last executing test programs: 23.029879864s ago: executing program 3 (id=523): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 20.260794649s ago: executing program 1 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$btrfs(&(0x7f0000022240), &(0x7f0000000040)='./file0\x00', 0x2000040, &(0x7f0000000580), 0x1, 0x22215, &(0x7f0000022300)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x2039c1f, 0x0, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000340)='./file0\x00') chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000010, &(0x7f0000001100)={[{@uid}, {@uid_forget}, {@utf8}, {@anchor={'anchor', 0x3d, 0x1}}, {}, {@shortad}, {@gid}, {@umask}, {@gid_ignore}, {@noadinicb}, {@dmode={'dmode', 0x3d, 0x9}}, {}, {@lastblock={'lastblock', 0x3d, 0x101}}, {@uid_ignore}, {@nostrict}], [{@hash}, {@subj_role={'subj_role', 0x3d, 'uid=ignore'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, 'h\x7fY%\x95\x82\xdc\x91\xf6\xa25?Z\x93\xfe\xc3a\xbf\x8d\xda!3\xe3\x82y\xef\xe6\x8b\x83\xbf&\xacj8Dd\x1cM)\xbd\xfcc\xc8L)|\v\xcf\xaf'}}]}, 0x1, 0xc43, &(0x7f0000000200)="$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") mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 20.205940105s ago: executing program 3 (id=530): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x60, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x71, 0x8000000, r2, 0x0) fanotify_mark(r1, 0x12, 0x8001001, r0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001b40)='R\x10rust\xe3\a\x00\x00\x02\x00D\x90\xb3\x7f\xb6\x0f\xbc\x87\x00l\xac\x00\x00\x00iDe\x96\xbd\x8ay\x1f\xc8\xe2\x81_\x9fC\xdf\x1b\"@\xb3\x8dY\xbf\xff\x15\xe8\x84)\x9d\x89\x8e\x8a\x83H\x96\xec\xbd\xc3\x8b\xd3\xe5\x10\xc2\xd8\xcf\xdelrJ\xd3v\x06(x4\xec\xb6\xd0\x14\xd6\xd7\xbc\x1f\x96\xb5\x01\x9f\xa6\xde\xd8>\xfa\xd5\xa7FV\xe8\x9e\x1f\xafB\x93\xdb$X\x8c3\x03\xbf\xf8H>\x1cR\xb6\x8c\xc3u\x0e\xbf\xa2L]o\xa7\xdf]Y\xc6\xc8\xf7cf\a)\x00\xc1\xee\xa7\xd3P2\x05\xf3\xd6T\xa9n%\xe45\n\xb2\'=\x19\x0fU\xbb\xc0\xdb\x01\x89\x9f0c\xf6\xed\xb1\x9cl\x03\x9e\xa7\x99kF E\x81\xb6\xb2\x04\x98g#\xc2L,\xe7wh\x89/a?\a\x04\xc2\xc8x\xacF\xc5\x8c\fu\xdeI\x92\xff\xb3#\x04\xee\xe5\bl<\xec4\xc9z`*x\xcf\x1a\x12\xb5J<]\x85+\xc4\xad\x88A\xff\xc2\x93\x83\x11@\x95\x94\xe5\xc1\xbb\xdd^a4\xcc?U\x98c\xbf\x8f\xdc\x1aM\xa1\x17\xe2\xc8sB\xa0\xa4r\x91\x96\xb3\xe2\xd4\xf7\xac?\xc4\xaa\xe9\x8e}\x81\xc6\xb0\xb4\xac\xdf|>\xf0\x16\xb5>\xd2Z\xaddz:n\xd69*\xc8\xe4h\xd1\xf6R\xc8\xdbh\x93`\xd5;\xec\x9b\x1cy\xeaA\x1185\xae\xc9\x93:\x7f\xa9\xdb\"\xe5\xf5v\x1f*\"r\a>\xe3t`C\xf9\xc1\xec\x8dW(e\x85p\x1d\x13\x1c\x1d\x94\x9d\xe1\x9ac\xe5\xaaB\xd7\xbcy\x8b\x8e\xaaY\xee\"\xa8\x126\xd2&\x967\x16\xb3\x18\xc1\x8f\x9a\xcc\xd6D\x12Kq\x90\xd8_\xd7\xa4C\x06\\[f\xcdp\xfcO>\xbaf\xb1G\x956\xe5dYo\xd8\x89\xcd\x8dI\x90d\x8e\x9dvu\xdc\x9cd\x96\xb4\fQ;\xa2\x01\xec\x83\xbd\x92\x95\xed\xde\xd1\xa8+\x91GR{\xcd\x91\x80\x97L\x00\xd3l7\x94\xd9+\xed\x86\x8c\xa3\xa47\x87!\xc7\x12B+{\xb0O_\\y3_r~O\xf5Y\x1b8\x06\x8f\x112\xd0\xd0\x81/\x9e\xd6\xb8$S\xa7.#>\xf2\xa4:\x14\x14\xa0`M\xd2&\xa0\xee\x14\xf49N\x06M\x1b\xc1\x05j\xc4\x9fA\xe2\xd7!}\xe6', 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) socket$nl_audit(0x10, 0x3, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001100)={@local, @random="8e28b138ee5e", @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}, 0x0) 18.453552346s ago: executing program 3 (id=535): read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000021c0), &(0x7f0000002340)=0xc) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, r3) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setregid(0x0, r5) 18.370472074s ago: executing program 3 (id=537): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20100444, &(0x7f00000002c0)={[], [], 0x2c}, 0x84, 0x4ae, &(0x7f0000000e00)="$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") syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file0/file0\x00', 0x3a0cc12, &(0x7f0000000540)={[{@unhide}, {@session={'session', 0x3d, 0x13}}, {@mode={'mode', 0x3d, 0x401}}, {@nocompress}, {@cruft}, {}, {@session={'session', 0x3d, 0x54}}, {@unhide}, {@unhide}, {@sbsector}, {@nocompress}, {@map_normal}], [], 0x2c}, 0x1, 0x9be, &(0x7f0000004180)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x119800, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) fanotify_init(0x0, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='./file0/../file0/file0\x00', 0x0, 0x2809c11, 0x0) mount$bind(&(0x7f00000004c0)='./file0/../file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a5c51, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 16.230950962s ago: executing program 1 (id=541): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000001a40)={[{@dots}, {@fat=@gid={'gid', 0x3d, 0xee01}}, {@nodots}, {@dots}, {@fat=@time_offset={'time_offset', 0x3d, 0x2d8}}, {@dots}, {@dots}, {@nodots}, {}, {@dots}, {@dots}, {@nodots}, {@nodots}, {}, {@fat=@flush}, {@fat=@debug}, {@dots}, {@fat=@showexec}, {@nodots}, {@fat=@errors_continue}, {@dots}, {@fat=@quiet}]}, 0x1, 0x1f0, &(0x7f0000000240)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000280)=@target={'target ', {'PCI:', '4', ':', '5', ':', '17', '.', '15'}}, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.events\x00', 0x275a, 0x0) 14.894959345s ago: executing program 3 (id=543): sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x21, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000500)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\x96\x05\r\x84\x87\x1c\b\x8c`\xea)A\x90m\xb6&\xd0\x9d\xb8\x7f\xc6W\x81\xb7\xf9\xbd\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff\xd6\xf2\xfe\xf3]\x15&\x97]mC\v\f\n\x1f\xe2\t\x14\x84\xe0\xa4\xda\xe7\xe8\xd5ue\xf4\xf8\xde\xf3\x00q?[\xba=\x1a\xb2\xdf]\xc0\xeb\x16\xe4\x7f\x17o\x1b\xa4M\xafa\xc7tR?3hH\x18\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xe3\xb5\xd6\xed1\x10\x8d\x87N\x9c8\xfd\xd0t\xe6?\x9c\x95`\xfc_\'N\x90\xb7\xb5\x0f\xeb\x17{\x1fu\'\xb4=\xbcO@AP1\x9d\x1b\xba%\xca!