last executing test programs: 16.57624918s ago: executing program 0 (id=169): syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f97446f452060c3f45e7efb935264b4e727b5bc0bbabc370bb06bd3b304674e0aedf9de255b42ca67360bdb85b2951a44c32f3d8d3f646ebb"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15.00377329s ago: executing program 0 (id=178): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x14, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e6962"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x1000, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11.135702385s ago: executing program 0 (id=194): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200408, &(0x7f0000000280)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,nodots,errors=continue,time_offset=0xfffffffffffffa93,dots,showexec,nodots,dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646f74732c646f74732c6e66732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c646f74732c646f74732c646f74732c636865636b3d72656c617865642c74696d655f6f66667365743d3078303030303030303030303030303437612c646f6e745f686173682c7365636c6162656c2c667373c322e2a50762a3d3fcae283b43ea02757569643d31643067586564382d353166312d62326634"], 0x1, 0x1d3, &(0x7f0000001a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69dfb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000900)={0x1, {{0xa, 0x3, 0x0, @mcast1}}}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'tunl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xf7, 0x9, 0x5, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8000, 0x6, 0x6c0}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB='\v\x00'], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x9, 0x8, 0x3a32, 0x2010, r3, 0x0, '\x00', r6, r7, 0x5, 0x4, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rename(&(0x7f000001fb40)='./file0/file0\x00', &(0x7f000001fb80)='./file2\x00') 9.889397289s ago: executing program 0 (id=196): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e1264000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 9.556003565s ago: executing program 2 (id=201): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x1c) 9.374599459s ago: executing program 0 (id=204): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xfd8e49f1ee86724e) prlimit64(0x0, 0x6, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) fallocate(0xffffffffffffffff, 0x3, 0x5, 0x8) r1 = getpid() r2 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYBLOB="2cfffd2e", @ANYRESHEX, @ANYBLOB=',cache=loos']) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000100)=0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x4, 0x9, r1, 0x0, 0x7fff, 'syz1\x00', 0x0}) 8.769304681s ago: executing program 2 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x4af8a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x4, 0xfffffffffffffffc, 0x80000000, 0x0, 0x9, 0x0, 0x3ffffffffffffc}, {0x0, 0x1000000000, 0x53e5, 0x20}, 0x100, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@remote, 0x4d4, 0x32}, 0x2, @in6=@local, 0x3501, 0x4, 0x3, 0x0, 0x0, 0xfffffffb, 0xe2d5}}, 0xe8) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0xf, 0x4) 8.726103101s ago: executing program 4 (id=206): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)="9b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000017c0)="f0", 0x1}], 0x1}}], 0x2, 0x20000010) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002580)=ANY=[@ANYRES32=0x0, @ANYBLOB="ffff01"], 0xa) 6.592326663s ago: executing program 2 (id=209): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x356e, 0x20041, 0x2, 0x40000734}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x6) accept4$x25(r1, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) 6.483729885s ago: executing program 4 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getrlimit(0xa, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = eventfd2(0x0, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) close_range(r4, r5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.534119983s ago: executing program 4 (id=211): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) close(0x3) fdatasync(0xffffffffffffffff) 4.033273472s ago: executing program 2 (id=212): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20004010) 3.864103226s ago: executing program 4 (id=213): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000fedbdf251d00000008000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x4004890}, 0x4000800) 3.761297018s ago: executing program 4 (id=214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x9, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x4, 0x21}}}, 0x40) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 3.672965929s ago: executing program 2 (id=215): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 3.216059328s ago: executing program 2 (id=216): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendto$netrom(0xffffffffffffffff, 0x0, 0xffffff45, 0x0, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 3.159101279s ago: executing program 1 (id=217): syz_mount_image$msdos(&(0x7f0000001000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f0000001040)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x101, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00') 2.814046016s ago: executing program 0 (id=218): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) mkdirat(r1, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) 2.706604028s ago: executing program 4 (id=219): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b00010000000009"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) r0 = gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000003680), 0x0, 0xe) 491.872411ms ago: executing program 3 (id=225): mkdir(&(0x7f00000002c0)='./bus\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="e7cc2b6cfed20a", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 362.601114ms ago: executing program 3 (id=226): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @broadcast, 'wg2\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) 334.044074ms ago: executing program 3 (id=227): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0xe4ff, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, {0x5, 0x400}, {}, {0x4, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x1, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}, {}, {0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 270.714525ms ago: executing program 3 (id=228): socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x20040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1a, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fspick(r2, &(0x7f0000000000)='.\x00', 0x0) 203.995647ms ago: executing program 1 (id=229): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) 203.688227ms ago: executing program 3 (id=230): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@multicast1, @multicast2}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', 0x0}) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44014, &(0x7f0000000180)={0x11, 0x1, r2, 0x1, 0x7, 0x6, @broadcast}, 0x14) 203.010347ms ago: executing program 1 (id=231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x20000002, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 128.749008ms ago: executing program 1 (id=232): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), 0xffffffffffffffff) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) 126.115498ms ago: executing program 3 (id=233): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200408, &(0x7f0000000280)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,nodots,errors=continue,time_offset=0xfffffffffffffa93,dots,showexec,nodots,dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646f74732c646f74732c6e66732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c646f74732c646f74732c646f74732c636865636b3d72656c617865642c74696d655f6f66667365743d3078303030303030303030303030303437612c646f6e745f686173682c7365636c6162656c2c667373c322e2a50762a3d3fcae283b43ea02757569643d31643067586564382d353166312d62326634"], 0x1, 0x1d3, &(0x7f0000001a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69dfb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000900)={0x1, {{0xa, 0x3, 0x0, @mcast1}}}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'tunl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xf7, 0x9, 0x5, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8000, 0x6, 