last executing test programs: 30.093652414s ago: executing program 0 (id=515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000380)="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", 0x148}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.838274105s ago: executing program 0 (id=520): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="050000000e80006558", 0x9}], 0x2) 27.776390423s ago: executing program 0 (id=522): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x9, 0xa, 0xe, 0x100000001, 0x4, 0x4, 0x5, 0x9}, &(0x7f0000000300)={0x5, 0x3, 0x7, 0xffffffffffff159a, 0x4, 0x6e9, 0x947d, 0x1}, 0x0, 0x0, 0x0) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 25.092067643s ago: executing program 0 (id=528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x4000000000882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x9) 21.376763699s ago: executing program 0 (id=536): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000002300)="851bf0ea44d0c5de23007aa811723ce9d478a626c148adf492d83475cc071b28032cebb39f1631ab1540db2961cdaedf526c1fb54b4fac98e264684023b2867206697bba1ad08bad9bf765527f8edee2d956bb3d9e210b127baf6808f81adfa9529df7a8d472ced7509817a446f7c8841f27122ab651a7f9314bb22a5a83e75bfc774c481c6133dee4f9be2ebdcd6832aa1ac9b8389c8b21c39ff55f6bb5c82be6395fff2f732069e176204aabe07c42f1", 0xb1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2}, 0x38) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x45c) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 21.352699974s ago: executing program 1 (id=537): sendmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000014c0)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000001600)=[{0x48, 0x1, 0xffffffff, "7eac6c2313733597d91ceeafc0b0cc79da34c7523104c8e2c3d1867310074123ac0f65872ab6ec236b80f5f8a0411206bf25fe33c8f3a5"}], 0x48}, 0x20008001) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001740), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001900)={'ip6gre0\x00', &(0x7f0000001880)={'ip6_vti0\x00', 0x0, 0x4, 0xe, 0x5, 0x551, 0x0, @empty, @local, 0x40, 0x8, 0x6, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6tnl0\x00', &(0x7f0000001940)={'ip6_vti0\x00', 0x0, 0x0, 0x1, 0x22, 0x8000, 0x11, @dev={0xfe, 0x80, '\x00', 0x14}, @dev={0xfe, 0x80, '\x00', 0x39}, 0x7800, 0x700, 0xfffffffd, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a80)={'ip6_vti0\x00', &(0x7f0000001a00)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x1, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x7f01, 0x3, 0x4}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001ac0)={@private2}, &(0x7f0000001b00)=0x14) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000002780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000027c0)=0x14, 0x800) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000002800)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002840)={'veth1_to_hsr\x00'}) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000002880)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) lseek(r3, 0x4b, 0x1) 19.971942057s ago: executing program 0 (id=539): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYRESDEC], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000000000000000000000050000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/consoles\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000380)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) 19.119190483s ago: executing program 2 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000002300)="851bf0ea44d0c5de23007aa811723ce9d478a626c148adf492d83475cc071b28032cebb39f1631ab1540db2961cdaedf526c1fb54b4fac98e264684023b2867206697bba1ad08bad9bf765527f8edee2d956bb3d9e210b127baf6808f81adfa9529df7a8d472ced7509817a446f7c8841f27122ab651a7f9314bb22a5a83e75bfc774c481c6133dee4f9be2ebdcd6832aa1ac9b8389c8b21c39ff55f6bb5c82be6395fff2f732069e176204aabe07c42f1", 0xb1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f00000006c0)="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", 0xfa}], 0x1) 18.053650928s ago: executing program 2 (id=546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000380)="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", 0x14d}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.924754692s ago: executing program 1 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fsopen(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') readv(r3, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/200, 0xc8}], 0x1) 17.647595705s ago: executing program 2 (id=549): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000008d220000000000000018110000", @ANYRES32, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000060000004500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000e8ff00000000000000007baea5bb740b1effa83a6e1dfe4dc2bfb244b3412ea0cd1b19fd51771cea479f7a7322822b331353f062760a513aa7bf3df3697579a1a643510536e3e81934d09d46a872086500"/103], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000100), 0xc) bind$qrtr(r5, &(0x7f0000000080)={0x2a, 0x1, 0x97ff}, 0xc) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r6) close(r7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 15.188098321s ago: executing program 1 (id=550): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, r1, 0x0, 0x7a6, 0xa6}) 14.976249087s ago: executing program 1 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') readv(r3, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/200, 0xc8}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000200000000000000950000000000000059ebae0eb7f4c8803605e4b2f7dd3874131b74a180007dd8767d588c23cdb963042468289a8a1fbcd229fe662dfd71d03c1c797aba20c0f9fa155100437f8c1c41daa62210704ac661c1cf7ee90f2b8216ce954d702b"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) removexattr(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="89878347638e"]) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xb) unshare(0x2c020400) r5 = socket(0x2, 0x2, 0x1) bind$inet6(r5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) 14.273813444s ago: executing program 2 (id=552): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000002300)="851bf0ea44d0c5de23007aa811723ce9d478a626c148adf492d83475cc071b28032cebb39f1631ab1540db2961cdaedf526c1fb54b4fac98e264684023b2867206697bba1ad08bad9bf765527f8edee2d956bb3d9e210b127baf6808f81adfa9529df7a8d472ced7509817a446f7c8841f27122ab651a7f9314bb22a5a83e75bfc774c481c6133dee4f9be2ebdcd6832aa1ac9b8389c8b21c39ff55f6bb5c82be6395fff2f732069e176204aabe07c42f1", 0xb1) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x45c) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_script(r5, 0x0, 0x0) 13.671604611s ago: executing program 1 (id=556): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000002300)="851bf0ea44d0c5de23007aa811723ce9d478a626c148adf492d83475cc071b28032cebb39f1631ab1540db2961cdaedf526c1fb54b4fac98e264684023b2867206697bba1ad08bad9bf765527f8edee2d956bb3d9e210b127baf6808f81adfa9529df7a8d472ced7509817a446f7c8841f27122ab651a7f9314bb22a5a83e75bfc774c481c6133dee4f9be2ebdcd6832aa1ac9b8389c8b21c39ff55f6bb5c82be6395fff2f732069e176204aabe07c42f1", 0xb1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x45c) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xd) 13.235336153s ago: executing program 2 (id=557): sendmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000014c0)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000001600)=[{0x48, 0x1, 0xffffffff, "7eac6c2313733597d91ceeafc0b0cc79da34c7523104c8e2c3d1867310074123ac0f65872ab6ec236b80f5f8a0411206bf25fe33c8f3a5"}], 0x48}, 0x20008001) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001740), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001900)={'ip6gre0\x00', &(0x7f0000001880)={'ip6_vti0\x00', 0x0, 0x4, 0xe, 0x5, 0x551, 0x0, @empty, @local, 0x40, 0x8, 0x6, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6tnl0\x00', &(0x7f0000001940)={'ip6_vti0\x00', 0x0, 0x0, 0x1, 0x22, 0x8000, 0x11, @dev={0xfe, 0x80, '\x00', 0x14}, @dev={0xfe, 0x80, '\x00', 0x39}, 0x7800, 0x700, 0xfffffffd, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a80)={'ip6_vti0\x00', &(0x7f0000001a00)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x1, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x7f01, 0x3, 0x4}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001ac0)={@private2}, &(0x7f0000001b00)=0x14) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000002780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000027c0)=0x14, 0x800) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000002800)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002840)={'veth1_to_hsr\x00'}) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000002880)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) lseek(r3, 0x4b, 0x1) 13.015945983s ago: executing program 2 (id=559): socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioperm(0x0, 0x40, 0x84) migrate_pages(0x0, 0x0, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x20cb12d87589c51e) fcntl$setsig(r1, 0xa, 0x21) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x5760, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001200)='./control\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.105004902s ago: executing program 1 (id=560): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r4 = open$dir(&(0x7f0000000180)='./file1\x00', 0x800, 0xd) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f00000001c0)={@desc={0x1, 0x0, @desc3}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$rfkill(r5, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) 4.243477527s ago: executing program 4 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') readv(r3, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/200, 0xc8}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000200000000000000950000000000000059ebae0eb7f4c8803605e4b2f7dd3874131b74a180007dd8767d588c23cdb963042468289a8a1fbcd229fe662dfd71d03c1c797aba20c0f9fa155100437f8c1c41daa62210704ac661c1cf7ee90f2b8216ce954d702b"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) removexattr(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="89878347638e"]) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xb) unshare(0x2c020400) r5 = socket(0x2, 0x2, 0x1) bind$inet6(r5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) 3.127904395s ago: executing program 4 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') readv(r3, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/200, 0xc8}], 0x1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000200000000000000950000000000000059ebae0eb7f4c8803605e4b2f7dd3874131b74a180007dd8767d588c23cdb963042468289a8a1fbcd229fe662dfd71d03c1c797aba20c0f9fa155100437f8c1c41daa62210704ac661c1cf7ee90f2b8216ce954d702b"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) removexattr(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="89878347638e"]) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) unshare(0x2c020400) r6 = socket(0x2, 0x2, 0x1) bind$inet6(r6, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb) 2.926344992s ago: executing program 3 (id=569): epoll_create1(0x0) mknod(0x0, 0x8001420, 0x0) open$dir(0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x69) open(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04e3020404"], 0x7) 2.189143014s ago: executing program 3 (id=570): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000002300)="851bf0ea44d0c5de23007aa811723ce9d478a626c148adf492d83475cc071b28032cebb39f1631ab1540db2961cdaedf526c1fb54b4fac98e264684023b2867206697bba1ad08bad9bf765527f8edee2d956bb3d9e210b127baf6808f81adfa9529df7a8d472ced7509817a446f7c8841f27122ab651a7f9314bb22a5a83e75bfc774c481c6133dee4f9be2ebdcd6832aa1ac9b8389c8b21c39ff55f6bb5c82be6395fff2f732069e176204aabe07c42f1", 0xb1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x45c) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xd) 2.126692236s ago: executing program 4 (id=571): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYRESDEC], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000000000000000000000050000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/consoles\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000380)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) 1.043179207s ago: executing program 3 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x800000080010000) openat(r3, &(0x7f0000004400)='./bus\x00', 0x463142, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, 0x0, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r2, @ANYBLOB="7bb2b6db7eff0000006c36e847059f87c2cba4dcd51668c7494bc3085c220c00003293c559b5a1"], 0x40}}, 0x0) 883.993321ms ago: executing program 3 (id=574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x4000000000882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x9) 450.437987ms ago: executing program 4 (id=575): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="c85998b5b4cf023436470fcb27d5237f707a0ae2e694f0da8b6e32377d8e10"}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80}}, './file0\x00'}) r4 = dup(r1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x6, 0xdddd0000, 0x1000, &(0x7f0000012000/0x1000)=nil}) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 228.006194ms ago: executing program 4 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) 187.842131ms ago: executing program 4 (id=577): socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioperm(0x0, 0x40, 0x84) migrate_pages(0x0, 0x0, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x20cb12d87589c51e) fcntl$setsig(r1, 0xa, 0x21) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x5760, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001200)='./control\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 88.217109ms ago: executing program 3 (id=578): epoll_create1(0x0) mknod(0x0, 0x8001420, 0x0) open$dir(0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x69) open(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04e3020404"], 0x7) 0s ago: executing program 3 (id=579): socket$inet6_icmp(0xa, 0x2, 0x3a) syz_usb_connect(0x0, 0xffffffffffffff0d, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0a0034000202020202020000"], 0x30}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000001380)=[{r3}], 0x1, 0x0, 0x0, 0x0) bind$rxrpc(r1, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x2c, {0x2, 0x0, @empty}}, 0x24) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6b) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet(0x2, 0x0, 0xc0ed) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{0x0}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000640)=""/104, 0x68}], 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @private=0xa010102}, 0x10) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x75}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/686, @ANYRES8=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x3, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'vlan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'vlan0\x00'}}) ioctl$PPPOEIOCDFWD(r6, 0xb101, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. [ 50.548106][ T5232] cgroup: Unknown subsys name 'net' [ 50.685045][ T5232] cgroup: Unknown subsys name 'cpuset' [ 50.692362][ T5232] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.996621][ T5232] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.345084][ T5251] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.362595][ T5251] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.370067][ T5251] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.376867][ T5255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.377957][ T5251] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.384754][ T5255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.398494][ T5257] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.399197][ T5255] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.406406][ T5257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.420181][ T5251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.427636][ T5251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.435112][ T5251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.444091][ T5251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.451565][ T5251] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.459302][ T5251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.463151][ T5261] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.476511][ T5261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.476644][ T5251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.492015][ T5251] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.500243][ T5261] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.501832][ T5251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.515530][ T4631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.522839][ T5251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.531340][ T4631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.538759][ T4631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.545839][ T5251] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.553442][ T5251] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.562855][ T4631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.564883][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.584144][ T5247] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.905744][ T5259] chnl_net:caif_netlink_parms(): no params data found [ 55.961796][ T5253] chnl_net:caif_netlink_parms(): no params data found [ 56.033698][ T5242] chnl_net:caif_netlink_parms(): no params data found [ 56.095725][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 56.112320][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 56.159261][ T5259] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.166954][ T5259] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.174477][ T5259] bridge_slave_0: entered allmulticast mode [ 56.180998][ T5259] bridge_slave_0: entered promiscuous mode [ 56.223552][ T5259] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.230639][ T5259] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.238109][ T5259] bridge_slave_1: entered allmulticast mode [ 56.244954][ T5259] bridge_slave_1: entered promiscuous mode [ 56.269928][ T5253] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.277204][ T5253] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.284478][ T5253] bridge_slave_0: entered allmulticast mode [ 56.290942][ T5253] bridge_slave_0: entered promiscuous mode [ 56.329713][ T5253] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.336975][ T5253] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.344169][ T5253] bridge_slave_1: entered allmulticast mode [ 56.350653][ T5253] bridge_slave_1: entered promiscuous mode [ 56.367465][ T5259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.381028][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.388211][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.395398][ T5242] bridge_slave_0: entered allmulticast mode [ 56.402156][ T5242] bridge_slave_0: entered promiscuous mode [ 56.409178][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.416307][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.423758][ T5242] bridge_slave_1: entered allmulticast mode [ 56.430213][ T5242] bridge_slave_1: entered promiscuous mode [ 56.451084][ T5259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.487597][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.497923][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.505176][ T5243] bridge_slave_0: entered allmulticast mode [ 56.511615][ T5243] bridge_slave_0: entered promiscuous mode [ 56.519383][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.526569][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.533730][ T5243] bridge_slave_1: entered allmulticast mode [ 56.540522][ T5243] bridge_slave_1: entered promiscuous mode [ 56.548489][ T5253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.559899][ T5253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.577545][ T5259] team0: Port device team_slave_0 added [ 56.591336][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.615561][ T5259] team0: Port device team_slave_1 added [ 56.631026][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.638734][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.646388][ T5248] bridge_slave_0: entered allmulticast mode [ 56.653183][ T5248] bridge_slave_0: entered promiscuous mode [ 56.660250][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.667982][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.675173][ T5248] bridge_slave_1: entered allmulticast mode [ 56.681608][ T5248] bridge_slave_1: entered promiscuous mode [ 56.689210][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.720699][ T5253] team0: Port device team_slave_0 added [ 56.728691][ T5253] team0: Port device team_slave_1 added [ 56.749134][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.760413][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.792012][ T5242] team0: Port device team_slave_0 added [ 56.800788][ T5259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.808583][ T5259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.834747][ T5259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.863414][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.873448][ T5242] team0: Port device team_slave_1 added [ 56.879528][ T5259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.887094][ T5259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.913243][ T5259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.938978][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.946242][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.972564][ T5253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.985275][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.013590][ T5243] team0: Port device team_slave_0 added [ 57.019751][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.026923][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.052911][ T5253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.086549][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.098299][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.125530][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.138350][ T5243] team0: Port device team_slave_1 added [ 57.168386][ T5248] team0: Port device team_slave_0 added [ 57.176253][ T5248] team0: Port device team_slave_1 added [ 57.189219][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.197523][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.223863][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.253653][ T5253] hsr_slave_0: entered promiscuous mode [ 57.259784][ T5253] hsr_slave_1: entered promiscuous mode [ 57.274366][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.281295][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.307447][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.332664][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.339614][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.365622][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.387034][ T5259] hsr_slave_0: entered promiscuous mode [ 57.394011][ T5259] hsr_slave_1: entered promiscuous mode [ 57.399987][ T5259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.410296][ T5259] Cannot create hsr debugfs directory [ 57.416560][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.425324][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.451697][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.475958][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.483310][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.509331][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.538818][ T5242] hsr_slave_0: entered promiscuous mode [ 57.547848][ T5242] hsr_slave_1: entered promiscuous mode [ 57.554284][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.561927][ T5242] Cannot create hsr debugfs directory [ 57.573396][ T5247] Bluetooth: hci3: command tx timeout [ 57.573401][ T5257] Bluetooth: hci0: command tx timeout [ 57.607264][ T5248] hsr_slave_0: entered promiscuous mode [ 57.613550][ T5248] hsr_slave_1: entered promiscuous mode [ 57.620035][ T5248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.627907][ T5248] Cannot create hsr debugfs directory [ 57.653233][ T5247] Bluetooth: hci2: command tx timeout [ 57.663085][ T5247] Bluetooth: hci4: command tx timeout [ 57.663095][ T5257] Bluetooth: hci1: command tx timeout [ 57.690306][ T5243] hsr_slave_0: entered promiscuous mode [ 57.696637][ T5243] hsr_slave_1: entered promiscuous mode [ 57.705665][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.713244][ T5243] Cannot create hsr debugfs directory [ 58.003538][ T5253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.015002][ T5253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.026396][ T5253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.035427][ T5253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.084580][ T5259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.097880][ T5259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.110469][ T5259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.130322][ T5259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.168960][ T5248] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.177972][ T5248] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.191039][ T5248] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.207655][ T5248] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.255951][ T5242] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.282240][ T5242] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.311265][ T5242] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.321810][ T5242] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.387288][ T5243] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.409753][ T5253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.417860][ T5243] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.427512][ T5243] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.444804][ T5243] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.501657][ T5253] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.521406][ T5259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.538082][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.545411][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.561335][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.568463][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.583442][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.655320][ T5259] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.668936][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.684331][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.696241][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.703350][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.724381][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.753576][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.760866][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.776596][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.783728][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.795434][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.802785][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.846645][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.853788][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.866767][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.873899][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.924362][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.948858][ T5248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.998309][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.017594][ T5253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.047182][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.054307][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.124875][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.132001][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.350930][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.432245][ T5259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.482238][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.499553][ T5248] veth0_vlan: entered promiscuous mode [ 59.544353][ T5248] veth1_vlan: entered promiscuous mode [ 59.616711][ T5242] veth0_vlan: entered promiscuous mode [ 59.628563][ T5259] veth0_vlan: entered promiscuous mode [ 59.650102][ T5242] veth1_vlan: entered promiscuous mode [ 59.656576][ T5247] Bluetooth: hci3: command tx timeout [ 59.662734][ T5247] Bluetooth: hci0: command tx timeout [ 59.669159][ T5248] veth0_macvtap: entered promiscuous mode [ 59.679137][ T5248] veth1_macvtap: entered promiscuous mode [ 59.694925][ T5253] veth0_vlan: entered promiscuous mode [ 59.716266][ T5259] veth1_vlan: entered promiscuous mode [ 59.728365][ T5253] veth1_vlan: entered promiscuous mode [ 59.736228][ T5247] Bluetooth: hci4: command tx timeout [ 59.736277][ T5257] Bluetooth: hci2: command tx timeout [ 59.747582][ T5247] Bluetooth: hci1: command tx timeout [ 59.750412][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.778211][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.799984][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.821340][ T5259] veth0_macvtap: entered promiscuous mode [ 59.833012][ T5248] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.841850][ T5248] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.850651][ T5248] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.859462][ T5248] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.892319][ T5259] veth1_macvtap: entered promiscuous mode [ 59.905111][ T5242] veth0_macvtap: entered promiscuous mode [ 59.927895][ T5242] veth1_macvtap: entered promiscuous mode [ 59.947369][ T5243] veth0_vlan: entered promiscuous mode [ 59.959276][ T5253] veth0_macvtap: entered promiscuous mode [ 59.981175][ T5259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.993116][ T5259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.005043][ T5259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.026322][ T5253] veth1_macvtap: entered promiscuous mode [ 60.037221][ T5243] veth1_vlan: entered promiscuous mode [ 60.059927][ T5259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.072215][ T5259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.084645][ T5259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.105574][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.116422][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.126506][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.138262][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.149303][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.161190][ T5259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.170684][ T5259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.179663][ T5259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.188880][ T5259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.211212][ T1838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.227860][ T1838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.228084][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.250697][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.260561][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.274215][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.284792][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.297917][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.309509][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.319579][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.330299][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.342918][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.353672][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.364711][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.379033][ T5243] veth0_macvtap: entered promiscuous mode [ 60.392141][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.403640][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.413826][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.424517][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.434947][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.445439][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.456551][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.476256][ T5242] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.485645][ T5242] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.494727][ T5242] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.503479][ T5242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.519601][ T5253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.528938][ T5253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.538791][ T5253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.549762][ T5253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.574664][ T5243] veth1_macvtap: entered promiscuous mode [ 60.589642][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.598245][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.671421][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.687541][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.699134][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.709780][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.719971][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.730595][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.740492][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.751445][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.771668][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.790272][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.795879][ T5248] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.802197][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.828682][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.839329][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.849455][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.860887][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.870819][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.881659][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.893545][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.925963][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.937042][ T5243] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.951897][ T5243] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.957884][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.961194][ T5243] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.002208][ T5243] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.047695][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.059700][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.126227][ T3038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.146049][ T3038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.164169][ T1838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.172006][ T1838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.235305][ T3038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.246793][ T3038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.269017][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.300663][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.311181][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.326864][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.419591][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.437350][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.468210][ T5334] input: syz1 as /devices/virtual/input/input5 [ 61.620752][ T5338] loop7: detected capacity change from 0 to 16384 [ 61.622681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.732787][ T5257] Bluetooth: hci0: command tx timeout [ 61.738548][ T5257] Bluetooth: hci3: command tx timeout [ 61.753413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.761949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.813181][ T5247] Bluetooth: hci1: command tx timeout [ 61.813370][ T5257] Bluetooth: hci4: command tx timeout [ 61.818938][ T5247] Bluetooth: hci2: command tx timeout [ 61.903598][ T5357] fuse: Unknown parameter 'ÿÿÿÿ0xffffffffffffffffÿÿ0000000000000000000000000000000000000000' [ 62.111996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.132989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.345398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 64.172728][ T5247] Bluetooth: hci3: command tx timeout [ 64.178576][ T5247] Bluetooth: hci2: command tx timeout [ 64.184812][ T5247] Bluetooth: hci4: command tx timeout [ 64.190431][ T5247] Bluetooth: hci1: command 0x0419 tx timeout [ 64.252680][ T8] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 64.258958][ T8] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 64.613669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.333985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.895011][ T5432] syz.3.26 uses obsolete (PF_INET,SOCK_PACKET) [ 68.053196][ T8] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 68.059310][ T8] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 68.079422][ T5257] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.122771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.136428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.584599][ T5455] process 'syz.1.28' launched './file0' with NULL argv: empty string added [ 70.295410][ T8] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 70.301610][ T8] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 70.376502][ T5257] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.793929][ T5486] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.537456][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.544150][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.361075][ T5488] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 74.452689][ T5257] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.951310][ T8] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 74.957580][ T8] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 77.372108][ T5546] netlink: 628 bytes leftover after parsing attributes in process `syz.0.48'. [ 77.394930][ T46] cfg80211: failed to load regulatory.db [ 77.531600][ T8] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 77.537875][ T8] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 77.557963][ T5257] Bluetooth: hci4: command 0x0c1a tx timeout [ 79.433012][ T5583] evm: overlay not supported [ 80.133722][ T5601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.61'. [ 80.154028][ T5601] Zero length message leads to an empty skb [ 84.708488][ T5644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.72'. [ 85.902789][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 94.220519][ T5753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'. [ 97.872692][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.974169][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 98.060379][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.103773][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.018929][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.031909][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.041003][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.122631][ T5809] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.136320][ T8] usb 4-1: config 0 descriptor?? [ 99.578421][ T8] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 99.639399][ T8] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 101.492725][ T939] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 101.663883][ T5293] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.258820][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 102.531177][ T29] audit: type=1326 audit(1728767034.427:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 102.640698][ T29] audit: type=1326 audit(1728767034.427:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 102.739073][ T5293] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 102.748519][ T5293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.812494][ T5293] usb 3-1: Product: syz [ 102.812516][ T29] audit: type=1326 audit(1728767034.457:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 102.826453][ T5293] usb 3-1: Manufacturer: syz [ 102.838896][ T29] audit: type=1326 audit(1728767034.457:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 102.849661][ T5294] usb 4-1: USB disconnect, device number 2 [ 103.579704][ T5293] usb 3-1: SerialNumber: syz [ 103.626466][ T5293] usb 3-1: config 0 descriptor?? [ 103.661145][ T5843] mmap: syz.3.132 (5843) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.684179][ T29] audit: type=1326 audit(1728767034.457:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 103.706293][ T29] audit: type=1326 audit(1728767034.487:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd42457c990 code=0x7ffc0000 [ 103.728451][ T29] audit: type=1326 audit(1728767034.527:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 103.750505][ T29] audit: type=1326 audit(1728767034.527:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 103.772573][ T29] audit: type=1326 audit(1728767034.677:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 103.794705][ T29] audit: type=1326 audit(1728767034.677:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 105.400721][ T5294] usb 3-1: USB disconnect, device number 2 [ 105.659874][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 105.881957][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 106.974239][ T5897] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.274642][ T5294] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.436460][ T5294] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 109.450734][ T5294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.522475][ T5294] usb 2-1: Product: syz [ 109.537003][ T5294] usb 2-1: Manufacturer: syz [ 109.541637][ T5294] usb 2-1: SerialNumber: syz [ 109.580360][ T5294] usb 2-1: config 0 descriptor?? [ 109.886231][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.154'. [ 111.333920][ T5294] usb 2-1: USB disconnect, device number 2 [ 111.345866][ T5246] udevd[5246]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 113.628373][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 116.343415][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.181502][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 117.190704][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.205211][ T9] usb 2-1: Product: syz [ 117.209480][ T9] usb 2-1: Manufacturer: syz [ 117.216911][ T9] usb 2-1: SerialNumber: syz [ 117.294183][ T9] usb 2-1: config 0 descriptor?? [ 118.348335][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 119.605849][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 119.618352][ T6027] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.184'. [ 119.629853][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 119.629866][ T29] audit: type=1326 audit(1728767051.537:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 119.744417][ T29] audit: type=1326 audit(1728767051.567:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 119.782826][ T29] audit: type=1326 audit(1728767051.567:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 119.794969][ T8] usb 2-1: USB disconnect, device number 3 [ 119.826191][ T29] audit: type=1326 audit(1728767051.567:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 119.869877][ T29] audit: type=1326 audit(1728767051.567:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 119.946367][ T29] audit: type=1326 audit(1728767051.567:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 119.962496][ T5323] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.992754][ T29] audit: type=1326 audit(1728767051.687:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 120.015074][ T29] audit: type=1326 audit(1728767051.687:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42457dff9 code=0x7ffc0000 [ 120.195367][ T5323] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 120.204688][ T5323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.222853][ T3020] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.232521][ T5323] usb 4-1: Product: syz [ 120.251401][ T5323] usb 4-1: Manufacturer: syz [ 120.282545][ T5323] usb 4-1: SerialNumber: syz [ 120.295314][ T5323] usb 4-1: config 0 descriptor?? [ 120.303243][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 120.492053][ T3020] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.567621][ T5323] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 120.584977][ T5323] usb 4-1: USB disconnect, device number 3 [ 120.594775][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.249259][ T3020] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.731855][ T3020] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.776538][ T5247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.904452][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.914989][ T5247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.924015][ T5247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.931825][ T5247] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 121.939609][ T5247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.046428][ T5257] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.060514][ T5257] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.064572][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 122.070746][ T5257] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.083630][ T5257] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 122.097036][ T5257] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 122.108577][ T5257] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.209826][ T3020] bridge_slave_1: left allmulticast mode [ 122.226432][ T3020] bridge_slave_1: left promiscuous mode [ 122.236563][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 122.246029][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.260716][ T3020] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.284973][ T9] usb 2-1: Product: syz [ 122.289228][ T9] usb 2-1: Manufacturer: syz [ 122.301273][ T9] usb 2-1: SerialNumber: syz [ 122.317114][ T3020] bridge_slave_0: left allmulticast mode [ 122.325231][ T3020] bridge_slave_0: left promiscuous mode [ 122.350005][ T3020] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.382030][ T9] usb 2-1: config 0 descriptor?? [ 123.584361][ T5244] usb 2-1: USB disconnect, device number 4 [ 123.641424][ T3020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.668141][ T3020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.685535][ T3020] bond0 (unregistering): Released all slaves [ 124.132531][ T5257] Bluetooth: hci3: command tx timeout [ 126.213857][ T5257] Bluetooth: hci3: command tx timeout [ 126.329230][ T6059] chnl_net:caif_netlink_parms(): no params data found [ 126.676438][ T3020] hsr_slave_0: left promiscuous mode [ 126.709593][ T3020] hsr_slave_1: left promiscuous mode [ 126.752227][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.762615][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.772314][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.780307][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.119158][ T3020] veth1_macvtap: left promiscuous mode [ 127.303835][ T3020] veth0_macvtap: left promiscuous mode [ 127.411715][ T3020] veth1_vlan: left promiscuous mode [ 127.427285][ T3020] veth0_vlan: left promiscuous mode [ 128.292709][ T5257] Bluetooth: hci3: command tx timeout [ 129.303530][ T3020] team0 (unregistering): Port device team_slave_1 removed [ 129.365895][ T3020] team0 (unregistering): Port device team_slave_0 removed [ 129.885334][ T6142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.216'. [ 130.373366][ T5257] Bluetooth: hci3: command tx timeout [ 130.490331][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.666359][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.688082][ T6059] bridge_slave_0: entered allmulticast mode [ 130.703543][ T6059] bridge_slave_0: entered promiscuous mode [ 133.076691][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.083773][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.122504][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.180427][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.207082][ T6059] bridge_slave_1: entered allmulticast mode [ 133.226616][ T6059] bridge_slave_1: entered promiscuous mode [ 134.001616][ T6059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.034649][ T5247] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 134.045126][ T5247] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 134.053018][ T5247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 134.063461][ T5247] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 134.071990][ T5247] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 134.079466][ T5247] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 134.105099][ T6059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.307110][ T6059] team0: Port device team_slave_0 added [ 134.356724][ T6059] team0: Port device team_slave_1 added [ 134.597905][ T6209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.232'. [ 134.752919][ T6059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.759893][ T6059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.850892][ T6059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.912108][ T6059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.919661][ T6059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.948428][ T6059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.238259][ T3020] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.508474][ T3020] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.598852][ T6059] hsr_slave_0: entered promiscuous mode [ 135.611489][ T6059] hsr_slave_1: entered promiscuous mode [ 135.919104][ T3020] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.148602][ T5247] Bluetooth: hci4: command tx timeout [ 136.255533][ T3020] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.685709][ T3020] bridge_slave_1: left allmulticast mode [ 137.691392][ T3020] bridge_slave_1: left promiscuous mode [ 137.758233][ T3020] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.845810][ T3020] bridge_slave_0: left allmulticast mode [ 137.861691][ T3020] bridge_slave_0: left promiscuous mode [ 137.903261][ T3020] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.223337][ T5247] Bluetooth: hci4: command tx timeout [ 139.158705][ T3020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.172105][ T3020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.227500][ T3020] bond0 (unregistering): Released all slaves [ 139.386658][ T6198] chnl_net:caif_netlink_parms(): no params data found [ 140.293596][ T5247] Bluetooth: hci4: command tx timeout [ 141.069430][ T3020] hsr_slave_0: left promiscuous mode [ 141.091736][ T3020] hsr_slave_1: left promiscuous mode [ 141.106632][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.116898][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.130948][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.140786][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.169104][ T3020] veth1_macvtap: left promiscuous mode [ 141.177398][ T3020] veth0_macvtap: left promiscuous mode [ 141.189273][ T3020] veth1_vlan: left promiscuous mode [ 141.198642][ T3020] veth0_vlan: left promiscuous mode [ 141.232551][ T5294] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 141.395185][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.432598][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.455635][ T5294] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.478714][ T5294] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.497982][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.538014][ T5294] usb 4-1: config 0 descriptor?? [ 142.146722][ T5294] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 142.169408][ T5294] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 142.176313][ T3020] team0 (unregistering): Port device team_slave_1 removed [ 142.390388][ T5247] Bluetooth: hci4: command tx timeout [ 142.828519][ T3020] team0 (unregistering): Port device team_slave_0 removed [ 143.390389][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.401368][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.409025][ T6198] bridge_slave_0: entered allmulticast mode [ 143.418798][ T6198] bridge_slave_0: entered promiscuous mode [ 143.468614][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.476521][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.483854][ T6198] bridge_slave_1: entered allmulticast mode [ 143.490886][ T6198] bridge_slave_1: entered promiscuous mode [ 143.567644][ T6198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.601032][ T6198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.704962][ T6059] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.740487][ T6198] team0: Port device team_slave_0 added [ 143.752775][ T6059] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.772118][ T6198] team0: Port device team_slave_1 added [ 143.879448][ T6059] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 144.384368][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 144.523283][ T6059] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 144.624662][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.647223][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.673175][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.718499][ T6198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.761620][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.804898][ T5294] usb 4-1: USB disconnect, device number 4 [ 144.817941][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.843850][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.903382][ T6198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.286104][ T6198] hsr_slave_0: entered promiscuous mode [ 147.673572][ T6198] hsr_slave_1: entered promiscuous mode [ 147.684339][ T6198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.699668][ T6198] Cannot create hsr debugfs directory [ 150.757552][ T6059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.771947][ T5863] udevd[5863]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 150.824690][ T6059] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.999931][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.007107][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.024582][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.031730][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.296325][ T6059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.474010][ T6059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.386594][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 154.840907][ T6198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.913308][ T6198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.003122][ T6198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 155.036733][ T6198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.184702][ T6059] veth0_vlan: entered promiscuous mode [ 155.238417][ T6059] veth1_vlan: entered promiscuous mode [ 155.320562][ T6198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.352093][ T6059] veth0_macvtap: entered promiscuous mode [ 155.405499][ T6059] veth1_macvtap: entered promiscuous mode [ 155.448585][ T6198] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.499283][ T6059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.520473][ T6059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.552516][ T6059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.573113][ T6059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.598069][ T6059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.608965][ T6059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.626068][ T6059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.639036][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.646203][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.668188][ T6059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.685190][ T6059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.715910][ T6059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.747037][ T6059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.769980][ T6059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.786536][ T6059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.799665][ T6059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.815871][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.823057][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.844077][ T6059] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.901750][ T6059] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.920794][ T6059] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.929913][ T6059] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.972769][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.981948][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.109869][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.122417][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.454069][ T6531] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.289'. [ 158.528494][ T6531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.289'. [ 158.586524][ T6198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.845003][ T6198] veth0_vlan: entered promiscuous mode [ 158.861229][ T6198] veth1_vlan: entered promiscuous mode [ 158.899200][ T6198] veth0_macvtap: entered promiscuous mode [ 159.016873][ T6198] veth1_macvtap: entered promiscuous mode [ 159.397505][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.408073][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.418726][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.429315][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.439258][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.449760][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.459627][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.470240][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.481717][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.506777][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.544510][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.591077][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.656066][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.696622][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.742665][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.752646][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.763487][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.774753][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.753652][ T6198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.775259][ T6198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.228731][ T6198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.237718][ T6198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.890673][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.923566][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.037306][ T2935] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.314852][ T2935] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.445464][ T6585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.301'. [ 162.614713][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.622870][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.883948][ T5257] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.894854][ T5257] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.903074][ T5257] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.911053][ T5257] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.918978][ T5257] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 162.931841][ T5257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.964315][ T2935] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.404003][ T6621] binder: 6620:6621 ioctl 40046205 0 returned -22 [ 164.413784][ T2935] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.015601][ T5257] Bluetooth: hci1: command tx timeout [ 165.989393][ T6597] chnl_net:caif_netlink_parms(): no params data found [ 166.341908][ T2935] bridge_slave_1: left allmulticast mode [ 166.392478][ T2935] bridge_slave_1: left promiscuous mode [ 166.450905][ T2935] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.574120][ T29] audit: type=1326 audit(1728767098.477:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc777dff9 code=0x7ffc0000 [ 166.679886][ T29] audit: type=1326 audit(1728767098.507:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc777dff9 code=0x7ffc0000 [ 166.755793][ T29] audit: type=1326 audit(1728767098.507:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cc777dff9 code=0x7ffc0000 [ 166.765517][ T2935] bridge_slave_0: left allmulticast mode [ 166.780293][ T29] audit: type=1326 audit(1728767098.507:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc777dff9 code=0x7ffc0000 [ 166.800508][ T2935] bridge_slave_0: left promiscuous mode [ 166.963434][ T2935] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.978740][ T5294] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 167.026845][ T29] audit: type=1326 audit(1728767098.507:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc777dff9 code=0x7ffc0000 [ 167.049406][ T29] audit: type=1326 audit(1728767098.507:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f5cc777dff9 code=0x7ffc0000 [ 167.073700][ T29] audit: type=1326 audit(1728767098.507:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc777dff9 code=0x7ffc0000 [ 167.097738][ T29] audit: type=1326 audit(1728767098.507:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f5cc777dff9 code=0x7ffc0000 [ 167.097994][ T5257] Bluetooth: hci1: command tx timeout [ 167.120531][ T29] audit: type=1326 audit(1728767098.877:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc777dff9 code=0x7ffc0000 [ 167.148390][ T29] audit: type=1326 audit(1728767098.877:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc777dff9 code=0x7ffc0000 [ 167.196415][ T5294] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 167.205907][ T5294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.218706][ T5294] usb 2-1: Product: syz [ 167.223202][ T5294] usb 2-1: Manufacturer: syz [ 167.228049][ T5294] usb 2-1: SerialNumber: syz [ 167.260610][ T5294] usb 2-1: config 0 descriptor?? [ 167.332679][ T5294] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 167.346279][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.182454][ T5257] Bluetooth: hci1: command tx timeout [ 169.474337][ T2935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.493673][ T2935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.511128][ T2935] bond0 (unregistering): Released all slaves [ 169.609777][ T6658] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.313'. [ 169.643748][ T5293] usb 2-1: USB disconnect, device number 5 [ 170.051859][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.075988][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.320913][ T6597] bridge_slave_0: entered allmulticast mode [ 170.393377][ T6597] bridge_slave_0: entered promiscuous mode [ 170.417779][ T6597] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.425238][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.433534][ T6597] bridge_slave_1: entered allmulticast mode [ 170.440805][ T6597] bridge_slave_1: entered promiscuous mode [ 170.674810][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 170.735008][ T6597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.996979][ T6597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.249700][ T2935] hsr_slave_0: left promiscuous mode [ 171.262663][ T5257] Bluetooth: hci1: command tx timeout [ 171.286285][ T2935] hsr_slave_1: left promiscuous mode [ 171.382329][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.544506][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.552605][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.560021][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.457654][ T2935] veth1_macvtap: left promiscuous mode [ 172.478828][ T2935] veth0_macvtap: left promiscuous mode [ 172.495001][ T2935] veth1_vlan: left promiscuous mode [ 172.500507][ T2935] veth0_vlan: left promiscuous mode [ 172.962269][ T5247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.971769][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.982588][ T5247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.990355][ T5247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.054383][ T5247] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 173.065977][ T5247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.036049][ T2935] team0 (unregistering): Port device team_slave_1 removed [ 175.071347][ T2935] team0 (unregistering): Port device team_slave_0 removed [ 175.096328][ T5257] Bluetooth: hci3: command tx timeout [ 175.629766][ T6597] team0: Port device team_slave_0 added [ 175.648860][ T6764] netlink: 'syz.2.335': attribute type 4 has an invalid length. [ 175.678429][ T6768] netlink: 'syz.2.335': attribute type 4 has an invalid length. [ 175.709140][ T6597] team0: Port device team_slave_1 added [ 175.841370][ T6597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.979739][ T6597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.091809][ T6597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.134061][ T6597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.141027][ T6597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.166996][ T6597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.449368][ T6796] input: syz1 as /devices/virtual/input/input16 [ 176.528997][ T6597] hsr_slave_0: entered promiscuous mode [ 176.571497][ T6796] ALSA: mixer_oss: invalid OSS volume 'u' [ 176.577635][ T6597] hsr_slave_1: entered promiscuous mode [ 176.597682][ T6597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.635487][ T6597] Cannot create hsr debugfs directory [ 177.182467][ T5257] Bluetooth: hci3: command tx timeout [ 177.267741][ T6813] netlink: 628 bytes leftover after parsing attributes in process `syz.1.341'. [ 177.364337][ T2935] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.462109][ T2935] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.504548][ T6746] chnl_net:caif_netlink_parms(): no params data found [ 177.586079][ T2935] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.764334][ T2935] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.072756][ T6746] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.079868][ T6746] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.087115][ T6746] bridge_slave_0: entered allmulticast mode [ 178.094054][ T6746] bridge_slave_0: entered promiscuous mode [ 178.102005][ T6746] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.112720][ T6746] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.119885][ T6746] bridge_slave_1: entered allmulticast mode [ 178.133585][ T6746] bridge_slave_1: entered promiscuous mode [ 178.256040][ T6746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.339632][ T6746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.824247][ T6746] team0: Port device team_slave_0 added [ 178.869303][ T2935] bridge_slave_1: left allmulticast mode [ 178.899983][ T2935] bridge_slave_1: left promiscuous mode [ 178.908794][ T2935] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.104942][ T2935] bridge_slave_0: left allmulticast mode [ 179.215673][ T2935] bridge_slave_0: left promiscuous mode [ 179.365710][ T5257] Bluetooth: hci3: command tx timeout [ 179.397822][ T2935] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.305666][ T2935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.427281][ T2935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.462016][ T29] audit: type=1326 audit(1728767112.357:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 180.484145][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.541415][ T29] audit: type=1326 audit(1728767112.357:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 180.577541][ T29] audit: type=1326 audit(1728767112.357:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 180.670671][ T29] audit: type=1326 audit(1728767112.357:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 180.700238][ T29] audit: type=1326 audit(1728767112.357:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 180.714525][ T2935] bond0 (unregistering): Released all slaves [ 180.723177][ T29] audit: type=1326 audit(1728767112.357:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 181.585939][ T5257] Bluetooth: hci3: command tx timeout [ 181.593418][ T29] audit: type=1326 audit(1728767112.637:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 181.631394][ T5294] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 182.142231][ T5294] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 182.178652][ T5294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.379661][ T5294] usb 3-1: Product: syz [ 182.403836][ T5294] usb 3-1: Manufacturer: syz [ 182.431725][ T6746] team0: Port device team_slave_1 added [ 182.450188][ T5294] usb 3-1: SerialNumber: syz [ 182.465677][ T29] audit: type=1326 audit(1728767112.637:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 182.487734][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.503090][ T5294] usb 3-1: config 0 descriptor?? [ 182.510677][ T29] audit: type=1326 audit(1728767113.927:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc777dff9 code=0x7fc00000 [ 182.566251][ T5294] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 182.638209][ T6597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 182.690282][ T29] audit: type=1326 audit(1728767113.947:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cc777dff9 code=0x7fc00000 [ 182.714808][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.935895][ T6856] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.349'. [ 182.963908][ T25] usb 3-1: USB disconnect, device number 3 [ 183.663951][ T6746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.694319][ T6746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.749989][ T6746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.761608][ T6597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 183.839549][ T6597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 183.921268][ T6597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.029076][ T6746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.069455][ T6746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.152706][ T6746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.242191][ T6746] hsr_slave_0: entered promiscuous mode [ 184.265224][ T6746] hsr_slave_1: entered promiscuous mode [ 184.301208][ T6746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.328002][ T6746] Cannot create hsr debugfs directory [ 185.224053][ T2935] hsr_slave_0: left promiscuous mode [ 185.245583][ T2935] hsr_slave_1: left promiscuous mode [ 