\x0eRsGT\xdf\xd8;\x9ea\xd0\x01\x0eq~\x00\xfbh\xf7\xc8\x97\\\xc0\\\x17', 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335}) tkill(r1, 0x7) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x6, 0x2012, r0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000040)={{&(0x7f000030e000/0x2000)=nil, 0x2000}}) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) 12.581913639s ago: executing program 1 (id=550): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_io_uring_setup(0x48be, &(0x7f0000000000), &(0x7f00000011c0), &(0x7f0000ff4000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 12.520790964s ago: executing program 3 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000080)=0x10) 10.100335278s ago: executing program 1 (id=555): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20100444, &(0x7f00000002c0)={[], [], 0x2c}, 0x84, 0x4ae, &(0x7f0000000e00)="$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") syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file0/file0\x00', 0x3a0cc12, &(0x7f0000000540)={[{@unhide}, {@session={'session', 0x3d, 0x13}}, {@mode={'mode', 0x3d, 0x401}}, {@nocompress}, {@cruft}, {}, {@session={'session', 0x3d, 0x54}}, {@unhide}, {@unhide}, {@sbsector}, {@nocompress}, {@map_normal}], [], 0x2c}, 0x1, 0x9be, &(0x7f0000004180)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x119800, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) fanotify_init(0x0, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='./file0/../file0/file0\x00', 0x0, 0x2809c11, 0x0) mount$bind(&(0x7f00000004c0)='./file0/../file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a5c51, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 9.778443737s ago: executing program 2 (id=557): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) 8.822552265s ago: executing program 2 (id=561): syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x100409a, &(0x7f0000000100), 0x1, 0x10fd, &(0x7f0000000340)="$eJzs2LFqVEEUBuB/7q7aCBsm/SWghYIsCesLpFDY1tpusbJzK2Ufx8eRVPZLHiBFwH5lNl4NsRDNxaB8XzXzc2bOTDkTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaKbJ/SSHXVKHrEtSkr4/W54n6Yf84NOkS8mrN8v1i3eLl+ursrSsS2mr9vN68qjWRV3Uk/r88PRxXb//8HZyrWVJn+1lq7wY9Sptx8nP8YNRmwAAAMA/aHdrszvuDwAAAPzKaB8JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOow6BLUpK+P1ueJ+nv9lgAAADALZV0eT1ro4c38qtvgB+e5fOs7PPBl9JqjvNxvz5Pf7/7vT86MwAAAPyPyrX3+JNMv7/LW3aUaebzHLT5/Ft+cZpMkhzf2Gd7uVntdpvV9mizKn/3CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFd24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAsFQAAAD//yJo0EI=") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) 8.595869847s ago: executing program 4 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0505405, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, 0x18000000}}) 8.594430967s ago: executing program 1 (id=563): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0) quotactl$Q_SETINFO(0x0, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d06, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000200)={0x5, 0x7, 0x0, 0x0, 0xe, "95048b612695220b5627cb32c9fc95a6ae6f01"}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x8, 0xd, [0x34, 0x1e, 0x35, 0x16, 0xc, 0x30, 0x1f, 0x2b, 0x13, 0x3b, 0xf, 0x39, 0x2e, 0x7, 0x8, 0x33], 0x1, 0x2800, 0x10}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x6b142, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) 7.762760604s ago: executing program 0 (id=564): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x83, &(0x7f0000000000)={r4}, &(0x7f0000000080)=0x10) 6.49684215s ago: executing program 0 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc5d87000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r3 = syz_io_uring_setup(0x7c32, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}) io_uring_enter(r3, 0x4b5a, 0x0, 0x0, 0x0, 0x0) 5.440297298s ago: executing program 4 (id=566): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="009b7e91bf18cd9430f4e1ee26870d4e291b10f3af9c21afd779d0ef023223a551f81042fa1b4a3eac3fa71eab99124c75f5a0d624ae9caeb800"], 0x1, 0xdab, &(0x7f0000000e80)="$eJzs3ctvXNX9APBzx544L36x8wuNm6ZJSkigj9iQumklNkaii1KE1CVLmgaa1gmP0AUoi5RFV0i1hPgDipDIpuqi6oJNFbGiG1Sp+wqx6iaVkLJAUcCV7XPG429mdGcc2+PxfD7SnTP3fs+955x53LlzXycBI6ux8jg3N12l9N5H7z7zr7O/+NvylJOtHKdWHsfz2HxKqdmaL6XJsLz5idX0qy+uX2xPv85plc6nKlWt6en52615D6SUbqRT6VaaTE+9cOfeh4vPPrc4debm0Xc+vbs1rV9TbXUBAACwA3z58w9e+8djP70+dfcvJ+bTRGt62T6fz+MH83b/fN5QLtvL5X9A1ZZWHban94R843lohHxjHfK1l9MM+ca7lL8nLLfZJd9ETfljbdM6tRuG2dr/+Koxs2680ZiZWf1PvuyzsT3VzNXLCy9dG1BFgU1352TexWcwGEZuWDo06DUQwKp43PA+Nzb3SF1raeO9lX/76Ubn+WETbPfnX/nDVf4Hv7fGYfPs1k9TaVf5Hh3M4/E4wniYr9/vf1lePB7R7LGe3Y4jDMvxhW71HNvmemxUt/rHz8Vu9e2cltfhRIi3f3/iezos7zHQ2Zf2/xsMIzssDXoFBOxY8by5pazE43l9MT5RE99bE99XE99fEz9QE4dR9tc3/pgWq7X/+fE/fb/7w8p+tody+n991ifuj+y3/Hjeb78etPx4PjHsZL8898mf7/zu1j/j+f9fh/P/T+ff0sm8gij7C+N+9da5/+HC4EaXfIdDfR7qkH/l+ZH1+aoja8tJbeuZ++oxvX6+Q93yHV+fbzLk25+3RfaG+sbtk/1hvrL9Udar5fUaD+1thnbsCfUo78xUTveG9kx1a1fYkb0n5Gvm4f9Du46Edj0c5vtGaFc1vb5dcf95qc/RMD0eJyn5wtt23+9SfC/idRmP5PTtnL6f049z+nmHckdR+Tx2O/+/fD6nU7N66fLCpSfyePmcfjLWnFie/uQ21xt4cL1e/zOd1l//c7A1vdloXy8cWpteta8XJsP0812m/zCPl9+zX4/tW5k+c/GVhV9tduNhxF17863fvriwcOl1TzzxxJPWk0GvmYCtNvvGlVdnr7351rnLV158+dLLl65e+MmPzj8x9+MLF2ZXNutn2zfugV1l7Ud/0DUBAAAAAAAAAAAAelbt6zw5p3X3ty3Xk5fr0+P18QyH8r6VT0O5j0G5/rPbfV3K9ZtT21BHNt92XE406DYCnf3X/X8NhpEdlpbcxR/YGQbd/1+572FJr/79Z3uXh5Lt9tPr15fx/oXwIHZ6/3PK3139/7X6v+p5/Rd6zJrcWLlX7j16s63YdKzX8mP7y31gj/RX/tVcfmnN2dRb+Ut/CuXHG5X26JVQ/v4ey7+v/cc3Vv6rufzysj1+utfyV2tcNdbXI+43LvcBjPuNi9dC+8u9/fpu/wY7ans9lw+jbFj6mezXsPT/2U1ZblkP5tVz6zhduf927O+g3/qX+36X34GHw/Krmt83/X8Ot7r+P8vnb1b/n7DrfOb4n8EwssPS0tJAuz4Z1X5XdopBv/6D3oYcdPmDfv3rxP4/4/+l2P9njMf+P2M89v8Z47F/rRiP/X/G1zP2/xnjR8NyY/+g0zXxb9bEj9XEv1UTP14Tj//fYvxUTfxETfxkTfxwTfyRmvjpmvijNfEzNfHHauKP18R3u+/kdFTbD6Ms9hvp+w+joxz/6fb9P1ITB4ZX7Nc5fr/P1sSB4VXO8/D9hhFUdb5jR9zfXvbjvp3T93P6cU4/37IKsh2+m9Pv5fT7Of1BTs/ldCansznVNeRw+8N/jp1YrNbO8zsU4r2eTxqvB4j3iXmyx/rE43P9ns96tMdytqr8DV4OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0GiuPc3PTVUrvffTuM/8+95vDy1NOtnKcWnkcz2PzKaVmSqnK4+NheTcmVtOvvrh+sVNapfMrj2U8PX+7Ne+B5fnTqXQrTaanXrhz78PFZ59bnDpz8+g7n97dmtavqba6AAAAABig/wUAAP//vrPsgA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x810043, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 5.425314139s ago: executing program 2 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x614aa976, 0x3, 0x4faf, 0x8, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_setup(0xfb, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000200)="13", 0x1}]) 5.217324188s ago: executing program 0 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0xf) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'trylock', ' ', 'io'}, 0xb) 3.440475343s ago: executing program 1 (id=569): socket$rds(0x15, 0x5, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f0000000000)=ANY=[], 0x9, 0xbfa, &(0x7f0000001840)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file7\x00', 0x0) write$UHID_CREATE2(r1, &(0x7f0000000200)=ANY=[], 0x118) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x5, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000003240)={&(0x7f0000001140), 0x0, 0x0, 0x0, 0x83, r2}, 0x38) 3.229978642s ago: executing program 0 (id=571): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20100444, &(0x7f00000002c0)={[], [], 0x2c}, 0x84, 0x4ae, &(0x7f0000000e00)="$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") syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file0/file0\x00', 