085][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.732633][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.740636][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.743046][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.746123][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.751142][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.757201][ T4225] device veth0_macvtap entered promiscuous mode [ 46.766541][ T4231] device veth1_vlan entered promiscuous mode [ 46.773164][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.775624][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.778958][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.781790][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.784304][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.791666][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.794270][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.796695][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.801203][ T4238] device veth0_macvtap entered promiscuous mode [ 46.805725][ T4225] device veth1_macvtap entered promiscuous mode [ 46.810396][ T4234] device veth0_vlan entered promiscuous mode [ 46.824569][ T4238] device veth1_macvtap entered promiscuous mode [ 46.836108][ T4234] device veth1_vlan entered promiscuous mode [ 46.843874][ T4225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.847619][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.850284][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.852791][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.855274][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.864643][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.867196][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.870713][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.882110][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.885004][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.892706][ T4238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.900403][ T4225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.904382][ T4225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.912228][ T4225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.914508][ T4225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.916746][ T4225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.922335][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.924926][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.927395][ T4228] Bluetooth: hci0: command tx timeout [ 46.929992][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.932602][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.935190][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.938016][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.940602][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.944805][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.949174][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.952782][ T4238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.975203][ T4231] device veth0_macvtap entered promiscuous mode [ 46.985896][ T4234] device veth0_macvtap entered promiscuous mode [ 46.994325][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.997284][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.999885][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.002907][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.005807][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.008387][ T4233] Bluetooth: hci1: command tx timeout [ 47.009825][ T4233] Bluetooth: hci2: command tx timeout [ 47.015608][ T4238] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.018351][ T4238] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.020607][ T4238] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.022924][ T4238] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.038452][ T4231] device veth1_macvtap entered promiscuous mode [ 47.046237][ T4234] device veth1_macvtap entered promiscuous mode [ 47.055359][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.061505][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.063915][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.087105][ T4228] Bluetooth: hci3: command tx timeout [ 47.088539][ T4228] Bluetooth: hci4: command tx timeout [ 47.102403][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.105358][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.108962][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.111783][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.115573][ T4234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.131124][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.133947][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.136553][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.142792][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.145508][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.148710][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.152434][ T4231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.154525][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.157514][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.160057][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.162575][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.165223][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.169033][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.175758][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.180633][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.183296][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.186012][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.191206][ T4234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.195793][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.198852][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.201410][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.204151][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.207144][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.209816][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.213465][ T4231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.222446][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.225152][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.228770][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.234824][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.241279][ T4234] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.243632][ T4234] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.245928][ T4234] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.250471][ T4234] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.257131][ T4231] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.259515][ T4231] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.261822][ T4231] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.264144][ T4231] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.277524][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.279856][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.287420][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.290055][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.292702][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.295784][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.298980][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.301449][ T4229] device veth0_vlan entered promiscuous mode [ 47.345934][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.349501][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.357387][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.359844][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.368236][ T4229] device veth1_vlan entered promiscuous mode [ 47.384284][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.386707][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.414299][ T4229] device veth0_macvtap entered promiscuous mode [ 47.427781][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.430405][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.447683][ T1593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.449824][ T1593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.452592][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.459941][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.475203][ T1593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.479125][ T4229] device veth1_macvtap entered promiscuous mode [ 47.505534][ T1593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.513905][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.516429][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.538253][ T1593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.540483][ T1593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.557509][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.560765][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.565681][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.572672][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.575280][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.587050][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.589645][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.592522][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.607838][ T4229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.614378][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.621911][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.626367][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.630158][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.632930][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.635715][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.638742][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.641446][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.645406][ T4229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.763249][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.767657][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.772311][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.781995][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.789713][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.869729][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.886160][ T4229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.891002][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.899849][ T4229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.905573][ T4229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.913376][ T4229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.931452][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.945504][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.948111][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.957844][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.299752][ T4308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.302028][ T4308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.305422][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.354426][ T4315] loop0: detected capacity change from 0 to 16 [ 48.394276][ T4315] erofs: (device loop0): mounted with root inode @ nid 36. [ 48.411079][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.413504][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.427353][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.007874][ T4233] Bluetooth: hci0: command tx timeout [ 49.087338][ T4228] Bluetooth: hci1: command tx timeout [ 49.090452][ T4233] Bluetooth: hci2: command tx timeout [ 49.167624][ T4226] Bluetooth: hci4: command tx timeout [ 49.167828][ T4233] Bluetooth: hci3: command tx timeout [ 49.561313][ T4331] loop1: detected capacity change from 0 to 512 [ 49.563462][ T4331] EXT4-fs: Ignoring removed oldalloc option [ 49.587957][ T4331] EXT4-fs: Ignoring removed oldalloc option [ 49.679228][ T4331] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.795811][ T4331] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.247575][ T4331] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.10: invalid indirect mapped block 83886080 (level 1) [ 50.268083][ T4331] EXT4-fs (loop1): Remounting filesystem read-only [ 50.270436][ T4331] EXT4-fs (loop1): 1 orphan inode deleted [ 50.297352][ T4331] EXT4-fs (loop1): 1 truncate cleaned up [ 50.298929][ T4331] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 50.442782][ T4225] EXT4-fs (loop1): unmounting filesystem. [ 51.087558][ T4226] Bluetooth: hci0: command tx timeout [ 51.167963][ T4226] Bluetooth: hci2: command tx timeout [ 51.168004][ T4233] Bluetooth: hci1: command tx timeout [ 51.247939][ T4226] Bluetooth: hci4: command tx timeout [ 51.250036][ T4233] Bluetooth: hci3: command tx timeout [ 53.347597][ T4384] loop3: detected capacity change from 0 to 512 [ 53.349691][ T4384] EXT4-fs: Ignoring removed oldalloc option [ 53.351182][ T4384] EXT4-fs: Ignoring removed oldalloc option [ 53.373537][ T4384] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.650613][ T4384] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.26: invalid indirect mapped block 83886080 (level 1) [ 53.655279][ T4384] EXT4-fs (loop3): Remounting filesystem read-only [ 53.665710][ T4384] EXT4-fs (loop3): 1 orphan inode deleted [ 53.675595][ T4384] EXT4-fs (loop3): 1 truncate cleaned up [ 53.717221][ T4384] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.839703][ T4238] EXT4-fs (loop3): unmounting filesystem. [ 56.497290][ T4444] loop2: detected capacity change from 0 to 16 [ 56.511350][ T4444] erofs: (device loop2): mounted with root inode @ nid 36. [ 57.369982][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 57.411999][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.416938][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.186866][ T4458] Zero length message leads to an empty skb [ 58.875745][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 60.449053][ T4518] loop2: detected capacity change from 0 to 16 [ 60.483554][ T4518] erofs: (device loop2): mounted with root inode @ nid 36. [ 60.841748][ T27] audit: type=1326 audit(60.790:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.1.80" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b41e28 code=0x7ffc0000 [ 60.850508][ T27] audit: type=1326 audit(60.800:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.1.80" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa4b41e28 code=0x7ffc0000 [ 60.882368][ T27] audit: type=1326 audit(60.800:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.1.80" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b41e28 code=0x7ffc0000 [ 60.993808][ T27] audit: type=1326 audit(60.800:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.1.80" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffa4b41e28 code=0x7ffc0000 [ 61.024065][ T27] audit: type=1326 audit(60.800:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.1.80" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b41e28 code=0x7ffc0000 [ 61.710915][ T4541] loop1: detected capacity change from 0 to 1024 [ 61.739240][ T4541] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.783058][ T4541] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 61.808075][ T4541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.83'. [ 61.885635][ T4225] EXT4-fs (loop1): unmounting filesystem. [ 62.078345][ T4556] loop1: detected capacity change from 0 to 512 [ 62.080555][ T4556] EXT4-fs: Ignoring removed oldalloc option [ 62.082181][ T4556] EXT4-fs: Ignoring removed oldalloc option [ 62.135734][ T4556] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.163629][ T4556] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.87: invalid indirect mapped block 83886080 (level 1) [ 62.167887][ T4556] EXT4-fs (loop1): Remounting filesystem read-only [ 62.169863][ T4556] EXT4-fs (loop1): 1 orphan inode deleted [ 62.171365][ T4556] EXT4-fs (loop1): 1 truncate cleaned up [ 62.172915][ T4556] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 62.198006][ T4555] loop4: detected capacity change from 0 to 8192 [ 62.200338][ T4555] ======================================================= [ 62.200338][ T4555] WARNING: The mand mount option has been deprecated and [ 62.200338][ T4555] and is ignored by this kernel. Remove the mand [ 62.200338][ T4555] option from the mount to silence this warning. [ 62.200338][ T4555] ======================================================= [ 62.299132][ T4225] EXT4-fs (loop1): unmounting filesystem. [ 63.515175][ T4587] loop3: detected capacity change from 0 to 512 [ 63.519481][ T4587] EXT4-fs: Ignoring removed oldalloc option [ 63.521055][ T4587] EXT4-fs: Ignoring removed oldalloc option [ 63.538650][ T4587] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.702202][ T4587] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.101: invalid indirect mapped block 83886080 (level 1) [ 63.706385][ T4587] EXT4-fs (loop3): Remounting filesystem read-only [ 63.710742][ T4587] EXT4-fs (loop3): 1 orphan inode deleted [ 63.718714][ T4587] EXT4-fs (loop3): 1 truncate cleaned up [ 63.726647][ T4587] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 63.866508][ T4238] EXT4-fs (loop3): unmounting filesystem. [ 63.909530][ T4603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 65.187948][ T2050] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.189849][ T2050] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.456697][ T4631] process 'syz.4.115' launched './file1' with NULL argv: empty string added [ 65.525351][ T4633] loop1: detected capacity change from 0 to 512 [ 65.534180][ T4633] EXT4-fs: Ignoring removed oldalloc option [ 65.543764][ T4637] loop0: detected capacity change from 0 to 16 [ 65.556261][ T4633] EXT4-fs: Ignoring removed oldalloc option [ 65.556733][ T4633] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.563949][ T4637] erofs: (device loop0): mounted with root inode @ nid 36. [ 65.574633][ T4633] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.118: invalid indirect mapped block 83886080 (level 1) [ 65.574986][ T4633] EXT4-fs (loop1): Remounting filesystem read-only [ 65.575653][ T4633] EXT4-fs (loop1): 1 orphan inode deleted [ 65.575671][ T4633] EXT4-fs (loop1): 1 truncate cleaned up [ 65.575694][ T4633] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 65.764928][ T4225] EXT4-fs (loop1): unmounting filesystem. [ 66.605087][ T4647] sched: RT throttling activated [ 67.880065][ T4674] loop4: detected capacity change from 0 to 512 [ 67.882298][ T4674] EXT4-fs: Ignoring removed oldalloc option [ 67.883855][ T4674] EXT4-fs: Ignoring removed oldalloc option [ 67.926630][ T4674] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.022287][ T4674] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.133: invalid indirect mapped block 83886080 (level 1) [ 68.026442][ T4674] EXT4-fs (loop4): Remounting filesystem read-only [ 68.033002][ T4674] EXT4-fs (loop4): 1 orphan inode deleted [ 68.034589][ T4674] EXT4-fs (loop4): 1 truncate cleaned up [ 68.036145][ T4674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 68.340224][ T4229] EXT4-fs (loop4): unmounting filesystem. [ 69.245105][ T4704] loop1: detected capacity change from 0 to 512 [ 69.473363][ T4704] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 69.660301][ T1509] cfg80211: failed to load regulatory.db [ 69.995059][ T4225] EXT4-fs (loop1): unmounting filesystem. [ 70.102003][ T27] audit: type=1326 audit(70.050:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98541e28 code=0x7fc00000 [ 70.113642][ T27] audit: type=1326 audit(70.050:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff98541e28 code=0x7fc00000 [ 70.151798][ T27] audit: type=1326 audit(70.050:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98541e28 code=0x7fc00000 [ 70.186885][ T27] audit: type=1326 audit(70.050:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98541e28 code=0x7fc00000 [ 70.193047][ T27] audit: type=1326 audit(70.050:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98541e28 code=0x7fc00000 [ 70.236918][ T27] audit: type=1326 audit(70.050:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98541e28 code=0x7fc00000 [ 70.242668][ T27] audit: type=1326 audit(70.050:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98541e28 code=0x7fc00000 [ 70.286509][ T27] audit: type=1326 audit(70.050:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98541e28 code=0x7fc00000 [ 70.335737][ T4728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 70.353998][ T27] audit: type=1326 audit(70.050:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98541e28 code=0x7fc00000 [ 70.398544][ T27] audit: type=1326 audit(70.050:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98541e28 code=0x7fc00000 [ 70.437291][ T4730] loop3: detected capacity