last executing test programs: 11.963496612s ago: executing program 3 (id=261): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000f40)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000f80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000fc0), 0x0, 0x0) read$msr(r1, &(0x7f0000002e40)=""/102368, 0x18fe0) r2 = fsopen(&(0x7f0000000340)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000380)='addr\x00', &(0x7f00000003c0)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000440)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000480)='vers\x00', &(0x7f00000004c0)='3\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 10.61987904s ago: executing program 3 (id=262): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='mnt\x00', 0x4, &(0x7f0000000280), 0x0, 0x236, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt/encrypted_dir\x00', 0x800, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000700)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00') getdents64(r3, &(0x7f0000000580)=""/41, 0x29) connect$unix(r1, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0/file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000880)=0x3) 7.131052389s ago: executing program 1 (id=274): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) syz_80211_inject_frame(0x0, &(0x7f0000001480)=ANY=[], 0x36) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x8811, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x4}, {0x4, 0x0, 0x1, 0x1}}], 0x8) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0x4, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) 4.142456325s ago: executing program 3 (id=281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf118a815524c8bb}, @TCA_TBF_PARMS={0x28, 0x1, {{0xed, 0x2, 0xe1, 0x400, 0xac, 0x8}, {0x36, 0x2, 0x4, 0x2, 0x3, 0x5}, 0x6, 0x9, 0x1e69}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.135871986s ago: executing program 2 (id=282): bind$bt_hci(0xffffffffffffffff, &(0x7f00000008c0)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000900)="4c00000011000f140011000200000a0002000000200000", 0x17) 3.451416566s ago: executing program 2 (id=285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000c410000004c0014ffffff9eeea6346627ef62726f6164636173742d6c696e6b0000"], 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 3.364629245s ago: executing program 0 (id=286): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000640)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000680)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1a, 0x4, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0xffffffffffffffe0}]}, &(0x7f00000007c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a4}, 0x94) 3.234452288s ago: executing program 2 (id=288): r0 = socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x80881000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(0xffffffffffffffff, &(0x7f0000000480)=""/1024, 0x400) connect$inet6(r0, &(0x7f00000016c0)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {&(0x7f0000003840)}, {&(0x7f0000004840)="35dd6955f30e5e1c2513b1c562112d7640ea1ead5252bec0c883187204ad405fa804cf797949cab27829b52c91", 0x2d}], 0x3, 0x0, 0x0, 0x40000}}], 0x1, 0x4000000) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001740), 0x2000010, &(0x7f0000001780)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000001800)={0x2020}, 0x2020) write$FUSE_INIT(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000059c0)='./file0\x00', 0x22801, 0x0) dup3(r5, r4, 0x80000) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c0002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x0, 0x0}) getrusage(0xffffffffffffffff, &(0x7f0000000940)) write$vga_arbiter(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r6, &(0x7f0000000880)=@other={'unlock', ' ', 'mem'}, 0x5) 3.22282757s ago: executing program 0 (id=289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000180)=0x1, 0x4) sendmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000200)=[{&(0x7f0000000240)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000340)=[{0x1, 0x3, {0x0, 0x62da12a15307ded4, 0x1}, {0x1, 0x1}, 0xfe, 0x2}, {0x3, 0x3, {0x2, 0xf0, 0x3}, {0x2, 0x1}, 0xfe, 0x2}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x2, 0xe}, {0xf, 0xa}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x0) 2.327402012s ago: executing program 2 (id=290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000c40)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000c80)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000cc0)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000001f80)) 2.190476986s ago: executing program 2 (id=291): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='mnt\x00', 0x4, &(0x7f0000000280), 0x0, 0x236, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt/encrypted_dir\x00', 0x800, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000700)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00') getdents64(r3, &(0x7f0000000580)=""/41, 0x29) connect$unix(r1, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0/file0\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@tcp6=r4}, 0x20) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000880)=0x3) 2.190206155s ago: executing program 0 (id=292): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$pppl2tp(r1, 0x0, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000480)=0x1, 0x4) syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r0) 1.424037744s ago: executing program 1 (id=294): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000003c0)='GPL\x00'}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440)=r2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={0x0, 0x8000000, &(0x7f0000000500)=[{&(0x7f0000000540)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r3, r1, 0x4, r1}, 0x10) 1.410113336s ago: executing program 3 (id=295): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x2008800, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004640)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x24414809, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x8, 0x4}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000046c0)='./file0\x00', 0x40042, 0x13) close(r0) openat(0xffffffffffffff9c, &(0x7f0000004740)='./file0\x00', 0x0, 0x80) 1.200218997s ago: executing program 2 (id=296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000240005040200"/20, @ANYRES64, @ANYBLOB="00000100ffffffff000000000c00010063616b655f6d71000c00020008000a00e803"], 0x3c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000440)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000640)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000680)=ANY=[], 0x8) bind$inet6(r3, &(0x7f00000006c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000700)=ANY=[], 0x8) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000740)=0x8, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000780)={0x3, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x7}, 0x0) recvmmsg(r3, &(0x7f0000000800), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000840)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f00000004c0)) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000240)={r5, &(0x7f0000000140)='\x00', 0x600000, &(0x7f0000000180)={@align=0x101, {0x1, 0x401, 0x1}}, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0x100}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x18, &(0x7f0000000380)=0xffffff7e, 0x50) 1.095138148s ago: executing program 0 (id=298): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x1002}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x8c, 0x2c, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x200, 0x4, 0x2, 0x81b}, 0x19}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$tun(r0, &(0x7f0000000800)=ANY=[], 0x44) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 989.682639ms ago: executing program 3 (id=300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket(0x2, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000240)=0x88, 0x4) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) bind$inet(r2, &(0x7f0000000680)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x48800, 0x0, 0x0) sendto$inet(r2, &(0x7f00000006c0)="8ce2ad4d4f95e087a7846d3f81", 0xd, 0x0, &(0x7f0000000b40)={0x2, 0x0, @multicast2}, 0x10) sendmsg$key(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=ANY=[], 0x10}}, 0xc012) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000800)={0x0, 'bridge0\x00', {0x101}, 0x2}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000840)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x2, 0x3, 0xd, 0x4101}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000880)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x5}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'bridge0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010025bd7000fedbdf25ffffffff000040000000000000000000000004d50a00ff000c0015005b073500bdc00000"], 0x34}}, 0x20004000) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 930.560145ms ago: executing program 1 (id=301): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) 875.723191ms ago: executing program 1 (id=302): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x24040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 802.311618ms ago: executing program 4 (id=303): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000280)={0x0, 0x26, &(0x7f00000002c0)={&(0x7f0000000300)={0x38, r1, 0xd09, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004054}, 0x2004c030) 644.087374ms ago: executing