185.262590][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.271807][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.291781][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.302298][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.330825][ T2935] veth1_macvtap: left promiscuous mode [ 185.360256][ T2935] veth0_macvtap: left promiscuous mode [ 185.383938][ T2935] veth1_vlan: left promiscuous mode [ 185.389928][ T2935] veth0_vlan: left promiscuous mode [ 187.699690][ T2935] team0 (unregistering): Port device team_slave_1 removed [ 187.761125][ T2935] team0 (unregistering): Port device team_slave_0 removed [ 191.482564][ T6597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.491346][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 191.491362][ T29] audit: type=1326 audit(1728767123.377:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb8d7dff9 code=0x7ffc0000 [ 191.537235][ T29] audit: type=1326 audit(1728767123.377:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddb8d7dff9 code=0x7ffc0000 [ 191.560914][ T6970] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.377'. [ 191.623662][ T29] audit: type=1326 audit(1728767123.377:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb8d7dff9 code=0x7ffc0000 [ 191.682191][ T29] audit: type=1326 audit(1728767123.377:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb8d7dff9 code=0x7ffc0000 [ 191.772030][ T29] audit: type=1326 audit(1728767123.377:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fddb8d7dff9 code=0x7ffc0000 [ 191.802617][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 191.985891][ T29] audit: type=1326 audit(1728767123.377:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb8d7dff9 code=0x7ffc0000 [ 192.007323][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 192.014796][ T6597] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.035515][ T29] audit: type=1326 audit(1728767123.377:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fddb8d7dff9 code=0x7ffc0000 [ 192.060553][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.096817][ T9] usb 1-1: Product: syz [ 192.103771][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.110918][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.112439][ T9] usb 1-1: Manufacturer: syz [ 192.187525][ T29] audit: type=1326 audit(1728767123.507:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb8d7dff9 code=0x7ffc0000 [ 192.192948][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.210805][ T9] usb 1-1: SerialNumber: syz [ 192.216765][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.227068][ T9] usb 1-1: config 0 descriptor?? [ 192.259465][ T29] audit: type=1326 audit(1728767123.507:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb8d7dff9 code=0x7ffc0000 [ 192.311859][ T9] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 192.452306][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.505100][ T939] usb 1-1: USB disconnect, device number 2 [ 192.586156][ T6746] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.608892][ T29] audit: type=1326 audit(1728767124.497:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc777dff9 code=0x7ffc0000 [ 192.701820][ T6746] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.948984][ T6746] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 192.969122][ T6746] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.821321][ T6746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.941045][ T6746] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.989056][ T6746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.999544][ T6746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.017797][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.024936][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.033611][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.040702][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.407277][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.415775][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.812134][ T6597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.515988][ T6597] veth0_vlan: entered promiscuous mode [ 195.628861][ T6746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.728741][ T6597] veth1_vlan: entered promiscuous mode [ 195.861963][ T6597] veth0_macvtap: entered promiscuous mode [ 195.912684][ T6597] veth1_macvtap: entered promiscuous mode [ 195.916114][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 195.940077][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 195.946917][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.972264][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 195.995370][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 195.995465][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.011968][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.029497][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.037707][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.043858][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.070962][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.073492][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.087862][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.106071][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.108544][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.126296][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.144582][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.153105][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.162087][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.178535][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.183888][ T6597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.212170][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.250649][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.253944][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.275822][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.288881][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.298067][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.319379][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.325384][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.350257][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.379491][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.380619][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.407146][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.430284][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.437828][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.453664][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.478990][ T6597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.569764][ T6597] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.613778][ T6597] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.676842][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.684326][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.688291][ T6597] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.691848][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.708219][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.715738][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.723195][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.731429][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.738998][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.746530][ T5244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.774275][ T5244] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 197.334187][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 197.334205][ T29] audit: type=1326 audit(1728767129.237:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc777dff9 code=0x7fc00000 [ 197.722521][ T6597] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.922096][ T6746] veth0_vlan: entered promiscuous mode [ 199.637839][ T6746] veth1_vlan: entered promiscuous mode [ 200.180301][ T7100] random: crng reseeded on system resumption [ 200.221102][ T6746] veth0_macvtap: entered promiscuous mode [ 200.259155][ T6746] veth1_macvtap: entered promiscuous mode [ 200.262806][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.292943][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.355204][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.409325][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.427885][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.438824][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.449231][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.460584][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.472432][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.495459][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.512295][ T6746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.574479][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.590172][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.592581][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.620646][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.647382][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.658420][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.668789][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.679657][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.690141][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.714082][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.739094][ T6746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.767302][ T6746] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.776735][ T6746] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.785995][ T6746] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.795048][ T6746] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.910399][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.932498][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.089095][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.167242][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.127547][ T7171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 206.131499][ T5246] udevd[5246]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 208.974870][ T5246] udevd[5246]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 209.380818][ T7226] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.430'. [ 209.397609][ T29] audit: type=1326 audit(1728767141.297:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 209.441168][ T29] audit: type=1326 audit(1728767141.337:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 209.471216][ T29] audit: type=1326 audit(1728767141.337:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 209.546064][ T29] audit: type=1326 audit(1728767141.337:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 209.589204][ T29] audit: type=1326 audit(1728767141.337:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 209.632778][ T29] audit: type=1326 audit(1728767141.337:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 209.771678][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 209.902138][ T29] audit: type=1326 audit(1728767141.797:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 210.902462][ T29] audit: type=1326 audit(1728767141.797:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 211.485682][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 211.500552][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.522370][ T8] usb 3-1: Product: syz [ 211.526563][ T8] usb 3-1: Manufacturer: syz [ 211.531176][ T8] usb 3-1: SerialNumber: syz [ 211.650079][ T8] usb 3-1: config 0 descriptor?? [ 211.715738][ T8] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 211.954815][ T8] usb 3-1: USB disconnect, device number 4 [ 212.041824][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.892479][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 213.053926][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.065224][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.086932][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.120329][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.148279][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.179625][ T25] usb 2-1: config 0 descriptor?? [ 213.618438][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 213.630426][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 213.664438][ T25] usb 2-1: USB disconnect, device number 6 [ 217.602542][ T29] audit: type=1326 audit(1728767149.347:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 217.976996][ T29] audit: type=1326 audit(1728767149.357:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 218.172396][ T29] audit: type=1326 audit(1728767149.357:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 218.252383][ T29] audit: type=1326 audit(1728767149.357:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 218.299394][ T29] audit: type=1326 audit(1728767149.357:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 218.343544][ T29] audit: type=1326 audit(1728767149.357:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbeeab7c990 code=0x7ffc0000 [ 218.390155][ T29] audit: type=1326 audit(1728767149.357:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 218.442417][ T29] audit: type=1326 audit(1728767149.357:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 218.482386][ T29] audit: type=1326 audit(1728767149.357:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 218.532688][ T29] audit: type=1326 audit(1728767149.357:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 218.930752][ T7301] vivid-003: ================= START STATUS ================= [ 219.108431][ T7301] vivid-003: Radio HW Seek Mode: Bounded [ 219.108495][ T7301] vivid-003: Radio Programmable HW Seek: false [ 219.108520][ T7301] vivid-003: RDS Rx I/O Mode: Block I/O [ 219.108542][ T7301] vivid-003: Generate RBDS Instead of RDS: false [ 219.108565][ T7301] vivid-003: RDS Reception: true [ 219.108588][ T7301] vivid-003: RDS Program Type: 0 inactive [ 219.108618][ T7301] vivid-003: RDS PS Name: inactive [ 219.108646][ T7301] vivid-003: RDS Radio Text: inactive [ 219.108675][ T7301] vivid-003: RDS Traffic Announcement: false inactive [ 219.108704][ T7301] vivid-003: RDS Traffic Program: false inactive [ 219.108733][ T7301] vivid-003: RDS Music: false inactive [ 219.108763][ T7301] vivid-003: ================== END STATUS ================== [ 220.030796][ T5294] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 220.276438][ T5257] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.306173][ T5294] usb 1-1: device descriptor read/64, error -71 [ 220.322813][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 220.332871][ T5257] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.343972][ T5257] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.352172][ T5257] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.360149][ T5257] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.436658][ T5257] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.477662][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 220.614760][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.642140][ T25] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 220.651397][ T25] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 220.660475][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 220.669904][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 220.680004][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 220.690164][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 220.745719][ T25] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 220.781376][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.801177][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.844244][ T25] usb 4-1: config 0 descriptor?? [ 220.955088][ T7327] chnl_net:caif_netlink_parms(): no params data found [ 220.982641][ T5294] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 220.999801][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.112950][ T5294] usb 1-1: device descriptor read/64, error -71 [ 221.223629][ T5294] usb usb1-port1: attempt power cycle [ 221.543450][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.722512][ T5294] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 221.723680][ T25] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 221.746103][ T7340] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 221.761554][ T25] usb 4-1: USB disconnect, device number 5 [ 221.775908][ T25] usblp0: removed [ 221.781308][ T5294] usb 1-1: device descriptor read/8, error -71 [ 221.870803][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.459'. [ 221.912037][ T7327] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.919638][ T7327] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.927219][ T7327] bridge_slave_0: entered allmulticast mode [ 221.934825][ T7327] bridge_slave_0: entered promiscuous mode [ 221.944211][ T7327] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.951385][ T7327] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.959896][ T7327] bridge_slave_1: entered allmulticast mode [ 221.967068][ T7327] bridge_slave_1: entered promiscuous mode [ 222.053133][ T5294] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 222.078804][ T7327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.150976][ T7327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.426803][ T7327] team0: Port device team_slave_0 added [ 222.430846][ T5294] usb 1-1: device not accepting address 6, error -71 [ 222.440820][ T5294] usb usb1-port1: unable to enumerate USB device [ 222.447398][ T7327] team0: Port device team_slave_1 added [ 222.475062][ T11] bridge_slave_1: left allmulticast mode [ 222.480861][ T11] bridge_slave_1: left promiscuous mode [ 222.489292][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.524197][ T11] bridge_slave_0: left allmulticast mode [ 