change from 0 to 512 [ 70.439402][ T4730] EXT4-fs: Ignoring removed oldalloc option [ 70.440955][ T4730] EXT4-fs: Ignoring removed oldalloc option [ 70.443422][ T4730] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.143824][ T4730] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.148: invalid indirect mapped block 83886080 (level 1) [ 71.168108][ T4730] EXT4-fs (loop3): Remounting filesystem read-only [ 71.170104][ T4730] EXT4-fs (loop3): 1 orphan inode deleted [ 71.206858][ T4730] EXT4-fs (loop3): 1 truncate cleaned up [ 71.208458][ T4730] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 71.484076][ T4238] EXT4-fs (loop3): unmounting filesystem. [ 72.321425][ T4760] loop1: detected capacity change from 0 to 16 [ 72.352825][ T4760] erofs: (device loop1): mounted with root inode @ nid 36. [ 72.629803][ T4775] loop0: detected capacity change from 0 to 512 [ 72.631939][ T4775] EXT4-fs: Ignoring removed oldalloc option [ 72.633549][ T4775] EXT4-fs: Ignoring removed oldalloc option [ 72.637208][ T4775] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.452639][ T4775] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.164: invalid indirect mapped block 83886080 (level 1) [ 73.458444][ T4775] EXT4-fs (loop0): Remounting filesystem read-only [ 73.460625][ T4775] EXT4-fs (loop0): 1 orphan inode deleted [ 73.467320][ T4775] EXT4-fs (loop0): 1 truncate cleaned up [ 73.469599][ T4775] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 73.521377][ T4234] EXT4-fs (loop0): unmounting filesystem. [ 74.575650][ T4811] loop2: detected capacity change from 0 to 16 [ 74.604857][ T4811] erofs: (device loop2): mounted with root inode @ nid 36. [ 74.795281][ T4818] loop2: detected capacity change from 0 to 512 [ 74.797418][ T4818] EXT4-fs: Ignoring removed oldalloc option [ 74.799622][ T4818] EXT4-fs: Ignoring removed oldalloc option [ 74.801629][ T4818] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.339332][ T4818] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.178: invalid indirect mapped block 83886080 (level 1) [ 75.488874][ T4818] EXT4-fs (loop2): Remounting filesystem read-only [ 75.491031][ T4818] EXT4-fs (loop2): 1 orphan inode deleted [ 75.517207][ T4818] EXT4-fs (loop2): 1 truncate cleaned up [ 75.518825][ T4818] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.565102][ T4823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.581063][ T4824] input: syz1 as /devices/virtual/input/input2 [ 75.597461][ T4823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.651098][ T4231] EXT4-fs (loop2): unmounting filesystem. [ 75.901428][ T4836] loop1: detected capacity change from 0 to 512 [ 76.054643][ T4836] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 76.216066][ T4225] EXT4-fs (loop1): unmounting filesystem. [ 76.410277][ T4848] loop3: detected capacity change from 0 to 16 [ 76.413592][ T4848] erofs: (device loop3): mounted with root inode @ nid 36. [ 76.432605][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 76.432617][ T27] audit: type=1326 audit(76.380:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b41e28 code=0x7fc00000 [ 76.456553][ T27] audit: type=1326 audit(76.380:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa9b41e28 code=0x7fc00000 [ 76.487679][ T27] audit: type=1326 audit(76.380:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b41e28 code=0x7fc00000 [ 76.512543][ T27] audit: type=1326 audit(76.380:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b41e28 code=0x7fc00000 [ 76.538749][ T27] audit: type=1326 audit(76.380:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b41e28 code=0x7fc00000 [ 76.560062][ T27] audit: type=1326 audit(76.380:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b41e28 code=0x7fc00000 [ 76.684984][ T27] audit: type=1326 audit(76.390:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b41e28 code=0x7fc00000 [ 76.690590][ T4861] loop3: detected capacity change from 0 to 512 [ 76.699377][ T4861] EXT4-fs: Ignoring removed oldalloc option [ 76.701002][ T4861] EXT4-fs: Ignoring removed oldalloc option [ 76.829255][ T27] audit: type=1326 audit(76.390:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b41e28 code=0x7fc00000 [ 76.910691][ T27] audit: type=1326 audit(76.390:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b41e28 code=0x7fc00000 [ 76.992029][ T27] audit: type=1326 audit(76.390:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b41e28 code=0x7fc00000 [ 77.371727][ T4863] input: syz1 as /devices/virtual/input/input3 [ 77.450551][ T4861] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.513340][ T4861] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.193: invalid indirect mapped block 83886080 (level 1) [ 77.517536][ T4861] EXT4-fs (loop3): Remounting filesystem read-only [ 77.519453][ T4861] EXT4-fs (loop3): 1 orphan inode deleted [ 77.520973][ T4861] EXT4-fs (loop3): 1 truncate cleaned up [ 77.522455][ T4861] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 77.659581][ T4238] EXT4-fs (loop3): unmounting filesystem. [ 77.675304][ T4878] loop2: detected capacity change from 0 to 128 [ 77.758203][ T4883] loop4: detected capacity change from 0 to 16 [ 77.784105][ T4883] erofs: (device loop4): mounted