last executing test programs: 2.087911129s ago: executing program 4 (id=5): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000580)={[{@delalloc}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@lazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x20004007b1}}, {@lazytime}, {@grpquota}, {@dax_inode}, {@user_xattr}, {@bh}, {@usrjquota}, {@minixdf}, {@norecovery}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x5608, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 2.02681808s ago: executing program 0 (id=1): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffbfff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020"]) 1.779252201s ago: executing program 2 (id=3): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55b, &(0x7f0000000940)="$eJzs3U9oHNUfAPDvzGZ//ZefqaCg0kNRoULpJukfrZ7aq1go9CB4qctmG0I22ZDdaBNySO9F7EFUeqk3PXhUPHgQLx69elE8C6JBoelBVvZf2iabuK1JtnY+H5jd9+Zt9vvezH7f7gwzJIDMOtp8SCOejYiLScTIPW1D0Wk82n7d2upy6c7qcimJRuPSb0kkEXF7dbnUfX3SeT4UESsR8UxEfJuPOJ5ujltbXJouVirl+U59tD4zN1pbXDoxNVOcLE+WZ0+98uqZs6fPjJ8c37GxXv/pxnvXv3/91o3PPj+yUvqgmMS5GO603TuOndTeJvk4t2H96d0INkDJoDvAQ8l18jwfEU/HSOQ6WQ88/hr7IhpARiXyHzKq+zugefzbXfby98ev59sHIM24a52l3TLUPjcR+1vHJgf/SO47Mmkebx7ey47yWFq5FhFjQ0ObP/9J5/P38MZ2ooPsqm/Ot3fU5v2frs8/0WP+Ge6eO/2XuvPf2qb572783Bbz38U+Y/z11s8fbxn/WsRzPeMn6/GTHvHTiHi7z/g33/zq7FZtjU8ijkXv+F3J9ueHR69MVcpj7ceeMb4+duS17cZ/cIv47XO2+1tfM722/1yf4//yuy+eX9km/ksvbL//e23/AxHxfp/xn7z96RtbtTXjT2wx/u3iN9fd6jP+y+eO/tjnSwEAAAAAAAAAgAeQtq5lS9LCejlNC4X2PbxPxcG0Uq3Vj1+pLsxOtK95Oxz5tHul1Ui7njTr453rcbv1kxvqp3KdgLkDrXqhVK1MDHjsAAAAAAAAAAAAAAAAAAAA8Kg4tOH+/z9z7fv/gYzwL78hu+Q/ZNf9+Z8MrB/A3vP9D5nVkP+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/AAAAAAAAAAAAAAAAAAAAAAAAAADsiosXLjSXxp3V5VKzPjG0uDBdfefERLk2XZhZKBVK1fm5wmS1OlkpF0rVmX96v0q1OjcWswtXR+vlWn20trh0eaa6MFu/PDVTnCxfLuf3ZFQAAAAAAAAAAAAAAAAAAADw3zLcWpK0EBFpq5ymhULE/yPicOSTK1OV8lhEPBERP+Ty+5r18UF3GgAAAAAAAAAAAAAAAAAAAB4ztcWl6WKlUp5X2FyIiJWdfefmOz7wX+U7++pR2SwKWSgMeGICAAAAAAAAAAAAAAAAAIAMunvT76B7AgAAAAAAAAAAAAAAAAAAAFmW/pJERHM5NvLi8MbW/yVrudZzRLx789KHV4v1+vx4c/3v6+vrH3XWnxxE/4F+dfO0m8cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXbXFpelipVKe38XCoMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DD+DgAA//+H69Sv") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000400)={0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1000000000000006}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.426338673s ago: executing program 3 (id=4): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000100)='\x00\x00', 0x2}], 0x1) 1.299279003s ago: executing program 1 (id=2): socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) r2 = accept4$inet6(r0, 0x0, 0x0, 0x80000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.267267293s ago: executing program 2 (id=6): creat(&(0x7f0000000040)='./bus\x00', 0x0) ioprio_set$pid(0x1, 0x0, 0x4007) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) 1.172983684s ago: executing program 3 (id=7): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) ioctl$VT_DISALLOCATE(r0, 0x5608) 1.124721594s ago: executing program 1 (id=8): open(0x0, 0x8e040, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(r2, 0x0) 1.113591634s ago: executing program 0 (id=9): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) personality(0x60000a) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x180000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$eJzs3U9sFFUcB/DvbrslAbRg/IP4r4JKEaW2NUESTCTKSS4GE88NLYRYqKE1EUKMJh68eTHx7EG5eeTgyXjAoyZ48aaejJEYIvGk1sx2ly5lt3RD26nu55PM7pud132/mdffzO7ryzRAzxoqHirJ1iTfJxlcWL25wtDC0/VrF47/ee3C8Urm54/9XqnX++PahePNqs2f21I8VJPhalL9oJKH2rQ7e+78mxPT01NnG+sjc6ffGpk9d/7ZU6cnTk6dnDozeuDgC+OjB8bGx1dtX1+9+O6xLa+9dOSjySu/zVz86csi3q2Nba37sVqGMnTzsWzx1Go3VrL7WsqV/hIDoSt9SYruqtXzfzB9Wey8wXzzY6nBAWtqvrCp4+b35oH/sUrKjgAoR/NCX3z/bS7r9dmD8l09vPAFsOj3641lYUt/qo06tSXf71fTUJJDl458USxZo3EYAAAAgF721eEkz7Qb/6vm/pZ6RfmBJDuSPJhkZ1Kf1/NwkkeSPJrkseZ8oi4srb90/KfSaQINq+Lq4eRQY27XzeN/zdG/bOtrrN1VrKRWOXFqeuq5JHcnGU5tU7E+ukwbl7/957tO21rH/4qlaL85FtiI49f+JX+fnpyYm7iTfWbR1feTnf3t+r9yYyZQkYKPJ9nVzRvXFos/79p7slO12/c/a2n+02RP2/xvnHivHKw/LTM/c6R+PhhpnhVu9eHo2Cud2tf/5Sryf/Ny/Z9sq7TO153tvo3LOy692Glb9+f/Hz4rzv8DldfrAQ40Xn1nYm7u7GgyUDl66+tj3cf839b5Q1PzeDSPV9H/w7vbX//vaXm33UmeSPJkY+7ynvq1P9mb5Okk+5aJ5u+XD7zRaZv8L1fR/5Nt8//G1IAl+d994dD2T452an9l+f98/Rd6uPGKz3+3t9IOKjtOAAAAAAAAAFZHtX4PvEp1/41ytbp//8I9/O7N5ur0zOzcvhMzb5+ZXLhX3rbUqs2ZXoMt80FH6+XF9bEl6+NJtif5uO+vxp0HZqYny9556HFbOuR/4Ze+sqMD1pz7tULvWkH+19YjDmD9uf5D75L/0LvkP/Qu+Q+9S/5D75L/0LtWnv8DaxoHsP5c/6En3cl9/TZaoT8bIoy2heb8qZLCaP5L/g1yNDZm4fOvk3Voqy/JRtnlZQplnpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo5/AwAA//9EA9s8") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r4, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = open(&(0x7f0000000f00)='./bus\x00', 0x161142, 0x6) r6 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000000201005) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) quotactl$Q_GETINFO(0x1fcaec641b476ac4, 0x0, 0x0, &(0x7f00000003c0)) r7 = socket$inet6(0xa, 0x6, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x40045201, 0x0) listen(r7, 0x80080400) 904.354895ms ago: executing program 1 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x20004000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000090600010015"], 0x1c}}, 0x0) 904.143215ms ago: executing program 3 (id=11): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00'}, 0x10) syz_io_uring_setup(0x55fb, &(0x7f0000000180)={0x0, 0x2fb3, 0xc6, 0x2, 0xe6}, &(0x7f0000000040), &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0200001000010000000000fedbdf25e0000002000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000000000000000000000330000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000003500000a000400000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013010100636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005806"], 0x24c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000000)) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0x2, 0x0, 0x0, 0x0}) 697.178736ms ago: executing program 2 (id=12): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000440)=ANY=[], 0x8, 0x307, &(0x7f0000000d40)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x4047e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x1f) fadvise64(r1, 