program 4 (id=304): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xfec1}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 323.913237ms ago: executing program 1 (id=305): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x30, 0x3, 0x74}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x84, @multicast2, 0x4f29, 0x3, 'sh\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x4, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 323.633957ms ago: executing program 0 (id=306): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000240)='\x00', 0x1) 323.483347ms ago: executing program 4 (id=307): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=@ipv6_newroute={0x2c, 0x18, 0x111, 0x70bd26, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc8, 0x8, 0x600}, [@RTA_PRIORITY={0x8, 0x6, 0x7ff}, @RTA_EXPIRES={0x8, 0x17, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) 173.028193ms ago: executing program 1 (id=308): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='mnt\x00', 0x4, &(0x7f0000000280), 0x0, 0x236, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt/encrypted_dir\x00', 0x800, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000700)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00') getdents64(r3, &(0x7f0000000580)=""/41, 0x29) connect$unix(r1, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0/file0\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@tcp6}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000880)=0x3) 140.589796ms ago: executing program 3 (id=309): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000440)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="500404"], 0x7) write$nci(r0, &(0x7f00000004c0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x24, r3, 0x1, 0x70bd28, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2a}]}, 0x24}, 0x1, 0x0, 0x0, 0x5855}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="40020ff6626d942047994357b0560000000000"], 0x12) 86.406662ms ago: executing program 4 (id=310): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x2008800, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004640)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x24414809, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x8, 0x4}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000046c0)='./file0\x00', 0x40042, 0x13) close(r0) openat(0xffffffffffffff9c, &(0x7f0000004740)='./file0\x00', 0x0, 0x80) 85.937242ms ago: executing program 0 (id=311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0xb, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000801}, 0x4880) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000700)={0xa, 0x4e24, 0x400, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2, 0x0, @loopback}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000780)={0x40000000, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[], 0x10}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r2, &(0x7f00000009c0), 0x0}, 0x20) sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x2040080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000ac0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x8, 0x32}, 0x0, @in=@private=0xa0100ee, 0x0, 0x0, 0x0, 0xb7, 0x7fffffff, 0xfffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0), 0x800001d, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 41.890896ms ago: executing program 4 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) 0s ago: executing program 4 (id=313): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25180000000400308008000300", @ANYRES32=r3, @ANYBLOB="4c003080050002007a000000340001800c00050001000000000000000800010003"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4804) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 62.433656][ T4175] cgroup: Unknown subsys name 'net' [ 62.560516][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.109508][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.317470][ T4190] rdma_rxe: rxe_register_device failed with error -23 [ 65.325681][ T4190] rdma_rxe: failed to add rxe_eth0 [ 65.329966][ T4196] rdma_rxe: rxe_register_device failed with error -23 [ 65.339742][ T4195] rdma_rxe: rxe_register_device failed with error -23 [ 65.348476][ T4189] rdma_rxe: rxe_register_device failed with error -23 [ 65.355410][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.363290][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.381746][ T4195] rdma_rxe: failed to add rxe_eth0 [ 65.387503][ T4189] rdma_rxe: failed to add rxe_eth0 [ 65.404118][ T4196] rdma_rxe: failed to add rxe_eth0 [ 65.436110][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.641666][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.639617][ T4188] infiniband rxe0: set active [ 65.664544][ T4188] infiniband rxe0: added rxe_eth0 [ 65.753778][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 65.768386][ T4188] RDS/IB: rxe0: added [ 65.773177][ T4188] smc: adding ib device rxe0 with port count 1 [ 65.779944][ T4188] smc: ib device rxe0 port 1 has pnetid [ 65.822968][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.866413][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.878646][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 65.988261][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.056077][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.086332][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.097703][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.106627][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.132421][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 66.161461][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.168995][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.180919][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.218875][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.241876][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.249467][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.263018][ T4195] device bridge_slave_0 entered promiscuous mode [ 66.304096][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.312840][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.321340][ T4195] device bridge_slave_1 entered promiscuous mode [ 66.350111][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.357755][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.367935][ T4189] device bridge_slave_0 entered promiscuous mode [ 66.377504][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.407525][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.418233][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.430556][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.443973][ T4189] device bridge_slave_1 entered promiscuous mode [ 66.452971][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.473062][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.489379][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.499413][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.509302][ T4196] device bridge_slave_0 entered promiscuous mode [ 66.547039][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.563064][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.570784][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.584305][ T4196] device bridge_slave_1 entered promiscuous mode [ 66.643799][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.655835][ T4190] team0: Port device team_slave_0 added [ 66.662324][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.674956][ T4195] team0: Port device team_slave_0 added [ 66.681742][ T4190] team0: Port device team_slave_1 added [ 66.722343][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.745567][ T4195] team0: Port device team_slave_1 added [ 66.762221][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.802584][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.840144][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.854613][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.882057][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.909384][ T4189] team0: Port device team_slave_0 added [ 66.916297][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.923286][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.953252][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.967839][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.978733][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.009713][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.022656][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.039267][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.065807][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.086421][ T4189] team0: Port device team_slave_1 added [ 67.124741][ T4196] team0: Port device team_slave_0 added [ 67.164825][ T4196] team0: Port device team_slave_1 added [ 67.185497][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.193217][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.219644][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.228072][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.254417][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.266204][ T4193] Bluetooth: hci1: command 0x0409 tx timeout [ 67.271700][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.279661][ T4193] Bluetooth: hci4: command 0x0409 tx timeout [ 67.287766][ T4193] Bluetooth: hci3: command 0x0409 tx timeout [ 67.294188][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.320382][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.349023][ T4193] Bluetooth: hci0: command 