222.529885][ T11] bridge_slave_0: left promiscuous mode [ 222.532685][ T5247] Bluetooth: hci5: command tx timeout [ 222.599195][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.698846][ T5247] Bluetooth: hci5: command tx timeout [ 225.525152][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.542842][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.562414][ T5294] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 225.583917][ T11] bond0 (unregistering): Released all slaves [ 225.653631][ T7402] batman_adv: batadv0: Adding interface: dummy0 [ 225.663923][ T7402] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.699327][ T7402] batman_adv: batadv0: Interface activated: dummy0 [ 225.713007][ T5294] usb 1-1: device descriptor read/64, error -71 [ 225.799127][ T7405] batadv0: mtu less than device minimum [ 225.807346][ T7405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 225.820064][ T7405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 225.832657][ T7405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 225.845146][ T7405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 225.857706][ T7405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 225.870127][ T7405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 225.881622][ T7405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 225.894150][ T7405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 225.905773][ T7405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 225.935394][ T7327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.942710][ T7327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.969362][ T7327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.012783][ T5294] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 226.054539][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 226.126700][ T7327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.134159][ T7327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.175461][ T7327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.234732][ T5294] usb 1-1: device descriptor read/64, error -71 [ 226.316473][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 226.316487][ T29] audit: type=1326 audit(1728767158.187:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 226.346804][ T29] audit: type=1326 audit(1728767158.187:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 226.357319][ T5294] usb usb1-port1: attempt power cycle [ 226.386658][ T29] audit: type=1326 audit(1728767158.247:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 226.499460][ T29] audit: type=1326 audit(1728767158.247:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 226.606402][ T29] audit: type=1326 audit(1728767158.247:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 226.669526][ T29] audit: type=1326 audit(1728767158.277:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbeeab7c990 code=0x7ffc0000 [ 226.742860][ T11] hsr_slave_0: left promiscuous mode [ 226.763246][ T11] hsr_slave_1: left promiscuous mode [ 226.782627][ T5247] Bluetooth: hci5: command tx timeout [ 226.801518][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.812438][ T29] audit: type=1326 audit(1728767158.277:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 226.851933][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.859399][ T5294] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 226.893032][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.900767][ T29] audit: type=1326 audit(1728767158.277:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 226.908914][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.942440][ T5294] usb 1-1: device descriptor read/8, error -71 [ 226.943040][ T29] audit: type=1326 audit(1728767158.277:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 227.006979][ T11] veth1_macvtap: left promiscuous mode [ 227.010278][ T29] audit: type=1326 audit(1728767158.277:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 227.042508][ T11] veth0_macvtap: left promiscuous mode [ 227.052498][ T11] veth1_vlan: left promiscuous mode [ 227.057840][ T11] veth0_vlan: left promiscuous mode [ 227.228069][ T5294] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 227.257855][ T5294] usb 1-1: device descriptor read/8, error -71 [ 227.379171][ T5294] usb usb1-port1: unable to enumerate USB device [ 227.627119][ T11] team0 (unregistering): Port device team_slave_1 removed [ 227.666538][ T11] team0 (unregistering): Port device team_slave_0 removed [ 228.003132][ T7327] hsr_slave_0: entered promiscuous mode [ 228.009306][ T7327] hsr_slave_1: entered promiscuous mode [ 228.033824][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.475'. [ 228.857307][ T5247] Bluetooth: hci5: command tx timeout [ 231.569647][ T7327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 231.588716][ T7327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 231.638837][ T7499] syz.3.487: attempt to access beyond end of device [ 231.638837][ T7499] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 231.649444][ T7327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 231.661000][ T7499] SQUASHFS error: Failed to read block 0x0: -5 [ 231.667379][ T7499] unable to read squashfs_super_block [ 231.697255][ T7327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 231.704149][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 231.853082][ T8] usb 3-1: device descriptor read/64, error -71 [ 232.092503][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 232.109497][ T7327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.191171][ T7508] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 232.207173][ T7327] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.242242][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.249338][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.259944][ T8] usb 3-1: device descriptor read/64, error -71 [ 232.336187][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.343334][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.385905][ T8] usb usb3-port1: attempt power cycle [ 232.562665][ T7508] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 232.583354][ T7327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.623950][ T7327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.768429][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 232.874389][ T8] usb 3-1: device descriptor read/8, error -71 [ 232.939542][ T7508] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 233.082014][ T7508] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.114964][ T7508] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 233.172639][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 233.206266][ T8] usb 3-1: device descriptor read/8, error -71 [ 233.287983][ T7508] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 233.323018][ T8] usb usb3-port1: unable to enumerate USB device [ 233.390453][ T7508] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 233.413964][ T7508] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 233.636318][ T7508] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 233.662953][ T7327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.053395][ T5247] Bluetooth: hci4: command 0x0c1a tx timeout [ 234.774172][ T7327] veth0_vlan: entered promiscuous mode [ 234.806083][ T7327] veth1_vlan: entered promiscuous mode [ 234.816727][ T7566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.494'. [ 234.985565][ T7327] veth0_macvtap: entered promiscuous mode [ 235.033716][ T7327] veth1_macvtap: entered promiscuous mode [ 235.079353][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.092828][ T5247] Bluetooth: hci1: command 0x0c1a tx timeout [ 235.117483][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.137651][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.158477][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.219371][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.272846][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.443731][ T5247] Bluetooth: hci5: command 0x0c1a tx timeout [ 236.052442][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.075557][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.097130][ T7327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.155958][ T5247] Bluetooth: hci4: command 0x0c1a tx timeout [ 236.170335][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.224739][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.282417][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.338285][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.397483][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.502470][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.526755][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.545222][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.578055][ T7327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.643623][ T7327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.667579][ T7327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.703962][ T7327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.705265][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 236.705279][ T29] audit: type=1326 audit(1728767168.607:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 236.762181][ T7327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.801835][ T29] audit: type=1326 audit(1728767168.647:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 236.953297][ T29] audit: type=1326 audit(1728767168.657:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 237.069763][ T29] audit: type=1326 audit(1728767168.657:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 237.137985][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.173674][ T5247] Bluetooth: hci1: command 0x0c1a tx timeout [ 237.180770][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.190012][ T29] audit: type=1326 audit(1728767168.657:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 237.222469][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.232483][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.334755][ T29] audit: type=1326 audit(1728767168.657:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbeeab7c990 code=0x7ffc0000 [ 237.464550][ T29] audit: type=1326 audit(1728767168.677:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 237.486738][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.548468][ T5247] Bluetooth: hci5: command 0x0c1a tx timeout [ 237.548488][ T29] audit: type=1326 audit(1728767168.677:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 237.588480][ T29] audit: type=1326 audit(1728767168.677:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 237.611054][ T29] audit: type=1326 audit(1728767168.677:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbeeab7dff9 code=0x7ffc0000 [ 238.233509][ T5247] Bluetooth: hci4: command 0x0c1a tx timeout [ 239.062485][ T939] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 239.223025][ T939] usb 1-1: no configurations [ 239.227882][ T939] usb 1-1: can't read configurations, error -22 [ 239.286620][ T5247] Bluetooth: hci1: command 0x0c1a tx timeout [ 239.428016][ T939] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 239.586535][ T5247] Bluetooth: hci5: command 0x0c1a tx timeout [ 239.612636][ T939] usb 1-1: no configurations [ 239.622471][ T939] usb 1-1: can't read configurations, error -22 [ 240.384499][ T939] usb usb1-port1: attempt power cycle [ 240.722421][ T939] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 240.751690][ T939] usb 1-1: no configurations [ 240.756563][ T939] usb 1-1: can't read configurations, error -22 [ 241.042497][ T939] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 241.106086][ T939] usb 1-1: device descriptor read/8, error -71 [ 241.253684][ T7646] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 241.279614][ T7646] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.285886][ T939] usb usb1-port1: unable to enumerate USB device [ 241.312583][ T7646] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 242.692957][ T5247] Bluetooth: hci4: command 0x0c1a tx timeout [ 243.332543][ T5247] Bluetooth: hci5: command 0x0c1a tx timeout [ 243.338813][ T5247] Bluetooth: hci1: command 0x0c1a tx timeout [ 244.432520][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 244.844955][ T25] usb 2-1: no configurations [ 244.849626][ T25] usb 2-1: can't read configurations, error -22 [ 244.992490][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 245.152913][ T25] usb 2-1: no configurations [ 245.157560][ T25] usb 2-1: can't read configurations, error -22 [ 245.192196][ T25] usb usb2-port1: attempt power cycle [ 245.621893][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 245.654994][ T25] usb 2-1: no configurations [ 245.659675][ T25] usb 2-1: can't read configurations, error -22 [ 245.792572][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 246.194695][ T25] usb 2-1: no configurations [ 246.194717][ T25] usb 2-1: can't read configurations, error -22 [ 246.241246][ T25] usb usb2-port1: unable to enumerate USB device [ 247.840474][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.532'. [ 249.459834][ T5247] Bluetooth: hci5: command 0x0c1a tx timeout [ 249.460309][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 249.460324][ T29] audit: type=1804 audit(1728767180.267:254): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.534" name="/newroot/126/file0/bus" dev="ramfs" ino=22176 res=1 errno=0 [ 254.897537][ T29] audit: type=1804 audit(1728767185.897:255): pid=7779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.548" name="/newroot/33/file0/bus" dev="ramfs" ino=22223 res=1 errno=0 [ 256.066206][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.074152][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.441165][ T7822] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 260.447504][ T7822] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 260.629130][ T7822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.635171][ T7822] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 260.719394][ T7822] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 260.725448][ T7822] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 269.279801][ T7863] udevd[7863]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 317.268617][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.274990][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.693985][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.700319][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.654897][ T30] INFO: task syz-executor:5242 blocked for more than 143 seconds. [ 419.665564][ T30] Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 419.675681][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.684427][ T30] task:syz-executor state:D stack:20064 pid:5242 tgid:5242 ppid:1 flags:0x00004006 [ 419.694740][ T30] Call Trace: [ 419.698019][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 419.700943][ T30] __schedule+0x1895/0x4b30 [ 419.705559][ T30] ? __pfx___schedule+0x10/0x10 [ 419.710445][ T30] ? __pfx_lock_release+0x10/0x10 [ 419.715761][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 419.721267][ T30] ? schedule+0x90/0x320 [ 419.725627][ T30] schedule+0x14b/0x320 [ 419.742343][ T30] schedule_preempt_disabled+0x13/0x30 [ 419.747866][ T30] __mutex_lock+0x6a7/0xd70 [ 419.779346][ T30] ? kobject_put+0x446/0x480 [ 419.784349][ T30] ? __mutex_lock+0x52a/0xd70 [ 419.789061][ T30] ? rfkill_unregister+0xd0/0x230 [ 419.794256][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 419.799314][ T30] ? __pfx_device_del+0x10/0x10 [ 419.804338][ T30] rfkill_unregister+0xd0/0x230 [ 419.809223][ T30] hci_unregister_dev+0x366/0x510 [ 419.814321][ T30] vhci_release+0x80/0xd0 [ 419.818673][ T30] ? __pfx_vhci_release+0x10/0x10 [ 419.823965][ T30] __fput+0x23c/0xa50 [ 419.827993][ T30] task_work_run+0x24f/0x310 [ 419.832756][ T30] ? __pfx_task_work_run+0x10/0x10 [ 419.837893][ T30] ? switch_task_namespaces+0xe4/0x110 [ 419.843481][ T30] do_exit+0xa2f/0x28e0 [ 419.847660][ T30] ? __pfx_do_exit+0x10/0x10 [ 419.852326][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 419.857725][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 419.863856][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 419.870208][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 419.875387][ T30] do_group_exit+0x207/0x2c0 [ 419.879991][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.885292][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 419.890510][ T30] get_signal+0x16a3/0x1740 [ 419.895095][ T30] ? __pfx_get_signal+0x10/0x10 [ 419.899963][ T30] arch_do_signal_or_restart+0x96/0x860 [ 419.905626][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 419.911796][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 419.917866][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 419.923646][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 419.929186][ T30] do_syscall_64+0x100/0x230 [ 419.933852][ T30] ? clear_bhb_loop+0x35/0x90 [ 419.938543][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.944553][ T30] RIP: 0033:0x7fbeeab74257 [ 419.948992][ T30] RSP: 002b:00007fff7bd62680 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 419.957502][ T30] RAX: fffffffffffffe00 RBX: 0000000000000203 RCX: 00007fbeeab74257 [ 419.965562][ T30] RDX: 0000000040000000 RSI: 00007fff7bd626dc RDI: 00000000ffffffff [ 419.973715][ T30] RBP: 00007fff7bd626dc R08: 0000000000000000 R09: 7fffffffffffffff [ 419.981698][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555568cae5eb [ 419.989748][ T30] R13: 0000555568cae590 R14: 000000000003f4da R15: 00007fff7bd62730 [ 419.997777][ T30] [ 420.000807][ T30] INFO: task kworker/1:6:5323 blocked for more than 143 seconds. [ 420.008754][ T30] Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 