0x3, 0x9, 0x5) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 684.997936ms ago: executing program 1 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x121301) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x1da, 0x0, 0x94, 0x0}) 683.021786ms ago: executing program 4 (id=14): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) 456.902397ms ago: executing program 1 (id=15): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000001343c1c3890abf633ccfdc4e315c1131c8d6174874ea264943125db79a6fbbbb832118b92f7e50dd820e1e99f7a08aaa05695adff7ee182410a98c398b1e58545f6551f406a84bed4c982010afd2a1774aaab88b39ae37418827d967d76fa76ee20d707ab42b351795bae76b730da7993f7b9cbffceafc0f5e7bcb6939f1b4fa38654a4edbf9d1", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 \x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x60882) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000100)={0xc418, 0x1, [{0x1, 0x1}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2e, 0x0, 0x7ffc1ffb}]}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x202, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) link(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00'}, 0x10) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) getrandom(0x0, 0x0, 0x0) 281.101358ms ago: executing program 4 (id=16): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) 263.782358ms ago: executing program 2 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x17) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c20000000000000000000800"], 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x280) 255.490018ms ago: executing program 3 (id=18): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000100)='\x00\x00', 0x2}], 0x1) 69.079719ms ago: executing program 4 (id=19): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55b, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000400)={0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1000000000000006}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=20): open(&(0x7f0000000000)='./file0\x00', 0x8e040, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)) setreuid(0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(r1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. [ 65.375388][ T4156] cgroup: Unknown subsys name 'net' [ 65.480343][ T4156] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.005284][ T4156] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.631730][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 68.660906][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 68.677212][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 68.697118][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 68.771156][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 68.885184][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.893036][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.901716][ T4166] device bridge_slave_0 entered promiscuous mode [ 68.929650][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.937144][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.947948][ T4170] device bridge_slave_0 entered promiscuous mode [ 68.957867][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.965343][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.973926][ T4166] device bridge_slave_1 entered promiscuous mode [ 68.982186][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.989489][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.997577][ T4172] device bridge_slave_0 entered promiscuous mode [ 69.017568][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.025189][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.033478][ T4167] device bridge_slave_0 entered promiscuous mode [ 69.042026][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.049419][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.057272][ T4170] device bridge_slave_1 entered promiscuous mode [ 69.072568][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.080092][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.088060][ T4172] device bridge_slave_1 entered promiscuous mode [ 69.105135][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.112446][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.121621][ T4167] device bridge_slave_1 entered promiscuous mode [ 69.146335][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.187948][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.205915][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.213785][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.222804][ T4180] device bridge_slave_0 entered promiscuous mode [ 69.239757][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.258439][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.270037][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.279800][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.286926][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.295229][ T4180] device bridge_slave_1 entered promiscuous mode [ 69.304753][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.315736][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.357724][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.386268][ T4166] team0: Port device team_slave_0 added [ 69.394785][ T4172] team0: Port device team_slave_0 added [ 69.426595][ T4166] team0: Port device team_slave_1 added [ 69.441424][ T4172] team0: Port device team_slave_1 added [ 69.458451][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.470527][ T4167] team0: Port device team_slave_0 added [ 69.479755][ T4170] team0: Port device team_slave_0 added [ 69.493336][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.500434][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.526380][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.540755][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.560474][ T4167] team0: Port device team_slave_1 added [ 69.567755][ T4170] team0: Port device team_slave_1 added [ 69.581160][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.588157][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.615273][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.660346][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.667331][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.694242][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.712305][ T4180] team0: Port device team_slave_0 added [ 69.736370][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.743941][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.770808][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.795296][ T4180] team0: Port device team_slave_1 added [ 69.808374][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.815872][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.842274][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.854197][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.861550][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.888219][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.901277][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.908342][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.934458][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.962056][ T4166] device hsr_slave_0 entered promiscuous mode [ 69.969241][ T4166] device hsr_slave_1 entered promiscuous mode [ 69.976481][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.983925][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.010550][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.037334][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.044609][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.071199][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.107316][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.114796][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.141059][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.188012][ T4170] device hsr_slave_0 entered promiscuous mode [ 70.195212][ T4170] device hsr_slave_1 entered promiscuous mode [ 70.203671][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.212084][ T4170] Cannot create hsr debugfs directory [ 70.259785][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 70.267501][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 70.274053][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 70.280618][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 70.286945][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 70.297522][ T4172] device hsr_slave_0 entered promiscuous mode [ 70.304741][ T4172] device hsr_slave_1 entered promiscuous mode [ 70.313792][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.322160][ T4172] Cannot create hsr debugfs directory [ 70.335771][ T4167] device hsr_slave_0 entered promiscuous mode [ 70.342896][ T4167] device hsr_slave_1 entered promiscuous mode [ 70.349900][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.357586][ T4167] Cannot create hsr debugfs directory [ 70.386456][ T4180] device hsr_slave_0 entered promiscuous mode [ 70.393696][ T4180] device hsr_slave_1 entered promiscuous mode [ 70.401012][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.409083][ T4180] Cannot create hsr debugfs directory [ 70.757773][ T4166] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.771410][ T4166] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.783975][ T4166] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.794678][ T4166] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.846126][ T4172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.865045][ T4172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.883336][ T4172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.905737][ T4172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.947842][ T4170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.957348][ T4170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.983870][ T4170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.993832][ T4170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.092428][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.104454][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.124886][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.137830][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.165294][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.182490][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.193452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.204727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.214105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.223099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.233882][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.241379][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.251180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.276299][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.285593][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.296760][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.303957][ T3093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.324612][ T4180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.339486][ T4180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.371712][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.380921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.391777][ T4180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.412746][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.424614][ T4180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.444379][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.460400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.468371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.498173][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.508678][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.518196][ T3093] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.525331][ T3093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.537988][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.541279][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.544927][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.555634][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.570470][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.578116][ T3093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.586377][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.596450][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.608607][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.618093][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.626852][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.658914][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.667912][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.677211][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.693270][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.702648][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.727866][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.741636][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.752503][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.761654][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.770869][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.804531][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.813582][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.825009][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.834293][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.843023][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.860356][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.883623][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.917961][ T4172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.930180][ T4172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.943199][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.952907][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.963798][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.974185][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.983703][ T3093] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.990877][ T3093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.999222][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.007768][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.035597][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.048385][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.059936][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.069786][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.078636][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.091050][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.098170][ T3093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.121827][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.158387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.169529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.178494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.192043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.201886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.238261][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.263533][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.273708][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.282680][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.291356][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.300859][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.310012][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.318410][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.325683][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.334554][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.339856][ T4214] Bluetooth: hci1: command 0x041b tx timeout [ 72.345565][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.356197][ T4214] Bluetooth: hci0: command 0x041b tx timeout [ 72.357918][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.370784][ T4214] Bluetooth: hci3: command 0x041b tx timeout [ 72.376531][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.379556][ T4214] Bluetooth: hci2: command 0x041b tx timeout [ 72.390505][ T4214] Bluetooth: hci4: command 0x041b tx timeout [ 72.397712][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.423477][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.432732][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.442055][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.451544][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.460912][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.468030][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.475995][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.485293][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.494568][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.505821][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.517677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.527922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.540727][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.550092][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.558552][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.565940][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.576824][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.602228][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.619138][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.632962][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.642140][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.651588][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.661377][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.671328][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.680519][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.687609][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.696192][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.726179][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.736917][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.749048][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.757842][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.767763][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.775968][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.787670][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.796830][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.816459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.827865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.850382][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.879498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.929467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.950173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.963548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.982312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.996479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.006543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.015645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.032171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.041700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.053445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.061672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.091383][ T4166] device veth0_vlan entered promiscuous mode [ 73.102753][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.117346][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.137512][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.159880][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.186663][ T4166] device veth1_vlan entered promiscuous mode [ 73.235571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.250288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.257869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.282384][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.298158][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.335474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.345283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.355061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.363337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.372760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.392631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.403908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.419814][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.429155][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.441454][ T4166] device veth0_macvtap entered promiscuous mode [ 73.456411][ T4172] device veth0_vlan entered promiscuous mode [ 73.470201][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.479625][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.487509][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.496481][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.504649][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.523427][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.533182][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.552139][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.565894][ T4172] device veth1_vlan entered promiscuous mode [ 73.574304][ T4166] device veth1_macvtap entered promiscuous mode [ 73.597341][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.607878][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.618339][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.627163][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.662839][ T4170] device veth0_vlan entered promiscuous mode [ 73.669873][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.678288][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.687062][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.698566][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.707753][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.735218][ T4180] device veth0_vlan entered promiscuous mode [ 73.748555][ T4170] device veth1_vlan entered promiscuous mode [ 73.763591][ T4172] device veth0_macvtap entered promiscuous mode [ 73.781520][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.789311][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.797812][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.807362][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.817132][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.826455][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.835899][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.845308][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.856204][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.865560][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.876997][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.885443][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.904488][ T4180] device veth1_vlan entered promiscuous mode [ 73.946562][ T4172] device veth1_macvtap entered promiscuous mode [ 73.956949][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.974739][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.985433][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.994409][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.005783][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.015993][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.026170][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.034892][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.057751][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.067085][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.076114][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.086110][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.106155][ T4180] device veth0_macvtap entered promiscuous mode [ 74.118342][ T4167] device veth0_vlan entered promiscuous mode [ 74.127712][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.140589][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.154529][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.162098][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.170979][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.179568][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.188145][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.197448][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.212298][ T4170] device veth0_macvtap entered promiscuous mode [ 74.226745][ T4170] device veth1_macvtap entered promiscuous mode [ 74.243377][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.254807][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.266513][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.274613][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.283173][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.291496][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.300475][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.309334][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.317381][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.326528][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.384227][ T4172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.394149][ T4172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.404928][ T4172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.414870][ T4216] Bluetooth: hci4: command 0x040f tx timeout [ 74.421527][ T4216] Bluetooth: hci2: command 0x040f tx timeout [ 74.423906][ T4172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.427645][ T4216] Bluetooth: hci3: command 0x040f tx timeout [ 74.443265][ T4216] Bluetooth: hci0: command 0x040f tx timeout [ 74.448193][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.450966][ T4216] Bluetooth: hci1: command 0x040f tx timeout [ 74.466882][ T4180] device veth1_macvtap entered promiscuous mode [ 74.477815][ T4167] device veth1_vlan entered promiscuous mode [ 74.519337][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.537405][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.549752][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.560593][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.573472][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.607604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.617094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.626169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.635180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.644564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.657136][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.667944][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.678641][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.690623][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.704943][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.717118][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.728262][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.739214][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.750442][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.760418][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.771070][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.784647][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.805579][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.815566][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.827620][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.837009][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.853084][ T4170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.862304][ T4170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.871422][ T4170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.881231][ T4170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.897211][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.912249][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.922666][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.934087][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.944451][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.955439][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.967027][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.998270][ T4167] device veth0_macvtap entered promiscuous mode [ 75.011857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.024749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.034073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.043240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.053037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.064821][ T4180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.075147][ T4180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.075335][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.084538][ T4180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.097168][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.101493][ T4180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.141977][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.181670][ T4167] device veth1_macvtap entered promiscuous mode [ 75.202916][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.213998][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.232655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.241415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.310138][ T3093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.318157][ T3093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.344911][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.360672][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.371815][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.385528][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.397059][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.407867][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.418029][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.428843][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.441378][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.459567][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.467667][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.483178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.497462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.506338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.515561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.526425][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.538193][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.548839][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.560384][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.570355][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.581012][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.591250][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.605091][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.617172][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.660551][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.680962][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.706646][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.713283][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.718829][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.730991][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.731033][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.731064][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.756064][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.766796][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.780516][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.825005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.879430][ T4249] loop4: detected capacity change from 0 to 1024 [ 75.929989][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.938064][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.960338][ T4249] ======================================================= [ 75.960338][ T4249] WARNING: The mand mount option has been deprecated and [ 75.960338][ T4249] and is ignored by this kernel. Remove the mand [ 75.960338][ T4249] option from the mount to silence this warning. [ 75.960338][ T4249] ======================================================= [ 76.011567][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.051648][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.077536][ T3093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.080447][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.122210][ T3093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.185243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.227954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.273810][ T4255] loop2: detected capacity change from 0 to 1024 [ 76.337416][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.405878][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.432259][ T4255] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.451335][ T4255] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.466857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.490677][ T4246] Bluetooth: hci1: command 0x0419 tx timeout [ 76.499694][ T4246] Bluetooth: hci0: command 0x0419 tx timeout [ 76.515633][ T4216] Bluetooth: hci3: command 0x0419 tx timeout [ 76.523468][ T4216] Bluetooth: hci2: command 0x0419 tx timeout [ 76.530142][ T4216] Bluetooth: hci4: command 0x0419 tx timeout [ 77.023605][ T4274] Process accounting resumed [ 77.040311][ T4275] loop0: detected capacity change from 0 to 512 [ 77.112640][ T26] audit: type=1326 audit(1732248892.185:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4276 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae85ea819 code=0x7ffc0000 [ 77.180579][ T4275] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 77.228074][ T4284] loop2: detected capacity change from 0 to 128 [ 77.256150][ T26] audit: type=1326 audit(1732248892.185:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4276 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae85ea819 code=0x7ffc0000 [ 77.390543][ T26] audit: type=1326 audit(1732248892.205:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4276 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ae85ea819 code=0x7ffc0000 [ 77.429761][ T26] audit: type=1326 audit(1732248892.205:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4276 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae85ea819 code=0x7ffc0000 [ 77.523793][ T26] audit: type=1326 audit(1732248892.205:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4276 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae85ea819 code=0x7ffc0000 [ 77.599484][ T4294] usb usb4: usbfs: process 4294 (syz.1.15) did not claim interface 0 before use [ 77.671301][ T26] audit: type=1326 audit(1732248892.205:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4276 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1ae85ea819 code=0x7ffc0000 [ 77.804549][ T26] audit: type=1326 audit(1732248892.595:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4276 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae85ea819 code=0x7ffc0000 [ 77.896735][ T4307] loop4: detected capacity change from 0 to 1024 [ 77.962544][ T26] audit: type=1326 audit(1732248892.595:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4276 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae85ea819 code=0x7ffc0000 [ 78.016829][ T4307] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.024322][ T4294] [ 78.029895][ T4294] ====================================================== [ 78.036946][ T4294] WARNING: possible circular locking dependency detected [ 78.044050][ T4294] 5.15.173-syzkaller #0 Not tainted [ 78.046783][ T4307] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.049267][ T4294] ------------------------------------------------------ [ 78.049277][ T4294] syz.1.15/4294 is trying to acquire lock: [ 78.049289][ T4294] ffff88807da18b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0 [ 78.083240][ T4294] [ 78.083240][ T4294] but task is already holding lock: [ 78.090628][ T4294] ffff88807da18ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 78.099984][ T4294] [ 78.099984][ T4294] which lock already depends on the new lock. [ 78.099984][ T4294] [ 78.102078][ T26] audit: type=1326 audit(1732248892.715:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc729f4a819 code=0x7ffc0000 [ 78.110494][ T4294] [ 78.110494][ T4294] the existing dependency chain (in reverse order) is: [ 78.110505][ T4294] [ 78.110505][ T4294] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 78.110540][ T4294] lock_acquire+0x1db/0x4f0 [ 78.154425][ T4294] __mutex_lock_common+0x1da/0x25a0 [ 78.160266][ T4294] mutex_lock_nested+0x17/0x20 [ 78.165592][ T4294] hci_dev_do_close+0x63/0x1070 [ 78.169030][ T26] audit: type=1326 audit(1732248892.715:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc729f4a819 code=0x7ffc0000 [ 78.171522][ T4294] hci_rfkill_set_block+0x114/0x1a0 [ 78.171554][ T4294] rfkill_set_block+0x1e7/0x430 [ 78.204694][ T4294] rfkill_fop_write+0x5b7/0x790 [ 78.210106][ T4294] vfs_write+0x30c/0xe50 [ 78.214925][ T4294] ksys_write+0x1a2/0x2c0 [ 78.219903][ T4294] do_syscall_64+0x3b/0xb0 [ 78.224877][ T4294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.231456][ T4294] [ 78.231456][ T4294] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 