with root inode @ nid 36. [ 79.991472][ T4918] loop4: detected capacity change from 0 to 512 [ 80.000575][ T4918] EXT4-fs: Ignoring removed oldalloc option [ 80.002311][ T4920] input: syz1 as /devices/virtual/input/input4 [ 80.010474][ T4918] EXT4-fs: Ignoring removed oldalloc option [ 80.023082][ T4918] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.040953][ T4918] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.209: invalid indirect mapped block 83886080 (level 1) [ 80.052927][ T4918] EXT4-fs (loop4): Remounting filesystem read-only [ 80.060056][ T4918] EXT4-fs (loop4): 1 orphan inode deleted [ 80.064139][ T4918] EXT4-fs (loop4): 1 truncate cleaned up [ 80.067190][ T4918] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 80.134974][ T4229] EXT4-fs (loop4): unmounting filesystem. [ 80.203911][ T4929] loop4: detected capacity change from 0 to 16 [ 80.212319][ T4929] erofs: (device loop4): mounted with root inode @ nid 36. [ 81.614740][ T4951] loop0: detected capacity change from 0 to 1764 [ 81.646587][ T4955] loop4: detected capacity change from 0 to 512 [ 81.675811][ T4955] EXT4-fs: Ignoring removed oldalloc option [ 81.677550][ T4955] EXT4-fs: Ignoring removed oldalloc option [ 81.696936][ T4955] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.719716][ T4957] loop1: detected capacity change from 0 to 16 [ 81.722613][ T4957] erofs: (device loop1): mounted with root inode @ nid 36. [ 81.733546][ T4959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 81.746309][ T4955] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.224: invalid indirect mapped block 83886080 (level 1) [ 81.767880][ T4955] EXT4-fs (loop4): Remounting filesystem read-only [ 81.769974][ T4955] EXT4-fs (loop4): 1 orphan inode deleted [ 81.771546][ T4955] EXT4-fs (loop4): 1 truncate cleaned up [ 81.773138][ T4955] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.848118][ T4969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 81.891278][ T4229] EXT4-fs (loop4): unmounting filesystem. [ 82.754048][ T4985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.840131][ T4985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 83.584255][ T4991] loop0: detected capacity change from 0 to 16 [ 83.587013][ T4991] erofs: (device loop0): mounted with root inode @ nid 36. [ 83.675661][ T4993] loop1: detected capacity change from 0 to 1764 [ 83.904909][ T5001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 84.078556][ T5001] ------------[ cut here ]------------ [ 84.080364][ T5001] WARNING: CPU: 0 PID: 5001 at kernel/softirq.c:376 __local_bh_enable_ip+0x28c/0x470 [ 84.083105][ T5001] Modules linked in: [ 84.084139][ T5001] CPU: 0 PID: 5001 Comm: syz.3.242 Not tainted 6.1.97-syzkaller #0 [ 84.086328][ T5001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 84.089170][ T5001] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 84.091353][ T5001] pc : __local_bh_enable_ip+0x28c/0x470 [ 84.092923][ T5001] lr : local_bh_enable+0x28/0x34 [ 84.094373][ T5001] sp : ffff80001e326d40 [ 84.095600][ T5001] x29: ffff80001e326d50 x28: ffff0000cbf371b0 x27: ffff0000d50ba800 [ 84.097931][ T5001] x26: dfff800000000000 x25: ffff8000157c8280 x24: 0000000000000000 [ 84.100222][ T5001] x23: 1fffe0001acef379 x22: dfff800000000000 x21: ffff8000104563f4 [ 84.102530][ T5001] x20: 0000000000000200 x19: ffff0000d6779bc8 x18: ffff80001e3265a0 [ 84.104763][ T5001] x17: ffff8000188f0000 x16: ffff8000081c6e98 x15: ffff800008a8d004 [ 84.106979][ T5001] x14: ffff8000103cd090 x13: ffff80001216af8c x12: 0000000000040000 [ 84.109193][ T5001] x11: 0000000000036c83 x10: ffff800022a19000 x9 : 0000000000000000 [ 84.111504][ T5001] x8 : 0000000100000201 x7 : ffff800008061c64 x6 : ffff800008061e74 [ 84.113734][ T5001] x5 : ffff0000d8d85298 x4 : ffff80001e326a40 x3 : ffff80000831ee7c [ 84.115933][ T5001] x2 : 0000000000000001 x1 : 0000000000000200 x0 : ffff8000104563f4 [ 84.118140][ T5001] Call trace: [ 84.119045][ T5001] __local_bh_enable_ip+0x28c/0x470 [ 84.120495][ T5001] local_bh_enable+0x28/0x34 [ 84.121783][ T5001] __dev_queue_xmit+0x1a68/0x38d8 [ 84.123181][ T5001] __netlink_deliver_tap+0x464/0x6e4 [ 84.124670][ T5001] netlink_deliver_tap+0x1ac/0x1b0 [ 84.126212][ T5001] netlink_broadcast+0x9bc/0xff4 [ 84.127558][ T5001] genlmsg_multicast_netns+0xa8/0xf0 [ 84.129090][ T5001] nl80211_frame_tx_status+0x7c8/0xe54 [ 84.130606][ T5001] cfg80211_mgmt_tx_status_ext+0x38/0x4c [ 84.132197][ T5001] ieee80211_report_used_skb+0x1258/0x17b4 [ 84.133813][ T5001] ieee80211_free_txskb+0x30/0x4c [ 84.135201][ T5001] ieee80211_do_stop+0xe88/0x1994 [ 84.136604][ T5001] ieee80211_if_change_type+0x478/0xcf4 [ 84.138109][ T5001] ieee80211_change_iface+0x6c/0x418 [ 84.139613][ T5001] cfg80211_change_iface+0x758/0x100c [ 84.141121][ T5001] __cfg80211_wext_siwmode+0x184/0x240 [ 84.142690][ T5001] ioctl_standard_call+0xe8/0x264 [ 84.144101][ T5001] wext_ioctl_dispatch+0x16c/0x3ec [ 84.145583][ T5001] wext_handle_ioctl+0x1f8/0x3f4 [ 84.146949][ T5001] sock_ioctl+0x140/0x858 [ 84.148177][ T5001] __arm64_sys_ioctl+0x14c/0x1c8 [ 84.149567][ T5001] invoke_syscall+0x98/0x2c0 [ 84.150877][ T5001] el0_svc_common+0x138/0x258 [ 84.152159][ T5001] do_el0_svc+0x64/0x218 [ 84.153343][ T5001] el0_svc+0x58/0x168 [ 84.154473][ T5001] el0t_64_sync_handler+0x84/0xf0 [ 84.155889][ T5001] el0t_64_sync+0x18c/0x190 [ 84.157141][ T5001] irq event stamp: 2727 [ 84.158429][ T5001] hardirqs last enabled at (2725): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 84.161400][ T5001] hardirqs last disabled at (2726): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 84.164080][ T5001] softirqs last enabled at (2680): [] ieee80211_do_stop+0x504/0x1994 [ 84.166790][ T5001] softirqs last disabled at (2727): [] local_bh_disable+0x10/0x34 [ 84.169402][ T5001] ---[ end trace 0000000000000000 ]--- [ 84.170931][ T5001] [ 84.171560][ T5001] ================================ [ 84.172979][ T5001] WARNING: inconsistent lock state [ 84.174454][ T5001] 6.1.97-syzkaller #0 Tainted: G W [ 84.176198][ T5001] -------------------------------- [ 84.177571][ T5001] inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage. [ 84.179454][ T5001] syz.3.242/5001 [HC0[0]:SC0[0]:HE0:SE1] takes: [ 84.181130][ T5001] ffff0000cbb794f8 (&local->queue_stop_reason_lock){+.?.}-{2:2}, at: ieee80211_do_stop+0xcf0/0x1994 [ 84.184118][ T5001] {IN-SOFTIRQ-W} state was registered at: [ 84.185713][ T5001] lock_acquire+0x26c/0x7cc [ 84.186979][ T5001] _raw_spin_lock_irqsave+0x6c/0xb4 [ 84.188460][ T5001] ieee80211_tx_frags+0x138/0x700 [ 84.189883][ T5001] __ieee80211_tx+0x1b0/0x40c [ 84.191236][ T5001] ieee80211_tx+0x2c4/0x400 [ 84.192499][ T5001] ieee80211_xmit+0x278/0x354 [ 84.193902][ T5001] __ieee80211_subif_start_xmit+0xc84/0x2af4 [ 84.195641][ T5001] ieee80211_subif_start_xmit+0xe0/0x438 [ 84.197280][ T5001] dev_hard_start_xmit+0x25c/0x9a4 [ 84.198757][ T5001] sch_direct_xmit+0x234/0x548 [ 84.200086][ T5001] __dev_queue_xmit+0x1658/0x38d8 [ 84.201556][ T5001] ip6_finish_output2+0xd8c/0x1aa8 [ 84.203020][ T5001] ip6_finish_output+0x5a4/0x940 [ 84.204449][ T5001] ip6_output+0x274/0x594 [ 84.205677][ T5001] ndisc_send_skb+0xc38/0x179c [ 84.206998][ T5001] ndisc_send_rs+0x47c/0x5d4 [ 84.208355][ T5001] addrconf_rs_timer+0x300/0x58c [ 84.209763][ T5001] call_timer_fn+0x1c0/0xa1c [ 84.211111][ T5001] __run_timers+0x554/0x718 [ 84.212427][ T5001] run_timer_softirq+0x7c/0x114 [ 84.213853][ T5001] handle_softirqs+0x318/0xd58 [ 84.215207][ T5001] __do_softirq+0x14/0x20 [ 84.216395][ T5001] ____do_softirq+0x14/0x20 [ 84.217784][ T5001] call_on_irq_stack+0x24/0x4c [ 84.219095][ T5001] do_softirq_own_stack+0x20/0x2c [ 84.220534][ T5001] __irq_exit_rcu+0x264/0x4d4 [ 84.221864][ T5001] irq_exit_rcu+0x14/0x84 [ 84.223143][ T5001] el1_interrupt+0x38/0x68 [ 84.224437][ T5001] el1h_64_irq_handler+0x18/0x24 [ 84.225867][ T5001] el1h_64_irq+0x64/0x68 [ 84.227062][ T5001] finish_lock_switch+0xc4/0x1e8 [ 84.228511][ T5001] finish_task_switch+0x120/0x624 [ 84.229945][ T5001] __schedule+0xee8/0x1c98 [ 84.231239][ T5001] preempt_schedule_notrace+0xc4/0x1a8 [ 84.232771][ T5001] rcu_is_watching+0x10c/0x18c [ 84.234159][ T5001] lock_release+0x108/0xa50 [ 84.235507][ T5001] __might_fault+0xf0/0x124 [ 84.236778][ T5001] ____sys_recvmsg+0x408/0x69c [ 84.238095][ T5001] do_recvmmsg+0x41c/0xb60 [ 84.239413][ T5001] __arm64_sys_recvmmsg+0x180/0x23c [ 84.240970][ T5001] invoke_syscall+0x98/0x2c0 [ 84.242322][ T5001] el0_svc_common+0x138/0x258 [ 84.243728][ T5001] do_el0_svc+0x64/0x218 [ 84.244952][ T5001] el0_svc+0x58/0x168 [ 84.246141][ T5001] el0t_64_sync_handler+0x84/0xf0 [ 84.247592][ T5001] el0t_64_sync+0x18c/0x190 [ 84.248880][ T5001] irq event stamp: 2728 [ 84.250145][ T5001] hardirqs last enabled at (2725): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 84.253187][ T5001] hardirqs last disabled at (2726): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 84.256123][ T5001] softirqs last enabled at (2728): [] local_bh_enable+0x10/0x34 [ 84.258803][ T5001] softirqs last disabled at (2727): [] local_bh_disable+0x10/0x34 [ 84.261527][ T5001] [ 84.261527][ T5001] other info that might help us debug this: [ 84.263829][ T5001] Possible unsafe locking scenario: [ 84.263829][ T5001] [ 84.265994][ T5001] CPU0 [ 84.266908][ T5001] ---- [ 84.267828][ T5001] lock(&local->queue_stop_reason_lock); [ 84.269505][ T5001] [ 84.270460][ T5001] lock(&local->queue_stop_reason_lock); [ 84.272186][ T5001] [ 84.272186][ T5001] *** DEADLOCK *** [ 84.272186][ T5001] [ 84.274595][ T5001] 5 locks held by syz.3.242/5001: [ 84.276051][ T5001] #0: ffff800017e420c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 84.278619][ T5001] #1: ffff0000cbb787c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: __cfg80211_wext_siwmode+0x170/0x240 [ 84.281626][ T5001] #2: ffff0000cbb794f8 (&local->queue_stop_reason_lock){+.?.