last executing test programs: 1m27.381329143s ago: executing program 3 (id=171): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x7, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) 1m27.249416451s ago: executing program 3 (id=173): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) 1m27.147903187s ago: executing program 3 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004"], 0x34}}, 0x0) 1m26.9250572s ago: executing program 3 (id=177): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(r0, 0x0, 0x5) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x400, 0x80000001) 1m25.251153258s ago: executing program 3 (id=180): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) mount(0x0, 0x0, 0x0, 0x8b00a2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, 0x0) 1m25.091678858s ago: executing program 3 (id=182): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)="f175f1d5f33e27195a41725b3725d0083b23d99d8241f21d2f836248a1989fbff3e2a409e43c28c6d3515b60f4fae1980d484bbb96b97befc066c859f34754e6eb20b9359616db6b030cb0b58a3420f06aaa4eb16cf758e45d4fc9229193c91fcb5e46a42eec05aa9b2b90ee707ad884de8f5a850db460d50de399bd56e1913d22c85250e2479264e7be91389bb0733978f693325a90a2c6b380924d1a9f30256c8fa8d1cc0d860db00a94ae34c77a3d5057f01f67efbf0dbfe8ccf77f879b43007072ae69aa44b7bcc66e8a", 0xcc}, {&(0x7f0000000100)="d2e9c101ba5753dc4313fb4d3a5f8b712c3616aa3cf6009dbed255e194f40573b25e840481563be6593c2232ca3627cc59b42a600a5d8fdbf643226a0c34b6c33c3f6980732551c32ddc66436b3c976387a5fd6db54d41793ee8ebc2665c17b3b94a082f815306796a7375816a3b58b04d91413a154f426112500c7c664a4f75800da04a21ffc5f72d3cdae59e6da1fc5d0cc2f49ee76c8694eb0ebdf4281753b11540c2bad595cf299bfde2d395cd84226684cde5948aa20c6b18f339b0783855f96a9c340da794db3451131d9e20b1539cce6a84855c8e05", 0xd9}, {&(0x7f0000000540)="e507bed8d1c2d65d5ad0c18d30f06a3434c3932f0b24f02c9a136b2995100795df3c3aa57066187c6c449e5988a68d1ccb6ecd2902e1606c65ac870cf6db04bb8c1f44220a4b466ca469bf556d9a9c8b69a6807df08399aabaee2f55a4f5773bc7fc35ad4a95906628707fbe56d393197f31f4ff9402270e293db47452e35c1cc8356bddf3e5df908793ee2fe85d54fc5c8190911bb76159c5852d8782096f4b37f151bfcba95c665f96a3673522c7da7d35231b66f5fe763d5f26df516eaf361cc33eaa3781e65f77e0d989b6", 0xcd}, {&(0x7f0000000640)="5e8cc8d64794ba4aa7f6fe5ca37af75dd7cd7666926ab140649f107a62733471e781055e2376b29f324be91398e7e5079e52bf111bfdea80d67bde41eb547cef5f78d1dea32f097a8c47d66c285b8059a5ae9c180e9a7e", 0x57}, {&(0x7f0000000740)="74403778a9c50500cd78c839b9b3d702404738", 0x13}], 0x5}, 0x8000) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) 1m23.914876387s ago: executing program 32 (id=182): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)="f175f1d5f33e27195a41725b3725d0083b23d99d8241f21d2f836248a1989fbff3e2a409e43c28c6d3515b60f4fae1980d484bbb96b97befc066c859f34754e6eb20b9359616db6b030cb0b58a3420f06aaa4eb16cf758e45d4fc9229193c91fcb5e46a42eec05aa9b2b90ee707ad884de8f5a850db460d50de399bd56e1913d22c85250e2479264e7be91389bb0733978f693325a90a2c6b380924d1a9f30256c8fa8d1cc0d860db00a94ae34c77a3d5057f01f67efbf0dbfe8ccf77f879b43007072ae69aa44b7bcc66e8a", 0xcc}, {&(0x7f0000000100)="d2e9c101ba5753dc4313fb4d3a5f8b712c3616aa3cf6009dbed255e194f40573b25e840481563be6593c2232ca3627cc59b42a600a5d8fdbf643226a0c34b6c33c3f6980732551c32ddc66436b3c976387a5fd6db54d41793ee8ebc2665c17b3b94a082f815306796a7375816a3b58b04d91413a154f426112500c7c664a4f75800da04a21ffc5f72d3cdae59e6da1fc5d0cc2f49ee76c8694eb0ebdf4281753b11540c2bad595cf299bfde2d395cd84226684cde5948aa20c6b18f339b0783855f96a9c340da794db3451131d9e20b1539cce6a84855c8e05", 0xd9}, {&(0x7f0000000540)="e507bed8d1c2d65d5ad0c18d30f06a3434c3932f0b24f02c9a136b2995100795df3c3aa57066187c6c449e5988a68d1ccb6ecd2902e1606c65ac870cf6db04bb8c1f44220a4b466ca469bf556d9a9c8b69a6807df08399aabaee2f55a4f5773bc7fc35ad4a95906628707fbe56d393197f31f4ff9402270e293db47452e35c1cc8356bddf3e5df908793ee2fe85d54fc5c8190911bb76159c5852d8782096f4b37f151bfcba95c665f96a3673522c7da7d35231b66f5fe763d5f26df516eaf361cc33eaa3781e65f77e0d989b6", 0xcd}, {&(0x7f0000000640)="5e8cc8d64794ba4aa7f6fe5ca37af75dd7cd7666926ab140649f107a62733471e781055e2376b29f324be91398e7e5079e52bf111bfdea80d67bde41eb547cef5f78d1dea32f097a8c47d66c285b8059a5ae9c180e9a7e", 0x57}, {&(0x7f0000000740)="74403778a9c50500cd78c839b9b3d702404738", 0x13}], 0x5}, 0x8000) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) 7.008062439s ago: executing program 4 (id=635): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000004600)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ptrace$getregset(0x4204, r0, 0x4, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f00000004c0)=""/4096) 5.46373905s ago: executing program 4 (id=637): r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_pidfd_open(0x0, 0x0) setns(r2, 0x24020000) 4.504776676s ago: executing program 5 (id=642): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x25, 0x0, 0x1) 4.185190845s ago: executing program 5 (id=644): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400f9009500"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 4.045729163s ago: executing program 2 (id=645): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f00000001c0)={[{@barrier}, {@jqfmt_vfsv0}, {@nojournal_checksum}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000e40)="$eJzs3EtvG1UbAOB3xnV6/5qv3wV6AQIFEXFJmrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RfACyR+AWsYIOAFYgtSGyQEFKFuqGwGjT2TOpcHGzHjil+HsntOTNnfM47M8c+MyfjAAbWSP5PErErIr4fithTzy4vMFL/79bNy9O/37w8nUSWvfRrUiv3283L02XRcrudRWY0jUjfTeLAGvXOX7x0dmp2duZCkR9fOPfG+PzFS4+fOTd1eub0zPnJY8eOHpl46snJJ7oS5+68rfvfnju47/ir11+YPnH9ta8+yZfvKtY3xlE33PJ7b2+yfCRGlu/LBg9F/JRlWct1/N3tbkgnW/rYENpSiYj8cFXz/h97ohK3D96eeP6dvjYO6Kksy7Ktq5ZWysRiBvyDJdF0VbqpDQE2WflFn1//lq9NHH703Y1n6hdAedy3ild9zZZIizLVFde33TQSEScW//ggf8Wa9yEAALrrs3z889ha4780/t9Q7l9Rnxsajoh/R8TeiPhPRPw3Iv4XUSt7V0Tc3Wb9Iyvyq8c/3zabXumKfPz3dDG3dXv8N1SLvzBcKXK7a/FXk1NnZmcOF/tkNKpb8/zEOnV8/tx37y9lti1f1zj+y195/eVYsC79ZcuKG3QnpxamuhB6zY2rS4GuGP8mSzMBSUTsi4j9Hbx/vs/OPPLxwWbr/zr+dXRhnin7KOLh+vFfjBXxl5L15yfHt8XszOHx8qxY7etvrr3YrP4Nxd8FN65G7Fh1/kdj/MNJ43ztfPt1XPvhvabXNJ2e/0PJy7X0ULHsramFhQsTEUPJ4urlk7e3LfNl+Tz+0UNrxZ/W3uPDYrsDEZGfxPdExL0RcV/R9vsj4oGIOLRO/F8+++DrncffW3n8J9s6/u0nKme/+LRZ/a0d/6O11GixpJXPv1YbuJF9BwAAAHeKtPY38Ek6tpRO07GxiFdq93Z3pLNz8wuPnpp78/zJ+t/KD0c1Le90pQ33QyeKe8NlfnJF/kjtvnGWZdn2Wn5sem62V3PqQGt2Nun/uZ8r/W4d0HNtzaM1e6INuCO11f9XPy0E3ME8rw2Dq9X+X+1xO4DN5/sfBtda/f9KxK0+NAXYZL7/YXDp/zC49H8YXPo/DKSNPNe/XmLv8Y43zzZUe/n7Kh1u/mNP9sZ6iUqnm29t42cOepCIdM1V1YjoS3vaSqS9qyI/+drbKj+QrRa+0umJ3XZi2cfEUD8+mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhzwAAAP//dNfhIw==") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x82) 3.896703591s ago: executing program 5 (id=647): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000004600)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ptrace$getregset(0x4204, r0, 0x4, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f00000004c0)=""/4096) 3.894983652s ago: executing program 1 (id=648): r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) write$bt_hci(r0, 0x0, 0x0) 3.113311947s ago: executing program 5 (id=649): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x8100, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002400)=@newtfilter={0x9c0, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0xffff, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x994, 0x2, [@TCA_U32_SEL={0x124, 0x5, {0xf, 0x4, 0xb8, 0x1, 0x4, 0x100, 0x4, 0x8, [{0xc, 0xe9, 0x1, 0x7}, {0x6c8, 0x40, 0x1, 0xa2}, {0x2, 0x4, 0x4}, {0x98, 0x1, 0x1, 0x4}, {0x7ff, 0x4, 0x5683, 0x2}, {0x8, 0x7, 0x6, 0x40}, {0x6, 0x1, 0x7fffffff, 0x8}, {0x3ca, 0x7, 0xb470, 0x72c}, {0x1, 0xa, 0x6, 0xfffffffa}, {0x0, 0x694, 0x8000, 0x2}, {0x33, 0x8, 0xfffffffc, 0x3ff}, {0x9, 0xa619, 0xfffff801, 0x6}, {0x2, 0x8bd9, 0x2409, 0x8}, {0x6066, 0xfffffffe, 0x1ff, 0xea}, {0xfffffff7, 0x55, 0x4}, {0x3, 0x2, 0xfff, 0xa}, {0xb06, 0x4, 0x9, 0x5b58000}]}}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x5, 0xff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x200, 0x80, 0x1, 0x1, 0x0, 0x4, 0x2000007, 0x2, 0x1, 0x610, 0x100, 0xb, 0xfb, 0x4, 0xa29, 0x7f, 0x82, 0x200, 0x48, 0x2, 0x1, 0x2, 0x101, 0x10005, 0xdd, 0x5, 0x8, 0x431d3ae0, 0xc03, 0x9, 0xfffffffa, 0x9349, 0x1, 0x100, 0x7ff, 0x1, 0x1, 0x8, 0x401, 0x3, 0x6, 0x5, 0x6, 0x19e, 0x2, 0x6, 0xf, 0xc00000, 0xe, 0x7, 0x3326ea0a, 0x8007, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773818, 0x8, 0x8001, 0x6, 0x7f, 0x373, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x49e, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x10000, 0x3, 0x2, 0x9, 0x3, 0x7fffffff, 0x101, 0x3, 0xc42, 0x4, 0x7, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0x8000, 0x5, 0x2fb, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xfffffffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x91e0000, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0x6, 0xdc, 0x9, 0x800, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x6, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0xfa52, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x400, 0x0, 0x5, 0xe, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0xfffffff9, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x3, 0x8, 0x8, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x6, 0xfffffff7, 0xe4f7, 0x6, 0x4, 0xfffffffc, 0x8, 0x9, 0x1c15, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x80000001, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x4, 0x1, 0x3, 0x7, 0x9, 0x7, 0x3b42, 0x0, 0x1, 0x9, 0x1, 0x0, 0x3, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x8, 0xffffffff, 0xffff0d7b, 0x6, 0x3, 0xc79, 0x74100000, 0x800, 0x7, 0xfffffffd, 0x76e8, 0x4, 0x0, 0x9, 0xb046, 0x7, 0x101, 0x8, 0x20000, 0x6, 0x4, 0xfffffffe, 0x0, 0x7f, 0x3, 0x7c68080b, 0x4, 0x9, 0x3, 0x80000001, 0x0, 0xa, 0x7, 0x2, 0x4, 0x62f1, 0x2, 0x995, 0x1, 0xf, 0xb, 0x7f, 0x9, 0x7, 0x4, 0x6, 0xc39, 0x6, 0x7, 0x2, 0x5, 0x4b0f, 0x3ff, 0x3, 0x93, 0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x9, 0xffffffff, 0x4, 0x9, 0xa2c, 0xda0b, 0x7, 0x40, 0x9, 0xefa8, 0x1, 0xe6, 0x0, 0xe, 0x2, 0x4, 0x6, 0xfffffff9, 0x4, 0x8, 0x4, 0x0, 0xea, 0xbed1, 0x10001, 0x8, 0x7fff, 0x3, 0x8, 0x0, 0x9, 0x5dac, 0xdb, 0x1, 0x8, 0x9, 0x2, 0x2000, 0xfc000000, 0xfffffff9, 0x3, 0x4, 0x0, 0x0, 0x4, 0x437, 0xfffffff9, 0x5, 0x3, 0xe2000, 0x6, 0x8001, 0xa, 0x6, 0x5, 0x0, 0xef83, 0x8, 0x4, 0x3ff, 0x0, 0x5, 0x10000, 0xf6, 0x7, 0x3, 0x3ff, 0x5, 0xaf7e, 0x5, 0x7ff, 0x2, 0x3, 0x8, 0x525, 0x9, 0x0, 0x3, 0x401, 0x9, 0x6, 0x8, 0x1, 0x8, 0x7, 0xfffffffb, 0x7, 0x81000001, 0xfffffffd, 0x4, 0x8fb3, 0x7fffffff, 0xfffffff9, 0x800, 0x2, 0x7fff, 0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x82, 0xff, 0x6, 0x3, 0x46, 0x1, 0x958, 0x3, 0x80000001, 0x7, 0x9, 0x5, 0xfffffffa, 0x0, 0x5, 0x4d4, 0x9, 0x8, 0x75968514, 0x0, 0x46cc, 0x8, 0x6, 0x40, 0x9, 0x8, 0x4, 0x7054, 0x3, 0x3, 0x1, 0x70, 0xa, 0x9, 0x9, 0x400, 0x40003dc1, 0x0, 0xe6a2, 0x8, 0x6, 0x8, 0x6, 0x80000001, 0xff, 0x2, 0x6, 0x80000000, 0x0, 0xd42700, 0x8001, 0xb, 0x8000, 0x9, 0x4, 0x6302, 0x1eeacb39, 0xe, 0x4, 0x5, 0xd9a, 0x9, 0x0, 0x8, 0x3, 0x2, 0x0, 0x100, 0x3ff, 0x5, 0x3ff, 0x40, 0x7ffffffe, 0xff, 0x5, 0x6, 0x1000, 0x37, 0x81, 0x7fffffff, 0x9, 0x5ca, 0x5, 0x5d6a, 0x2, 0x3, 0x6, 0x81, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x17f, 0x0, 0x1ff}, {0x6, 0x2, 0xff, 0x7, 0x5, 0xffffffff}, 0x9, 0xe90, 0x6db5cd0}}]}]}}]}, 0x9c0}, 0x1, 0x0, 0x0, 0x1}, 0x2404c084) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0xd, 0x0, &(0x7f0000000c40)="63eced8e46b70300b2dc0002df", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.094956529s ago: executing program 0 (id=650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2.974465066s ago: executing program 0 (id=651): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000780)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000054c0)="cf", 0x1}], 0x1}, 0x2000814) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x3, 0xf8}, &(0x7f00000000c0)=0x10) 2.974235816s ago: executing program 1 (id=652): socket$kcm(0xa, 0xf, 0x0) 2.809095056s ago: executing program 1 (id=653): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) 2.690289063s ago: executing program 1 (id=654): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000160000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 2.665448084s ago: executing program 0 (id=655): syz_open_dev$sg(0x0, 0x0, 0x5) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x2, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9}, [@alu={0x4, 0x1, 0x5, 0x7, 0x6, 0x40}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}]}, &(0x7f0000000080)='syzkaller\x00', 0xae, 0xb1, &(0x7f00000000c0)=""/177, 0x41000, 0x3a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x8, 0x0, 0x891}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x0, 0x10, 0xfffffff9}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000005c0)={r1, 0x0, 0x2b, 0x0, &(0x7f0000000540)="3550bc7a623b9dc31e5710e9e1fe42a98cd52fcd85fb6a02c1d7af4ac3d24b76cab1841f0f37c0d4310ccc", 0x0, 0xb58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd4}, 0x50) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x3e, 0x0, 0x0) getsockopt$MRT(r3, 0x0, 0xcf, 0x0, &(0x7f0000000380)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2.577197389s ago: executing program 2 (id=656): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xe, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x40844) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 2.57036629s ago: executing program 4 (id=657): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000008}, 0x40000d5) 2.536297431s ago: executing program 0 (id=658): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x2}, 0x1) 2.417077328s ago: executing program 1 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f000077e000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/245, 0xf5, 0x1, &(0x7f00000000c0)=""/104, 0x68}, &(0x7f0000000180)=0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/416]) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000011, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="a29e000000000000000000000000000000000800", @ANYRES32=r4, @ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) 2.371905721s ago: executing program 0 (id=660): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000004600)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ptrace$getregset(0x4204, r0, 0x4, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f00000004c0)=""/4096) 2.21567357s ago: executing program 4 (id=661): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) shmctl$SHM_LOCK(0x0, 0xb) 2.116109356s ago: executing program 2 (id=662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.385436419s ago: executing program 0 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x803, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xec) socket$inet6(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x9, 0x1, "cdaaf1", 0x3, 0x7, "8e60c15df36640acbce967e3e19d05dc5dd83ba298452e1b35c4a49ec78e56646874086553f36812819d35d5b6582eb675271ae90c090d172912fb7a10a55b9dff73f2a3e5424d2d4007e168ee80ba624185929136a7a9a4e818e91d439c8290c8d81c64a31cd3371b338be158a092d3c7aa8333083dc9581f700354ee4a14b7b5ae3ff2fb1f108b03fd189a72d141cb17c8a62ee457183a331cb1f91a43d32d1e3ad225bf38823cfe8bbb251381862fca291e50b580118c6dd0337fa73815b8ab6a9883299fea154fbb99d7ed794159fb7d59ad9193e1487e53e929784790e8fae420a0748f6da4856119e5c22d5a15"}, {@none, 0x9, 0x1, "934479", 0xe, 0x5, "a63b657443c6f8ed6b53826d51eac3616c07dfe09fe6efd8e74255f0081b4fac0747f5ce2531907337994eb30bab94b5b30e8b5d6c35569060dea2bd369c06877688358f5172452535cff4d3836726fa2094965f435c64ce98e4ff210722666285fee85395f91796a4716c9c735d52b9427c1d76d281be037f6461c931086aa052204f927578b23fde572778b3e92073d17bd9c549e3f4058af41520984cf2a186ec09e4f493b82fa9b08d94a564b2d43f5545f5fdf7367244d57047cae8fd2bc72f022a4e6b57ff599cc8624fa985026a84d0b743b2451c3702e9dd3f5348470ee2acdcb3c4d667f487d8646dbaecee"}]}}}, 0x200) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) syz_open_dev$MSR(&(0x7f0000000040), 0x7, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000102030000000000000000000a000008300001802c0001"], 0x44}, 0x1, 0x0, 0x0, 0x14840}, 0x10) 1.384525879s ago: executing program 1 (id=664): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @remote}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x1, r4, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(r5, 0x27e2, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) dup3(r4, r3, 0x80000) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @private}, 'syz_tun\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$nl_route(0x10, 0x3, 0x0) close_range(r9, 0xffffffffffffffff, 0x3e00000000000000) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_INPUT(r10, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d380887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c1b305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e7270700000068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f2810000000ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb0a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a5f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c02ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb29c4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ff00", 0x1000}}, 0x1006) close_range(r0, 0xffffffffffffffff, 0x0) 1.359087011s ago: executing program 2 (id=665): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) 1.19997529s ago: executing program 2 (id=666): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20008024) 1.139865693s ago: executing program 4 (id=667): r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_pidfd_open(0x0, 0x0) setns(r2, 0x24020000) 798.839524ms ago: executing program 4 (id=668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be0000c9018c3f0f059ec486dd88a8"], 0x7a) 797.944384ms ago: executing program 2 (id=669): syz_open_dev$sg(0x0, 0x0, 0x5) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x2, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9}, [@alu={0x4, 0x1, 0x5, 0x7, 0x6, 0x40}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}]}, &(0x7f0000000080)='syzkaller\x00', 0xae, 0xb1, &(0x7f00000000c0)=""/177, 0x41000, 0x3a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x8, 0x0, 0x891}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x0, 0x10, 0xfffffff9}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000005c0)={r1, 0x0, 0x2b, 0x0, &(0x7f0000000540)="3550bc7a623b9dc31e5710e9e1fe42a98cd52fcd85fb6a02c1d7af4ac3d24b76cab1841f0f37c0d4310ccc", 0x0, 0xb58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd4}, 0x50) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x3e, 0x0, 0x0) getsockopt$MRT(r3, 0x0, 0xcf, 0x0, &(0x7f0000000380)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 155.162961ms ago: executing program 5 (id=670): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="20f6c734", 0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x2}, 0x1) 0s ago: executing program 5 (id=671): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x786) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 56.722894][ T4254] cgroup: Unknown subsys name 'net' [ 56.852080][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.117893][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.411007][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.425037][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.434592][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.443348][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.451652][ T4274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.459738][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.467987][ T4274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.475481][ T4274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.483761][ T4274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.486213][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.497519][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.500066][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.505043][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.512965][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.526384][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.526997][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.541778][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.543224][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.549233][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.556774][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.570209][ T4274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.570683][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.577654][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.585088][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.599310][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.606796][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.614110][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.621315][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.638972][ T4267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.646668][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.988553][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 60.093316][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 60.132391][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.149394][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.158663][ T4266] device bridge_slave_0 entered promiscuous mode [ 60.170836][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.178499][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.186227][ T4266] device bridge_slave_1 entered promiscuous mode [ 60.215966][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.225156][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 60.242335][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.251849][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 60.283397][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 60.330444][ T4266] team0: Port device team_slave_0 added [ 60.357429][ T4266] team0: Port device team_slave_1 added [ 60.430275][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.437467][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.463834][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.480773][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.488263][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.496009][ T4280] device bridge_slave_0 entered promiscuous mode [ 60.503503][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.513219][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.521798][ T4269] device bridge_slave_0 entered promiscuous mode [ 60.530349][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.537519][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.545472][ T4269] device bridge_slave_1 entered promiscuous mode [ 60.558195][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.565190][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.591673][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.612856][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.620052][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.628483][ T4280] device bridge_slave_1 entered promiscuous mode [ 60.652052][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.659446][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.670239][ T4271] device bridge_slave_0 entered promiscuous mode [ 60.700119][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.707725][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.715728][ T4271] device bridge_slave_1 entered promiscuous mode [ 60.730665][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.740562][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.748547][ T4276] device bridge_slave_0 entered promiscuous mode [ 60.757817][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.769826][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.780679][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.804203][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.812014][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.820252][ T4276] device bridge_slave_1 entered promiscuous mode [ 60.840237][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.851988][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.863866][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.899176][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.916669][ T4266] device hsr_slave_0 entered promiscuous mode [ 60.924360][ T4266] device hsr_slave_1 entered promiscuous mode [ 60.933810][ T4280] team0: Port device team_slave_0 added [ 60.941961][ T4280] team0: Port device team_slave_1 added [ 60.954373][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.981271][ T4269] team0: Port device team_slave_0 added [ 60.994878][ T4269] team0: Port device team_slave_1 added [ 61.015158][ T4271] team0: Port device team_slave_0 added [ 61.052499][ T4271] team0: Port device team_slave_1 added [ 61.058786][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.065759][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.092349][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.110476][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.117488][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.144218][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.158435][ T4276] team0: Port device team_slave_0 added [ 61.183054][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.190286][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.216579][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.232713][ T4276] team0: Port device team_slave_1 added [ 61.273319][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.280671][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.307467][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.318992][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.325947][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.351988][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.369805][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.377138][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.403403][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.430318][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.438107][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.465872][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.482416][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.489707][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.516301][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.543063][ T4280] device hsr_slave_0 entered promiscuous mode [ 61.549743][ T4280] device hsr_slave_1 entered promiscuous mode [ 61.556395][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.564488][ T4280] Cannot create hsr debugfs directory [ 61.593976][ T4271] device hsr_slave_0 entered promiscuous mode [ 61.601036][ T4271] device hsr_slave_1 entered promiscuous mode [ 61.608065][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.615642][ T4271] Cannot create hsr debugfs directory [ 61.660615][ T4269] device hsr_slave_0 entered promiscuous mode [ 61.667930][ T4269] device hsr_slave_1 entered promiscuous mode [ 61.674898][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.682850][ T4269] Cannot create hsr debugfs directory [ 61.688583][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 61.688594][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 61.694863][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 61.701010][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 61.707239][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 61.745875][ T4276] device hsr_slave_0 entered promiscuous mode [ 61.752907][ T4276] device hsr_slave_1 entered promiscuous mode [ 61.760903][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.768720][ T4276] Cannot create hsr debugfs directory [ 62.026142][ T4266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.050938][ T4266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.063066][ T4266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.078606][ T4266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.104253][ T4269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.123503][ T4269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.138963][ T4269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.153776][ T4269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.211757][ T4280] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.236364][ T4280] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.249864][ T4280] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.279302][ T4280] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.324266][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.334083][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.344797][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.355907][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.393720][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.443151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.458950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.470908][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.481583][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.491909][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.501503][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.508853][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.519080][ T4276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.552714][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.561669][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.573017][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.582244][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.589407][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.598286][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.607320][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.619694][ T4276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.646424][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.665025][ T4276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.674335][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.687941][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.696838][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.706387][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.724121][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.732936][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.742161][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.758145][ T4276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.779959][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.803024][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.813453][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.821537][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.830689][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.852161][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.887465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.896700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.911083][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.918260][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.927364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.938055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.947560][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.954681][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.969575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.982859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.996644][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.023098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.031646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.044732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.053682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.065391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.074209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.085451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.094177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.104694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.118351][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.127742][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.174935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.185606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.222540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.249311][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.282581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.301311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.319282][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.338664][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.347880][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.356539][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.363754][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.375561][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.384766][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.393355][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.400439][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.410173][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.429889][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.446319][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.489485][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.497388][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.505138][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.518173][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.530368][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.537555][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.552150][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.561119][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.570010][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.577181][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.584747][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.593850][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.603505][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.613217][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.621832][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.631214][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.640510][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.649713][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.659264][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.667948][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.688945][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.700380][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.711010][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.720299][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.729191][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.738440][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.746729][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.755557][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.767076][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 63.767395][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 63.773093][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 63.780782][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 63.785193][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 63.807630][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.819787][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.831688][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.843538][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.854612][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.862784][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.870447][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.878143][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.886795][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.897468][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.954198][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.997667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.008975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.019451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.030762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.054452][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.072477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.080938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.090534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.100347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.110085][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.117265][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.125753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.135440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.144385][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.151596][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.162889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.201720][ T4266] device veth0_vlan entered promiscuous mode [ 64.209263][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.221383][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.230223][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.239985][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.254896][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.265273][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.294502][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.320855][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.340074][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.352586][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.406436][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.433020][ T4269] device veth0_vlan entered promiscuous mode [ 64.440274][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.449568][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.458509][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.466808][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.474617][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.482572][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.492067][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.503154][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.512115][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.523604][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.532342][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.543973][ T4266] device veth1_vlan entered promiscuous mode [ 64.552774][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.586269][ T4269] device veth1_vlan entered promiscuous mode [ 64.595154][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.604265][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.615100][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.623914][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.632030][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.639804][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.650889][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.669057][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.695844][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.709366][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.721532][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.735766][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.751627][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.766627][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.775484][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.792543][ T4280] device veth0_vlan entered promiscuous mode [ 64.804674][ T4266] device veth0_macvtap entered promiscuous mode [ 64.848489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.861042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.872202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.889605][ T4266] device veth1_macvtap entered promiscuous mode [ 64.911422][ T4280] device veth1_vlan entered promiscuous mode [ 64.929428][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.943245][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.952790][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.970621][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.005946][ T4269] device veth0_macvtap entered promiscuous mode [ 65.027666][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.045324][ T4269] device veth1_macvtap entered promiscuous mode [ 65.055336][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.064958][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.074774][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.083343][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.092146][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.111938][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.124264][ T4271] device veth0_vlan entered promiscuous mode [ 65.135043][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.145742][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.157254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.164798][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.176496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.185214][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.197095][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.205962][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.215218][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.224658][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.242917][ T4271] device veth1_vlan entered promiscuous mode [ 65.258787][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.266811][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.274795][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.284733][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.294909][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.306179][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.319516][ T4280] device veth0_macvtap entered promiscuous mode [ 65.369170][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.380966][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.394065][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.412512][ T4271] device veth0_macvtap entered promiscuous mode [ 65.427785][ T4280] device veth1_macvtap entered promiscuous mode [ 65.434837][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.467929][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.476320][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.491058][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.502784][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.516120][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.527434][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.539737][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.551131][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.562219][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.578610][ T4271] device veth1_macvtap entered promiscuous mode [ 65.590758][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.599469][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.614316][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.624485][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.644147][ T4269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.669373][ T4269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.697332][ T4269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.706116][ T4269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.735046][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.748594][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.759084][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.770820][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.782550][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.813331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.829577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.845625][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.856364][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 65.856398][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 65.856421][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 65.856443][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 65.858560][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 65.871251][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.902401][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.913236][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.931351][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.962366][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.987466][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.998056][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.009847][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.020055][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.032244][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.043230][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.060584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.071035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.080187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.092938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.104723][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.115180][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.124257][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.134148][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.152474][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.164906][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.175600][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.187874][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.198620][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.209369][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.220772][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.249428][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.261024][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.271506][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.280206][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.293448][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.304896][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.315666][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.324509][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.341029][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.424782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.433918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.474915][ T1196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.491457][ T1196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.502125][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.509628][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.522627][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.539370][ T4276] device veth0_vlan entered promiscuous mode [ 66.552581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.563276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.572228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.582108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.590559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.611659][ T4276] device veth1_vlan entered promiscuous mode [ 66.656043][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.667792][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.695069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.714101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.722555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.732456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.741481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.754746][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.757197][ T4276] device veth0_macvtap entered promiscuous mode [ 66.777629][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.785376][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.833103][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.845850][ T4379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.863805][ T4276] device veth1_macvtap entered promiscuous mode [ 66.886235][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.910355][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.935181][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.939675][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.950588][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.978896][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.017964][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.068761][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.090430][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.103444][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.125971][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.138832][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.149631][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.159864][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.171223][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.193647][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.206351][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.221250][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.238519][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.271782][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.307082][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.322993][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.333737][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.344576][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.366491][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.386362][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.415508][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.440008][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.441278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.462069][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.476499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.528111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.554070][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.587132][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.595875][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.634026][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.851069][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.875264][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.889695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.437061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 68.447222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.466961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 68.476926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 68.486930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 68.496926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 68.506927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 68.516943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 68.526944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 68.536926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 68.865543][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 68.865573][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 68.871829][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 68.871863][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 68.877967][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 68.973899][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.998256][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.049964][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.656021][ T4428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.783956][ T4428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.088477][ T4429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.241077][ T4428] loop4: detected capacity change from 0 to 512 [ 71.453638][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.460564][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.299354][ T4428] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.367274][ T4428] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.477337][ T4428] netlink: 'syz.4.20': attribute type 10 has an invalid length. [ 72.618410][ T4428] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 72.929543][ T4461] loop3: detected capacity change from 0 to 512 [ 72.953145][ T4461] ======================================================= [ 72.953145][ T4461] WARNING: The mand mount option has been deprecated and [ 72.953145][ T4461] and is ignored by this kernel. Remove the mand [ 72.953145][ T4461] option from the mount to silence this warning. [ 72.953145][ T4461] ======================================================= [ 73.231986][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 73.255074][ T4470] loop1: detected capacity change from 0 to 1024 [ 73.353413][ T4470] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 75.475387][ T4502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.496148][ T4502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.515440][ T4502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.542674][ T4502] loop4: detected capacity change from 0 to 512 [ 75.637097][ T4502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.646102][ T4502] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.692399][ T4502] netlink: 'syz.4.43': attribute type 10 has an invalid length. [ 76.354157][ T4507] option changes via remount are deprecated (pid=4506 comm=syz.3.44) [ 76.430063][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 76.570891][ T41] cfg80211: failed to load regulatory.db [ 79.082330][ T4520] Zero length message leads to an empty skb [ 79.372498][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 79.553977][ T4532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.582282][ T4532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.612529][ T4532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.656001][ T4532] loop3: detected capacity change from 0 to 512 [ 79.708696][ T4532] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.733298][ T4532] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.773984][ T4524] loop4: detected capacity change from 0 to 32768 [ 79.798420][ T4532] netlink: 'syz.3.55': attribute type 10 has an invalid length. [ 79.831315][ T4524] Dev loop4 SGI disklabel: csum bad, label corrupted [ 79.850835][ T4532] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 80.338996][ T4550] Bluetooth: MGMT ver 1.22 [ 81.030237][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 82.066901][ C0] sched: RT throttling activated [ 82.722295][ T4580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.869792][ T4580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.987120][ T4580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.034542][ T4580] loop2: detected capacity change from 0 to 512 [ 84.184064][ T4580] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.243008][ T4580] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.359186][ T4580] netlink: 'syz.2.72': attribute type 10 has an invalid length. [ 85.590628][ T4580] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 87.066722][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 87.232365][ T4615] loop2: detected capacity change from 0 to 1024 [ 87.508263][ T4615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.298798][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 90.354085][ T4652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.583367][ T4661] netlink: 'syz.4.97': attribute type 10 has an invalid length. [ 91.225701][ T4651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.961029][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 92.997305][ T4688] device hsr_slave_0 left promiscuous mode [ 93.020632][ T4688] device hsr_slave_1 left promiscuous mode [ 94.579377][ T4713] loop3: detected capacity change from 0 to 128 [ 94.587663][ T4713] FAT-fs (loop3): Unrecognized mount option "C" or missing value [ 94.788188][ T4540] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.007166][ T4719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.132843][ T4719] loop1: detected capacity change from 0 to 512 [ 95.136444][ T4722] loop4: detected