78.239484][ T4294] lock_acquire+0x1db/0x4f0 [ 78.244567][ T4294] __mutex_lock_common+0x1da/0x25a0 [ 78.250326][ T4294] mutex_lock_nested+0x17/0x20 [ 78.255645][ T4294] rfkill_register+0x30/0x880 [ 78.260877][ T4294] hci_register_dev+0x4dd/0xa50 [ 78.266279][ T4294] vhci_create_device+0x310/0x590 [ 78.271873][ T4294] vhci_write+0x382/0x430 [ 78.276759][ T4294] vfs_write+0xacd/0xe50 [ 78.281553][ T4294] ksys_write+0x1a2/0x2c0 [ 78.286440][ T4294] do_syscall_64+0x3b/0xb0 [ 78.291411][ T4294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.297870][ T4294] [ 78.297870][ T4294] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 78.306034][ T4294] lock_acquire+0x1db/0x4f0 [ 78.311096][ T4294] __mutex_lock_common+0x1da/0x25a0 [ 78.316859][ T4294] mutex_lock_nested+0x17/0x20 [ 78.322179][ T4294] vhci_send_frame+0x8a/0xf0 [ 78.327328][ T4294] hci_send_frame+0x1af/0x2f0 [ 78.332561][ T4294] hci_tx_work+0xb2e/0x1a30 [ 78.337612][ T4294] process_one_work+0x8a1/0x10c0 [ 78.343103][ T4294] worker_thread+0xaca/0x1280 [ 78.348347][ T4294] kthread+0x3f6/0x4f0 [ 78.352965][ T4294] ret_from_fork+0x1f/0x30 [ 78.358013][ T4294] [ 78.358013][ T4294] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 78.367275][ T4294] validate_chain+0x1649/0x5930 [ 78.372677][ T4294] __lock_acquire+0x1295/0x1ff0 [ 78.378075][ T4294] lock_acquire+0x1db/0x4f0 [ 78.383160][ T4294] __flush_work+0xeb/0x1a0 [ 78.388290][ T4294] hci_dev_do_close+0x20a/0x1070 [ 78.393767][ T4294] hci_rfkill_set_block+0x114/0x1a0 [ 78.399525][ T4294] rfkill_set_block+0x1e7/0x430 [ 78.404914][ T4294] rfkill_fop_write+0x5b7/0x790 [ 78.410386][ T4294] vfs_write+0x30c/0xe50 [ 78.415165][ T4294] ksys_write+0x1a2/0x2c0 [ 78.420021][ T4294] do_syscall_64+0x3b/0xb0 [ 78.425051][ T4294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.431481][ T4294] [ 78.431481][ T4294] other info that might help us debug this: [ 78.431481][ T4294] [ 78.441727][ T4294] Chain exists of: [ 78.441727][ T4294] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 78.441727][ T4294] [ 78.456852][ T4294] Possible unsafe locking scenario: [ 78.456852][ T4294] [ 78.464294][ T4294] CPU0 CPU1 [ 78.469650][ T4294] ---- ---- [ 78.475004][ T4294] lock(&hdev->req_lock); [ 78.479421][ T4294] lock(rfkill_global_mutex); [ 78.487415][ T4294] lock(&hdev->req_lock); [ 78.494436][ T4294] lock((work_completion)(&hdev->tx_work)); [ 78.500435][ T4294] [ 78.500435][ T4294] *** DEADLOCK *** [ 78.500435][ T4294] [ 78.508655][ T4294] 2 locks held by syz.1.15/4294: [ 78.513607][ T4294] #0: ffffffff8dcbe668 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 78.523720][ T4294] #1: ffff88807da18ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 78.533477][ T4294] [ 78.533477][ T4294] stack backtrace: [ 78.539357][ T4294] CPU: 1 PID: 4294 Comm: syz.1.15 Not tainted 5.15.173-syzkaller #0 [ 78.547334][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 78.557405][ T4294] Call Trace: [ 78.560683][ T4294] [ 78.563628][ T4294] dump_stack_lvl+0x1e3/0x2d0 [ 78.568315][ T4294] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 78.574043][ T4294] ? print_circular_bug+0x12b/0x1a0 [ 78.579248][ T4294] check_noncircular+0x2f8/0x3b0 [ 78.584199][ T4294] ? add_chain_block+0x850/0x850 [ 78.589264][ T4294] ? lockdep_lock+0x11f/0x2a0 [ 78.593945][ T4294] ? stack_trace_save+0x113/0x1c0 [ 78.599067][ T4294] validate_chain+0x1649/0x5930 [ 78.604020][ T4294] ? reacquire_held_locks+0x660/0x660 [ 78.609391][ T4294] ? validate_chain+0x13bd/0x5930 [ 78.614413][ T4294] ? lockdep_hardirqs_on+0x94/0x130 [ 78.619636][ T4294] ? look_up_lock_class+0x77/0x120 [ 78.624757][ T4294] ? register_lock_class+0x100/0x9a0 [ 78.630052][ T4294] ? reacquire_held_locks+0x660/0x660 [ 78.635434][ T4294] ? is_dynamic_key+0x1f0/0x1f0 [ 78.640283][ T4294] ? mark_lock+0x98/0x340 [ 78.644610][ T4294] __lock_acquire+0x1295/0x1ff0 [ 78.649466][ T4294] lock_acquire+0x1db/0x4f0 [ 78.653977][ T4294] ? __flush_work+0xcf/0x1a0 [ 78.658572][ T4294] ? mark_lock+0x98/0x340 [ 78.662997][ T4294] ? read_lock_is_recursive+0x10/0x10 [ 78.668368][ T4294] ? __lock_acquire+0x1295/0x1ff0 [ 78.673416][ T4294] __flush_work+0xeb/0x1a0 [ 78.677945][ T4294] ? __flush_work+0xcf/0x1a0 [ 78.682542][ T4294] ? flush_work+0x20/0x20 [ 78.686903][ T4294] hci_dev_do_close+0x20a/0x1070 [ 78.691845][ T4294] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 78.697857][ T4294] ? kmem_cache_alloc_trace+0x143/0x290 [ 78.703412][ T4294] hci_rfkill_set_block+0x114/0x1a0 [ 78.708642][ T4294] ? rcu_lock_release+0x20/0x20 [ 78.713491][ T4294] rfkill_set_block+0x1e7/0x430 [ 78.718343][ T4294] rfkill_fop_write+0x5b7/0x790 [ 78.723366][ T4294] ? rfkill_fop_read+0x470/0x470 [ 78.728306][ T4294] ? fsnotify_perm+0x64/0x590 [ 78.733006][ T4294] ? security_file_permission+0x75/0xa0 [ 78.738555][ T4294] ? rfkill_fop_read+0x470/0x470 [ 78.743495][ T4294] vfs_write+0x30c/0xe50 [ 78.747750][ T4294] ? file_end_write+0x250/0x250 [ 78.752602][ T4294] ? __fget_files+0x413/0x480 [ 78.757284][ T4294] ? __fdget_pos+0x1e9/0x380 [ 78.762050][ T4294] ? ksys_write+0x77/0x2c0 [ 78.766462][ T4294] ksys_write+0x1a2/0x2c0 [ 78.770793][ T4294] ? __ia32_sys_read+0x80/0x80 [ 78.775561][ T4294] ? syscall_enter_from_user_mode+0xf0/0x240 [ 78.781544][ T4294] do_syscall_64+0x3b/0xb0 [ 78.785958][ T4294] ? clear_bhb_loop+0x15/0x70 [ 78.790634][ T4294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.796532][ T4294] RIP: 0033:0x7fc729f4a819 [ 78.800951][ T4294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.820653][ T4294] RSP: 002b:00007fc727dc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.829072][ T4294] RAX: ffffffffffffffda RBX: 00007fc72a101fa0 RCX: 00007fc729f4a819 [ 78.837046][ T4294] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000005 [ 78.845021][ T4294] RBP: 00007fc729fbd75e R08: 0000000000000000 R09: 0000000000000000 [ 78.853078][ T4294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.861138][ T4294] R13: 0000000000000000 R14: 00007fc72a101fa0 R15: 00007fffa02436e8 [ 78.869138][ T4294] [ 79.048329][ T4323] syz.0.23[4323] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.048429][ T4323] syz.0.23[4323] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.894790][ T23] cfg80211: failed to load regulatory.db