0x3a0cc12, &(0x7f0000000540)={[{@unhide}, {@session={'session', 0x3d, 0x13}}, {@mode={'mode', 0x3d, 0x401}}, {@nocompress}, {@cruft}, {}, {@session={'session', 0x3d, 0x54}}, {@unhide}, {@unhide}, {@sbsector}, {@nocompress}, {@map_normal}], [], 0x2c}, 0x1, 0x9be, &(0x7f0000004180)="$eJzs3c1vXOW9B/Dv8Uvia1AIkMvNRUAm4QYM5Dq2U0IjNk3scTLUL5XtSERVRShJqihWqaCVAHWRSlVXRe2i6oLuWHaFxAY2VXbtX9BFpYp/AXUVddGpzplxbGOPx079Rvh8rOM5L7/zPL/H5/g88vHMecLXWbPZrKb7XL78x91Mlv3nwsQXH3/yYTn94nYOpDcvF58lA0lqSV+So0n/+MTc7HSXgm4lV5PcSYokB9N63ZSrKX6Th5eX76T4Q1lv5fJ9NoxNafKNttfnHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EfF+MTIyGiRqcbM5ddrnVVDgHfa2LNc3ufVqN/F513rTYpyysDA0lDfR48sb36i/HYiT7WWnqoGJM9APnjoicOvPt7Xs7T/Bglvxb/agyFvecd33//g1puLi9ff2aZEvm4u1mca87ON6fMX67XG/Gzt3NmzI6cvTc7XJhtT9fkr8wv16dr4XP38wuxcbWj8hdrouXNnavXhK7OXZy5ODE/Vl1a+8v9jIyNna68Nf69+fm5+dub0a8Pz45caU1ONmYtVTLm5jHmlPBG/21ioLdTPT9dqN24uXj+zKqN1TokyaLRbS8qgsW5BYyNjY6OjY2OjZ18+9/IrIyN9yyt6U60Y+Yqs2eXeSVue0Vv5WbOvfdSz2cjtvYDDf6Cn3f9nKo3M5HJeT23dr/FMZC6zme6wvW2p/z95ur5hvSv7/6Ve/ujy5idT9f/PtJae6dT/d8hl977ezfv5ILfyZhazmOt5Z9XWg/dRYrO5963a/NfF1DOTRuYzm0amc75aU2uvqeVczuZsRvJGLmUy86llMo1MpZ75XMl8FlKvzqjxzKWe81noKw90LUMZzwupZTTnci5nUks9w7mS2VzOTC5mIuerUm7kZvVzP7NBjveCRjcTNLZB0Ab9f3vFFvp/vqF24CoO96fZ7v8PdA8dGt+NhAAAAIBt979/yaEjj/3570l/nq7usQMAAAAPmurtek+VL/3l3NMpJhtT9ZG9TgsAAADYRkX1GbsiyWCOteaWPgnlJgAAAAA8IKr//z9TvgyWc8dS+PsfAAAAHjTdn7HfNaI4lVpul5tq11qR19oR7ef8Dk42purD47NTr47mueopA9UnDdaU1pvDSfXxgxdzvBV1fLD1Ori6xIEyanT41dEM5ES7IUPPli/PDq0TOVZGvpjnW5HPL0UOZE3kmTISAB50Jzbojzfb/7+YU62IU09Wj2/ve3KdPnhEzwoA+0X3MXa6RhTfWhr+p8Pf/4/lxrHWWwqG81bezmKu5VT1aYPqHQftUnOnyHKpgyvehnCqy92AwRUjvJxauh9w7OF17wcMrhjo5dSaOwKdYs/swpEAgN1zYk0/vEH/32y25tbc/9/47/9BbykEgH3l3gj2Oziz120EAFa7r166dwcTAgAAAAAAAAAAAAAAAAAAAAAAAAAAgAfAbjz/f1/O3E6yD9Iws7MzA7tzhv/gQLJfmrxNM3t9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA3FEnveut7koNJ30iS07uf1c65vdcJ7LHibu7mvRza6zwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB407ef/96T1+lBrVfp6kpNJrib5/l7nuJ3u7nUCe2zF8//LY55mkb7WYU/RPz4xNztdHv4cLLd/8fEnH5bT/dRTFlDWsGpwiXYNnfd6tNprcOL6u7d++vZPahMXqiQvLExOTUxfnPvOcuATxadJLa1pyVK+Py/aZ/Hqln9atnRz9U5W9U6srfd/1tv7Xr0n//Tbzm1btpzGzcXrY2VNC/XXF37245vvrQh6LMeTZ4eSodU1/aicOtR0PP0b1Vt8WfyqOJTf52p1/Ms0imZRHqJHqvb/142bi9eH33p78VqHnA7nWJJrycDmczq29kgsqc66nv6y1pEqqPx2pEt5G3qo91Cz2SpxtEMbHq1OmcEttaHWuQ2VLj/3dhvPdMjo8Ty35SP9XJca2/7ZbGktFV8Wfysu5a/55YrxP3rK438ym/ntLGOqyBVnSuc2n1xu+djKDW98NbLjbyU74Nf5Yb597/j3rLj+t4/V7lyPVtS4Y78XRasXaqvmj3ylR2pffTpl2c7zSCuqQ57/nZfW7tclz5e6XFG26fd/teLL4qNiKP/IbeP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+1+R9K63vic5meRwkkfK5VrS3I76egaL7Shmkw6sWXN7F2vfP3ruzRV3czfv5dCepgMAAAAAAADAtrkw8cXHn3xYTtX/43vzf8VnyUDrP/19SQ4Xv+sfn5ibne5SUH9yNcmdcn5gazmU++Xh5eU75dLRrbcFANicfwcAAP//U9R2+g==") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x119800, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) fanotify_init(0x0, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='./file0/../file0/file0\x00', 0x0, 0x2809c11, 0x0) mount$bind(&(0x7f00000004c0)='./file0/../file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a5c51, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 3.228331342s ago: executing program 2 (id=572): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x2f00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.541408726s ago: executing program 2 (id=573): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000400)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x25, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x11, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}, '+'}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) r2 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) write$hidraw(r2, &(0x7f0000000080)="68b02aca4f3751da52a0b6e427cb787e6070bb275e403a7b9c0f73d1f29a5de6d9b23389ec9021a82248e59eb0de503ec213caa34049e61bd2610c", 0x4000) 2.526869877s ago: executing program 4 (id=574): inotify_init1(0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0xaa, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa04040000ffff8100000086dd604f3bf500303a0020010000000000000000000000000002ff05"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a000100be"], 0x40}}, 0x0) 1.95065811s ago: executing program 4 (id=575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fdatasync(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_mount_image$bfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x10403, &(0x7f0000000300)=ANY=[@ANYRESDEC=r3], 0x1, 0x8b, &(0x7f0000000380)="$eJzszqENAkEUBNC5M6CuAQQdXA+UQpDgUBASKqIVSqADBBZziAWzErOEvJf8n0zGzPV5WWRIpnMyVfaH43a9Kz/8pT7JLMk8yXJIuiT3Vem6d397nDafa70XAAD4Xp+xzmOzMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/6BUAAP//bXAjUQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x901001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 1.908161484s ago: executing program 0 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendfile(r4, r3, 0x0, 0x10004) 1.774808196s ago: executing program 2 (id=577): pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r1, 0x10e, 0xa, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13) write$P9_RVERSION(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000480)={'gretap0\x00', r4, 0x1, 0x8, 0x6a6, 0xaa118a51, {{0x5, 0x4, 0x2, 0x2e, 0x14, 0x64, 0x0, 0x7f, 0x2f, 0x0, @broadcast, @broadcast}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) faccessat2(r5, &(0x7f0000001400)='\x00', 0x0, 0x1100) 965.318891ms ago: executing program 4 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) inotify_init1(0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 501.905434ms ago: executing program 0 (id=579): socket$rds(0x15, 0x5, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f0000000000)=ANY=[], 0x9, 0xbfa, &(0x7f0000001840)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file7\x00', 0x0) write$UHID_CREATE2(r1, &(0x7f0000000200)=ANY=[], 0x118) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x5, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000003240)={&(0x7f0000001140), 0x0, 0x0, 0x0, 0x83, r2}, 0x38) 0s ago: executing program 4 (id=580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc5d87000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r3 = syz_io_uring_setup(0x7c32, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}) io_uring_enter(r3, 0x4b5a, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 2.131165][ T5316] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.213 (5316) [ 152.155113][ T5316] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 152.157522][ T5316] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 