0x6c0}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB='\v\x00'], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x9, 0x8, 0x3a32, 0x2010, r3, 0x0, '\x00', r6, r7, 0x5, 0x4, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) rename(&(0x7f000001fb40)='./file0/file0\x00', &(0x7f000001fb80)='./file2\x00') 63.533499ms ago: executing program 1 (id=234): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x804, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 1 (id=235): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f00000001c0)=""/257, 0x101) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 52.133464][ T4173] cgroup: Unknown subsys name 'net' [ 52.294477][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.854979][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.763628][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 55.853547][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 55.932876][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 55.989351][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 56.005220][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 56.088928][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.096958][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.107393][ T4185] device bridge_slave_0 entered promiscuous mode [ 56.129520][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.137597][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.147308][ T4184] device bridge_slave_0 entered promiscuous mode [ 56.173247][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.181071][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.190173][ T4185] device bridge_slave_1 entered promiscuous mode [ 56.206739][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.214546][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.223270][ T4184] device bridge_slave_1 entered promiscuous mode [ 56.232143][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.240961][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.250792][ T4190] device bridge_slave_0 entered promiscuous mode [ 56.281687][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.289585][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.297847][ T4190] device bridge_slave_1 entered promiscuous mode [ 56.342403][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.373375][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.387493][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.403405][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.425038][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.434521][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.444145][ T4195] device bridge_slave_0 entered promiscuous mode [ 56.460792][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.470129][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.479980][ T4188] device bridge_slave_0 entered promiscuous mode [ 56.508155][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.521688][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.532681][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.541082][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.550357][ T4195] device bridge_slave_1 entered promiscuous mode [ 56.558293][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.566683][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.575816][ T4188] device bridge_slave_1 entered promiscuous mode [ 56.630892][ T4184] team0: Port device team_slave_0 added [ 56.639672][ T4185] team0: Port device team_slave_0 added [ 56.646853][ T4184] team0: Port device team_slave_1 added [ 56.671224][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.684907][ T4185] team0: Port device team_slave_1 added [ 56.709195][ T4190] team0: Port device team_slave_0 added [ 56.718126][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.730747][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.749783][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.756999][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.785987][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.801394][ T4190] team0: Port device team_slave_1 added [ 56.808510][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.815645][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.843086][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.862550][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.925208][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.933664][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.965568][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.004819][ T4188] team0: Port device team_slave_0 added [ 57.012943][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.023393][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.051484][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.063985][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.072235][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.104022][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.120327][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.129082][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.161639][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.177269][ T4195] team0: Port device team_slave_0 added [ 57.186581][ T4188] team0: Port device team_slave_1 added [ 57.211908][ T4195] team0: Port device team_slave_1 added [ 57.246403][ T4184] device hsr_slave_0 entered promiscuous mode [ 57.256364][ T4184] device hsr_slave_1 entered promiscuous mode [ 57.275334][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.283726][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.316343][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.362246][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.371391][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.378928][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 57.401256][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.427850][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.436313][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.470268][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.478312][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 57.492286][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 57.498974][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 57.505473][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 57.517350][ T4185] device hsr_slave_0 entered promiscuous mode [ 57.525124][ T4185] device hsr_slave_1 entered promiscuous mode [ 57.533116][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.542167][ T4185] Cannot create hsr debugfs directory [ 57.554444][ T4190] device hsr_slave_0 entered promiscuous mode [ 57.561671][ T4190] device hsr_slave_1 entered promiscuous mode [ 57.569797][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.579229][ T4190] Cannot create hsr debugfs directory [ 57.586710][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.594444][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.622738][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.714710][ T4188] device hsr_slave_0 entered promiscuous mode [ 57.724584][ T4188] device hsr_slave_1 entered promiscuous mode [ 57.734157][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.743967][ T4188] Cannot create hsr debugfs directory [ 57.804123][ T4195] device hsr_slave_0 entered promiscuous mode [ 57.812929][ T4195] device hsr_slave_1 entered promiscuous mode [ 57.820932][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.829583][ T4195] Cannot create hsr debugfs directory [ 