capacity change from 0 to 512 [ 95.216167][ T4722] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.251316][ T4719] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 95.316822][ T4719] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.375382][ T4722] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.404690][ T4719] netlink: 'syz.1.118': attribute type 10 has an invalid length. [ 95.516017][ T4722] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 95.527478][ T4719] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 95.552204][ T4718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.582954][ T4722] EXT4-fs (loop4): 1 truncate cleaned up [ 95.589295][ T4722] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.006834][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 99.074180][ T4757] loop0: detected capacity change from 0 to 2048 [ 99.182546][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 99.216178][ T4757] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 99.344972][ T4757] EXT4-fs (loop0): shut down requested (1) [ 99.474071][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 99.488428][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 99.529709][ T4770] device bridge_slave_1 left promiscuous mode [ 99.536950][ T4770] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.228490][ T4800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.357650][ T4800] loop1: detected capacity change from 0 to 512 [ 102.412701][ T4806] random: crng reseeded on system resumption [ 102.469868][ T4800] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 102.528369][ T4800] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.577840][ T4800] netlink: 'syz.1.142': attribute type 10 has an invalid length. [ 102.595954][ T4797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.744680][ T4813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.130'. [ 102.754047][ T4813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.130'. [ 103.813754][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 106.545160][ T4845] syz.2.148 uses obsolete (PF_INET,SOCK_PACKET) [ 106.837175][ T4853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.883338][ T4855] loop4: detected capacity change from 0 to 512 [ 106.909845][ T4853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.936561][ T4853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.950386][ T4855] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 106.995252][ T4853] loop1: detected capacity change from 0 to 512 [ 107.086453][ T4853] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 107.109936][ T26] audit: type=1326 audit(2000000003.050:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc439bf79 code=0x7ffc0000 [ 107.114534][ T4853] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.219298][ T26] audit: type=1326 audit(2000000003.100:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f7cc439bf79 code=0x7ffc0000 [ 107.242613][ T26] audit: type=1326 audit(2000000003.100:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc439bf79 code=0x7ffc0000 [ 107.308688][ T4853] netlink: 'syz.1.161': attribute type 10 has an invalid length. [ 109.978338][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 110.357974][ T4896] netlink: 32 bytes leftover after parsing attributes in process `syz.3.174'. [ 112.418164][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.578254][ T4914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.170'. [ 112.587411][ T4914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.170'. [ 113.344153][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.539703][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.726310][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.951572][ T4925] capability: warning: `syz.1.188' uses 32-bit capabilities (legacy support in use) [ 114.048344][ T4925] program syz.1.188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.365703][ T4274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.375282][ T4274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.384527][ T4274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.415330][ T4274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.423618][ T4274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 114.433338][ T4274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.307044][ T4957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.195'. [ 116.316144][ T4957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.195'. [ 116.898468][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 117.106080][ T4965] loop4: detected capacity change from 0 to 1024 [ 117.170987][ T4965] EXT4-fs: inline encryption not supported [ 117.208141][ T4965] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.241734][ T4928] chnl_net:caif_netlink_parms(): no params data found [ 117.956045][ T4965] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 118.292202][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 118.358438][ T4928] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.407276][ T4928] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.433890][ T4928] device bridge_slave_0 entered promiscuous mode [ 118.633910][ T46] bond0: (slave wlan1): Releasing backup interface [ 118.683506][ T4985] loop4: detected capacity change from 0 to 2048 [ 118.704254][ T4928] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.713632][ T4928] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.744161][ T4928] device bridge_slave_1 entered promiscuous mode [ 118.826806][ T4985] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 118.942628][ T4985] EXT4-fs error (device loop4): ext4_find_extent:900: inode #2: comm syz.4.201: inode has invalid extent depth: 7 [ 119.248943][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 119.325772][ T4928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.438316][ T4928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.626408][ T4928] team0: Port device team_slave_0 added [ 119.665448][ T4928] team0: Port device team_slave_1 added [ 119.784179][ T4928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.841872][ T4928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.954764][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 120.078365][ T4928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.146753][ T46] device hsr_slave_0 left promiscuous mode [ 120.177954][ T46] device hsr_slave_1 left promiscuous mode [ 120.204339][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.227166][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.254713][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.277971][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.310435][ T46] device bridge_slave_1 left promiscuous mode [ 120.325804][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.365121][ T46] device bridge_slave_0 left promiscuous mode [ 120.394247][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.525655][ T4885] Set syz1 is full, maxelem 65536 reached [ 121.316334][ T46] device veth1_macvtap left promiscuous mode [ 121.487248][ T46] device veth0_macvtap left promiscuous mode [ 121.494421][ T46] device veth1_vlan left promiscuous mode [ 121.582982][ T46] device veth0_vlan left promiscuous mode [ 121.865436][ T5018] loop1: detected capacity change from 0 to 1024 [ 121.928809][ T5018] EXT4-fs: Ignoring removed nobh option [ 121.982886][ T5018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.007677][ T4274] Bluetooth: hci4: command 0x040f tx timeout [ 122.059394][ T5018] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.127696][ T5018] EXT4-fs (loop1): shut down requested (2) [ 122.258457][ T5018] EXT4-fs (loop1): unmounting filesystem. [ 122.573486][ T5042] loop1: detected capacity change from 0 to 8 [ 122.810712][ T5048] mmap: syz.1.215 (5048): VmData 37851136 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 123.180906][ T46] team0 (unregistering): Port device team_slave_1 removed [ 123.234231][ T46] team0 (unregistering): Port device team_slave_0 removed [ 123.359780][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.445925][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.958977][ T46] bond0 (unregistering): Released all slaves [ 124.077374][ T4928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.084455][ T4928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.087155][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 124.147095][ T4928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.217912][ T5042] netlink: 48 bytes leftover after parsing attributes in process `syz.1.215'. [ 124.475762][ T4928] device hsr_slave_0 entered promiscuous mode [ 124.516130][ T4928] device hsr_slave_1 entered promiscuous mode [ 124.526184][ T4928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.563934][ T4928] Cannot create hsr debugfs directory [ 124.758362][ T5059] loop4: detected capacity change from 0 to 1024 [ 124.796485][ T5059] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.895860][ T5059] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 124.941469][ T5059] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.221: missing EA_INODE flag [ 125.032170][ T5059] EXT4-fs (loop4): Remounting filesystem read-only [ 125.053302][ T5059] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.221: error while reading EA inode 11 err=-117 [ 125.131055][ T5059] EXT4-fs (loop4): Remounting filesystem read-only [ 125.254693][ T4928] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.295198][ T4928] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.355646][ T4928] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.356832][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 125.388590][ T4928] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.394713][ T5078] program syz.0.225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.711981][ T4928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.765554][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.784984][ T5096] block device autoloading is deprecated and will be removed. [ 125.797732][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.833389][ T5047] Set syz1 is full, maxelem 65536 reached [ 125.842321][ T4928] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.898753][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.918214][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.932019][ T4410] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.939193][ T4410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.976630][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.011972][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.032745][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.068264][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.075439][ T4410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.172863][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.212945][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.219716][ T5110] loop1: detected capacity change from 0 to 2048 [ 126.240712][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.287992][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.318293][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.448012][ T5110] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 126.544495][ T5110] EXT4-fs error (device loop1): ext4_find_extent:900: inode #2: comm syz.1.233: inode has invalid extent depth: 7 [ 127.188583][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 127.245312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.293164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.338822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.369604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.422229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.441503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.466414][ T4928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.770318][ T5145] Illegal XDP return value 51 on prog (id 18) dev syz_tun, expect packet loss! [ 128.181375][ T5160] loop0: detected capacity change from 0 to 128 [ 128.188857][ T5160] FAT-fs (loop0): Unrecognized mount option "i" or missing value [ 128.233191][ T5167] loop4: detected capacity change from 0 to 256 [ 128.241868][ T4540] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.274006][ T5167] FAT-fs (loop4): Unrecognized mount option "uid=þu5¬}[9·AA±xÛˆô0L0x0000000000000000" or missing value [ 128.510508][ T5170] loop1: detected capacity change from 0 to 1024 [ 128.542447][ T5170] EXT4-fs: inline encryption not supported [ 128.567107][ T5170] EXT4-fs: Ignoring removed oldalloc option [ 128.573090][ T5170] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.635947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.645249][ T5170] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 128.666183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.694217][ T5170] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 128.729250][ T5170] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 128.736521][ T4928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.741913][ T5170] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.741913][ T5170] [ 128.765387][ T5170] EXT4-fs (loop1): Total free blocks count 0 [ 128.781154][ T5170] EXT4-fs (loop1): Free/Dirty block details [ 128.807149][ T5170] EXT4-fs (loop1): free_blocks=2588934144 [ 128.820526][ T5170] EXT4-fs (loop1): dirty_blocks=16 [ 128.837363][ T5170] EXT4-fs (loop1): Block reservation details [ 128.853218][ T5170] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 128.995125][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 130.804472][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 131.048593][ T5215] loop1: detected capacity change from 0 to 8 [ 131.100145][ T5215] netlink: 48 bytes leftover after parsing attributes in process `syz.1.262'. [ 132.215439][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.243747][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.338831][ T5242] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 132.346545][ T5242] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 