420.015950][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.024698][ T30] task:kworker/1:6 state:D stack:21104 pid:5323 tgid:5323 ppid:2 flags:0x00004000 [ 420.034926][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 420.041602][ T30] Call Trace: [ 420.044976][ T30] [ 420.047926][ T30] __schedule+0x1895/0x4b30 [ 420.052495][ T30] ? __pfx___schedule+0x10/0x10 [ 420.057345][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 420.063415][ T30] ? __pfx_lock_release+0x10/0x10 [ 420.068575][ T30] ? kick_pool+0x45c/0x620 [ 420.073080][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 420.078294][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 420.083620][ T30] ? schedule+0x90/0x320 [ 420.087881][ T30] schedule+0x14b/0x320 [ 420.092029][ T30] schedule_preempt_disabled+0x13/0x30 [ 420.097584][ T30] __mutex_lock+0x6a7/0xd70 [ 420.102115][ T30] ? __mutex_lock+0x52a/0xd70 [ 420.106908][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 420.113202][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 420.118214][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 420.124315][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 420.130671][ T30] ? process_scheduled_works+0x976/0x1850 [ 420.136472][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 420.142628][ T30] process_scheduled_works+0xa63/0x1850 [ 420.148238][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 420.154359][ T30] ? assign_work+0x364/0x3d0 [ 420.158970][ T30] worker_thread+0x870/0xd30 [ 420.163654][ T30] ? __kthread_parkme+0x169/0x1d0 [ 420.168702][ T30] ? __pfx_worker_thread+0x10/0x10 [ 420.173888][ T30] kthread+0x2f0/0x390 [ 420.177969][ T30] ? __pfx_worker_thread+0x10/0x10 [ 420.183185][ T30] ? __pfx_kthread+0x10/0x10 [ 420.187802][ T30] ret_from_fork+0x4b/0x80 [ 420.192296][ T30] ? __pfx_kthread+0x10/0x10 [ 420.196905][ T30] ret_from_fork_asm+0x1a/0x30 [ 420.201675][ T30] [ 420.204811][ T30] INFO: task syz.0.539:7743 blocked for more than 143 seconds. [ 420.212670][ T30] Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 420.219799][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.228930][ T30] task:syz.0.539 state:D stack:24848 pid:7743 tgid:7742 ppid:6198 flags:0x00004002 [ 420.239213][ T30] Call Trace: [ 420.242564][ T30] [ 420.245521][ T30] __schedule+0x1895/0x4b30 [ 420.250076][ T30] ? __pfx___schedule+0x10/0x10 [ 420.256228][ T30] ? __pfx_lock_release+0x10/0x10 [ 420.261313][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 420.266879][ T30] ? schedule+0x90/0x320 [ 420.271138][ T30] schedule+0x14b/0x320 [ 420.275366][ T30] schedule_preempt_disabled+0x13/0x30 [ 420.280843][ T30] __mutex_lock+0x6a7/0xd70 [ 420.285661][ T30] ? kobject_put+0x446/0x480 [ 420.290283][ T30] ? __mutex_lock+0x52a/0xd70 [ 420.295071][ T30] ? rfkill_unregister+0xd0/0x230 [ 420.300114][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 420.305216][ T30] ? __pfx_device_del+0x10/0x10 [ 420.310084][ T30] rfkill_unregister+0xd0/0x230 [ 420.315022][ T30] hci_unregister_dev+0x366/0x510 [ 420.320062][ T30] vhci_release+0x80/0xd0 [ 420.324520][ T30] ? __pfx_vhci_release+0x10/0x10 [ 420.329573][ T30] __fput+0x23c/0xa50 [ 420.333652][ T30] task_work_run+0x24f/0x310 [ 420.338293][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 420.343732][ T30] ? __pfx_task_work_run+0x10/0x10 [ 420.348866][ T30] ? do_exit+0xa2a/0x28e0 [ 420.353290][ T30] ? kmem_cache_free+0x1a2/0x440 [ 420.358260][ T30] ? do_exit+0xa2a/0x28e0 [ 420.362685][ T30] do_exit+0xa2f/0x28e0 [ 420.366877][ T30] ? __pfx_do_exit+0x10/0x10 [ 420.371495][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 420.376982][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 420.383057][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 420.389425][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 420.394618][ T30] do_group_exit+0x207/0x2c0 [ 420.399221][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 420.404512][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 420.409741][ T30] get_signal+0x16a3/0x1740 [ 420.414347][ T30] ? __pfx_get_signal+0x10/0x10 [ 420.419220][ T30] arch_do_signal_or_restart+0x96/0x860 [ 420.424845][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 420.431066][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 420.437139][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 420.442947][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 420.448510][ T30] do_syscall_64+0x100/0x230 [ 420.453692][ T30] ? clear_bhb_loop+0x35/0x90 [ 420.458396][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.464477][ T30] RIP: 0033:0x7fddb8d7dff9 [ 420.468982][ T30] RSP: 002b:00007fddb9ba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.477451][ T30] RAX: 0000000000018ff8 RBX: 00007fddb8f35f80 RCX: 00007fddb8d7dff9 [ 420.485535][ T30] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000007 [ 420.493585][ T30] RBP: 00007fddb8df0296 R08: 0000000000000000 R09: 0000000000000000 [ 420.501566][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.509632][ T30] R13: 0000000000000000 R14: 00007fddb8f35f80 R15: 00007ffcf102e768 [ 420.517693][ T30] [ 420.520814][ T30] INFO: task syz.2.559:7812 blocked for more than 144 seconds. [ 420.529791][ T30] Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 420.537014][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.545764][ T30] task:syz.2.559 state:D stack:24432 pid:7812 tgid:7811 ppid:5242 flags:0x00404006 [ 420.556031][ T30] Call Trace: [ 420.559315][ T30] [ 420.562328][ T30] __schedule+0x1895/0x4b30 [ 420.566882][ T30] ? __pfx___schedule+0x10/0x10 [ 420.571749][ T30] ? __pfx_lock_release+0x10/0x10 [ 420.576843][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 420.582394][ T30] ? schedule+0x90/0x320 [ 420.586639][ T30] schedule+0x14b/0x320 [ 420.590784][ T30] schedule_preempt_disabled+0x13/0x30 [ 420.596358][ T30] __mutex_lock+0x6a7/0xd70 [ 420.600880][ T30] ? kobject_put+0x446/0x480 [ 420.605533][ T30] ? __mutex_lock+0x52a/0xd70 [ 420.610202][ T30] ? rfkill_unregister+0xd0/0x230 [ 420.615351][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 420.620391][ T30] ? __pfx_device_del+0x10/0x10 [ 420.625360][ T30] rfkill_unregister+0xd0/0x230 [ 420.630231][ T30] nfc_unregister_device+0x96/0x2a0 [ 420.635519][ T30] virtual_ncidev_close+0x56/0x90 [ 420.640565][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 420.646398][ T30] __fput+0x23c/0xa50 [ 420.650428][ T30] task_work_run+0x24f/0x310 [ 420.655102][ T30] ? _raw_spin_unlock+0x28/0x50 [ 420.659966][ T30] ? __pfx_task_work_run+0x10/0x10 [ 420.665146][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 420.670881][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 420.676564][ T30] do_syscall_64+0x100/0x230 [ 420.681170][ T30] ? clear_bhb_loop+0x35/0x90 [ 420.685912][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.691823][ T30] RIP: 0033:0x7fbeeab7dff9 [ 420.696316][ T30] RSP: 002b:00007fbeeb9d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 420.704819][ T30] RAX: 0000000000000000 RBX: 00007fbeead35f80 RCX: 00007fbeeab7dff9 [ 420.712885][ T30] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 420.720869][ T30] RBP: 00007fbeeabf0296 R08: 0000000000000000 R09: 0000000000000000 [ 420.728935][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.736953][ T30] R13: 0000000000000000 R14: 00007fbeead35f80 R15: 00007fff7bd62318 [ 420.745027][ T30] [ 420.748067][ T30] INFO: task syz.1.560:7822 blocked for more than 144 seconds. [ 420.755735][ T30] Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 420.762923][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.774712][ T30] task:syz.1.560 state:D stack:24344 pid:7822 tgid:7819 ppid:5248 flags:0x00004006 [ 420.785119][ T30] Call Trace: [ 420.788401][ T30] [ 420.791327][ T30] __schedule+0x1895/0x4b30 [ 420.795904][ T30] ? __pfx___schedule+0x10/0x10 [ 420.800777][ T30] ? __pfx_lock_release+0x10/0x10 [ 420.805985][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 420.811463][ T30] ? schedule+0x90/0x320 [ 420.815766][ T30] schedule+0x14b/0x320 [ 420.819937][ T30] schedule_preempt_disabled+0x13/0x30 [ 420.825505][ T30] __mutex_lock+0x6a7/0xd70 [ 420.830021][ T30] ? __mutex_lock+0x52a/0xd70 [ 420.834770][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 420.840065][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 420.845159][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 420.850369][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 420.856312][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 420.862726][ T30] nfc_rfkill_set_block+0x50/0x310 [ 420.867847][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 420.873636][ T30] rfkill_set_block+0x1f1/0x440 [ 420.878503][ T30] rfkill_fop_write+0x5b8/0x790 [ 420.883431][ T30] ? end_current_label_crit_section+0x151/0x180 [ 420.889686][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 420.895154][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 420.900537][ T30] ? security_file_permission+0x74/0x280 [ 420.906268][ T30] ? rw_verify_area+0x1c3/0x6f0 [ 420.911154][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 420.916638][ T30] vfs_write+0x29c/0xc90 [ 420.920909][ T30] ? __pfx_vfs_write+0x10/0x10 [ 420.925736][ T30] ? __fget_files+0x28/0x430 [ 420.930322][ T30] ? __fget_files+0x3b8/0x430 [ 420.935159][ T30] ? __fget_files+0x28/0x430 [ 420.939769][ T30] ksys_write+0x183/0x2b0 [ 420.944200][ T30] ? __pfx_ksys_write+0x10/0x10 [ 420.949077][ T30] ? do_syscall_64+0x100/0x230 [ 420.953918][ T30] ? do_syscall_64+0xb6/0x230 [ 420.958614][ T30] do_syscall_64+0xf3/0x230 [ 420.963210][ T30] ? clear_bhb_loop+0x35/0x90 [ 420.967899][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.973864][ T30] RIP: 0033:0x7f5cc777dff9 [ 420.978284][ T30] RSP: 002b:00007f5cc71ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 420.986780][ T30] RAX: ffffffffffffffda RBX: 00007f5cc7936130 RCX: 00007f5cc777dff9 [ 420.994795][ T30] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000009 [ 421.002847][ T30] RBP: 00007f5cc77f0296 R08: 0000000000000000 R09: 0000000000000000 [ 421.010824][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.018915][ T30] R13: 0000000000000000 R14: 00007f5cc7936130 R15: 00007ffdbaf24ef8 [ 421.026955][ T30] [ 421.029976][ T30] INFO: task syz-executor:7841 blocked for more than 144 seconds. [ 421.038066][ T30] Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 421.045283][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.054113][ T30] task:syz-executor state:D stack:26752 pid:7841 tgid:7841 ppid:1 flags:0x00000004 [ 421.064442][ T30] Call Trace: [ 421.067731][ T30] [ 421.070654][ T30] __schedule+0x1895/0x4b30 [ 421.075296][ T30] ? __pfx___schedule+0x10/0x10 [ 421.080196][ T30] ? __pfx_lock_release+0x10/0x10 [ 421.085313][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 421.090798][ T30] ? schedule+0x90/0x320 [ 421.095193][ T30] schedule+0x14b/0x320 [ 421.099371][ T30] schedule_preempt_disabled+0x13/0x30 [ 421.104906][ T30] __mutex_lock+0x6a7/0xd70 [ 421.109423][ T30] ? __mutex_lock+0x52a/0xd70 [ 421.114231][ T30] ? rfkill_register+0x34/0x8c0 [ 421.119101][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 421.124214][ T30] ? __init_waitqueue_head+0xae/0x150 [ 421.129608][ T30] ? device_initialize+0x266/0x460 [ 421.134843][ T30] rfkill_register+0x34/0x8c0 [ 421.139561][ T30] hci_register_dev+0x407/0x8b0 [ 421.144567][ T30] vhci_create_device+0x35b/0x6a0 [ 421.149619][ T30] vhci_write+0x3cf/0x490 [ 421.154104][ T30] vfs_write+0xa6d/0xc90 [ 421.158405][ T30] ? __pfx_vhci_write+0x10/0x10 [ 421.163377][ T30] ? __pfx_vfs_write+0x10/0x10 [ 421.168168][ T30] ksys_write+0x183/0x2b0 [ 421.172743][ T30] ? __pfx_ksys_write+0x10/0x10 [ 421.177625][ T30] ? exc_page_fault+0x590/0x8c0 [ 421.182586][ T30] ? do_syscall_64+0xb6/0x230 [ 421.187288][ T30] do_syscall_64+0xf3/0x230 [ 421.191820][ T30] ? clear_bhb_loop+0x35/0x90 [ 421.196640][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.202640][ T30] RIP: 0033:0x7fc96817caa0 [ 421.207064][ T30] RSP: 002b:00007ffc6ab78118 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 421.215639][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc96817caa0 [ 421.223695][ T30] RDX: 0000000000000002 RSI: 00007ffc6ab7812a RDI: 00000000000000ca [ 421.231675][ T30] RBP: 00007fc968336a38 R08: 0000000000000000 R09: 00007fc968e6d6c0 [ 421.239783][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 421.247824][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 421.256142][ T30] [ 421.259205][ T30] INFO: task syz-executor:7873 blocked for more than 144 seconds. [ 421.267609][ T30] Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 421.274771][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.283566][ T30] task:syz-executor state:D stack:26752 pid:7873 tgid:7873 ppid:1 flags:0x00000004 [ 421.293798][ T30] Call Trace: [ 421.297070][ T30] [ 421.299989][ T30] __schedule+0x1895/0x4b30 [ 421.304605][ T30] ? __pfx___schedule+0x10/0x10 [ 421.309474][ T30] ? __pfx_lock_release+0x10/0x10 [ 421.314575][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 421.320068][ T30] ? schedule+0x90/0x320 [ 421.324480][ T30] schedule+0x14b/0x320 [ 421.328659][ T30] schedule_preempt_disabled+0x13/0x30 [ 421.334218][ T30] __mutex_lock+0x6a7/0xd70 [ 421.338749][ T30] ? __mutex_lock+0x52a/0xd70 [ 421.343618][ T30] ? rfkill_register+0x34/0x8c0 [ 421.348496][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 421.353612][ T30] ? __init_waitqueue_head+0xae/0x150 [ 421.359011][ T30] ? device_initialize+0x266/0x460 [ 421.364206][ T30] rfkill_register+0x34/0x8c0 [ 421.368905][ T30] hci_register_dev+0x407/0x8b0 [ 421.373814][ T30] vhci_create_device+0x35b/0x6a0 [ 421.378855][ T30] vhci_write+0x3cf/0x490 [ 421.383295][ T30] vfs_write+0xa6d/0xc90 [ 421.387563][ T30] ? __pfx_vhci_write+0x10/0x10 [ 421.392474][ T30] ? __pfx_vfs_write+0x10/0x10 [ 421.397261][ T30] ksys_write+0x183/0x2b0 [ 421.401583][ T30] ? __pfx_ksys_write+0x10/0x10 [ 421.406514][ T30] ? exc_page_fault+0x590/0x8c0 [ 421.411387][ T30] ? do_syscall_64+0xb6/0x230 [ 421.416424][ T30] do_syscall_64+0xf3/0x230 [ 421.420957][ T30] ? clear_bhb_loop+0x35/0x90 [ 421.425714][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.431628][ T30] RIP: 0033:0x7f65c2b7caa0 [ 421.436094][ T30] RSP: 002b:00007ffc1e2c12e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 421.444610][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f65c2b7caa0 [ 421.452687][ T30] RDX: 0000000000000002 RSI: 00007ffc1e2c12fa RDI: 00000000000000ca [ 421.460685][ T30] RBP: 00007f65c2d36a38 R08: 0000000000000000 R09: 00007f65c386d6c0 [ 421.468760][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 421.476775][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 421.484842][ T30] [ 421.487879][ T30] INFO: task syz-executor:7876 blocked for more than 145 seconds. [ 421.496269][ T30] Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 421.503507][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.512185][ T30] task:syz-executor state:D stack:26752 pid:7876 tgid:7876 ppid:1 flags:0x00004004 [ 421.522504][ T30] Call Trace: [ 421.525774][ T30] [ 421.528692][ T30] __schedule+0x1895/0x4b30 [ 421.533281][ T30] ? __pfx___schedule+0x10/0x10 [ 421.538171][ T30] ? __pfx_lock_release+0x10/0x10 [ 421.543288][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 421.548778][ T30] ? schedule+0x90/0x320 [ 421.553077][ T30] schedule+0x14b/0x320 [ 421.557245][ T30] schedule_preempt_disabled+0x13/0x30 [ 421.562812][ T30] __mutex_lock+0x6a7/0xd70 [ 421.567329][ T30] ? __mutex_lock+0x52a/0xd70 [ 421.571997][ T30] ? rfkill_register+0x34/0x8c0 [ 421.576898][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 421.581936][ T30] ? __init_waitqueue_head+0xae/0x150 [ 421.587411][ T30] ? device_initialize+0x266/0x460 [ 421.592576][ T30] rfkill_register+0x34/0x8c0 [ 421.597280][ T30] hci_register_dev+0x407/0x8b0 [ 421.602167][ T30] vhci_create_device+0x35b/0x6a0 [ 421.607315][ T30] vhci_write+0x3cf/0x490 [ 421.611658][ T30] vfs_write+0xa6d/0xc90 [ 421.615951][ T30] ? __pfx_vhci_write+0x10/0x10 [ 421.620815][ T30] ? __pfx_vfs_write+0x10/0x10 [ 421.625691][ T30] ksys_write+0x183/0x2b0 [ 421.630034][ T30] ? __pfx_ksys_write+0x10/0x10 [ 421.634939][ T30] ? exc_page_fault+0x590/0x8c0 [ 421.639811][ T30] ? do_syscall_64+0xb6/0x230 [ 421.644589][ T30] do_syscall_64+0xf3/0x230 [ 421.649132][ T30] ? clear_bhb_loop+0x35/0x90 [ 421.653883][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.659793][ T30] RIP: 0033:0x7fb02e77caa0 [ 421.664324][ T30] RSP: 002b:00007ffc37ca7eb8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 421.672809][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fb02e77caa0 [ 421.680791][ T30] RDX: 0000000000000002 RSI: 00007ffc37ca7eca RDI: 00000000000000ca [ 421.688842][ T30] RBP: 00007fb02e936a38 R08: 0000000000000000 R09: 00007fb02f46d6c0 [ 421.696856][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 421.704920][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 421.712970][ T30] [ 421.716007][ T30] INFO: task syz.4.577:7886 blocked for more than 145 seconds. [ 421.723665][ T30] Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 421.730787][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.739535][ T30] task:syz.4.577 state:D stack:25528 pid:7886 tgid:7885 ppid:7327 flags:0x00404004 [ 421.749790][ T30] Call Trace: [ 421.753148][ T30] [ 421.756087][ T30] __schedule+0x1895/0x4b30 [ 421.760620][ T30] ? __pfx___schedule+0x10/0x10 [ 421.765586][ T30] ? __pfx_lock_release+0x10/0x10 [ 421.770630][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 421.776178][ T30] ? schedule+0x90/0x320 [ 421.780437][ T30] schedule+0x14b/0x320 [ 421.784687][ T30] schedule_preempt_disabled+0x13/0x30 [ 421.790160][ T30] __mutex_lock+0x6a7/0xd70 [ 421.794717][ T30] ? __mutex_lock+0x52a/0xd70 [ 421.799405][ T30] ? rfkill_register+0x34/0x8c0 [ 421.804374][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 