58.107398][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.121353][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.134874][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.160835][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.201527][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.223857][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.233809][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.249166][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.337718][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.348992][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.358363][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.379250][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.439547][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.452705][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.465013][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.493215][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.511910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.522990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.534802][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.556012][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.563401][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.620720][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.633961][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.646186][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.653887][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.664094][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.676782][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.703064][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.711908][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.724088][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.741947][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.752868][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.763210][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.774000][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.784546][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.792238][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.802746][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.814157][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.823161][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.832320][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.842158][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.852514][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.863223][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.873532][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.892299][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.914327][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.924860][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.935132][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.945621][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.973116][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.991017][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.001356][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.010550][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.018752][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.027749][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.037204][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.046216][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.053416][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.061665][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.070874][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.085037][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.103970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.112050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.134173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.148969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.167220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.199985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.216880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.233262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.242644][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.250012][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.258734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.269396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.278557][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.285726][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.294258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.305082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.313700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.337621][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.349887][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.374519][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.387265][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.417981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.427106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.440221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.448676][ T2351] Bluetooth: hci0: command 0x041b tx timeout [ 59.451694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.467122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.478522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.489289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.529071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.539995][ T2351] Bluetooth: hci2: command 0x041b tx timeout [ 59.547300][ T2351] Bluetooth: hci1: command 0x041b tx timeout [ 59.553859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.554576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.564017][ T2351] Bluetooth: hci4: command 0x041b tx timeout [ 59.576657][ T2351] Bluetooth: hci3: command 0x041b tx timeout [ 59.586898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.596325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.606202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.615576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.624288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.641915][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.653011][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.705333][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.734901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.747756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.772399][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.797842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.807040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.820934][ T4184] device veth0_vlan entered promiscuous mode [ 59.841042][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.856513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.866289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.877738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.888621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.897161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.906112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.915621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.926061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.935977][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.943345][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.951796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.966140][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.976376][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.985515][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.993155][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.010866][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.039415][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.047415][ T4184] device veth1_vlan entered promiscuous mode [ 60.058281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.067550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.078092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.086624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.128412][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.137428][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.146432][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.156678][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.166787][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.176659][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.185615][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.193207][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.202958][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.211176][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.231530][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.242107][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.251814][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.259462][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.269989][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.279236][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.288598][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.297114][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.331136][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.341297][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.350649][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.359664][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.369085][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.377756][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.388132][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.405106][ T4185] device veth0_vlan entered promiscuous mode [ 60.414993][ T4184] device veth0_macvtap entered promiscuous mode [ 60.424360][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.434221][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.443925][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.452708][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.460764][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.469949][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.482879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.492593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.502353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.521104][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.535227][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.554162][ T4184] device veth1_macvtap entered promiscuous mode [ 60.567418][ T4185] device veth1_vlan entered promiscuous mode [ 60.592087][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.602626][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.611780][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.628328][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.637305][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.652989][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.662091][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.671637][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.692948][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.713687][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.744104][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.764890][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.775788][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.786719][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.796832][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.840797][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.856174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.866484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.883557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.894916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.907088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.922579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.933216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.942158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.962786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.972594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.984383][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.994724][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.004656][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.014462][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.028796][ T4185] device veth0_macvtap entered promiscuous mode [ 61.040517][ T4190] device veth0_vlan entered promiscuous mode [ 61.048569][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.066408][ T4185] device veth1_macvtap entered promiscuous mode [ 61.083045][ T4190] device veth1_vlan entered promiscuous mode [ 61.102986][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.120046][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.127540][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.146730][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.163461][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.176397][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.196394][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.218099][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.227311][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.259956][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.272227][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.285548][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.318558][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.327649][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.340598][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.351367][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.363367][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.380891][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.393540][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.406325][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.436752][ T4188] device veth0_vlan entered promiscuous mode [ 61.465001][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.473630][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.484442][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.493258][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.524997][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.534365][ T4254] Bluetooth: hci0: command 0x040f tx timeout [ 61.545838][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.563156][ T4188] device veth1_vlan entered promiscuous mode [ 61.582931][ T4190] device veth0_macvtap entered promiscuous mode [ 61.591526][ T3081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.605415][ T3081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.630303][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.638310][ T4239] Bluetooth: hci3: command 0x040f tx timeout [ 61.647727][ T4239] Bluetooth: hci4: command 0x040f tx timeout [ 61.649645][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.654741][ T4239] Bluetooth: hci1: command 0x040f tx timeout [ 61.667299][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.670943][ T4239] Bluetooth: hci2: command 0x040f tx timeout [ 61.685910][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.717254][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.726903][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.742545][ T4190] device veth1_macvtap entered promiscuous mode [ 61.781752][ T4188] device veth0_macvtap entered promiscuous mode [ 61.792943][ T4188] device veth1_macvtap entered promiscuous mode [ 61.814579][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.824502][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.832428][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.845436][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.852067][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.859202][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.877032][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.890198][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.899564][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.909011][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.919814][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.933555][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.946028][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.958611][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.970612][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.984394][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.996235][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.012653][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.023073][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.033962][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.044568][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.056871][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.071292][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.097765][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.115930][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.127290][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.143895][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.154374][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.164604][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.175366][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.192634][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.203180][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.215393][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.226261][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.237024][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.250605][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.279178][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.290073][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.302500][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.339653][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.350670][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.361987][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.373765][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.385368][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.399387][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.419568][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.429889][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.440976][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.451580][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.464638][ T4195] device veth0_vlan entered promiscuous mode [ 62.480070][ T4290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 62.494784][ T4290] device bridge_slave_1 left promiscuous mode [ 62.508266][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.524129][ T4290] device bridge_slave_0 left promiscuous mode [ 62.530633][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.610853][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.620635][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.634634][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.644617][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.654511][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.664443][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.687962][ T3081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.696805][ T3081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.709753][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.769881][ T4195] device veth1_vlan entered promiscuous mode [ 62.859828][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.888432][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.916724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.947669][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.957175][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.965498][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.981355][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.995050][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.237708][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.308789][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.404640][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.616592][ T4253] Bluetooth: hci0: command 0x0419 tx timeout [ 63.691013][ T4253] Bluetooth: hci2: command 0x0419 tx timeout [ 63.702673][ T4253] Bluetooth: hci1: command 0x0419 tx timeout [ 63.834787][ T4195] device veth0_macvtap entered promiscuous mode [ 63.865050][ T4253] Bluetooth: hci4: command 0x0419 tx timeout [ 63.878459][ T4195] device veth1_macvtap entered promiscuous mode [ 63.886645][ T4253] Bluetooth: hci3: command 0x0419 tx timeout [ 63.901443][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.933730][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.953043][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.989897][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.007158][ T4299] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.021142][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.036385][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.049677][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.061715][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.073147][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.084929][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.227493][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.287268][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.333384][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.418351][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.456179][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.508203][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.544595][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.594735][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.642827][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.702742][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.764166][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.802635][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.829153][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.844062][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.853858][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.876788][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.917497][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.012604][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.052580][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.248705][ T4309] loop3: detected capacity change from 0 to 40427 [ 65.362951][ T4309] F2FS-fs (loop3): invalid crc value [ 65.365937][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.411420][ T4309] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.423193][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.491677][ T4309] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 65.519599][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.552516][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.613540][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.660172][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.897896][ C0] sched: RT throttling activated [ 70.538914][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 70.540248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 70.577909][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.578672][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.579733][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.580797][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.636261][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.637944][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.655925][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.665635][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.932454][ T4361] loop1: detected capacity change from 0 to 512 [ 71.001893][ T4361] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 71.291432][ T4361] EXT4-fs (loop1): 1 orphan inode deleted [ 71.297711][ T4361] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.302235][ T4232] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 71.417324][ T4361] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.455493][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.465511][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.492121][ T4370] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.748211][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 71.824976][ T4232] usb 5-1: not running at top speed; connect to a high speed hub [ 71.948172][ T4232] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.972524][ T4372] loop1: detected capacity change from 0 to 1024 [ 72.026895][ T4232] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.117814][ T4232] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 72.298326][ T4232] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.435586][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 72.899962][ T4232] usb 5-1: Product: syz [ 72.922185][ T4232] usb 5-1: Manufacturer: syz [ 73.002933][ T4372] EXT4-fs (loop1): Test dummy encryption mode enabled [ 73.018312][ T4372] EXT4-fs (loop1): inline encryption not supported [ 73.075102][ T4372] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 74.048301][ T4385] loop2: detected capacity change from 0 to 16 [ 74.158714][ T4232] usb 5-1: 0:2 : does not exist [ 74.220323][ T4388] bridge0: port 3(vlan2) entered blocking state [ 74.252393][ T4388] bridge0: port 3(vlan2) entered disabled state [ 74.422942][ T4232] usb 5-1: USB disconnect, device number 2 [ 74.556128][ T4372] fscrypt (loop1): Error allocating 'xts(aes)' transform: -4 [ 74.859903][ T4198] udevd[4198]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.950840][ T4404] loop0: detected capacity change from 0 to 512 [ 75.012005][ T4404] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.349421][ T4404] EXT4-fs (loop0): 1 truncate cleaned up [ 76.355521][ T4404] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 77.720921][ T4414] loop1: detected capacity change from 0 to 128 [ 80.299451][ T4414] ======================================================= [ 80.299451][ T4414] WARNING: The mand mount option has been deprecated and [ 80.299451][ T4414] and is ignored by this kernel. Remove the mand [ 80.299451][ T4414] option from the mount to silence this warning. [ 80.299451][ T4414] ======================================================= [ 80.356237][ T4414] EXT4-fs (loop1): Test dummy encryption mode enabled [ 80.364143][ T4414] EXT4-fs (loop1): Test dummy encryption mode enabled [ 80.447271][ T4414] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 80.464288][ T4414] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.022051][ T4421] loop0: detected capacity change from 0 to 256 [ 81.865500][ T1326] cfg80211: failed to load regulatory.db [ 82.614961][ T4410] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.622987][ T4410] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.914358][ T4435] loop1: detected capacity change from 0 to 512 [ 83.060439][ T4435] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.30: casefold flag without casefold feature [ 83.193543][ T4435] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.30: couldn't read orphan inode 15 (err -117) [ 83.254135][ T4435] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 83.348430][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.638411][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 83.848364][ T13] usb 3-1: config 1 has an invalid interface number: 137 but max is 0 [ 83.877955][ T13] usb 3-1: config 1 has no interface number 0 [ 83.885344][ T13] usb 3-1: config 1 interface 137 has no altsetting 0 [ 83.975875][ T4441] 9pnet: Insufficient options for proto=fd [ 83.990332][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.044496][ T4443] overlayfs: failed to clone upperpath [ 84.056767][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.080116][ T4443] overlayfs: failed to clone upperpath [ 84.088665][ T13] usb 3-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 84.102196][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.122491][ T13] usb 3-1: Product: syz [ 84.126985][ T13] usb 3-1: Manufacturer: syz [ 84.143946][ T13] usb 3-1: SerialNumber: syz [ 84.756557][ T4410] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.773611][ T4410] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.792707][ T4410] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.805041][ T4410] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.093654][ T4429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.28'. [ 85.251495][ T4410] syz.4.23 (4410) used greatest stack depth: 20704 bytes left [ 85.953700][ T4466] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 86.389705][ T13] pl2303 3-1:1.137: required interrupt-in endpoint missing [ 86.458304][ T13] usb 3-1: USB disconnect, device number 2 [ 87.089805][ T4478] fuse: Unknown parameter '0x0000000000000003' [ 87.621185][ T4477] device syzkaller0 entered promiscuous mode [ 87.753321][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.325014][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.336640][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.432877][ T4485] device bridge_slave_0 left promiscuous mode [ 88.784500][ T4485] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.896355][ T4485] device bridge_slave_1 left promiscuous mode [ 88.928276][ T4485] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.162960][ T4485] bond0: (slave bond_slave_0): Releasing backup interface [ 90.191024][ T4485] bond0: (slave bond_slave_1): Releasing backup interface [ 90.372539][ T4485] team0: Port device team_slave_0 removed [ 90.936508][ T4485] team0: Port device team_slave_1 removed [ 90.981669][ T4485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.998223][ T4485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.015658][ T4485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.028470][ T4485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.074853][ T4485] syz.3.42 (4485) used greatest stack depth: 20672 bytes left [ 91.293400][ T4509] Zero length message leads to an empty skb [ 91.410957][ T4512] input: syz1 as /devices/virtual/input/input6 [ 92.044451][ T4520] device veth3 entered promiscuous mode [ 92.198239][ T4524] loop0: detected capacity change from 0 to 512 [ 92.596446][ T4524] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.833689][ T4524] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 92.851386][ T4524] EXT4-fs (loop0): 1 truncate cleaned up [ 92.857161][ T4524] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 93.215802][ T4529] loop2: detected capacity change from 0 to 512 [ 93.354418][ T4529] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 93.395497][ T4529] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.528452][ T4529] EXT4-fs (loop2): 1 truncate cleaned up [ 93.534261][ T4529] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000004,mblk_io_submit,resuid=0x0000000000000000,norecovery,,errors=continue. Quota mode: none. [ 95.446022][ T4549] loop3: detected capacity change from 0 to 128 [ 95.573646][ T4549] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.645268][ T4549] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.540431][ T4557] loop4: detected capacity change from 0 to 512 [ 96.670845][ T4557] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.688958][ T144] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.854295][ T4557] EXT4-fs (loop4): 1 truncate cleaned up [ 96.953650][ T4557] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 97.008025][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.180588][ T4542] loop0: detected capacity change from 0 to 40427 [ 97.221021][ T4542] F2FS-fs (loop0): invalid crc value [ 97.231365][ T4542] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.365764][ T4542] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 97.383639][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.383699][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.383736][ T13] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 97.383761][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.385660][ T13] usb 3-1: config 0 descriptor?? [ 97.672175][ T4232] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.058219][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.085188][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.095774][ T13] hid-led: probe of 0003:0FC5:B080.0001 failed with error -71 [ 98.153680][ T13] usb 3-1: USB disconnect, device number 3 [ 98.167986][ T4232] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 98.194832][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.219427][ T4232] usb 5-1: config 0 descriptor?? [ 99.102732][ T4593] loop3: detected capacity change from 0 to 16 [ 99.576233][ T4232] hid-led 0003:0FC5:B080.0002: item fetching failed at offset 1/3 [ 99.630463][ T4600] loop0: detected capacity change from 0 to 512 [ 99.649340][ T4232] hid-led: probe of 0003:0FC5:B080.0002 failed with error -22 [ 99.830797][ T1326] usb 5-1: USB disconnect, device number 3 [ 100.794977][ T4600] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 100.803842][ T4616] loop4: detected capacity change from 0 to 1024 [ 100.834403][ T4600] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.971075][ T4616] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.998163][ T4616] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.130651][ T4621] 9pnet: Insufficient options for proto=fd [ 101.745975][ T4616] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 3: comm syz.4.79: lblock 3 mapped to illegal pblock 3 (length 3) [ 101.872502][ T4616] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 101.898232][ T4616] EXT4-fs (loop4): This should not happen!! Data will be lost [ 101.898232][ T4616] [ 101.994784][ T4417] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 102.271152][ T4417] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 102.398083][ T4417] EXT4-fs (loop4): This should not happen!! Data will be lost [ 102.398083][ T4417] [ 102.916642][ T4645] loop0: detected capacity change from 0 to 512 [ 103.668745][ T4645] EXT4-fs (loop0): 1 orphan inode deleted [ 103.918372][ T4645] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.968312][ T4645] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.242934][ T4667] loop4: detected capacity change from 0 to 1024 [ 104.336240][ T4670] input: syz1 as /devices/virtual/input/input8 [ 104.455013][ T4667] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 104.714124][ T4678] loop2: detected capacity