132.400476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.428866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.508830][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 132.687699][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 132.778428][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 132.863281][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 132.931992][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 132.989555][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 133.067771][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 133.076834][ T4928] device veth0_vlan entered promiscuous mode [ 133.087074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.095899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.182142][ T4928] device veth1_vlan entered promiscuous mode [ 133.230613][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.295003][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.301481][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.429446][ T4928] device veth0_macvtap entered promiscuous mode [ 133.507932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.528301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.585021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.619248][ T4928] device veth1_macvtap entered promiscuous mode [ 133.827380][ T5261] loop1: detected capacity change from 0 to 256 [ 133.841158][ T5261] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 134.035045][ T5261] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 134.987846][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.001630][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.058944][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.091406][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.145211][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.186919][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.215410][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.230999][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.242929][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.285327][ T4928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.305108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.337960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.371590][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.406373][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.431794][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.452624][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.486925][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.506985][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.535662][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.576945][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.604411][ T4928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.632553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.647656][ T5272] loop1: detected capacity change from 0 to 512 [ 135.673704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.718600][ T5272] EXT4-fs (loop1): 1 truncate cleaned up [ 135.724339][ T5272] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 135.762522][ T5276] loop2: detected capacity change from 0 to 4096 [ 135.769506][ T4928] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.809191][ T5276] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 135.842051][ T4928] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.857596][ T5272] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.278: bg 0: block 465: padding at end of block bitmap is not set [ 135.912955][ T4928] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.944614][ T4928] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.030094][ T5272] EXT4-fs (loop1): Remounting filesystem read-only [ 136.044262][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 136.303713][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 137.707979][ T4878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.715841][ T4878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.725406][ T4878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.734263][ T4878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.758564][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.878396][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.948675][ T5296] 9pnet_fd: Insufficient options for proto=fd [ 138.061180][ T5300] device syzkaller1 entered promiscuous mode [ 138.438745][ T5316] loop4: detected capacity change from 0 to 512 [ 138.547556][ T5316] FAT-fs (loop4): Directory bread(block 199916) failed [ 138.621648][ T5316] FAT-fs (loop4): Directory bread(block 199917) failed [ 138.629164][ T5316] FAT-fs (loop4): Directory bread(block 199918) failed [ 138.636284][ T5316] FAT-fs (loop4): Directory bread(block 199919) failed [ 138.650882][ T5316] FAT-fs (loop4): Directory bread(block 199920) failed [ 138.670855][ T5316] FAT-fs (loop4): Directory bread(block 199921) failed [ 138.680162][ T5316] FAT-fs (loop4): Directory bread(block 199922) failed [ 138.687719][ T5316] FAT-fs (loop4): Directory bread(block 199923) failed [ 138.803757][ T5316] FAT-fs (loop4): FAT read failed (blocknr 128) [ 141.418803][ T5364] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 141.427323][ T5364] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 141.435790][ T5364] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 143.765534][ T5379] loop1: detected capacity change from 0 to 8 [ 143.807387][ T5379] netlink: 48 bytes leftover after parsing attributes in process `syz.1.311'. [ 144.476325][ T5394] loop1: detected capacity change from 0 to 1024 [ 144.561276][ T5394] EXT4-fs: inline encryption not supported [ 144.609940][ T5394] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.725208][ T5394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 145.027850][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 145.044423][ T5415] netlink: 104 bytes leftover after parsing attributes in process `syz.0.320'. [ 145.182581][ T5418] loop4: detected capacity change from 0 to 4096 [ 145.217984][ T5420] 9pnet_fd: Insufficient options for proto=fd [ 145.273800][ T5418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 145.346405][ T26] audit: type=1800 audit(2000000041.280:5): pid=5418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.321" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 145.609540][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 146.345144][ T5453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 146.417736][ T5453] device hsr_slave_0 left promiscuous mode [ 146.434100][ T5453] device hsr_slave_1 left promiscuous mode [ 146.934820][ T5474] loop1: detected capacity change from 0 to 256 [ 147.198596][ T5474] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.367018][ T26] audit: type=1800 audit(2000000043.260:6): pid=5474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.342" name="file1" dev="loop1" ino=1048598 res=0 errno=0 [ 147.884198][ T5474] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 147.927159][ T5474] FAT-fs (loop1): Filesystem has been set read-only [ 149.469219][ T5547] loop2: detected capacity change from 0 to 2048 [ 149.673056][ T5547] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 149.716544][ T5547] EXT4-fs error (device loop2): ext4_find_extent:900: inode #2: comm syz.2.362: inode has invalid extent depth: 7 [ 149.884109][ T5564] netlink: 32 bytes leftover after parsing attributes in process `syz.0.368'. [ 150.043110][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 150.293112][ T126] kernel write not supported for file bpf-prog (pid: 126 comm: kworker/1:2) [ 150.522466][ T5587] netlink: 32 bytes leftover after parsing attributes in process `syz.0.376'. [ 150.759987][ T5593] loop1: detected capacity change from 0 to 128 [ 153.339504][ T5616] loop1: detected capacity change from 0 to 8 [ 153.370643][ T5616] netlink: 48 bytes leftover after parsing attributes in process `syz.1.384'. [ 154.433072][ T5642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.394'. [ 156.928200][ T5684] loop4: detected capacity change from 0 to 256 [ 158.830278][ T5724] netlink: 'syz.0.424': attribute type 4 has an invalid length. [ 158.859482][ T5726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 159.196714][ T5739] loop2: detected capacity change from 0 to 256 [ 159.341776][ T5741] raw_sendmsg: syz.1.429 forgot to set AF_INET. Fix it! [ 159.768173][ T5756] loop4: detected capacity change from 0 to 8 [ 159.794709][ T5756] netlink: 48 bytes leftover after parsing attributes in process `syz.4.433'. [ 160.401393][ T5762] loop5: detected capacity change from 0 to 256 [ 160.412425][ T5766] loop1: detected capacity change from 0 to 512 [ 160.563912][ T5766] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 160.614180][ T5766] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.200371][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 162.245542][ T5785] device hsr_slave_0 left promiscuous mode [ 162.245819][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 162.274681][ T5785] device hsr_slave_1 left promiscuous mode [ 162.945593][ T5803] loop4: detected capacity change from 0 to 128 [ 162.992826][ T5803] EXT4-fs: Ignoring removed nobh option [ 163.062738][ T5803] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 163.079912][ T5803] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.108090][ T26] audit: type=1800 audit(2000000059.050:7): pid=5803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.448" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 163.108501][ T5803] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 5 (only 1 groups) [ 163.246258][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 164.949992][ T5824] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode broadcast(3) [ 166.765310][ T5862] loop1: detected capacity change from 0 to 128 [ 166.853514][ T5862] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 166.867724][ T5862] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.938058][ T5862] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 2147483649 (only 1 groups) [ 167.059057][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 167.251009][ T5878] loop1: detected capacity change from 0 to 512 [ 167.279231][ T5878] EXT4-fs: Ignoring removed bh option [ 167.307810][ T5878] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 167.386572][ T5878] EXT4-fs (loop1): 1 truncate cleaned up [ 167.402731][ T5878] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.547466][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 167.990522][ T5900] netlink: 'syz.4.481': attribute type 1 has an invalid length. [ 168.128844][ T5900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.175813][ T5905] bond1: (slave ip6gretap1): making interface the new active one [ 168.263170][ T5905] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 168.359763][ T5910] loop1: detected capacity change from 0 to 128 [ 168.376316][ T5910] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 168.714611][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 168.799861][ T4540] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 168.867421][ T5905] syz.4.481 (5905) used greatest stack depth: 20560 bytes left [ 169.221134][ T5927] loop5: detected capacity change from 0 to 512 [ 169.249512][ T5929] xt_hashlimit: size too large, truncated to 1048576 [ 169.273306][ T5927] EXT4-fs error (device loop5): ext4_iget_extra_inode:4756: inode #15: comm syz.5.486: corrupted in-inode xattr [ 169.409493][ T5927] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.486: couldn't read orphan inode 15 (err -117) [ 169.452438][ T5927] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 169.537040][ T5937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.633846][ T5937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.645642][ T4928] EXT4-fs (loop5): unmounting filesystem. [ 169.684650][ T5937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.783402][ T5937] netlink: 'syz.0.491': attribute type 10 has an invalid length. [ 169.873989][ T5937] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 170.435859][ T5967] loop2: detected capacity change from 0 to 8 [ 171.158901][ T5967] netlink: 48 bytes leftover after parsing attributes in process `syz.2.502'. [ 171.654762][ T5976] tipc: Started in network mode [ 171.682188][ T5976] tipc: Node identity , cluster identity 4711 [ 171.736508][ T5976] tipc: Failed to obtain node identity [ 171.757316][ T5976] tipc: Enabling of bearer rejected, failed to enable media [ 173.915061][ T6036] loop5: detected capacity change from 0 to 512 [ 173.957739][ T6036] EXT4-fs: Ignoring removed nobh option [ 174.078446][ T6036] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 174.113962][ T6036] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.219065][ T6036] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 3: comm syz.5.525: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 174.515769][ T6048] loop2: detected capacity change from 0 to 4096 [ 174.582780][ T6054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.590033][ T6048] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 174.646054][ T6054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.683710][ T26] audit: type=1800 audit(2000000070.620:8): pid=6048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.528" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 174.737096][ T6058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.770108][ T6054] netlink: 'syz.0.514': attribute type 10 has an invalid length. [ 174.852220][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 175.072310][ T6062] netlink: 48 bytes leftover after parsing attributes in process `syz.2.529'. [ 175.678949][ T6067] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 3: comm syz.5.525: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 176.188602][ T4928] EXT4-fs (loop5): unmounting filesystem. [ 176.259148][ T6090] team0: No ports can be present during mode change [ 176.634894][ T6100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.390974][ T6100] netlink: 'syz.1.542': attribute type 