421.809423][ T30] ? __init_waitqueue_head+0xae/0x150 [ 421.814874][ T30] ? device_initialize+0x266/0x460 [ 421.819999][ T30] rfkill_register+0x34/0x8c0 [ 421.824760][ T30] nfc_register_device+0x148/0x320 [ 421.829884][ T30] nci_register_device+0x7c2/0x900 [ 421.835099][ T30] ? __pfx_nci_register_device+0x10/0x10 [ 421.840746][ T30] ? __init_waitqueue_head+0xae/0x150 [ 421.846193][ T30] virtual_ncidev_open+0x139/0x1b0 [ 421.851316][ T30] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 421.857021][ T30] misc_open+0x2cc/0x340 [ 421.861293][ T30] chrdev_open+0x521/0x600 [ 421.865816][ T30] ? __pfx_apparmor_file_open+0x10/0x10 [ 421.871393][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 421.876428][ T30] ? security_file_open+0x513/0x990 [ 421.881641][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 421.886662][ T30] do_dentry_open+0x978/0x1460 [ 421.891449][ T30] vfs_open+0x3e/0x330 [ 421.895597][ T30] path_openat+0x2c84/0x3590 [ 421.900214][ T30] ? __pfx_path_openat+0x10/0x10 [ 421.905229][ T30] do_filp_open+0x235/0x490 [ 421.909753][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 421.914846][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 421.919892][ T30] ? alloc_fd+0x61a/0x690 [ 421.924356][ T30] do_sys_openat2+0x13e/0x1d0 [ 421.929050][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 421.934327][ T30] ? __fget_files+0x28/0x430 [ 421.938937][ T30] __x64_sys_openat+0x247/0x2a0 [ 421.943912][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 421.949313][ T30] ? do_syscall_64+0x100/0x230 [ 421.954174][ T30] ? do_syscall_64+0xb6/0x230 [ 421.958872][ T30] do_syscall_64+0xf3/0x230 [ 421.963475][ T30] ? clear_bhb_loop+0x35/0x90 [ 421.968164][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.974243][ T30] RIP: 0033:0x7f6d7b57dff9 [ 421.978684][ T30] RSP: 002b:00007f6d7c325038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 421.987186][ T30] RAX: ffffffffffffffda RBX: 00007f6d7b735f80 RCX: 00007f6d7b57dff9 [ 421.995234][ T30] RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 422.003330][ T30] RBP: 00007f6d7b5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 422.011324][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.019368][ T30] R13: 0000000000000000 R14: 00007f6d7b735f80 R15: 00007ffca2b7e868 [ 422.027407][ T30] [ 422.030423][ T30] INFO: task syz.3.579:7898 blocked for more than 145 seconds. [ 422.038025][ T30] Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 422.045275][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.054049][ T30] task:syz.3.579 state:D stack:27040 pid:7898 tgid:7894 ppid:6597 flags:0x00000004 [ 422.064354][ T30] Call Trace: [ 422.067642][ T30] [ 422.070563][ T30] __schedule+0x1895/0x4b30 [ 422.075138][ T30] ? __pfx___schedule+0x10/0x10 [ 422.080012][ T30] ? __pfx_lock_release+0x10/0x10 [ 422.085110][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 422.090585][ T30] ? schedule+0x90/0x320 [ 422.094908][ T30] schedule+0x14b/0x320 [ 422.099083][ T30] schedule_preempt_disabled+0x13/0x30 [ 422.104654][ T30] __mutex_lock+0x6a7/0xd70 [ 422.109174][ T30] ? __mutex_lock+0x52a/0xd70 [ 422.113925][ T30] ? misc_open+0x54/0x340 [ 422.118268][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 422.123386][ T30] ? kobject_get_unless_zero+0x22d/0x330 [ 422.129040][ T30] misc_open+0x54/0x340 [ 422.133277][ T30] chrdev_open+0x521/0x600 [ 422.137719][ T30] ? __pfx_apparmor_file_open+0x10/0x10 [ 422.143454][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 422.148422][ T30] ? security_file_open+0x513/0x990 [ 422.153705][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 422.158656][ T30] do_dentry_open+0x978/0x1460 [ 422.163530][ T30] vfs_open+0x3e/0x330 [ 422.167620][ T30] path_openat+0x2c84/0x3590 [ 422.172346][ T30] ? __pfx_path_openat+0x10/0x10 [ 422.177331][ T30] do_filp_open+0x235/0x490 [ 422.181855][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 422.186956][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 422.192007][ T30] ? alloc_fd+0x61a/0x690 [ 422.196398][ T30] do_sys_openat2+0x13e/0x1d0 [ 422.201093][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 422.206407][ T30] __x64_sys_openat+0x247/0x2a0 [ 422.211284][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 422.216754][ T30] ? do_syscall_64+0x100/0x230 [ 422.221536][ T30] ? do_syscall_64+0xb6/0x230 [ 422.226478][ T30] do_syscall_64+0xf3/0x230 [ 422.231180][ T30] ? clear_bhb_loop+0x35/0x90 [ 422.236206][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.242129][ T30] RIP: 0033:0x7fed69d7dff9 [ 422.246611][ T30] RSP: 002b:00007fed6abe0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 422.255069][ T30] RAX: ffffffffffffffda RBX: 00007fed69f36130 RCX: 00007fed69d7dff9 [ 422.263156][ T30] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: ffffffffffffff9c [ 422.271139][ T30] RBP: 00007fed69df0296 R08: 0000000000000000 R09: 0000000000000000 [ 422.279191][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.287289][ T30] R13: 0000000000000000 R14: 00007fed69f36130 R15: 00007ffec40eb738 [ 422.295672][ T30] [ 422.298722][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 422.307862][ T30] [ 422.307862][ T30] Showing all locks held in the system: [ 422.315645][ T30] 3 locks held by kworker/0:0/8: [ 422.320587][ T30] #0: ffff8880b863e898 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 422.330600][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x387/0x7a0 [ 422.342072][ T30] #2: ffff8880b862a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 422.351498][ T30] 1 lock held by khungtaskd/30: [ 422.356390][ T30] #0: ffffffff8e939e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 422.366326][ T30] 2 locks held by kworker/u8:4/67: [ 422.371439][ T30] #0: ffff8880b863e898 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 422.381442][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x387/0x7a0 [ 422.392948][ T30] 2 locks held by getty/4996: [ 422.397626][ T30] #0: ffff88814be990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 422.407466][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 422.417688][ T30] 1 lock held by syz-executor/5242: [ 422.422971][ T30] #0: ffffffff8ffb0d28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 422.433186][ T30] 3 locks held by kworker/1:6/5323: [ 422.438405][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 422.449496][ T30] #1: ffffc90003f97d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 422.463134][ T30] #2: ffffffff8ffb0d28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 422.474553][ T30] 1 lock held by syz-executor/7327: [ 422.479765][ T30] #0: ffffffff8ffb0d28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 422.489986][ T30] 1 lock held by syz.0.539/7743: [ 422.494967][ T30] #0: ffffffff8ffb0d28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 422.505162][ T30] 2 locks held by syz.2.559/7812: [ 422.510187][ T30] #0: ffff888067b73100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 422.520010][ T30] #1: ffffffff8ffb0d28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 422.530202][ T30] 2 locks held by syz.1.560/7822: [ 422.535793][ T30] #0: ffffffff8ffb0d28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a6/0x790 [ 422.546007][ T30] #1: ffff888067b73100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 422.555769][ T30] 2 locks held by syz-executor/7841: [ 422.561055][ T30] #0: ffff888031f38118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6a0 [ 422.571138][ T30] #1: ffffffff8ffb0d28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 422.581139][ T30] 2 locks held by syz-executor/7873: [ 422.586528][ T30] #0: ffff88806be8e918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6a0 [ 422.596646][ T30] #1: ffffffff8ffb0d28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 422.606690][ T30] 2 locks held by syz-executor/7876: [ 422.611991][ T30] #0: ffff888031b79918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6a0 [ 422.622172][ T30] #1: ffffffff8ffb0d28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 422.632191][ T30] 3 locks held by syz.4.577/7886: [ 422.637304][ T30] #0: ffffffff8f194ec8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 422.645827][ T30] #1: ffff888064c44100 (&dev->mutex){....}-{3:3}, at: nfc_register_device+0x9c/0x320 [ 422.655480][ T30] #2: ffffffff8ffb0d28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 422.665495][ T30] 1 lock held by syz.3.579/7898: [ 422.670418][ T30] #0: ffffffff8f194ec8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 422.678921][ T30] 1 lock held by syz-executor/7903: [ 422.684222][ T30] #0: ffffffff8f194ec8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 422.692809][ T30] 1 lock held by syz-executor/7904: [ 422.698013][ T30] #0: ffffffff8f194ec8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 422.706546][ T30] 1 lock held by syz-executor/7906: [ 422.711747][ T30] #0: ffffffff8f194ec8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 422.720246][ T30] 1 lock held by syz-executor/7908: [ 422.725524][ T30] #0: ffffffff8f194ec8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 422.734087][ T30] 1 lock held by syz-executor/7910: [ 422.739297][ T30] #0: ffffffff8f194ec8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 422.747856][ T30] 1 lock held by syz-executor/7913: [ 422.753106][ T30] #0: ffffffff8f194ec8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 422.761592][ T30] 1 lock held by syz-executor/7914: [ 422.766851][ T30] #0: ffffffff8f194ec8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 422.775369][ T30] 1 lock held by syz-executor/7920: [ 422.780548][ T30] #0: ffffffff8f194ec8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 422.789062][ T30] 1 lock held by syz-executor/7922: [ 422.794296][ T30] #0: ffffffff8f194ec8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 422.802826][ T30] 1 lock held by syz-executor/7924: [ 422.808027][ T30] #0: ffffffff8f194ec8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 422.816541][ T30] 1 lock held by syz-executor/7927: [ 422.821744][ T30] #0: ffffffff8f194ec8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 422.830270][ T30] 1 lock held by syz-executor/7928: [ 422.835522][ T30] #0: ffffffff8f194ec8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 422.844102][ T30] [ 422.846432][ T30] ============================================= [ 422.846432][ T30] [ 422.855036][ T30] NMI backtrace for cpu 1 [ 422.859385][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 422.869368][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 422.879422][ T30] Call Trace: [ 422.882699][ T30] [ 422.885624][ T30] dump_stack_lvl+0x241/0x360 [ 422.890306][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.895502][ T30] ? __pfx__printk+0x10/0x10 [ 422.900095][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 422.905034][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 422.910489][ T30] ? _printk+0xd5/0x120 [ 422.914648][ T30] ? __pfx__printk+0x10/0x10 [ 422.919238][ T30] ? __wake_up_klogd+0xcc/0x110 [ 422.924086][ T30] ? __pfx__printk+0x10/0x10 [ 422.928676][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 422.933699][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 422.939693][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 422.945676][ T30] watchdog+0xff4/0x1040 [ 422.949920][ T30] ? watchdog+0x1ea/0x1040 [ 422.954337][ T30] ? __pfx_watchdog+0x10/0x10 [ 422.959012][ T30] kthread+0x2f0/0x390 [ 422.963076][ T30] ? __pfx_watchdog+0x10/0x10 [ 422.967753][ T30] ? __pfx_kthread+0x10/0x10 [ 422.972337][ T30] ret_from_fork+0x4b/0x80 [ 422.976745][ T30] ? __pfx_kthread+0x10/0x10 [ 422.981328][ T30] ret_from_fork_asm+0x1a/0x30 [ 422.986096][ T30] [ 422.989343][ T30] Sending NMI from CPU 1 to CPUs 0: [ 422.994651][ C0] NMI backtrace for cpu 0 [ 422.994664][ C0] CPU: 0 UID: 0 PID: 1122 Comm: kworker/u8:5 Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 422.994683][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 422.994693][ C0] Workqueue: bat_events batadv_nc_worker [ 422.994715][ C0] RIP: 0010:validate_chain+0x119/0x5920 [ 422.994737][ C0] Code: 25 00 80 04 00 3d 00 00 04 00 0f 85 80 04 00 00 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 00 38 2e 94 be 08 00 00 00 22 b1 8d 00 48 0f a3 1d 2a 2d bd 12 72 66 48 c7 c0 40 a9 3e 9a [ 422.994751][ C0] RSP: 0018:ffffc90004137540 EFLAGS: 00000006 [ 422.994764][ C0] RAX: 000000000000001b RBX: 00000000000006c7 RCX: 1ffff92000826ec8 [ 422.994776][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942e38d8 [ 422.994787][ C0] RBP: ffffc90004137840 R08: ffffffff942e38df R09: 1ffffffff285c71b [ 422.994799][ C0] R10: dffffc0000000000 R11: fffffbfff285c71c R12: dffffc0000000000 [ 422.994811][ C0] R13: ffff88802711a950 R14: d7616b2b1b032a11 R15: ffff88802711a950 [ 422.994824][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 422.994838][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.994849][ C0] CR2: 00007fab8bce9620 CR3: 000000000e736000 CR4: 00000000003526f0 [ 422.994863][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.994872][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 422.994882][ C0] Call Trace: [ 422.994888][ C0] [ 422.994895][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 422.994912][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 422.994928][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 422.994950][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 422.994971][ C0] ? nmi_handle+0x14f/0x5a0 [ 422.994988][ C0] ? nmi_handle+0x2a/0x5a0 [ 422.995004][ C0] ? validate_chain+0x119/0x5920 [ 422.995021][ C0] ? default_do_nmi+0x63/0x160 [ 422.995039][ C0] ? exc_nmi+0x123/0x1f0 [ 422.995055][ C0] ? end_repeat_nmi+0xf/0x53 [ 422.995073][ C0] ? validate_chain+0x119/0x5920 [ 422.995090][ C0] ? validate_chain+0x119/0x5920 [ 422.995107][ C0] ? validate_chain+0x119/0x5920 [ 422.995125][ C0] [ 422.995130][ C0] [ 422.995136][ C0] ? __lock_acquire+0x1384/0x2050 [ 422.995153][ C0] ? validate_chain+0x11e/0x5920 [ 422.995170][ C0] ? __pfx_validate_chain+0x10/0x10 [ 422.995191][ C0] ? __pfx_validate_chain+0x10/0x10 [ 422.995208][ C0] ? validate_chain+0x11e/0x5920 [ 422.995227][ C0] ? __pfx_validate_chain+0x10/0x10 [ 422.995245][ C0] ? __pfx_validate_chain+0x10/0x10 [ 422.995262][ C0] ? __pfx_validate_chain+0x10/0x10 [ 422.995283][ C0] ? __pfx_validate_chain+0x10/0x10 [ 422.995300][ C0] ? mark_lock+0x9a/0x360 [ 422.995317][ C0] ? __lock_acquire+0x1384/0x2050 [ 422.995332][ C0] ? mark_lock+0x9a/0x360 [ 422.995349][ C0] __lock_acquire+0x1384/0x2050 [ 422.995369][ C0] lock_acquire+0x1ed/0x550 [ 422.995383][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 422.995404][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 422.995418][ C0] ? __local_bh_disable_ip+0x187/0x220 [ 422.995451][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 422.995471][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 422.995487][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 422.995507][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 422.995528][ C0] ? batadv_nc_purge_paths+0x312/0x3b0 [ 422.995544][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 422.995566][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 422.995584][ C0] _raw_spin_lock_bh+0x35/0x50 [ 422.995604][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 422.995620][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 422.995640][ C0] batadv_nc_purge_paths+0xe8/0x3b0 [ 422.995661][ C0] batadv_nc_worker+0x328/0x610 [ 422.995677][ C0] ? batadv_nc_worker+0xcb/0x610 [ 422.995693][ C0] ? process_scheduled_works+0x976/0x1850 [ 422.995716][ C0] process_scheduled_works+0xa63/0x1850 [ 422.995747][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 422.995771][ C0] ? assign_work+0x364/0x3d0 [ 422.995793][ C0] worker_thread+0x870/0xd30 [ 422.995818][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 422.995841][ C0] ? __kthread_parkme+0x169/0x1d0 [ 422.995864][ C0] ? __pfx_worker_thread+0x10/0x10 [ 422.995885][ C0] kthread+0x2f0/0x390 [ 422.995901][ C0] ? __pfx_worker_thread+0x10/0x10 [ 422.995921][ C0] ? __pfx_kthread+0x10/0x10 [ 422.995937][ C0] ret_from_fork+0x4b/0x80 [ 422.995951][ C0] ? __pfx_kthread+0x10/0x10 [ 422.995967][ C0] ret_from_fork_asm+0x1a/0x30 [ 422.995993][ C0] [ 422.997086][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 423.446255][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 423.456214][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 423.466252][ T30] Call Trace: [ 423.469519][ T30] [ 423.472434][ T30] dump_stack_lvl+0x241/0x360 [ 423.477102][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.482285][ T30] ? __pfx__printk+0x10/0x10 [ 423.486860][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 423.492828][ T30] ? vscnprintf+0x5d/0x90 [ 423.497138][ T30] panic+0x349/0x880 [ 423.501053][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 423.507193][ T30] ? __pfx_panic+0x10/0x10 [ 423.511594][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 423.516949][ T30] ? __irq_work_queue_local+0x137/0x410 [ 423.522480][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 423.527831][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 423.533964][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 423.540106][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 423.546244][ T30] watchdog+0x1033/0x1040 [ 423.550562][ T30] ? watchdog+0x1ea/0x1040 [ 423.554991][ T30] ? __pfx_watchdog+0x10/0x10 [ 423.559652][ T30] kthread+0x2f0/0x390 [ 423.563703][ T30] ? __pfx_watchdog+0x10/0x10 [ 423.568366][ T30] ? __pfx_kthread+0x10/0x10 [ 423.572942][ T30] ret_from_fork+0x4b/0x80 [ 423.577337][ T30] ? __pfx_kthread+0x10/0x10 [ 423.581913][ T30] ret_from_fork_asm+0x1a/0x30 [ 423.586669][ T30] [ 423.589992][ T30] Kernel Offset: disabled [ 423.594311][ T30] Rebooting in 86400 seconds..