change from 0 to 256 [ 104.772116][ T4678] exfat: Unknown parameter 'iochar{et' [ 105.255845][ T4667] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 105.747977][ T4688] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.353608][ T4693] loop3: detected capacity change from 0 to 512 [ 110.648027][ T4693] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.659865][ T4693] EXT4-fs: failed to create workqueue [ 110.665463][ T4693] EXT4-fs (loop3): mount failed [ 110.976341][ T4700] loop2: detected capacity change from 0 to 128 [ 111.426223][ T4701] loop0: detected capacity change from 0 to 512 [ 111.761533][ T4701] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 112.159488][ T4701] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.100: corrupted in-inode xattr [ 112.184220][ T4701] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.100: couldn't read orphan inode 15 (err -117) [ 112.216220][ T4701] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000008,noblock_validity,noload,delalloc,max_batch_time=0x0000000000000001,discard,inode_readahead_blks=0x0000000000080000,nomblk_io_submit,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 112.366979][ T4700] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.577151][ T4705] loop4: detected capacity change from 0 to 128 [ 112.615289][ T4700] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.733727][ T4709] usb usb1: usbfs: process 4709 (syz.0.100) did not claim interface 0 before use [ 113.532377][ T4705] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.582133][ T4705] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.222230][ T26] audit: type=1326 audit(1757959582.296:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aeeb3fba9 code=0x7ffc0000 [ 114.303515][ T4694] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.308567][ T26] audit: type=1326 audit(1757959582.306:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aeeb3fba9 code=0x7ffc0000 [ 114.372348][ T4721] input: syz1 as /devices/virtual/input/input9 [ 114.398003][ T26] audit: type=1326 audit(1757959582.306:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2aeeb3fba9 code=0x7ffc0000 [ 114.487989][ T26] audit: type=1326 audit(1757959582.306:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aeeb3fba9 code=0x7ffc0000 [ 115.639374][ T26] audit: type=1326 audit(1757959582.306:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f2aeeb3fba9 code=0x7ffc0000 [ 115.681285][ T26] audit: type=1326 audit(1757959582.316:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2aeeb36b67 code=0x7ffc0000 [ 115.714576][ T4694] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.757985][ T26] audit: type=1326 audit(1757959582.316:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aeeadbda9 code=0x7ffc0000 [ 115.864482][ T26] audit: type=1326 audit(1757959582.316:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f2aeeb3fba9 code=0x7ffc0000 [ 115.929264][ T26] audit: type=1326 audit(1757959582.316:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2aeeb36b67 code=0x7ffc0000 [ 116.012683][ T26] audit: type=1326 audit(1757959582.316:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aeeadbda9 code=0x7ffc0000 [ 116.046767][ T4736] capability: warning: `syz.0.109' uses 32-bit capabilities (legacy support in use) [ 118.727971][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.008177][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 119.138760][ T21] usb 1-1: config 0 has no interfaces? [ 119.144721][ T21] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 119.258436][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.515154][ T21] usb 1-1: config 0 descriptor?? [ 119.571913][ T4767] netlink: set zone limit has 8 unknown bytes [ 119.748492][ T4772] loop3: detected capacity change from 0 to 512 [ 119.893785][ T1110] usb 1-1: USB disconnect, device number 2 [ 119.905925][ T4772] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 119.923831][ T4772] EXT4-fs (loop3): inline encryption not supported [ 120.774887][ T4772] EXT4-fs (loop3): Test dummy encryption mode enabled [ 120.785826][ T4772] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 120.800931][ T4772] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.840413][ T4782] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.889981][ T4772] EXT4-fs (loop3): 1 truncate cleaned up [ 120.895835][ T4772] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 122.571522][ T4798] loop0: detected capacity change from 0 to 256 [ 122.576587][ T4800] overlayfs: failed to clone upperpath [ 122.618704][ T4802] loop4: detected capacity change from 0 to 256 [ 122.795388][ T4803] block device autoloading is deprecated and will be removed. [ 123.836762][ T4819] process 'syz.1.135' launched '/dev/fd/6' with NULL argv: empty string added [ 125.676254][ T4832] syz.1.138 uses obsolete (PF_INET,SOCK_PACKET) [ 127.607038][ T4851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.392742][ T4863] loop2: detected capacity change from 0 to 256 [ 128.707967][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 128.978455][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 129.098249][ T21] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.211893][ T21] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.476689][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 129.494028][ T21] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 129.507960][ T21] usb 4-1: Product: syz [ 129.512223][ T21] usb 4-1: Manufacturer: syz [ 130.475178][ T21] hub 4-1:4.0: USB hub found [ 130.600801][ T4867] udc-core: couldn't find an available UDC or it's busy [ 130.628041][ T21] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 130.629975][ T4867] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 130.858251][ T21] usb 4-1: USB disconnect, device number 2 [ 131.547179][ T4904] 9p: Unknown Cache mode readahead [ 131.808753][ T4904] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 132.499085][ T4911] block device autoloading is deprecated and will be removed. [ 132.889966][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.896771][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.341890][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 135.812386][ T4962] ptrace attach of "./syz-executor exec"[4190] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋 [ 135.848149][ T4239] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 136.058123][ T21] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 136.077994][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.099729][ T21] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.114251][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.138277][ T21] usb 3-1: config 0 descriptor?? [ 136.191598][ T21] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 136.388023][ T4239] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 136.401589][ T4239] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.420315][ T4239] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.435680][ T4239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.565238][ T4239] usb 1-1: config 0 descriptor?? [ 136.702902][ T4239] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 137.479573][ T4825] usb 3-1: USB disconnect, device number 4 [ 137.664412][ T4982] tmpfs: Unknown parameter 'usrquota' [ 137.697361][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 137.951584][ T4825] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 139.550239][ T4993] loop0: detected capacity change from 0 to 256 [ 140.339662][ T4827] usb 1-1: USB disconnect, device number 3 [ 140.698058][ T4825] usb 3-1: device descriptor read/all, error -71 [ 141.909584][ T5018] 9pnet_virtio: no channels available for device syz [ 146.701038][ T5047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.213'. [ 147.014026][ T5050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.154743][ T5049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.157930][ T5034] syz.1.208 (5034) used greatest stack depth: 18592 bytes left [ 147.186650][ T5052] sctp: failed to load transform for md5: -2 [ 147.618012][ T4829] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 148.061924][ T5076] loop3: detected capacity change from 0 to 256 [ 148.078364][ T4829] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.102159][ T4829] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 149.068069][ T4829] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.122879][ T4829] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.163169][ T4829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.240966][ T4829] usbtmc 3-1:16.0: bulk endpoints not found [ 149.756031][ T4225] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 150.008032][ T4225] usb 5-1: Using ep0 maxpacket: 16 [ 150.148212][ T4225] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.177767][ T4225] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.378614][ T4225] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 150.390527][ T4225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.402940][ T4225] usb 5-1: Product: syz [ 150.407154][ T4225] usb 5-1: Manufacturer: syz [ 150.415509][ T4225] usb 5-1: SerialNumber: syz [ 150.450284][ T4225] usb 5-1: config 0 descriptor?? [ 150.469580][ T5107] loop3: detected capacity change from 0 to 256 [ 150.715474][ T5070] [ 150.717923][ T5070] ====================================================== [ 150.725032][ T5070] WARNING: possible circular locking dependency detected [ 150.732037][ T5070] syzkaller #0 Not tainted [ 150.736472][ T5070] ------------------------------------------------------ [ 150.743561][ T5070] syz.4.219/5070 is trying to acquire lock: [ 150.749543][ T5070] ffff88801a5dcb98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 150.760322][ T5070] [ 150.760322][ T5070] but task is already holding lock: [ 150.767726][ T5070] ffff88801a5dcff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 150.777205][ T5070] [ 150.777205][ T5070] which lock already depends on the new lock. [ 150.777205][ T5070] [ 150.787607][ T5070] [ 150.787607][ T5070] the existing dependency chain (in reverse order) is: [ 150.796701][ T5070] [ 150.796701][ T5070] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 150.804517][ T5070] __mutex_lock_common+0x1eb/0x2390 [ 150.810259][ T5070] mutex_lock_nested+0x17/0x20 [ 150.815565][ T5070] hci_dev_do_close+0x5f/0x1030 [ 150.821095][ T5070] hci_rfkill_set_block+0x10a/0x190 [ 150.826948][ T5070] rfkill_set_block+0x1c6/0x420 [ 150.832330][ T5070] rfkill_fop_write+0x458/0x560 [ 150.837791][ T5070] vfs_write+0x300/0xd00 [ 150.842545][ T5070] ksys_write+0x14d/0x250 [ 150.847380][ T5070] do_syscall_64+0x4c/0xa0 [ 150.852494][ T5070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.859162][ T5070] [ 150.859162][ T5070] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 150.867252][ T5070] __mutex_lock_common+0x1eb/0x2390 [ 150.873045][ T5070] mutex_lock_nested+0x17/0x20 [ 150.878324][ T5070] rfkill_register+0x33/0x8a0 [ 150.883507][ T5070] hci_register_dev+0x452/0x970 [ 150.889133][ T5070] vhci_create_device+0x32c/0x5c0 [ 150.894767][ T5070] vhci_write+0x391/0x450 [ 150.899697][ T5070] vfs_write+0x712/0xd00 [ 150.904616][ T5070] ksys_write+0x14d/0x250 [ 150.909740][ T5070] do_syscall_64+0x4c/0xa0 [ 150.914689][ T5070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.921091][ T5070] [ 150.921091][ T5070] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 150.929095][ T5070] __mutex_lock_common+0x1eb/0x2390 [ 150.934828][ T5070] mutex_lock_nested+0x17/0x20 [ 150.940291][ T5070] vhci_send_frame+0x88/0x100 [ 150.945506][ T5070] hci_send_frame+0x1a9/0x2e0 [ 150.950700][ T5070] hci_tx_work+0x9f9/0x1710 [ 150.955994][ T5070] process_one_work+0x863/0x1000 [ 150.961439][ T5070] worker_thread+0xaa8/0x12a0 [ 150.966620][ T5070] kthread+0x436/0x520 [ 150.971194][ T5070] ret_from_fork+0x1f/0x30 [ 150.976118][ T5070] [ 150.976118][ T5070] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 150.985594][ T5070] __lock_acquire+0x2c33/0x7c60 [ 150.990955][ T5070] lock_acquire+0x197/0x3f0 [ 150.995968][ T5070] __flush_work+0xdd/0x1b0 [ 151.000887][ T5070] hci_dev_do_close+0x1e7/0x1030 [ 151.006331][ T5070] hci_rfkill_set_block+0x10a/0x190 [ 151.012036][ T5070] rfkill_set_block+0x1c6/0x420 [ 151.017392][ T5070] rfkill_fop_write+0x458/0x560 [ 151.022765][ T5070] vfs_write+0x300/0xd00 [ 151.027601][ T5070] ksys_write+0x14d/0x250 [ 151.032654][ T5070] do_syscall_64+0x4c/0xa0 [ 151.037675][ T5070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.044182][ T5070] [ 151.044182][ T5070] other info that might help us debug this: [ 151.044182][ T5070] [ 151.054397][ T5070] Chain exists of: [ 151.054397][ T5070] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 151.054397][ T5070] [ 151.069352][ T5070] Possible unsafe locking scenario: [ 151.069352][ T5070] [ 151.077622][ T5070] CPU0 CPU1 [ 151.084030][ T5070] ---- ---- [ 151.090029][ T5070] lock(&hdev->req_lock); [ 151.094485][ T5070] lock(rfkill_global_mutex); [ 151.101877][ T5070] lock(&hdev->req_lock); [ 151.108891][ T5070] lock((work_completion)(&hdev->tx_work)); [ 151.115071][ T5070] [ 151.115071][ T5070] *** DEADLOCK *** [ 151.115071][ T5070] [ 151.123611][ T5070] 2 locks held by syz.4.219/5070: [ 151.128634][ T5070] #0: ffffffff8d4c0468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 151.139004][ T5070] #1: ffff88801a5dcff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 151.149073][ T5070] [ 151.149073][ T5070] stack backtrace: [ 151.155030][ T5070] CPU: 0 PID: 5070 Comm: syz.4.219 Not tainted syzkaller #0 [ 151.162644][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.172979][ T5070] Call Trace: [ 151.176368][ T5070] [ 151.179389][ T5070] dump_stack_lvl+0x168/0x230 [ 151.184064][ T5070] ? load_image+0x3b0/0x3b0 [ 151.188575][ T5070] ? show_regs_print_info+0x20/0x20 [ 151.193763][ T5070] ? print_circular_bug+0x12b/0x1a0 [ 151.198956][ T5070] check_noncircular+0x274/0x310 [ 151.203878][ T5070] ? add_chain_block+0x940/0x940 [ 151.208883][ T5070] ? lockdep_lock+0xdc/0x1e0 [ 151.213479][ T5070] ? mark_lock+0x94/0x320 [ 151.217987][ T5070] __lock_acquire+0x2c33/0x7c60 [ 151.223096][ T5070] ? lockdep_unlock+0x134/0x2d0 [ 151.228123][ T5070] ? lockdep_lock+0x1e0/0x1e0 [ 151.233139][ T5070] ? mark_lock+0x94/0x320 [ 151.237459][ T5070] ? verify_lock_unused+0x140/0x140 [ 151.242964][ T5070] ? __lock_acquire+0x12d9/0x7c60 [ 151.248346][ T5070] lock_acquire+0x197/0x3f0 [ 151.253489][ T5070] ? __flush_work+0xc1/0x1b0 [ 151.258074][ T5070] ? __mutex_trylock_common+0x14f/0x250 [ 151.263706][ T5070] ? read_lock_is_recursive+0x10/0x10 [ 151.269230][ T5070] ? lock_chain_count+0x20/0x20 [ 151.274243][ T5070] ? mark_lock+0x94/0x320 [ 151.278667][ T5070] __flush_work+0xdd/0x1b0 [ 151.283070][ T5070] ? __flush_work+0xc1/0x1b0 [ 151.287730][ T5070] ? flush_work+0x20/0x20 [ 151.292043][ T5070] ? hci_leds_update_powered+0x148/0x160 [ 151.297667][ T5070] ? rcu_lock_release+0x5/0x20 [ 151.302563][ T5070] ? __lock_acquire+0x7c60/0x7c60 [ 151.307765][ T5070] hci_dev_do_close+0x1e7/0x1030 [ 151.312701][ T5070] ? _raw_spin_unlock+0x40/0x40 [ 151.317628][ T5070] hci_rfkill_set_block+0x10a/0x190 [ 151.322821][ T5070] ? rcu_lock_release+0x20/0x20 [ 151.327876][ T5070] rfkill_set_block+0x1c6/0x420 [ 151.332843][ T5070] rfkill_fop_write+0x458/0x560 [ 151.337953][ T5070] ? rfkill_fop_read+0x4b0/0x4b0 [ 151.342877][ T5070] ? common_file_perm+0xc0/0x1c0 [ 151.347891][ T5070] ? fsnotify_perm+0x5d/0x560 [ 151.352657][ T5070] ? security_file_permission+0x75/0xa0 [ 151.358187][ T5070] ? rfkill_fop_read+0x4b0/0x4b0 [ 151.363194][ T5070] vfs_write+0x300/0xd00 [ 151.367443][ T5070] ? file_end_write+0x250/0x250 [ 151.372320][ T5070] ? __fget_files+0x40f/0x480 [ 151.376984][ T5070] ? __fdget_pos+0x1e2/0x370 [ 151.381644][ T5070] ? ksys_write+0x71/0x250 [ 151.386145][ T5070] ksys_write+0x14d/0x250 [ 151.390461][ T5070] ? __ia32_sys_read+0x80/0x80 [ 151.395296][ T5070] ? lockdep_hardirqs_on+0x94/0x140 [ 151.400505][ T5070] do_syscall_64+0x4c/0xa0 [ 151.405100][ T5070] ? clear_bhb_loop+0x30/0x80 [ 151.409762][ T5070] ? clear_bhb_loop+0x30/0x80 [ 151.414426][ T5070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.420304][ T5070] RIP: 0033:0x7fbe755f1ba9 [ 151.424709][ T5070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.445024][ T5070] RSP: 002b:00007fbe73859038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 151.453611][ T5070] RAX: ffffffffffffffda RBX: 00007fbe75838fa0 RCX: 00007fbe755f1ba9 [ 151.461663][ T5070] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000004 [ 151.469898][ T5070] RBP: 00007fbe75674e19 R08: 0000000000000000 R09: 0000000000000000 [ 151.477878][ T5070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.485928][ T5070] R13: 00007fbe75839038 R14: 00007fbe75838fa0 R15: 00007ffed7bb55d8 [ 151.494008][ T5070] [ 151.909066][ T4829] usb 3-1: USB disconnect, device number 7 [ 151.982525][ T4225] usb 5-1: USB disconnect, device number 4