0x0409 tx timeout [ 67.358377][ T4193] Bluetooth: hci2: command 0x0409 tx timeout [ 67.373747][ T4195] device hsr_slave_0 entered promiscuous mode [ 67.381427][ T4195] device hsr_slave_1 entered promiscuous mode [ 67.394080][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.401990][ T4195] Cannot create hsr debugfs directory [ 67.455836][ T4189] device hsr_slave_0 entered promiscuous mode [ 67.462917][ T4189] device hsr_slave_1 entered promiscuous mode [ 67.469942][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.477630][ T4189] Cannot create hsr debugfs directory [ 67.483617][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.491004][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.517370][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.530224][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.537302][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.563496][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.722424][ T3854] infiniband rxe0: set active [ 67.732190][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.748570][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.765801][ T4196] device hsr_slave_0 entered promiscuous mode [ 67.772911][ T4196] device hsr_slave_1 entered promiscuous mode [ 67.779746][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.787607][ T4196] Cannot create hsr debugfs directory [ 67.996267][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.003604][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.012492][ T4188] device bridge_slave_0 entered promiscuous mode [ 68.041806][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.049147][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.058652][ T4188] device bridge_slave_1 entered promiscuous mode [ 68.110645][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.123508][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.137078][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.148346][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.158531][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.185111][ T4188] team0: Port device team_slave_0 added [ 68.191073][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.202785][ T4188] team0: Port device team_slave_1 added [ 68.237871][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.245110][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.271788][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.288106][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.295517][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.321826][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.369387][ T4188] device hsr_slave_0 entered promiscuous mode [ 68.376723][ T4188] device hsr_slave_1 entered promiscuous mode [ 68.383540][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.392748][ T4188] Cannot create hsr debugfs directory [ 68.439620][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.463694][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.473576][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.507632][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.591541][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.615988][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.643572][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.655607][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.671295][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.696896][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.716913][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.743641][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.756318][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.776846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.787559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.799927][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.815505][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.827353][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.855126][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.867662][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.878090][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.888975][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.896332][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.906714][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.921483][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.934845][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.943582][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.955124][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.962229][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.991920][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.027022][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.039121][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.050003][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.062433][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.089486][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.099353][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.118990][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.130180][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.148932][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.167249][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.181878][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.194573][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.209957][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.218905][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.227139][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.236524][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.250917][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.268204][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.277992][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.288546][ T1993] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.295688][ T1993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.306384][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.352186][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.354813][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 69.366664][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 69.372803][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 69.386501][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.395148][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.410613][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.419705][ T1993] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.426880][ T1993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.434679][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 69.447115][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.454333][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 69.461588][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.470051][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.481837][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.515856][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.527117][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.536705][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.546282][ T1993] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.553380][ T1993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.571055][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.580997][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.598331][ T1993] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.605501][ T1993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.620833][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.629163][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.642662][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.651592][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.661094][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.673502][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.703667][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.716490][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.727612][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.737149][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.748641][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.757705][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.765720][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.773252][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.782082][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.790389][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.799738][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.809170][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.819269][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.830977][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.842738][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.852609][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.863189][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.870342][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.892165][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.909770][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.952274][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.963975][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.976497][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.986684][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.996022][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