10 has an invalid length. [ 178.487626][ T6107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.593705][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 178.757341][ T6121] sg_write: data in/out 808464396/120 bytes for SCSI command 0x0-- guessing data in; [ 178.757341][ T6121] program syz.5.548 not setting count and/or reply_len properly [ 178.786493][ T6118] loop4: detected capacity change from 0 to 4096 [ 178.846817][ T6118] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 179.063274][ T6128] loop5: detected capacity change from 0 to 512 [ 179.110371][ T6128] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 179.139291][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 179.175123][ T6128] EXT4-fs (loop5): 1 truncate cleaned up [ 179.203594][ T6132] process 'syz.2.552' launched './file0' with NULL argv: empty string added [ 179.248833][ T6135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.551'. [ 179.276517][ T6128] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 179.297915][ T6132] Invalid argument reading file caps for ./file0 [ 179.740808][ T4928] EXT4-fs (loop5): unmounting filesystem. [ 181.438350][ T6173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.525276][ T6176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.558648][ T6173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.594846][ T6173] loop5: detected capacity change from 0 to 512 [ 181.615851][ T6178] loop4: detected capacity change from 0 to 128 [ 181.653468][ T6178] EXT4-fs: Ignoring removed nobh option [ 181.728408][ T6178] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 181.759753][ T6173] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 181.777436][ T6178] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.833581][ T6173] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.932418][ T6173] netlink: 'syz.5.565': attribute type 10 has an invalid length. [ 182.053624][ T6173] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 182.058171][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 182.635893][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 182.682184][ T6211] netlink: 48 bytes leftover after parsing attributes in process `syz.1.575'. [ 182.699454][ T4928] EXT4-fs (loop5): unmounting filesystem. [ 183.325972][ T6240] netlink: 68 bytes leftover after parsing attributes in process `syz.4.584'. [ 183.437977][ T6245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.525814][ T6251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.572718][ T6245] netlink: 'syz.1.587': attribute type 10 has an invalid length. [ 183.749097][ T6262] loop5: detected capacity change from 0 to 8 [ 183.768222][ T6262] netlink: 48 bytes leftover after parsing attributes in process `syz.5.592'. [ 185.832346][ T6307] loop4: detected capacity change from 0 to 2048 [ 185.970510][ T6316] loop5: detected capacity change from 0 to 8 [ 186.017515][ T6316] netlink: 48 bytes leftover after parsing attributes in process `syz.5.609'. [ 186.043778][ T6307] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 186.167672][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 186.173873][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 186.181391][ T6307] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.187078][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 186.196729][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 186.199079][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 186.323513][ T26] audit: type=1800 audit(2000000082.260:9): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.608" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 186.337334][ T6307] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.608: bg 0: block 345: padding at end of block bitmap is not set [ 186.376987][ T6319] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 186.422337][ T6307] EXT4-fs (loop4): Remounting filesystem read-only [ 186.472622][ T6307] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 186.483822][ T6319] EXT4-fs (loop4): Remounting filesystem read-only [ 186.531372][ T6307] EXT4-fs (loop4): Remounting filesystem read-only [ 186.732197][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 189.758410][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056138c00: rx timeout, send abort [ 189.773691][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888056138c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 193.395006][ T6418] loop2: detected capacity change from 0 to 512 [ 193.497101][ T6418] EXT4-fs (loop2): orphan cleanup on readonly fs [ 193.507201][ T6418] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 194.147944][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056e1f000: rx timeout, send abort [ 194.156373][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888056e1f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 194.286578][ T6418] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 194.333640][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.340029][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.362203][ T6418] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.645: attempt to clear invalid blocks 2 len 1 [ 194.417537][ T6418] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.645: invalid indirect mapped block 1819239214 (level 0) [ 194.464624][ T6418] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.645: invalid indirect mapped block 1819239214 (level 1) [ 194.517761][ T6418] EXT4-fs (loop2): 1 truncate cleaned up [ 194.523490][ T6418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 194.577407][ T6418] EXT4-fs error (device loop2): ext4_lookup:1855: inode #2: comm syz.2.645: 'file1' linked to parent dir [ 194.735917][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 194.747349][ T6440] netlink: 'syz.1.654': attribute type 4 has an invalid length. [ 196.059124][ T6463] device veth0 entered promiscuous mode [ 197.371789][ T26] audit: type=1326 audit(2000000093.310:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.1.664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa740d9bf79 code=0x0 [ 197.416369][ T6482] [ 197.418748][ T6482] ===================================================== [ 197.425688][ T6482] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 197.433180][ T6482] syzkaller #0 Not tainted [ 197.437708][ T6482] ----------------------------------------------------- [ 197.444680][ T6482] syz.5.671/6482 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 197.452253][ T6482] ffff888056d18018 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x18e/0x4b0 [ 197.461218][ T6482] [ 197.461218][ T6482] and this task is already holding: [ 197.468850][ T6482] ffff88805522a028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0 [ 197.478805][ T6482] which would create a new lock dependency: [ 197.484712][ T6482] (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 197.492923][ T6482] [ 197.492923][ T6482] but this new dependency connects a HARDIRQ-irq-safe lock: [ 197.502399][ T6482] (&dev->event_lock#2){-...}-{2:2} [ 197.502433][ T6482] [ 197.502433][ T6482] ... which became HARDIRQ-irq-safe at: [ 197.515615][ T6482] lock_acquire+0x1bb/0x4a0 [ 197.520211][ T6482] _raw_spin_lock_irqsave+0xb0/0x100 [ 197.525754][ T6482] input_event+0x76/0xb0 [ 197.530082][ T6482] psmouse_report_standard_packet+0x4f/0x200 [ 197.536184][ T6482] psmouse_process_byte+0x42b/0x620 [ 197.541549][ T6482] psmouse_handle_byte+0x43/0x490 [ 197.546653][ T6482] psmouse_interrupt+0x699/0x1130 [ 197.551765][ T6482] serio_interrupt+0x87/0x130 [ 197.556524][ T6482] i8042_interrupt+0x365/0x710 [ 197.561631][ T6482] __handle_irq_event_percpu+0x293/0xa50 [ 197.567431][ T6482] handle_irq_event+0x87/0x1e0 [ 197.572271][ T6482] handle_edge_irq+0x243/0xb20 [ 197.577197][ T6482] __common_interrupt+0xd7/0x1e0 [ 197.582222][ T6482] common_interrupt+0xb0/0xd0 [ 197.586979][ T6482] asm_common_interrupt+0x22/0x40 [ 197.592081][ T6482] _raw_spin_unlock_irqrestore+0xbc/0x120 [ 197.597923][ T6482] i8042_aux_write+0x105/0x170 [ 197.602771][ T6482] ps2_do_sendbyte+0x1f9/0x6e0 [ 197.607614][ T6482] ps2_sendbyte+0x5b/0x110 [ 197.612362][ T6482] cypress_send_ext_cmd+0x240/0x930 [ 197.617664][ T6482] cypress_detect+0x8f/0x1a0 [ 197.622424][ T6482] psmouse_extensions+0xcb2/0x1570 [ 197.627962][ T6482] psmouse_switch_protocol+0x2fc/0x870 [ 197.633605][ T6482] psmouse_connect+0x8f8/0x1500 [ 197.638709][ T6482] serio_driver_probe+0x76/0x90 [ 197.643820][ T6482] really_probe+0x2aa/0xc70 [ 197.648407][ T6482] __driver_probe_device+0x18c/0x330 [ 197.653778][ T6482] driver_probe_device+0x4f/0x420 [ 197.658995][ T6482] __driver_attach+0x44a/0x6e0 [ 197.663918][ T6482] bus_for_each_dev+0x182/0x1f0 [ 197.668870][ T6482] serio_handle_event+0x29c/0x840 [ 197.674004][ T6482] process_one_work+0x8a2/0x1160 [ 197.679230][ T6482] worker_thread+0xaa2/0x1270 [ 197.684266][ T6482] kthread+0x29d/0x330 [ 197.688547][ T6482] ret_from_fork+0x1f/0x30 [ 197.693705][ T6482] [ 197.693705][ T6482] to a HARDIRQ-irq-unsafe lock: [ 197.701264][ T6482] (tasklist_lock){.+.+}-{2:2} [ 197.701293][ T6482] [ 197.701293][ T6482] ... which became HARDIRQ-irq-unsafe at: [ 197.714426][ T6482] ... [ 197.714437][ T6482] lock_acquire+0x1bb/0x4a0 [ 197.722210][ T6482] _raw_read_lock+0x32/0x40 [ 197.726803][ T6482] do_wait+0x2b6/0xb60 [ 197.730960][ T6482] kernel_wait+0xd3/0x1c0 [ 197.735386][ T6482] call_usermodehelper_exec_work+0xb5/0x220 [ 197.741390][ T6482] process_one_work+0x8a2/0x1160 [ 197.746405][ T6482] worker_thread+0xaa2/0x1270 [ 197.751247][ T6482] kthread+0x29d/0x330 [ 197.755661][ T6482] ret_from_fork+0x1f/0x30 [ 197.760204][ T6482] [ 197.760204][ T6482] other info that might help us debug this: [ 197.760204][ T6482] [ 197.770529][ T6482] Chain exists of: [ 197.770529][ T6482] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 197.770529][ T6482] [ 197.784090][ T6482] Possible interrupt unsafe locking scenario: [ 197.784090][ T6482] [ 197.792591][ T6482] CPU0 CPU1 [ 197.797946][ T6482] ---- ---- [ 197.803293][ T6482] lock(tasklist_lock); [ 197.807524][ T6482] local_irq_disable(); [ 197.814949][ T6482] lock(&dev->event_lock#2); [ 197.822226][ T6482] lock(&client->buffer_lock); [ 197.829681][ T6482] [ 197.833120][ T6482] lock(&dev->event_lock#2); [ 197.838071][ T6482] [ 197.838071][ T6482] *** DEADLOCK *** [ 197.838071][ T6482] [ 197.846482][ T6482] 7 locks held by syz.5.671/6482: [ 197.851506][ T6482] #0: ffff8880294fe110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x17c/0x490 [ 197.860979][ T6482] #1: ffff8880193a2230 (&dev->event_lock#2){-...}-{2:2}, at: input_inject_event+0xa7/0x310 [ 197.871455][ T6482] #2: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xb8/0x310 [ 197.881144][ T6482] #3: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0xa3/0x12f0 [ 197.890982][ T6482] #4: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: evdev_events+0x75/0x320 [ 197.900230][ T6482] #5: ffff88805522a028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0 [ 197.910587][ T6482] #6: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x4f/0x4b0 [ 197.919755][ T6482] [ 197.919755][ T6482] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 197.930163][ T6482] -> (&dev->event_lock#2){-...}-{2:2} { [ 197.935828][ T6482] IN-HARDIRQ-W at: [ 197.939989][ T6482] lock_acquire+0x1bb/0x4a0 [ 197.946316][ T6482] _raw_spin_lock_irqsave+0xb0/0x100 [ 197.953417][ T6482] input_event+0x76/0xb0 [ 197.959483][ T6482] psmouse_report_standard_packet+0x4f/0x200 [ 197.967298][ T6482] psmouse_process_byte+0x42b/0x620 [ 197.974344][ T6482] psmouse_handle_byte+0x43/0x490 [ 197.981212][ T6482] psmouse_interrupt+0x699/0x1130 [ 197.988344][ T6482] serio_interrupt+0x87/0x130 [ 197.994934][ T6482] i8042_interrupt+0x365/0x710 [ 198.001523][ T6482] __handle_irq_event_percpu+0x293/0xa50 [ 198.009118][ T6482] handle_irq_event+0x87/0x1e0 [ 198.015765][ T6482] handle_edge_irq+0x243/0xb20 [ 198.022440][ T6482] __common_interrupt+0xd7/0x1e0 [ 198.029195][ T6482] common_interrupt+0xb0/0xd0 [ 198.035856][ T6482] asm_common_interrupt+0x22/0x40 [ 198.042726][ T6482] _raw_spin_unlock_irqrestore+0xbc/0x120 [ 198.050278][ T6482] i8042_aux_write+0x105/0x170 [ 198.056872][ T6482] ps2_do_sendbyte+0x1f9/0x6e0 [ 198.063463][ T6482] ps2_sendbyte+0x5b/0x110 [ 198.069702][ T6482] cypress_send_ext_cmd+0x240/0x930 [ 198.076932][ T6482] cypress_detect+0x8f/0x1a0 [ 198.083548][ T6482] psmouse_extensions+0xcb2/0x1570 [ 198.090500][ T6482] psmouse_switch_protocol+0x2fc/0x870 [ 198.097820][ T6482] psmouse_connect+0x8f8/0x1500 [ 198.104701][ T6482] serio_driver_probe+0x76/0x90 [ 198.111412][ T6482] really_probe+0x2aa/0xc70 [ 198.117742][ T6482] __driver_probe_device+0x18c/0x330 [ 198.124844][ T6482] driver_probe_device+0x4f/0x420 [ 198.131691][ T6482] __driver_attach+0x44a/0x6e0 [ 198.138289][ T6482] bus_for_each_dev+0x182/0x1f0 [ 198.145108][ T6482] serio_handle_event+0x29c/0x840 [ 198.151972][ T6482] process_one_work+0x8a2/0x1160 [ 198.158741][ T6482] worker_thread+0xaa2/0x1270 [ 198.165586][ T6482] kthread+0x29d/0x330 [ 198.171501][ T6482] ret_from_fork+0x1f/0x30 [ 198.177750][ T6482] INITIAL USE at: [ 198.181719][ T6482] lock_acquire+0x1bb/0x4a0 [ 198.187956][ T6482] _raw_spin_lock_irqsave+0xb0/0x100 [ 198.194965][ T6482] input_inject_event+0xa7/0x310 [ 198.201633][ T6482] led_trigger_event+0x12f/0x210 [ 198.208317][ T6482] kbd_led_trigger_activate+0xb9/0x100 [ 198.215602][ T6482] led_trigger_set+0x50c/0x910 [ 198.222174][ T6482] led_trigger_set_default+0x19c/0x1e0 [ 198.229469][ T6482] led_classdev_register_ext+0x625/0x860 [ 198.236853][ T6482] input_leds_connect+0x4e7/0x6b0 [ 198.243710][ T6482] input_register_device+0xdfd/0x1310 [ 198.250813][ T6482] atkbd_connect+0x6f8/0x9a0 [ 198.257164][ T6482] serio_driver_probe+0x76/0x90 [ 198.263747][ T6482] really_probe+0x2aa/0xc70 [ 198.269980][ T6482] __driver_probe_device+0x18c/0x330 [ 198.277167][ T6482] driver_probe_device+0x4f/0x420 [ 198.283926][ T6482] __driver_attach+0x44a/0x6e0 [ 198.290606][ T6482] bus_for_each_dev+0x182/0x1f0 [ 198.297198][ T6482] serio_handle_event+0x29c/0x840 [ 198.304169][ T6482] process_one_work+0x8a2/0x1160 [ 198.310857][ T6482] worker_thread+0xaa2/0x1270 [ 198.317373][ T6482] kthread+0x29d/0x330 [ 198.323181][ T6482] ret_from_fork+0x1f/0x30 [ 198.329333][ T6482] } [ 198.331935][ T6482] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 198.341320][ T6482] -> (&client->buffer_lock){....