}-{2:2}, at: ieee80211_do_stop+0xcf0/0x1994 [ 84.284793][ T5001] #3: ffff800015a34ce0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 84.287528][ T5001] #4: ffff800015a34ce0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 84.290237][ T5001] [ 84.290237][ T5001] stack backtrace: [ 84.291904][ T5001] CPU: 0 PID: 5001 Comm: syz.3.242 Tainted: G W 6.1.97-syzkaller #0 [ 84.294608][ T5001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 84.297474][ T5001] Call trace: [ 84.298426][ T5001] dump_backtrace+0x1c8/0x1f4 [ 84.299799][ T5001] show_stack+0x2c/0x3c [ 84.300946][ T5001] dump_stack_lvl+0x108/0x170 [ 84.302302][ T5001] dump_stack+0x1c/0x5c [ 84.303523][ T5001] print_usage_bug+0x654/0x9b0 [ 84.304883][ T5001] mark_lock_irq+0x980/0xd2c [ 84.306194][ T5001] mark_lock+0x258/0x360 [ 84.307412][ T5001] lockdep_hardirqs_on_prepare+0x3e8/0x874 [ 84.309074][ T5001] trace_hardirqs_on+0x184/0x2d4 [ 84.310488][ T5001] __local_bh_enable_ip+0x230/0x470 [ 84.311962][ T5001] local_bh_enable+0x28/0x34 [ 84.313304][ T5001] __dev_queue_xmit+0x1a68/0x38d8 [ 84.314786][ T5001] __netlink_deliver_tap+0x464/0x6e4 [ 84.316256][ T5001] netlink_deliver_tap+0x1ac/0x1b0 [ 84.317700][ T5001] netlink_broadcast+0x9bc/0xff4 [ 84.319122][ T5001] genlmsg_multicast_netns+0xa8/0xf0 [ 84.320621][ T5001] nl80211_frame_tx_status+0x7c8/0xe54 [ 84.322132][ T5001] cfg80211_mgmt_tx_status_ext+0x38/0x4c [ 84.323779][ T5001] ieee80211_report_used_skb+0x1258/0x17b4 [ 84.325488][ T5001] ieee80211_free_txskb+0x30/0x4c [ 84.326937][ T5001] ieee80211_do_stop+0xe88/0x1994 [ 84.328376][ T5001] ieee80211_if_change_type+0x478/0xcf4 [ 84.329930][ T5001] ieee80211_change_iface+0x6c/0x418 [ 84.331434][ T5001] cfg80211_change_iface+0x758/0x100c [ 84.332922][ T5001] __cfg80211_wext_siwmode+0x184/0x240 [ 84.334429][ T5001] ioctl_standard_call+0xe8/0x264 [ 84.335940][ T5001] wext_ioctl_dispatch+0x16c/0x3ec [ 84.337435][ T5001] wext_handle_ioctl+0x1f8/0x3f4 [ 84.338831][ T5001] sock_ioctl+0x140/0x858 [ 84.340311][ T5001] __arm64_sys_ioctl+0x14c/0x1c8 [ 84.341738][ T5001] invoke_syscall+0x98/0x2c0 [ 84.343073][ T5001] el0_svc_common+0x138/0x258 [ 84.344449][ T5001] do_el0_svc+0x64/0x218 [ 84.345666][ T5001] el0_svc+0x58/0x168 [ 84.346764][ T5001] el0t_64_sync_handler+0x84/0xf0 [ 84.348185][ T5001] el0t_64_sync+0x18c/0x190 [ 84.350083][ T5001] ------------[ cut here ]------------ [ 84.351507][ T5001] raw_local_irq_restore() called with IRQs enabled [ 84.353285][ T5001] WARNING: CPU: 0 PID: 5001 at kernel/locking/irqflag-debug.c:10 warn_bogus_irq_restore+0x38/0x40 [ 84.356225][ T5001] Modules linked in: [ 84.357220][ T5001] CPU: 0 PID: 5001 Comm: syz.3.242 Tainted: G W 6.1.97-syzkaller #0 [ 84.359760][ T5001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 84.362574][ T5001] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 84.364674][ T5001] pc : warn_bogus_irq_restore+0x38/0x40 [ 84.366219][ T5001] lr : warn_bogus_irq_restore+0x38/0x40 [ 84.367784][ T5001] sp : ffff80001e327590 [ 84.368909][ T5001] x29: ffff80001e327590 x28: ffff0000cbb7a060 x27: dfff800000000000 [ 84.371084][ T5001] x26: 0000000000000058 x25: 000000000000000f x24: 0000000000000010 [ 84.373265][ T5001] x23: ffff0000ee23e798 x22: 000000000000000f x21: 000000000000000f [ 84.375474][ T5001] x20: ffff0000cbb794e0 x19: 0000000000000000 x18: ffff80001e3265a0 [ 84.377891][ T5001] x17: 0000000000000000 x16: ffff8000120bd140 x15: 0000000000000002 [ 84.380140][ T5001] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000040000 [ 84.382340][ T5001] x11: 000000000003ffff x10: ffff800022a19000 x9 : f31f60c5ac5c4000 [ 84.384506][ T5001] x8 : f31f60c5ac5c4000 x7 : 0000000000000001 x6 : 0000000000000001 [ 84.386750][ T5001] x5 : ffff80001e326e78 x4 : ffff800015942b20 x3 : ffff80000834ee14 [ 84.388940][ T5001] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 [ 84.391181][ T5001] Call trace: [ 84.392044][ T5001] warn_bogus_irq_restore+0x38/0x40 [ 84.393449][ T5001] _raw_spin_unlock_irqrestore+0xa0/0xac [ 84.394934][ T5001] ieee80211_do_stop+0xfac/0x1994 [ 84.396237][ T5001] ieee80211_if_change_type+0x478/0xcf4 [ 84.397704][ T5001] ieee80211_change_iface+0x6c/0x418 [ 84.399263][ T5001] cfg80211_change_iface+0x758/0x100c [ 84.400736][ T5001] __cfg80211_wext_siwmode+0x184/0x240 [ 84.402441][ T5001] ioctl_standard_call+0xe8/0x264 [ 84.403798][ T5001] wext_ioctl_dispatch+0x16c/0x3ec [ 84.405138][ T5001] wext_handle_ioctl+0x1f8/0x3f4 [ 84.406474][ T5001] sock_ioctl+0x140/0x858 [ 84.407670][ T5001] __arm64_sys_ioctl+0x14c/0x1c8 [ 84.408990][ T5001] invoke_syscall+0x98/0x2c0 [ 84.410303][ T5001] el0_svc_common+0x138/0x258 [ 84.411596][ T5001] do_el0_svc+0x64/0x218 [ 84.412797][ T5001] el0_svc+0x58/0x168 [ 84.413876][ T5001] el0t_64_sync_handler+0x84/0xf0 [ 84.415328][ T5001] el0t_64_sync+0x18c/0x190 [ 84.416607][ T5001] irq event stamp: 2728 [ 84.417711][ T5001] hardirqs last enabled at (2725): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 84.420571][ T5001] hardirqs last disabled at (2726): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 84.423264][ T5001] softirqs last enabled at (2728): [] local_bh_enable+0x10/0x34 [ 84.425795][ T5001] softirqs last disabled at (2727): [] local_bh_disable+0x10/0x34 [ 84.428433][ T5001] ---[ end trace 0000000000000000 ]--- [ 84.476973][ T5000] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 84.478766][ T5000] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.482701][ T5000] vhci_hcd vhci_hcd.0: Device attached [ 84.494737][ T5026] device pim6reg1 entered promiscuous mode [ 84.696780][ T5023] vhci_hcd: connection closed [ 84.738136][ T4709] vhci_hcd: stop threads [ 84.829791][ T4709] vhci_hcd: release socket [ 84.933489][ T4709] vhci_hcd: disconnect device [ 85.006991][ T4270] vhci_hcd: vhci_device speed not set