.004827][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.013504][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.025053][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.037332][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.051348][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.061517][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.076141][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.085750][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.094302][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.101499][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.110480][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.119724][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.128439][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.135565][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.143352][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.160069][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.169839][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.179364][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.186496][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.194309][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.203056][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.212371][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.221493][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.232453][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.241665][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.250460][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.260440][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.268832][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.277268][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.304943][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.317103][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.327908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.337256][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.375710][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.395375][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.416712][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.431920][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.442263][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.457140][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.472085][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.483572][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.497890][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.511125][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.522999][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.535452][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.572177][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.581878][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.598612][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.614511][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.641148][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.673384][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.742238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.774767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.799858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.814364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.823940][ T4190] device veth0_vlan entered promiscuous mode [ 70.842461][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.858630][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.891723][ T4190] device veth1_vlan entered promiscuous mode [ 70.921343][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.963498][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.975286][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.983552][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.992068][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.002285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.016955][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.043152][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.051991][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.061508][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.077821][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.086143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.098462][ T4190] device veth0_macvtap entered promiscuous mode [ 71.118288][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.140547][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.149074][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.159248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.169731][ T4190] device veth1_macvtap entered promiscuous mode [ 71.181301][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.215363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.224571][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.233643][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.242888][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.252476][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.262295][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.271802][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.272020][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.285711][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.300311][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.309133][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.326806][ T4195] device veth0_vlan entered promiscuous mode [ 71.356995][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.365368][ T4188] device veth0_vlan entered promiscuous mode [ 71.378477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.387410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.396614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.407071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.416725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.424949][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 71.424990][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 71.425013][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 71.445153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.461306][ T4195] device veth1_vlan entered promiscuous mode [ 71.482894][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.490892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.499464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.504776][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 71.512748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.514534][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 71.525335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.536036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.548193][ T4188] device veth1_vlan entered promiscuous mode [ 71.567550][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.578768][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.588576][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.597671][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.608623][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.616995][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.626002][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.634588][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.645762][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.655094][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.664780][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.673535][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.700667][ T4196] device veth0_vlan entered promiscuous mode [ 71.708609][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.717830][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.730158][ T4189] device veth0_vlan entered promiscuous mode [ 71.748618][ T4196] device veth1_vlan entered promiscuous mode [ 71.791214][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.807009][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.823764][ T4189] device veth1_vlan entered promiscuous mode [ 71.839834][ T4195] device veth0_macvtap entered promiscuous mode [ 71.894176][ T4195] device veth1_macvtap entered promiscuous mode [ 71.906018][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.916045][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.927003][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.936035][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.944739][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.953343][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.965801][ T4196] device veth0_macvtap entered promiscuous mode [ 71.980002][ T4188] device veth0_macvtap entered promiscuous mode [ 71.991060][ T1993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.999164][ T1993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.010773][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.021743][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.031161][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.058077][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.067235][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.076989][ T4188] device veth1_macvtap entered promiscuous mode [ 72.088257][ T4196] device veth1_macvtap entered promiscuous mode [ 