}-{2:2} { [ 198.347072][ T6482] INITIAL USE at: [ 198.350966][ T6482] lock_acquire+0x1bb/0x4a0 [ 198.357138][ T6482] _raw_spin_lock+0x2a/0x40 [ 198.363315][ T6482] evdev_pass_values+0xcb/0xab0 [ 198.369740][ T6482] evdev_events+0x1d4/0x320 [ 198.375892][ T6482] input_pass_values+0x905/0x12f0 [ 198.382497][ T6482] input_event_dispose+0x346/0x6c0 [ 198.389174][ T6482] input_inject_event+0x1f5/0x310 [ 198.395759][ T6482] evdev_write+0x35b/0x490 [ 198.401733][ T6482] vfs_write+0x2e6/0xa30 [ 198.407544][ T6482] ksys_write+0x14c/0x250 [ 198.413521][ T6482] do_syscall_64+0x4c/0xa0 [ 198.419592][ T6482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.427047][ T6482] } [ 198.429541][ T6482] ... key at: [] evdev_open.__key.29+0x0/0x20 [ 198.437777][ T6482] ... acquired at: [ 198.441654][ T6482] _raw_spin_lock+0x2a/0x40 [ 198.446428][ T6482] evdev_pass_values+0xcb/0xab0 [ 198.451449][ T6482] evdev_events+0x1d4/0x320 [ 198.456120][ T6482] input_pass_values+0x905/0x12f0 [ 198.461314][ T6482] input_event_dispose+0x346/0x6c0 [ 198.466593][ T6482] input_inject_event+0x1f5/0x310 [ 198.471780][ T6482] evdev_write+0x35b/0x490 [ 198.476475][ T6482] vfs_write+0x2e6/0xa30 [ 198.480915][ T6482] ksys_write+0x14c/0x250 [ 198.485435][ T6482] do_syscall_64+0x4c/0xa0 [ 198.490140][ T6482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.496214][ T6482] [ 198.498630][ T6482] [ 198.498630][ T6482] the dependencies between the lock to be acquired [ 198.498637][ T6482] and HARDIRQ-irq-unsafe lock: [ 198.512271][ T6482] -> (tasklist_lock){.+.+}-{2:2} { [ 198.517758][ T6482] HARDIRQ-ON-R at: [ 198.522172][ T6482] lock_acquire+0x1bb/0x4a0 [ 198.528971][ T6482] _raw_read_lock+0x32/0x40 [ 198.535756][ T6482] do_wait+0x2b6/0xb60 [ 198.541920][ T6482] kernel_wait+0xd3/0x1c0 [ 198.548260][ T6482] call_usermodehelper_exec_work+0xb5/0x220 [ 198.556160][ T6482] process_one_work+0x8a2/0x1160 [ 198.563170][ T6482] worker_thread+0xaa2/0x1270 [ 198.569836][ T6482] kthread+0x29d/0x330 [ 198.575911][ T6482] ret_from_fork+0x1f/0x30 [ 198.582318][ T6482] SOFTIRQ-ON-R at: [ 198.586461][ T6482] lock_acquire+0x1bb/0x4a0 [ 198.593045][ T6482] _raw_read_lock+0x32/0x40 [ 198.599557][ T6482] do_wait+0x2b6/0xb60 [ 198.605635][ T6482] kernel_wait+0xd3/0x1c0 [ 198.611967][ T6482] call_usermodehelper_exec_work+0xb5/0x220 [ 198.619872][ T6482] process_one_work+0x8a2/0x1160 [ 198.626827][ T6482] worker_thread+0xaa2/0x1270 [ 198.633504][ T6482] kthread+0x29d/0x330 [ 198.639558][ T6482] ret_from_fork+0x1f/0x30 [ 198.645981][ T6482] INITIAL USE at: [ 198.650572][ T6482] lock_acquire+0x1bb/0x4a0 [ 198.657009][ T6482] _raw_write_lock_irq+0xab/0xf0 [ 198.663863][ T6482] copy_process+0x2557/0x4030 [ 198.670592][ T6482] kernel_clone+0x24b/0x900 [ 198.677198][ T6482] user_mode_thread+0x10d/0x180 [ 198.684082][ T6482] rest_init+0x23/0x300 [ 198.690377][ T6482] start_kernel+0x0/0x53c [ 198.696649][ T6482] start_kernel+0x493/0x53c [ 198.703070][ T6482] secondary_startup_64_no_verify+0xcf/0xdb [ 198.710988][ T6482] INITIAL READ USE at: [ 198.715507][ T6482] lock_acquire+0x1bb/0x4a0 [ 198.722452][ T6482] _raw_read_lock+0x32/0x40 [ 198.729391][ T6482] do_wait+0x2b6/0xb60 [ 198.736268][ T6482] kernel_wait+0xd3/0x1c0 [ 198.743113][ T6482] call_usermodehelper_exec_work+0xb5/0x220 [ 198.751346][ T6482] process_one_work+0x8a2/0x1160 [ 198.758633][ T6482] worker_thread+0xaa2/0x1270 [ 198.765660][ T6482] kthread+0x29d/0x330 [ 198.772147][ T6482] ret_from_fork+0x1f/0x30 [ 198.778987][ T6482] } [ 198.781648][ T6482] ... key at: [] tasklist_lock+0x18/0x40 [ 198.789545][ T6482] ... acquired at: [ 198.793513][ T6482] _raw_read_lock+0x32/0x40 [ 198.798180][ T6482] send_sigurg+0xec/0x3c0 [ 198.802676][ T6482] sk_send_sigurg+0x6b/0xc0 [ 198.807343][ T6482] queue_oob+0x3ed/0x4f0 [ 198.811753][ T6482] unix_stream_sendmsg+0x8cf/0xa70 [ 198.817118][ T6482] ____sys_sendmsg+0x5be/0x970 [ 198.822051][ T6482] ___sys_sendmsg+0x2a2/0x360 [ 198.826899][ T6482] __sys_sendmmsg+0x2c3/0x510 [ 198.831744][ T6482] __x64_sys_sendmmsg+0x9c/0xb0 [ 198.836762][ T6482] do_syscall_64+0x4c/0xa0 [ 198.841372][ T6482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.847432][ T6482] [ 198.849742][ T6482] -> (&f->f_owner.lock){...-}-{2:2} { [ 198.855205][ T6482] IN-SOFTIRQ-R at: [ 198.859259][ T6482] lock_acquire+0x1bb/0x4a0 [ 198.865607][ T6482] _raw_read_lock_irqsave+0xb8/0x100 [ 198.872749][ T6482] send_sigurg+0x25/0x3c0 [ 198.879173][ T6482] sk_send_sigurg+0x6b/0xc0 [ 198.885512][ T6482] tcp_check_urg+0x200/0x750 [ 198.891919][ T6482] tcp_urg+0x160/0x400 [ 198.897916][ T6482] tcp_rcv_established+0xdef/0x1d50 [ 198.905041][ T6482] tcp_v4_do_rcv+0x48d/0xb00 [ 198.911547][ T6482] tcp_v4_rcv+0x27f0/0x2ea0 [ 198.917883][ T6482] ip_protocol_deliver_rcu+0x3ad/0x780 [ 198.925271][ T6482] ip_local_deliver_finish+0x2c7/0x510 [ 198.932561][ T6482] NF_HOOK+0x329/0x3b0 [ 198.938572][ T6482] NF_HOOK+0x329/0x3b0 [ 198.944750][ T6482] __netif_receive_skb+0xcc/0x290 [ 198.951610][ T6482] process_backlog+0x38d/0x6f0 [ 198.958209][ T6482] __napi_poll+0xc0/0x460 [ 198.964379][ T6482] net_rx_action+0x5dd/0xb20 [ 198.970797][ T6482] handle_softirqs+0x2a1/0x930 [ 198.977395][ T6482] run_ksoftirqd+0xa4/0x100 [ 198.983759][ T6482] smpboot_thread_fn+0x64a/0xa40 [ 198.990532][ T6482] kthread+0x29d/0x330 [ 198.996506][ T6482] ret_from_fork+0x1f/0x30 [ 199.002920][ T6482] INITIAL USE at: [ 199.006899][ T6482] lock_acquire+0x1bb/0x4a0 [ 199.013156][ T6482] _raw_write_lock_irq+0xab/0xf0 [ 199.019940][ T6482] __f_setown+0x37/0x330 [ 199.026117][ T6482] f_setown+0x147/0x200 [ 199.032020][ T6482] do_fcntl+0x253/0x1270 [ 199.038005][ T6482] __se_sys_fcntl+0xc9/0x190 [ 199.044337][ T6482] do_syscall_64+0x4c/0xa0 [ 199.050504][ T6482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.058227][ T6482] INITIAL READ USE at: [ 199.062629][ T6482] lock_acquire+0x1bb/0x4a0 [ 199.069559][ T6482] _raw_read_lock_irqsave+0xb8/0x100 [ 199.077004][ T6482] send_sigurg+0x25/0x3c0 [ 199.083499][ T6482] sk_send_sigurg+0x6b/0xc0 [ 199.090262][ T6482] tcp_check_urg+0x200/0x750 [ 199.097103][ T6482] tcp_urg+0x160/0x400 [ 199.103602][ T6482] tcp_rcv_established+0xdef/0x1d50 [ 199.111087][ T6482] tcp_v4_do_rcv+0x48d/0xb00 [ 199.117859][ T6482] __release_sock+0x1e1/0x450 [ 199.124734][ T6482] release_sock+0x5b/0x1b0 [ 199.131525][ T6482] sk_stream_wait_memory+0x6df/0xee0 [ 199.139069][ T6482] tcp_sendmsg_locked+0x15c4/0x3f50 [ 199.146656][ T6482] tcp_sendmsg+0x2b/0x40 [ 199.153191][ T6482] __sys_sendto+0x497/0x650 [ 199.160037][ T6482] __x64_sys_sendto+0xda/0xf0 [ 199.167262][ T6482] do_syscall_64+0x4c/0xa0 [ 199.174666][ T6482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.183627][ T6482] } [ 199.186214][ T6482] ... key at: [] __alloc_file.__key+0x0/0x10 [ 199.194799][ T6482] ... acquired at: [ 199.198689][ T6482] _raw_read_lock_irqsave+0xb8/0x100 [ 199.204323][ T6482] send_sigio+0x2f/0x360 [ 199.208734][ T6482] kill_fasync+0x224/0x4b0 [ 199.213403][ T6482] sock_wake_async+0x128/0x150 [ 199.218380][ T6482] sk_wake_async+0x184/0x280 [ 199.223132][ T6482] unix_release_sock+0x889/0xef0 [ 199.228264][ T6482] unix_release+0x88/0xc0 [ 199.232761][ T6482] sock_close+0xd5/0x240 [ 199.237173][ T6482] __fput+0x22c/0x920 [ 199.241318][ T6482] task_work_run+0x1d0/0x260 [ 199.246081][ T6482] get_signal+0x11a6/0x1350 [ 199.250752][ T6482] arch_do_signal_or_restart+0xc4/0x1350 [ 199.256586][ T6482] exit_to_user_mode_loop+0x70/0x110 [ 199.262069][ T6482] exit_to_user_mode_prepare+0xee/0x180 [ 199.267812][ T6482] syscall_exit_to_user_mode+0x16/0x40 [ 199.273725][ T6482] do_syscall_64+0x58/0xa0 [ 199.278464][ T6482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.284908][ T6482] [ 199.287230][ T6482] -> (&new->fa_lock){....}-{2:2} { [ 199.292354][ T6482] INITIAL USE at: [ 199.296309][ T6482] lock_acquire+0x1bb/0x4a0 [ 199.302385][ T6482] _raw_write_lock_irq+0xab/0xf0 [ 199.308876][ T6482] fasync_remove_entry+0xf0/0x1c0 [ 199.315545][ T6482] sock_fasync+0x84/0xf0 [ 199.321375][ T6482] __fput+0x7a7/0x920 [ 199.327041][ T6482] task_work_run+0x1d0/0x260 [ 199.333209][ T6482] exit_to_user_mode_loop+0xe6/0x110 [ 199.340169][ T6482] exit_to_user_mode_prepare+0xee/0x180 [ 199.347315][ T6482] syscall_exit_to_user_mode+0x16/0x40 [ 199.354326][ T6482] do_syscall_64+0x58/0xa0 [ 199.360361][ T6482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.367983][ T6482] INITIAL READ USE at: [ 199.372388][ T6482] lock_acquire+0x1bb/0x4a0 [ 199.379157][ T6482] _raw_read_lock_irqsave+0xb8/0x100 [ 199.387036][ T6482] kill_fasync+0x18e/0x4b0 [ 199.393530][ T6482] sock_wake_async+0x128/0x150 [ 199.400285][ T6482] sk_wake_async+0x184/0x280 [ 199.407124][ T6482] unix_release_sock+0x889/0xef0 [ 199.414059][ T6482] unix_release+0x88/0xc0 [ 199.420384][ T6482] sock_close+0xd5/0x240 [ 199.426624][ T6482] __fput+0x22c/0x920 [ 199.432860][ T6482] task_work_run+0x1d0/0x260 [ 199.439442][ T6482] get_signal+0x11a6/0x1350 [ 199.446173][ T6482] arch_do_signal_or_restart+0xc4/0x1350 [ 199.454073][ T6482] exit_to_user_mode_loop+0x70/0x110 [ 199.461731][ T6482] exit_to_user_mode_prepare+0xee/0x180 [ 199.469553][ T6482] syscall_exit_to_user_mode+0x16/0x40 [ 199.477110][ T6482] do_syscall_64+0x58/0xa0 [ 199.483727][ T6482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.492368][ T6482] } [ 199.495064][ T6482] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 199.503947][ T6482] ... acquired at: [ 199.507879][ T6482] _raw_read_lock_irqsave+0xb8/0x100 [ 199.513623][ T6482] kill_fasync+0x18e/0x4b0 [ 199.518637][ T6482] evdev_pass_values+0x54b/0xab0 [ 199.524113][ T6482] evdev_events+0x1d4/0x320 [ 199.529156][ T6482] input_pass_values+0x905/0x12f0 [ 199.534650][ T6482] input_event_dispose+0x346/0x6c0 [ 199.539957][ T6482] input_inject_event+0x1f5/0x310 [ 199.545284][ T6482] evdev_write+0x35b/0x490 [ 199.550154][ T6482] vfs_write+0x2e6/0xa30 [ 199.554657][ T6482] ksys_write+0x14c/0x250 [ 199.559251][ T6482] do_syscall_64+0x4c/0xa0 [ 199.563836][ T6482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.569897][ T6482] [ 199.572227][ T6482] [ 199.572227][ T6482] stack backtrace: [ 199.578340][ T6482] CPU: 0 PID: 6482 Comm: syz.5.671 Not tainted syzkaller #0 [ 199.585722][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 199.596035][ T6482] Call Trace: [ 199.599371][ T6482] [ 199.602325][ T6482] dump_stack_lvl+0x188/0x24e [ 199.607092][ T6482] ? load_image+0x400/0x400 [ 199.611609][ T6482] ? show_regs_print_info+0x12/0x12 [ 199.616911][ T6482] ? load_image+0x400/0x400 [ 199.621408][ T6482] ? print_shortest_lock_dependencies+0xf0/0x160 [ 199.627743][ T6482] __lock_acquire+0x66c8/0x7d10 [ 199.632619][ T6482] ? cpufreq_update_util+0x91/0x230 [ 199.637824][ T6482] ? verify_lock_unused+0x140/0x140 [ 199.643026][ T6482] ? verify_lock_unused+0x140/0x140 [ 199.648222][ T6482] ? do_raw_spin_unlock+0x11d/0x230 [ 199.653412][ T6482] lock_acquire+0x1bb/0x4a0 [ 199.657913][ T6482] ? kill_fasync+0x18e/0x4b0 [ 199.662507][ T6482] ? read_lock_is_recursive+0x10/0x10 [ 199.668150][ T6482] _raw_read_lock_irqsave+0xb8/0x100 [ 199.673697][ T6482] ? kill_fasync+0x18e/0x4b0 [ 199.678672][ T6482] ? _raw_read_lock+0x40/0x40 [ 199.683637][ T6482] kill_fasync+0x18e/0x4b0 [ 199.688155][ T6482] ? kill_fasync+0x4f/0x4b0 [ 199.692773][ T6482] evdev_pass_values+0x54b/0xab0 [ 199.697750][ T6482] ? evdev_pass_values+0x541/0xab0 [ 199.703156][ T6482] evdev_events+0x1d4/0x320 [ 199.707675][ T6482] ? evdev_events+0x75/0x320 [ 199.712478][ T6482] ? evdev_event+0xe0/0xe0 [ 199.717002][ T6482] input_pass_values+0x905/0x12f0 [ 199.722049][ T6482] ? input_pass_values+0xa3/0x12f0 [ 199.727356][ T6482] input_event_dispose+0x346/0x6c0 [ 199.732569][ T6482] input_inject_event+0x1f5/0x310 [ 199.737716][ T6482] ? input_inject_event+0xb8/0x310 [ 199.742824][ T6482] evdev_write+0x35b/0x490 [ 199.747261][ T6482] ? evdev_read+0xb90/0xb90 [ 199.751790][ T6482] ? end_current_label_crit_section+0x14b/0x170 [ 199.758037][ T6482] ? common_file_perm+0x171/0x1c0 [ 199.763168][ T6482] ? fsnotify_perm+0x5a/0x550 [ 199.767949][ T6482] ? security_file_permission+0x75/0xa0 [ 199.773775][ T6482] ? evdev_read+0xb90/0xb90 [ 199.778359][ T6482] vfs_write+0x2e6/0xa30 [ 199.782601][ T6482] ? file_end_write+0x250/0x250 [ 199.787457][ T6482] ? __fget_files+0x28/0x4b0 [ 199.792127][ T6482] ? __fget_files+0x28/0x4b0 [ 199.796737][ T6482] ? __fget_files+0x43d/0x4b0 [ 199.801434][ T6482] ? __fdget_pos+0x1d4/0x360 [ 199.806046][ T6482] ? ksys_write+0x71/0x250 [ 199.810477][ T6482] ksys_write+0x14c/0x250 [ 199.814807][ T6482] ? __ia32_sys_read+0x80/0x80 [ 199.819572][ T6482] ? lockdep_hardirqs_on+0x94/0x140 [ 199.824766][ T6482] do_syscall_64+0x4c/0xa0 [ 199.829222][ T6482] ? clear_bhb_loop+0x60/0xb0 [ 199.833917][ T6482] ? clear_bhb_loop+0x60/0xb0 [ 199.838615][ T6482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.844702][ T6482] RIP: 0033:0x7fa2e539bf79 [ 199.849130][ T6482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.868926][ T6482] RSP: 002b:00007fa2e629e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 199.877382][ T6482] RAX: ffffffffffffffda RBX: 00007fa2e5615fa0 RCX: 00007fa2e539bf79 [ 199.885655][ T6482] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000003 [ 199.894145][ T6482] RBP: 00007fa2e54327e0 R08: 0000000000000000 R09: 0000000000000000 [ 199.902286][ T6482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.910424][ T6482] R13: 00007fa2e5616038 R14: 00007fa2e5615fa0 R15: 00007ffd62529408 [ 199.918482][ T6482] [ 199.985801][ T6487] sg_write: process 349 (syz.4.672) changed security contexts after opening file descriptor, this is not allowed. [ 200.018004][ T6462] device veth0 left promiscuous mode [ 200.208173][ T6489] netlink: 40 bytes leftover after parsing attributes in process `syz.0.663'. [ 200.217132][ T6489] netlink: 40 bytes leftover after parsing attributes in process `syz.0.663'. [ 200.247151][ T4285] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 201.396567][ T6477] Set syz1 is full, maxelem 65536 reached