72.101143][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.109884][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.118221][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.128286][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.139959][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.163027][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.177390][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.190494][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.207052][ T4189] device veth0_macvtap entered promiscuous mode [ 72.244970][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.260077][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.270343][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.292422][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.308251][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.318492][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.330479][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.344621][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.113897][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.163897][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.173882][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.183869][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.193867][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.203869][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.213869][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.223875][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.233866][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.243864][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.106215][ T4266] Bluetooth: hci2: command 0x0419 tx timeout [ 74.116922][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 74.124963][ T4265] Bluetooth: hci3: command 0x0419 tx timeout [ 74.137446][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.153973][ T4265] Bluetooth: hci4: command 0x0419 tx timeout [ 74.165402][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.175500][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 74.181111][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.193263][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.211040][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.221438][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.232363][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.242319][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.254122][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.272836][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.289227][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.302796][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.312882][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.324828][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.333733][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.343232][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.356496][ T4189] device veth1_macvtap entered promiscuous mode [ 74.373495][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.387223][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.397006][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.406061][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.424825][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.438695][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.449502][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.460326][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.473426][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.481726][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.493083][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.503671][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.514801][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.525133][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.535951][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.550968][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.584572][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.596547][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.606164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.615366][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.628081][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.637990][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.647165][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.658281][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.676442][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.687593][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.697307][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.707034][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.726167][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.743760][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.754399][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.773216][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.783339][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.795086][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.807523][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.818286][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.830364][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.854827][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.875413][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.966033][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.983194][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.995119][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.006854][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.018693][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.029434][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.039656][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.050726][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.063078][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.103140][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.119352][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.130373][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.145190][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.166657][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.183421][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.219141][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.249903][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.268569][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.314894][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.340459][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.369859][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.404957][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.413022][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.429587][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.493679][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.512422][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.981126][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.127447][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.157749][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.202028][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.269281][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.303732][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.396586][ T1993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.441726][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.463178][ T26] audit: type=1804 audit(1793795941.805:2): pid=4322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2" name="/newroot/0/file0" dev="fuse" ino=1 res=1 errno=0 [ 76.488187][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.510526][ T1993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.569165][ T1993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.592167][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.647013][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.495329][ T4321] sctp: failed to load transform for md5: -2 [ 78.649795][ T4338] loop0: detected capacity change from 0 to 1024 [ 78.706862][ T4342] loop3: detected capacity change from 0 to 512 [ 78.778357][ T4342] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 78.820943][ T4338] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.876930][ T4342] EXT4-fs (loop3): 1 truncate cleaned up [ 78.882645][ T4342] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 78.915352][ T26] audit: type=1804 audit(1793795944.265:3): pid=4338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1" name="/newroot/0/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 80.376678][ T4363] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.897269][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.911224][ T4361] loop3: detected capacity change from 0 to 1024 [ 81.102134][ T4361] hfsplus: invalid length 32517 has been corrected to 255 [ 81.238946][ T4379] loop0: detected capacity change from 0 to 128 [ 81.372013][ T9] hfsplus: b-tree write err: -5, ino 25 [ 81.387545][ T4379] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.401790][ T9] hfsplus: b-tree write err: -5, ino 4 [ 81.449659][ T9] hfsplus: b-tree write err: -5, ino 2 [ 81.478735][ T4379] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.510057][ T4279] hfsplus: b-tree write err: -5, ino 4 [ 81.567513][ T4279] hfsplus: b-tree write err: -5, ino 2 [ 85.488419][ T4371] device syzkaller0 entered promiscuous mode [ 86.648113][ T1327] cfg80211: failed to load regulatory.db [ 87.081775][ T4423] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.956620][ T4432] loop2: detected capacity change from 0 to 512 [ 88.136095][ T4432] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 88.201441][ T4432] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.29: invalid indirect mapped block 256 (level 1) [ 88.359890][ T4432] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.29: invalid indirect mapped block 2683928664 (level 1) [ 88.473822][ C0] sched: RT throttling activated [ 88.494703][ T4443] loop4: detected capacity change from 0 to 512 [ 88.507296][ T4432] EXT4-fs (loop2): 1 truncate cleaned up [ 88.513100][ T4432] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 88.682580][ T4443] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 88.732984][ T4443] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.31: invalid indirect mapped block 256 (level 1) [ 88.851172][ T4443] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.31: invalid indirect mapped block 2683928664 (level 1) [ 88.904255][ T4443] EXT4-fs (loop4): 1 truncate cleaned up [ 88.909990][ T4443] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 89.382300][ T26] audit: type=1800 audit(1793795954.725:4): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.21" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 89.527300][ T4466] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.758127][ T4473] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.31: Invalid block bitmap block 3 in block_group 0 [ 91.797440][ T4497] loop0: detected capacity change from 0 to 2048 [ 91.972595][ T4497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.274200][ T4264] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.309317][ T4508] loop3: detected capacity change from 0 to 2048 [ 92.372296][ T4508] EXT4-fs (loop3): Ignoring removed nobh option [ 92.523947][ T4264] usb 5-1: Using ep0 maxpacket: 32 [ 92.603633][ T4508] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,errors=remount-ro,. Quota mode: none. [ 92.709712][ T4264] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 92.743737][ T4264] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.771025][ T4508] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 92.803914][ T4264] usb 5-1: config 0 has no interface number 0 [ 92.832577][ T4514] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 92.861597][ T4264] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 92.892163][ T4508] EXT4-fs (loop3): Remounting filesystem read-only [ 92.903866][ T4264] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.988162][ T4264] usb 5-1: config 0 interface 196 has no altsetting 0 [ 93.047936][ T4520] Zero length message leads to an empty skb [ 93.251807][ T4521] loop1: detected capacity change from 0 to 8192 [ 93.414122][ T4264] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 93.423389][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.440548][ T26] audit: type=1326 audit(1793795958.785:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.52" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 93.532542][ T4264] usb 5-1: Product: syz [ 93.590752][ T4264] usb 5-1: Manufacturer: syz [ 93.728297][ T26] audit: type=1326 audit(1793795958.785:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.52" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 93.754803][ T26] audit: type=1326 audit(1793795958.785:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.52" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 93.762464][ T4264] usb 5-1: SerialNumber: syz [ 93.778912][ T26] audit: type=1326 audit(1793795958.785:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.52" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 94.563298][ T26] audit: type=1326 audit(1793795958.785:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.52" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 94.593936][ T26] audit: type=1326 audit(1793795958.785:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.52" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 94.658536][ T26] audit: type=1326 audit(1793795958.785:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.52" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 94.730584][ T26] audit: type=1326 audit(1793795958.785:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.52" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 95.636373][ T4549] loop0: detected capacity change from 0 to 512 [ 95.643332][ T26] audit: type=1326 audit(1793795958.785:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.52" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 95.668419][ T26] audit: type=1326 audit(1793795958.785:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.52" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 95.698294][ T26] audit: type=1326 audit(1793795958.785:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.52" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 95.702446][ T4264] usb 5-1: config 0 descriptor?? [ 95.731226][ T26] audit: type=1326 audit(1793795958.785:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.52" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 95.869142][ T26] audit: type=1326 audit(1793795958.785:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.52" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 97.294608][ T4549] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 97.328916][ T1327] Bluetooth: hci1: command 0x0409 tx timeout [ 97.330339][ T26] audit: type=1326 audit(1793795958.785:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.52" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 97.374209][ T4264] usb 5-1: can't set config #0, error -71 [ 97.392481][ T4549] EXT4-fs (loop0): 1 truncate cleaned up [ 97.418169][ T4549] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 97.526422][ T4264] usb 5-1: USB disconnect, device number 2 [ 98.485144][ T4572] loop3: detected capacity change from 0 to 1024 [ 99.417800][ T4576] ip_tables: iptables: counters copy to user failed while replacing table [ 102.067914][ T4590] loop3: detected capacity change from 0 to 256 [ 102.143646][ T4590] FAT-fs (loop3): Directory bread(block 1285) failed [ 102.160831][ T4590] FAT-fs (loop3): Directory bread(block 1286) failed [ 102.170824][ T4590] FAT-fs (loop3): Directory bread(block 1287) failed [ 102.207055][ T4590] FAT-fs (loop3): Directory bread(block 1288) failed [ 102.292646][ T4590] FAT-fs (loop3): Directory bread(block 1285) failed [ 102.313952][ T4590] FAT-fs (loop3): Directory bread(block 1286) failed [ 102.334088][ T4590] FAT-fs (loop3): Directory bread(block 1287) failed [ 102.341744][ T4590] FAT-fs (loop3): Directory bread(block 1288) failed [ 102.375312][ T4590] FAT-fs (loop3): Directory bread(block 1285) failed [ 102.414962][ T4594] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 102.621772][ T4596] loop4: detected capacity change from 0 to 1024 [ 102.852278][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 102.852295][ T26] audit: type=1804 audit(1793795968.195:65): pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.75" name="/newroot/21/file0" dev="fuse" ino=1 res=1 errno=0 [ 104.322997][ T4615] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.545444][ T4618] syz.0.81 (4618): drop_caches: 0 [ 105.629086][ T4619] loop4: detected capacity change from 0 to 2048 [ 105.865606][ T4619] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.929090][ T4619] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.366240][ T4635] loop1: detected capacity change from 0 to 512 [ 107.488574][ T4626] loop0: detected capacity change from 0 to 164 [ 107.608749][ T4635] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 107.758235][ T4635] EXT4-fs (loop1): 1 truncate cleaned up [ 107.787647][ T4635] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 110.738051][ T4666] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.112540][ T4677] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.168829][ T4683] FAULT_INJECTION: forcing a failure. [ 111.168829][ T4683] name failslab, interval 1, probability 0, space 0, times 1 [ 111.203947][ T4683] CPU: 1 PID: 4683 Comm: syz.1.100 Not tainted syzkaller #0 [ 111.211304][ T4683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.221407][ T4683] Call Trace: [ 111.224713][ T4683] [ 111.227655][ T4683] dump_stack_lvl+0x188/0x250 [ 111.232356][ T4683] ? show_regs_print_info+0x20/0x20 [ 111.237666][ T4683] ? load_image+0x410/0x410 [ 111.242186][ T4683] ? __might_sleep+0xf0/0xf0 [ 111.246802][ T4683] ? __lock_acquire+0x7d40/0x7d40 [ 111.251875][ T4683] should_fail+0x383/0x4b0 [ 111.256316][ T4683] should_failslab+0x5/0x20 [ 111.260941][ T4683] slab_pre_alloc_hook+0x51/0xc0 [ 111.265895][ T4683] kmem_cache_alloc_trace+0x47/0x290 [ 111.271216][ T4683] ? newseg+0x240/0xbe0 [ 111.275559][ T4683] newseg+0x240/0xbe0 [ 111.279594][ T4683] ? ksys_shmget+0x140/0x140 [ 111.284226][ T4683] ipcget+0x8be/0xc50 [ 111.288246][ T4683] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 111.293936][ T4683] ? __lock_acquire+0x7d40/0x7d40 [ 111.299094][ T4683] __x64_sys_shmget+0x13d/0x180 [ 111.304112][ T4683] ? lock_chain_count+0x20/0x20 [ 111.309128][ T4683] ? shm_more_checks+0x80/0x80 [ 111.313949][ T4683] ? lockdep_hardirqs_on+0x94/0x140 [ 111.319186][ T4683] do_syscall_64+0x4c/0xa0 [ 111.323674][ T4683] ? clear_bhb_loop+0x30/0x80 [ 111.328382][ T4683] ? clear_bhb_loop+0x30/0x80 [ 111.333111][ T4683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.339118][ T4683] RIP: 0033:0x7f20e44d9b19 [ 111.343542][ T4683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.363157][ T4683] RSP: 002b:00007f20e2730028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 111.371593][ T4683] RAX: ffffffffffffffda RBX: 00007f20e475ffa0 RCX: 00007f20e44d9b19 [ 111.379605][ T4683] RDX: 0000000000000200 RSI: 0000000000003000 RDI: 00000000798dd819 [ 111.387593][ T4683] RBP: 00007f20e4571b70 R08: 0000000000000000 R09: 0000000000000000 [ 111.395629][ T4683] R10: 0000200000ffd000 R11: 0000000000000246 R12: 0000000000000000 [ 111.403727][ T4683] R13: 00007f20e4760038 R14: 00007f20e475ffa0 R15: 00007fff3f4dce88 [ 111.411782][ T4683] [ 111.416014][ T26] audit: type=1804 audit(1793795976.565:66): pid=4681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.99" name="/newroot/23/file0" dev="fuse" ino=1 res=1 errno=0 [ 111.560864][ T4691] binfmt_misc: register: failed to install interpreter file ./file0 [ 113.122393][ T4705] netlink: 'syz.4.108': attribute type 1 has an invalid length. [ 113.173743][ T4707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.110'. [ 115.987551][ T4710] device wlan1 entered promiscuous mode [ 116.082893][ T4710] syz.4.108 (4710) used greatest stack depth: 20176 bytes left [ 116.108163][ T4723] device ip6gretap0 entered promiscuous mode [ 116.371144][ T26] audit: type=1804 audit(1793795981.715:67): pid=4726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.117" name="/newroot/31/file0" dev="fuse" ino=1 res=1 errno=0 [ 118.847450][ T4753] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 118.859784][ T26] audit: type=1326 audit(1793795984.205:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 118.884935][ T26] audit: type=1326 audit(1793795984.205:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 118.992776][ T4755] loop0: detected capacity change from 0 to 164 [ 119.137904][ T4755] ======================================================= [ 119.137904][ T4755] WARNING: The mand mount option has been deprecated and [ 119.137904][ T4755] and is ignored by this kernel. Remove the mand [ 119.137904][ T4755] option from the mount to silence this warning. [ 119.137904][ T4755] ======================================================= [ 119.195046][ T4755] rock: directory entry would overflow storage [ 119.201579][ T4755] rock: sig=0x5252, size=5, remaining=3 [ 119.207351][ T4755] isofs_fill_super: root inode is not a directory. Corrupted media? [ 119.230655][ T26] audit: type=1326 audit(1793795984.205:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 119.604640][ T26] audit: type=1326 audit(1793795984.205:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 119.639169][ T26] audit: type=1326 audit(1793795984.205:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 119.742926][ T4762] loop3: detected capacity change from 0 to 512 [ 119.765257][ T26] audit: type=1326 audit(1793795984.205:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 121.206407][ T4765] loop0: detected capacity change from 0 to 128 [ 121.230128][ T26] audit: type=1326 audit(1793795984.205:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 121.288755][ T4762] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 121.380448][ T26] audit: type=1326 audit(1793795984.205:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b6cb19 code=0x7ffc0000 [ 121.437331][ T4762] EXT4-fs (loop3): 1 truncate cleaned up [ 121.471629][ T4762] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 122.147551][ T4785] tipc: Enabling of bearer rejected, failed to enable media [ 122.241517][ T4792] Bluetooth: hci0: unsupported parameter 5135 [ 122.282902][ T4792] Bluetooth: hci0: unsupported parameter 8192 [ 122.327941][ T4792] Bluetooth: hci0: unsupported parameter 5135 [ 122.349886][ T4792] Bluetooth: hci0: unsupported parameter 8192 [ 122.375326][ T4796] Cannot find del_set index 4 as target [ 123.525687][ T4808] TC_ACT_REPEAT abuse ? [ 123.543018][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 124.743640][ T4834] xt_l2tp: invalid flags combination: 8 [ 124.749445][ T4836] netlink: 272 bytes leftover after parsing attributes in process `syz.3.148'. [ 124.874361][ T4839] device syzkaller0 entered promiscuous mode [ 125.929366][ T4852] netlink: 'syz.4.154': attribute type 10 has an invalid length. [ 126.017179][ T4852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.284735][ T4852] team0: Port device bond0 added [ 126.382324][ T4861] loop2: detected capacity change from 0 to 164 [ 129.063316][ T4915] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.525493][ T4958] loop0: detected capacity change from 0 to 164 [ 132.493584][ T4966] syz.3.195 uses obsolete (PF_INET,SOCK_PACKET) [ 132.771443][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.777866][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.544428][ T4980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.198'. [ 134.897829][ T5002] ip_tables: iptables: counters copy to user failed while replacing table [ 134.994117][ T5002] device syzkaller1 entered promiscuous mode [ 137.658164][ T5034] device syzkaller0 entered promiscuous mode [ 137.692914][ T5042] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.695485][ T5052] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 138.864571][ T5054] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.984501][ T5062] loop3: detected capacity change from 0 to 164 [ 139.787671][ T5081] loop2: detected capacity change from 0 to 128 [ 139.897052][ T5081] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.400089][ T5081] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.168333][ T5091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 141.644773][ T5099] device veth1_macvtap left promiscuous mode [ 141.654291][ T5099] device macsec0 entered promiscuous mode [ 141.943081][ T5101] device syzkaller0 entered promiscuous mode [ 143.363929][ T5125] device veth0 entered promiscuous mode [ 143.466050][ T5123] device veth0 left promiscuous mode [ 143.766036][ T5142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 143.909059][ T5135] device syzkaller0 entered promiscuous mode [ 144.001305][ T5148] loop2: detected capacity change from 0 to 512 [ 144.086583][ T5139] syz.1.252 (5139) used greatest stack depth: 18544 bytes left [ 144.134221][ T5148] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 144.228400][ T5148] EXT4-fs (loop2): 1 truncate cleaned up [ 144.344021][ T5148] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 147.361465][ T5173] netlink: 52 bytes leftover after parsing attributes in process `syz.4.246'. [ 147.882674][ T5183] rdma_op ffff8880242a69f0 conn xmit_rdma 0000000000000000 [ 147.943035][ T5185] netlink: 'syz.1.267': attribute type 5 has an invalid length. [ 149.508659][ T5188] device syzkaller0 entered promiscuous mode [ 151.915155][ T5218] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 152.772706][ T5224] loop3: detected capacity change from 0 to 128 [ 152.864781][ T5224] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.963525][ T5224] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.448181][ T5258] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 155.579822][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'. [ 155.689384][ T5264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.710039][ T5269] tipc: Started in network mode [ 155.715177][ T5269] tipc: Node identity 2618ad066c56, cluster identity 4711 [ 155.722545][ T5269] tipc: Enabled bearer , priority 0 [ 155.749606][ T5269] device syzkaller0 entered promiscuous mode [ 155.759551][ T5271] loop2: detected capacity change from 0 to 128 [ 155.780038][ T5269] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 155.792584][ T5269] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 155.808978][ T5269] tipc: Resetting bearer [ 155.830766][ T5271] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.842577][ T5268] tipc: Resetting bearer [ 155.849074][ T5271] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.890820][ T5268] tipc: Disabling bearer [ 156.711341][ T1111] Bluetooth: hci4: command 0x0405 tx timeout [ 156.862045][ T5282] netlink: 'syz.1.294': attribute type 2 has an invalid length. [ 157.285816][ T5300] netlink: 'syz.3.300': attribute type 16 has an invalid length. [ 157.362103][ T5300] netlink: 'syz.3.300': attribute type 17 has an invalid length. [ 157.450895][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.459192][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.475318][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.495240][ T5300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.772098][ T5315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.296'. [ 157.866359][ T5321] loop1: detected capacity change from 0 to 128 [ 157.889436][ T5325] fuse: Bad value for 'fd' [ 157.990374][ T5332] [ 157.992765][ T5332] ====================================================== [ 157.999812][ T5332] WARNING: possible circular locking dependency detected [ 158.006865][ T5332] syzkaller #0 Not tainted [ 158.011313][ T5332] ------------------------------------------------------ [ 158.018359][ T5332] syz.3.309/5332 is trying to acquire lock: [ 158.024278][ T5332] ffff888076bc6350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x55c/0xd10 [ 158.033559][ T5332] [ 158.033559][ T5332] but task is already holding lock: [ 158.040959][ T5332] ffff888076bc55d8 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 158.051650][ T5332] [ 158.051650][ T5332] which lock already depends on the new lock. [ 158.051650][ T5332] [ 158.062079][ T5332] [ 158.062079][ T5332] the existing dependency chain (in reverse order) is: [ 158.071123][ T5332] [ 158.071123][ T5332] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 158.079885][ T5332] __mutex_lock_common+0x1e5/0x2400 [ 158.085653][ T5332] mutex_lock_nested+0x17/0x20 [ 158.091078][ T5332] nfc_urelease_event_work+0x120/0x310 [ 158.097088][ T5332] process_one_work+0x867/0xff0 [ 158.102488][ T5332] worker_thread+0xad7/0x12a0 [ 158.107710][ T5332] kthread+0x42e/0x520 [ 158.112321][ T5332] ret_from_fork+0x1f/0x30 [ 158.117282][ T5332] [ 158.117282][ T5332] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 158.125128][ T5332] __mutex_lock_common+0x1e5/0x2400 [ 158.130869][ T5332] mutex_lock_nested+0x17/0x20 [ 158.136177][ T5332] nfc_register_device+0x38/0x300 [ 158.141750][ T5332] nci_register_device+0x89f/0x9f0 [ 158.147416][ T5332] virtual_ncidev_open+0x55/0xc0 [ 158.152915][ T5332] misc_open+0x31f/0x390 [ 158.157871][ T5332] chrdev_open+0x585/0x5f0 [ 158.162830][ T5332] do_dentry_open+0x7f7/0xf90 [ 158.168049][ T5332] path_openat+0x2718/0x2fb0 [ 158.173178][ T5332] do_filp_open+0x1df/0x400 [ 158.178241][ T5332] do_sys_openat2+0x14b/0x500 [ 158.183460][ T5332] __x64_sys_openat+0x135/0x160 [ 158.188854][ T5332] do_syscall_64+0x4c/0xa0 [ 158.193826][ T5332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.200289][ T5332] [ 158.200289][ T5332] -> #1 (nci_mutex){+.+.}-{3:3}: [ 158.207427][ T5332] __mutex_lock_common+0x1e5/0x2400 [ 158.213166][ T5332] mutex_lock_nested+0x17/0x20 [ 158.218465][ T5332] virtual_nci_close+0x13/0x40 [ 158.223767][ T5332] nci_dev_up+0x976/0xd90 [ 158.228729][ T5332] nfc_dev_up+0x15d/0x310 [ 158.233621][ T5332] nfc_genl_dev_up+0x85/0xd0 [ 158.238747][ T5332] genl_rcv_msg+0xd0b/0xfa0 [ 158.243794][ T5332] netlink_rcv_skb+0x1e9/0x430 [ 158.249101][ T5332] genl_rcv+0x24/0x40 [ 158.253625][ T5332] netlink_unicast+0x804/0x9e0 [ 158.258928][ T5332] netlink_sendmsg+0x8ba/0xbe0 [ 158.264229][ T5332] ____sys_sendmsg+0x5be/0x8f0 [ 158.269554][ T5332] ___sys_sendmsg+0x236/0x2e0 [ 158.274763][ T5332] __se_sys_sendmsg+0x1b7/0x2a0 [ 158.280156][ T5332] do_syscall_64+0x4c/0xa0 [ 158.285110][ T5332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.291550][ T5332] [ 158.291550][ T5332] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 158.299214][ T5332] __lock_acquire+0x38f7/0x7d40 [ 158.304633][ T5332] lock_acquire+0x19f/0x400 [ 158.309699][ T5332] __mutex_lock_common+0x1e5/0x2400 [ 158.315444][ T5332] mutex_lock_nested+0x17/0x20 [ 158.320743][ T5332] nci_start_poll+0x55c/0xd10 [ 158.325986][ T5332] nfc_start_poll+0x141/0x2c0 [ 158.331299][ T5332] nfc_genl_start_poll+0x1d7/0x340 [ 158.336952][ T5332] genl_rcv_msg+0xd0b/0xfa0 [ 158.342004][ T5332] netlink_rcv_skb+0x1e9/0x430 [ 158.347308][ T5332] genl_rcv+0x24/0x40 [ 158.351984][ T5332] netlink_unicast+0x804/0x9e0 [ 158.357394][ T5332] netlink_sendmsg+0x8ba/0xbe0 [ 158.362705][ T5332] ____sys_sendmsg+0x5be/0x8f0 [ 158.368042][ T5332] ___sys_sendmsg+0x236/0x2e0 [ 158.373260][ T5332] __se_sys_sendmsg+0x1b7/0x2a0 [ 158.378654][ T5332] do_syscall_64+0x4c/0xa0 [ 158.383608][ T5332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.390039][ T5332] [ 158.390039][ T5332] other info that might help us debug this: [ 158.390039][ T5332] [ 158.400278][ T5332] Chain exists of: [ 158.400278][ T5332] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 158.400278][ T5332] [ 158.414543][ T5332] Possible unsafe locking scenario: [ 158.414543][ T5332] [ 158.421999][ T5332] CPU0 CPU1 [ 158.427377][ T5332] ---- ---- [ 158.432749][ T5332] lock(&genl_data->genl_data_mutex); [ 158.438227][ T5332] lock(nfc_devlist_mutex); [ 158.445368][ T5332] lock(&genl_data->genl_data_mutex); [ 158.453376][ T5332] lock(&ndev->req_lock); [ 158.457800][ T5332] [ 158.457800][ T5332] *** DEADLOCK *** [ 158.457800][ T5332] [ 158.465953][ T5332] 4 locks held by syz.3.309/5332: [ 158.470993][ T5332] #0: ffffffff8e2c9a10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 158.479196][ T5332] #1: ffffffff8e2c9868 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x161/0xfa0 [ 158.488275][ T5332] #2: ffff888076bc55d8 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 158.499364][ T5332] #3: ffff888076bc5190 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x4f/0x2c0 [ 158.508520][ T5332] [ 158.508520][ T5332] stack backtrace: [ 158.514425][ T5332] CPU: 1 PID: 5332 Comm: syz.3.309 Not tainted syzkaller #0 [ 158.521723][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 158.531819][ T5332] Call Trace: [ 158.535132][ T5332] [ 158.538081][ T5332] dump_stack_lvl+0x188/0x250 [ 158.542787][ T5332] ? load_image+0x410/0x410 [ 158.547311][ T5332] ? show_regs_print_info+0x20/0x20 [ 158.552553][ T5332] ? print_circular_bug+0x12b/0x1a0 [ 158.557776][ T5332] check_noncircular+0x2f8/0x400 [ 158.562734][ T5332] ? print_deadlock_bug+0x5d0/0x5d0 [ 158.568035][ T5332] ? lockdep_lock+0xf1/0x1f0 [ 158.572644][ T5332] ? mark_lock+0x94/0x320 [ 158.576989][ T5332] ? _find_first_zero_bit+0xd1/0xf0 [ 158.582208][ T5332] __lock_acquire+0x38f7/0x7d40 [ 158.587089][ T5332] ? slab_free_freelist_hook+0xec/0x170 [ 158.592674][ T5332] ? kfree+0xef/0x2a0 [ 158.596671][ T5332] ? nfc_llcp_build_gb+0x36d/0x440 [ 158.601797][ T5332] ? nfc_llcp_general_bytes+0xd5/0x240 [ 158.607294][ T5332] ? nfc_start_poll+0x141/0x2c0 [ 158.612166][ T5332] ? nfc_genl_start_poll+0x1d7/0x340 [ 158.617462][ T5332] ? verify_lock_unused+0x140/0x140 [ 158.622771][ T5332] ? netlink_unicast+0x804/0x9e0 [ 158.627728][ T5332] ? netlink_sendmsg+0x8ba/0xbe0 [ 158.632690][ T5332] ? ____sys_sendmsg+0x5be/0x8f0 [ 158.637645][ T5332] ? ___sys_sendmsg+0x236/0x2e0 [ 158.642517][ T5332] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 158.647559][ T5332] ? do_syscall_64+0x4c/0xa0 [ 158.652198][ T5332] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.658292][ T5332] lock_acquire+0x19f/0x400 [ 158.662812][ T5332] ? nci_start_poll+0x55c/0xd10 [ 158.667682][ T5332] ? __might_sleep+0xf0/0xf0 [ 158.672286][ T5332] ? read_lock_is_recursive+0x10/0x10 [ 158.677677][ T5332] ? slab_free_freelist_hook+0xec/0x170 [ 158.683243][ T5332] __mutex_lock_common+0x1e5/0x2400 [ 158.688548][ T5332] ? nci_start_poll+0x55c/0xd10 [ 158.693419][ T5332] ? nfc_llcp_build_gb+0x36d/0x440 [ 158.698555][ T5332] ? nci_start_poll+0x55c/0xd10 [ 158.703423][ T5332] ? nfc_llcp_general_bytes+0x240/0x240 [ 158.708987][ T5332] ? mutex_lock_io_nested+0x60/0x60 [ 158.714205][ T5332] ? nfc_llcp_local_get+0x15f/0x1e0 [ 158.719420][ T5332] ? nfc_llcp_general_bytes+0x141/0x240 [ 158.724993][ T5332] mutex_lock_nested+0x17/0x20 [ 158.729785][ T5332] nci_start_poll+0x55c/0xd10 [ 158.734478][ T5332] ? nci_dev_down+0x40/0x40 [ 158.739208][ T5332] ? __mutex_lock_common+0x435/0x2400 [ 158.744601][ T5332] ? klist_iter_exit+0xbc/0xf0 [ 158.749386][ T5332] ? class_find_device+0x232/0x290 [ 158.754518][ T5332] ? nfc_genl_start_poll+0x1c9/0x340 [ 158.759848][ T5332] ? nfc_get_device+0x82/0xd0 [ 158.764558][ T5332] ? nfc_release+0x2e0/0x2e0 [ 158.769187][ T5332] nfc_start_poll+0x141/0x2c0 [ 158.773894][ T5332] nfc_genl_start_poll+0x1d7/0x340 [ 158.779042][ T5332] genl_rcv_msg+0xd0b/0xfa0 [ 158.783571][ T5332] ? genl_bind+0x370/0x370 [ 158.788012][ T5332] ? verify_lock_unused+0x140/0x140 [ 158.793240][ T5332] ? verify_lock_unused+0x140/0x140 [ 158.798478][ T5332] ? nfc_genl_dev_down+0xd0/0xd0 [ 158.803459][ T5332] netlink_rcv_skb+0x1e9/0x430 [ 158.808246][ T5332] ? genl_bind+0x370/0x370 [ 158.812684][ T5332] ? netlink_ack+0xb10/0xb10 [ 158.817287][ T5332] ? __lock_acquire+0x7d40/0x7d40 [ 158.822345][ T5332] ? down_read+0x1aa/0x2e0 [ 158.826867][ T5332] genl_rcv+0x24/0x40 [ 158.830963][ T5332] netlink_unicast+0x804/0x9e0 [ 158.835758][ T5332] netlink_sendmsg+0x8ba/0xbe0 [ 158.840567][ T5332] ? netlink_getsockopt+0x570/0x570 [ 158.845781][ T5332] ? aa_sock_msg_perm+0x94/0x150 [ 158.850762][ T5332] ? apparmor_socket_sendmsg+0x88/0x230 [ 158.856326][ T5332] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 158.861625][ T5332] ? security_socket_sendmsg+0x7c/0xa0 [ 158.867119][ T5332] ? netlink_getsockopt+0x570/0x570 [ 158.872346][ T5332] ____sys_sendmsg+0x5be/0x8f0 [ 158.877145][ T5332] ? __sys_sendmsg_sock+0x30/0x30 [ 158.882185][ T5332] ? import_iovec+0x6f/0xa0 [ 158.886712][ T5332] ___sys_sendmsg+0x236/0x2e0 [ 158.891417][ T5332] ? __sys_sendmsg+0x290/0x290 [ 158.896223][ T5332] __se_sys_sendmsg+0x1b7/0x2a0 [ 158.901100][ T5332] ? __x64_sys_sendmsg+0x80/0x80 [ 158.906054][ T5332] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 158.912054][ T5332] ? lockdep_hardirqs_on+0x94/0x140 [ 158.917272][ T5332] do_syscall_64+0x4c/0xa0 [ 158.921704][ T5332] ? clear_bhb_loop+0x30/0x80 [ 158.926402][ T5332] ? clear_bhb_loop+0x30/0x80 [ 158.931107][ T5332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.937020][ T5332] RIP: 0033:0x7f87c7b6cb19 [ 158.941451][ T5332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.961077][ T5332] RSP: 002b:00007f87c5da2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.969509][ T5332] RAX: ffffffffffffffda RBX: 00007f87c7df3090 RCX: 00007f87c7b6cb19 [ 158.977501][ T5332] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 158.985496][ T5332] RBP: 00007f87c7c04b70 R08: 0000000000000000 R09: 0000000000000000 [ 158.993481][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.001470][ T5332] R13: 00007f87c7df3128 R14: 00007f87c7df3090 R15: 00007ffe85778488 [ 159.009467][ T5332] [ 159.036440][ T5321] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.059275][ T5321] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.855672][ T5332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.864595][ T5332] nci: nci_start_poll: failed to set local general bytes [ 160.874300][ T5318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512