152.159498][ T5316] BTRFS info (device loop3): using free space tree [ 152.192816][ T5323] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.196333][ T5323] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.198557][ T5323] device bridge_slave_0 entered promiscuous mode [ 152.252163][ T4425] device hsr_slave_0 left promiscuous mode [ 152.267189][ T5316] BTRFS info (device loop3): enabling ssd optimizations [ 152.287688][ T5185] udevd[5185]: symlink '../../loop3' '/dev/disk/by-uuid/7e32c2af-f87a-45a1-bcba-64dea7c56a53.tmp-b7:3' failed: Read-only file system [ 152.303560][ T4425] device hsr_slave_1 left promiscuous mode [ 152.384153][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.385808][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.394715][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.396405][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.410692][ T4425] device bridge_slave_1 left promiscuous mode [ 152.412247][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.425832][ T4772] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 152.457645][ T4425] device bridge_slave_0 left promiscuous mode [ 152.459027][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.653354][ T4425] device veth1_macvtap left promiscuous mode [ 152.654707][ T4425] device veth0_macvtap left promiscuous mode [ 152.656030][ T4425] device veth1_vlan left promiscuous mode [ 152.659033][ T4425] device veth0_vlan left promiscuous mode [ 153.065761][ T5362] loop3: detected capacity change from 0 to 2048 [ 153.070434][ T5362] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.085794][ T5185] udevd[5185]: symlink '../../loop3' '/dev/disk/by-label/LinuxUDF.tmp-b7:3' failed: Read-only file system [ 153.089184][ T5185] udevd[5185]: symlink '../../loop3' '/dev/disk/by-uuid/1234567812345678.tmp-b7:3' failed: Read-only file system [ 153.111546][ T5185] udevd[5185]: symlink '../../loop3' '/dev/disk/by-label/LinuxUDF.tmp-b7:3' failed: Read-only file system [ 153.127947][ T5185] udevd[5185]: symlink '../../loop3' '/dev/disk/by-uuid/1234567812345678.tmp-b7:3' failed: Read-only file system [ 153.380700][ T5364] loop3: detected capacity change from 0 to 32768 [ 153.385042][ T5364] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.221 (5364) [ 153.391510][ T5364] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.394396][ T5364] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 153.396695][ T5364] BTRFS info (device loop3): use zlib compression, level 3 [ 153.398224][ T5364] BTRFS info (device loop3): using free space tree [ 153.411674][ T5185] udevd[5185]: symlink '../../loop3' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:3' failed: Read-only file system [ 153.431405][ T5364] BTRFS info (device loop3): enabling ssd optimizations [ 153.559092][ T47] Bluetooth: hci2: command tx timeout [ 153.661285][ T4772] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.840131][ T5385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.874307][ T5385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.442952][ T5387] loop3: detected capacity change from 0 to 512 [ 154.462615][ T5185] udevd[5185]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 154.479805][ T5387] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #3: comm syz.3.223: corrupted inode contents [ 154.484810][ T5387] EXT4-fs error (device loop3): ext4_dirty_inode:6086: inode #3: comm syz.3.223: mark_inode_dirty error [ 154.489087][ T5387] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #3: comm syz.3.223: corrupted inode contents [ 154.491882][ T5387] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.223: mark_inode_dirty error [ 154.497896][ T5387] Quota error (device loop3): write_blk: dquota write failed [ 154.499794][ T5387] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 154.501872][ T5387] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.223: Failed to acquire dquot type 0 [ 154.516392][ T5387] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.223: corrupted inode contents [ 154.519345][ T5387] EXT4-fs error (device loop3): ext4_dirty_inode:6086: inode #16: comm syz.3.223: mark_inode_dirty error [ 154.522020][ T5387] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.223: corrupted inode contents [ 154.525211][ T5387] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.223: mark_inode_dirty error [ 154.528207][ T5387] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.223: corrupted inode contents [ 154.533811][ T5387] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 154.536056][ T5387] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.223: corrupted inode contents [ 154.538879][ T5387] EXT4-fs error (device loop3): ext4_truncate:4311: inode #16: comm syz.3.223: mark_inode_dirty error [ 154.541800][ T5387] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 154.548249][ T4425] team0 (unregistering): Port device team_slave_1 removed [ 154.564154][ T5387] EXT4-fs (loop3): 1 truncate cleaned up [ 154.565423][ T5387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 154.592850][ T5387] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 154.595842][ T5387] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 154.597904][ T5387] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.223: Failed to acquire dquot type 1 [ 154.609000][ T5387] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 154.618099][ T5387] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 154.620155][ T5387] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.223: Failed to acquire dquot type 1 [ 154.643551][ T4772] EXT4-fs (loop3): unmounting filesystem. [ 154.643800][ T4509] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 154.647469][ T4509] EXT4-fs error (device loop3): ext4_release_dquot:6823: comm kworker/u4:14: Failed to release dquot type 1 [ 154.745813][ T4425] team0 (unregistering): Port device team_slave_0 removed [ 154.924531][ T4425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.163910][ T4425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.633177][ T47] Bluetooth: hci2: command tx timeout [ 157.645852][ T4425] bond0 (unregistering): Released all slaves [ 157.713083][ T4303] Bluetooth: hci2: command tx timeout [ 157.906800][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.909154][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.911472][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.913883][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.916106][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.918312][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.920416][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.922711][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.924900][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.927220][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.931813][ T5323] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.933437][ T5323] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.936328][ T5323] device bridge_slave_1 entered promiscuous mode [ 158.027210][ T5323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.031584][ T5323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.111815][ T5402] loop0: detected capacity change from 0 to 512 [ 158.177765][ T5323] team0: Port device team_slave_0 added [ 158.180935][ T5323] team0: Port device team_slave_1 added [ 158.204030][ T5402] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.231192][ T5402] EXT4-fs (loop0): 1 truncate cleaned up [ 158.232708][ T5402] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 158.249991][ T5323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.251412][ T5323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.284282][ T5323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.424132][ T5323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.425768][ T5323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.444018][ T5394] udevd[5394]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 159.453332][ T5323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.524242][ T5394] udevd[5394]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 159.640628][ T5414] block device autoloading is deprecated and will be removed. [ 159.708912][ T5125] EXT4-fs (loop0): unmounting filesystem. [ 159.769069][ T5323] device hsr_slave_0 entered promiscuous mode [ 159.793318][ T47] Bluetooth: hci2: command tx timeout [ 159.813830][ T5323] device hsr_slave_1 entered promiscuous mode [ 159.874940][ T5323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.876662][ T5323] Cannot create hsr debugfs directory [ 159.892830][ T5404] loop1: detected capacity change from 0 to 32768 [ 159.899785][ T5422] loop2: detected capacity change from 0 to 64 [ 159.951101][ T5404] [ 159.951101][ T5404] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.951101][ T5404] [ 160.005705][ T5415] udevd[5415]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system [ 160.031727][ T5415] udevd[5415]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system [ 160.129172][ T5394] udevd[5394]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system [ 160.308707][ T5427] [ 160.308707][ T5427] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.308707][ T5427] [ 160.311074][ T5427] [ 160.311074][ T5427] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.311074][ T5427] [ 160.313343][ T5427] [ 160.313343][ T5427] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.313343][ T5427] [ 160.315586][ T5427] [ 160.315586][ T5427] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.315586][ T5427] [ 160.317818][ T5427] [ 160.317818][ T5427] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.317818][ T5427] [ 160.319880][ T5427] [ 160.319880][ T5427] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.319880][ T5427] [ 160.370867][ T90] [ 160.370867][ T90] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.370867][ T90] [ 160.608098][ T4731] [ 160.608098][ T4731] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.608098][ T4731] [ 160.661531][ T4731] [ 160.661531][ T4731] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.661531][ T4731] [ 161.129493][ T5323] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.263560][ T5435] loop2: detected capacity change from 0 to 256 [ 161.277943][ T5435] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 161.286587][ T5323] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.497284][ T5323] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.375481][ T5323] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.533647][ T5445] loop1: detected capacity change from 0 to 32768 [ 162.537093][ T5445] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.240 (5445) [ 162.541613][ T5445] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.547456][ T5445] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 162.549255][ T5445] BTRFS info (device loop1): using free space tree [ 162.565116][ T5445] BTRFS info (device loop1): enabling ssd optimizations [ 162.568461][ T5394] udevd[5394]: symlink '../../loop1' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:1' failed: Read-only file system [ 163.392596][ T5394] udevd[5394]: symlink '../../loop1' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:1' failed: Read-only file system [ 163.470290][ T4731] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.498579][ T5453] netlink: 'syz.0.242': attribute type 4 has an invalid length. [ 163.717269][ T5484] block nbd0: not configured, cannot reconfigure [ 164.422884][ T5323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.667526][ T5323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.526211][ T5323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.575037][ T5323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.679991][ T5501] cgroup: Unknown subsys name 'pcr' [ 165.828369][ T5509] kernel profiling enabled (shift: 0) [ 166.031537][ T5323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.038769][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.040983][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.056237][ T5323] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.062123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.065307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.071427][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.073126][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.077750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.146939][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.149360][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.151832][ T1599] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.153536][ T1599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.171813][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.176188][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.178793][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.194683][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.283199][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.285526][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.288119][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.290309][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.292483][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.299273][ T5323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.302232][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.305732][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.308049][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.522727][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.525182][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.528716][ T5323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.636431][ T4303] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 168.184576][ T5541] syz.1.258 uses old SIOCAX25GETINFO [ 168.254164][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.256879][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.591628][ T5545] loop2: detected capacity change from 0 to 64 [ 169.364570][ T5323] device veth0_vlan entered promiscuous mode [ 169.373318][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.382659][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.385116][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.387165][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.388441][ T5547] loop2: detected capacity change from 0 to 256 [ 169.404556][ T5323] device veth1_vlan entered promiscuous mode [ 170.171904][ T4425] device hsr_slave_0 left promiscuous mode [ 170.250606][ T5554] xt_recent: Unsupported userspace flags (000000de) [ 170.251188][ T4425] device hsr_slave_1 left promiscuous mode [ 170.343328][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.345111][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.347886][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.349507][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.351652][ T4425] device bridge_slave_1 left promiscuous mode [ 170.353527][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.379478][ T5558] loop0: detected capacity change from 0 to 2048 [ 170.402100][ T5558] NILFS (loop0): couldn't find nilfs on the device [ 170.409499][ T4425] device bridge_slave_0 left promiscuous mode [ 170.410883][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.543264][ T4425] device veth1_macvtap left promiscuous mode [ 170.544536][ T4425] device veth0_macvtap left promiscuous mode [ 170.545836][ T4425] device veth1_vlan left promiscuous mode [ 170.547155][ T4425] device veth0_vlan left promiscuous mode [ 171.514675][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.519686][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.521981][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.525175][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.527768][ T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 171.529764][ T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 172.467429][ T5572] loop1: detected capacity change from 0 to 764 [ 172.487654][ T5572] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 172.495634][ T5394] udevd[5394]: symlink '../../loop1' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:1' failed: Read-only file system [ 172.521515][ T5572] process 'syz.1.266' launched './file1' with NULL argv: empty string added [ 173.207799][ T4425] team0 (unregistering): Port device team_slave_1 removed [ 173.406404][ T4425] team0 (unregistering): Port device team_slave_0 removed [ 173.553440][ T47] Bluetooth: hci5: command tx timeout [ 173.613836][ T4425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.844147][ T4425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.633136][ T47] Bluetooth: hci5: command tx timeout [ 176.328053][ T4425] bond0 (unregistering): Released all slaves [ 176.670692][ T5323] device veth0_macvtap entered promiscuous mode [ 176.706310][ T5323] device veth1_macvtap entered promiscuous mode [ 176.713336][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.715615][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.717782][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.720595][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.886113][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.888340][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.890397][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.892463][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.910951][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.913934][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.917645][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.919975][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.922029][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.424696][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.428437][ T5323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.436093][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.440245][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.444828][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.447110][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.449313][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.451672][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.454409][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.456784][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.458990][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.461267][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.464055][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.466444][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.470092][ T5323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.475793][ T5323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.477631][ T5323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.479629][ T5323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.481447][ T5323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.485350][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.487706][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.672243][ T4526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.676842][ T4526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.688072][ T201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.713218][ T4303] Bluetooth: hci5: command tx timeout [ 177.718774][ T4466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.720615][ T4466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.725576][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.758925][ T5567] chnl_net:caif_netlink_parms(): no params data found [ 178.879183][ T5567] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.883148][ T5567] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.886401][ T5567] device bridge_slave_0 entered promiscuous mode [ 178.900246][ T5567] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.901949][ T5567] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.911098][ T5567] device bridge_slave_1 entered promiscuous mode [ 178.992333][ T5567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.023139][ T5567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.060116][ T5567] team0: Port device team_slave_0 added [ 179.075627][ T5567] team0: Port device team_slave_1 added [ 179.121388][ T5567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.122853][ T5567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.143184][ T5567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.148192][ T5567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.149870][ T5567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.176277][ T5567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.196028][ T5608] loop4: detected capacity change from 0 to 32768 [ 179.238010][ T5616] loop2: detected capacity change from 0 to 2048 [ 179.253142][ T5580] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.274314][ T5618] loop1: detected capacity change from 0 to 256 [ 179.295231][ T5616] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.317566][ T5618] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 179.324994][ T5567] device hsr_slave_0 entered promiscuous mode [ 179.336900][ T5585] udevd[5585]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system [ 179.340717][ T5585] udevd[5585]: symlink '../../loop2' '/dev/disk/by-uuid/1234567812345678.tmp-b7:2' failed: Read-only file system [ 179.383532][ T5567] device hsr_slave_1 entered promiscuous mode [ 179.793365][ T47] Bluetooth: hci5: command tx timeout [ 180.275013][ T5624] loop2: detected capacity change from 0 to 256 [ 180.550337][ T5630] loop4: detected capacity change from 0 to 512 [ 180.585662][ T5580] udevd[5580]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 180.599547][ T5630] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 180.621767][ T5580] udevd[5580]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 180.653936][ T5064] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 180.655773][ T5064] FAT-fs (loop2): Filesystem has been set read-only [ 180.657455][ T5064] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 180.711064][ T5628] loop1: detected capacity change from 0 to 32768 [ 180.717276][ T5628] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.279 (5628) [ 180.742152][ T5580] udevd[5580]: symlink '../../loop1' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:1' failed: Read-only file system [ 180.753859][ T5628] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 180.756028][ T5628] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 180.757921][ T5628] BTRFS info (device loop1): use zlib compression, level 3 [ 180.759359][ T5628] BTRFS info (device loop1): using free space tree [ 180.829190][ T5323] EXT4-fs (loop4): unmounting filesystem. [ 180.843773][ T5642] loop0: detected capacity change from 0 to 256 [ 180.938883][ T27] audit: type=1326 audit(180.900:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.4.282" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff873498a8 code=0x0 [ 181.029215][ T5628] BTRFS info (device loop1): enabling ssd optimizations [ 181.069327][ T5567] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.101447][ T5580] udevd[5580]: symlink '../../loop1' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:1' failed: Read-only file system [ 181.282099][ T5125] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 181.286502][ T5125] FAT-fs (loop0): Filesystem has been set read-only [ 181.319614][ T5662] random: crng reseeded on system resumption [ 181.524836][ T5125] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 182.102922][ T4731] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.115635][ T5567] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.336021][ T4303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.341055][ T4303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.354116][ T4296] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.372112][ T4296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.375632][ T4303] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 182.377525][ T4296] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.045129][ T5567] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.131590][ T5677] loop1: detected capacity change from 0 to 2048 [ 184.163902][ T5580] udevd[5580]: symlink '../../loop1' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:1' failed: Read-only file system [ 184.169522][ T5678] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.191954][ T5580] udevd[5580]: symlink '../../loop1' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:1' failed: Read-only file system [ 184.298642][ T5567] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.343362][ T5681] loop4: detected capacity change from 0 to 256 [ 184.382133][ T5681] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 184.436046][ T4303] Bluetooth: hci1: command tx timeout [ 184.637621][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.951256][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.961197][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.016479][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.036154][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 185.047399][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.399758][ T5688] loop1: detected capacity change from 0 to 256 [ 185.484605][ T5688] FAT-fs (loop1): Directory bread(block 64) failed [ 185.489407][ T5688] FAT-fs (loop1): Directory bread(block 65) failed [ 185.490967][ T5688] FAT-fs (loop1): Directory bread(block 66) failed [ 185.492326][ T5688] FAT-fs (loop1): Directory bread(block 67) failed [ 185.501205][ T5690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 185.508040][ T5688] FAT-fs (loop1): Directory bread(block 68) failed [ 185.523434][ T5688] FAT-fs (loop1): Directory bread(block 69) failed [ 185.525003][ T5688] FAT-fs (loop1): Directory bread(block 70) failed [ 185.526501][ T5688] FAT-fs (loop1): Directory bread(block 71) failed [ 185.528147][ T5688] FAT-fs (loop1): Directory bread(block 72) failed [ 185.529592][ T5688] FAT-fs (loop1): Directory bread(block 73) failed [ 186.701981][ T47] Bluetooth: hci1: command tx timeout [ 186.760754][ T5697] loop4: detected capacity change from 0 to 4096 [ 186.762716][ T5697] ntfs: (device loop4): parse_options(): The dmask option requires an argument. [ 187.129518][ T5580] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.319624][ T5704] netlink: 'syz.1.296': attribute type 11 has an invalid length. [ 187.321559][ T5704] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.296'. [ 187.418486][ T4303] Bluetooth: hci4: command tx timeout [ 187.420778][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.426477][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.098715][ T5668] chnl_net:caif_netlink_parms(): no params data found [ 189.191416][ T5716] loop4: detected capacity change from 0 to 512 [ 189.241946][ T5580] udevd[5580]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 189.262007][ T5716] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 189.295906][ T5580] udevd[5580]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 189.316904][ T5716] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.299: Directory hole found for htree leaf block 0 [ 189.434819][ T4303] Bluetooth: hci1: command tx timeout [ 189.445759][ T5716] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 189.477810][ T47] Bluetooth: hci4: command tx timeout [ 189.515866][ T5323] EXT4-fs (loop4): unmounting filesystem. [ 189.590764][ T5726] loop4: detected capacity change from 0 to 2048 [ 189.628829][ T5727] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.632762][ T5580] udevd[5580]: symlink '../../loop4' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:4' failed: Read-only file system [ 189.728936][ T5723] loop1: detected capacity change from 0 to 32768 [ 189.768016][ T5684] chnl_net:caif_netlink_parms(): no params data found [ 189.770609][ T5580] udevd[5580]: symlink '../../loop1' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:1' failed: Read-only file system [ 189.771999][ T5567] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.789231][ T5723] XFS (loop1): Mounting V5 Filesystem [ 189.832876][ T5723] XFS (loop1): Ending clean mount [ 189.878890][ T5580] udevd[5580]: symlink '../../loop1' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:1' failed: Read-only file system [ 189.912487][ T4425] device hsr_slave_0 left promiscuous mode [ 189.954596][ T4425] device hsr_slave_1 left promiscuous mode [ 189.999590][ T4731] XFS (loop1): Unmounting Filesystem [ 190.143672][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.145362][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.151774][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.153426][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.185709][ T4425] device bridge_slave_1 left promiscuous mode [ 190.196082][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.968878][ T4425] device bridge_slave_0 left promiscuous mode [ 190.970398][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.105623][ T4425] device veth1_macvtap left promiscuous mode [ 191.106943][ T4425] device veth0_macvtap left promiscuous mode [ 191.108157][ T4425] device veth1_vlan left promiscuous mode [ 191.109461][ T4425] device veth0_vlan left promiscuous mode [ 191.479215][ T5749] loop1: detected capacity change from 0 to 64 [ 191.504329][ T4303] Bluetooth: hci1: command tx timeout [ 191.553217][ T4303] Bluetooth: hci4: command tx timeout [ 191.630525][ T5749] MINIX-fs: mounting file system with errors, running fsck is recommended [ 193.683235][ T4303] Bluetooth: hci4: command tx timeout [ 195.708380][ T4425] team0 (unregistering): Port device team_slave_1 removed [ 195.936732][ T4425] team0 (unregistering): Port device team_slave_0 removed [ 196.114758][ T4425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.358348][ T4425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.910396][ T4425] bond0 (unregistering): Released all slaves [ 199.156437][ T5567] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.206416][ T5567] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.247666][ T5567] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.286420][ T5668] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.288045][ T5668] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.290306][ T5668] device bridge_slave_0 entered promiscuous mode [ 199.294037][ T5668] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.295674][ T5668] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.297937][ T5668] device bridge_slave_1 entered promiscuous mode [ 199.346582][ T5668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.350399][ T5668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.866659][ T5770] loop4: detected capacity change from 0 to 128 [ 200.048000][ T5668] team0: Port device team_slave_0 added [ 200.053760][ T5684] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.055487][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.057730][ T5684] device bridge_slave_0 entered promiscuous mode [ 200.066243][ T5668] team0: Port device team_slave_1 added [ 200.077968][ T5684] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.080852][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.085914][ T5684] device bridge_slave_1 entered promiscuous mode [ 200.099138][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.100860][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.106992][ T5668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.132214][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.134064][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.139637][ T5668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.146949][ T5684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.155668][ T5684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.311890][ T5684] team0: Port device team_slave_0 added [ 200.354375][ T5684] team0: Port device team_slave_1 added [ 200.434851][ T5668] device hsr_slave_0 entered promiscuous mode [ 201.191654][ T5668] device hsr_slave_1 entered promiscuous mode [ 201.254121][ T5668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.256144][ T5668] Cannot create hsr debugfs directory [ 201.272969][ T5567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.290752][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.292289][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.300297][ T5684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.306383][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.307915][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.314405][ T5684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.349126][ T5779] loop1: detected capacity change from 0 to 512 [ 201.372102][ T5760] udevd[5760]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 201.397401][ T5779] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 201.427997][ T5760] udevd[5760]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 201.451454][ T5684] device hsr_slave_0 entered promiscuous mode [ 201.461950][ T5779] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.309: Directory hole found for htree leaf block 0 [ 201.498775][ T5779] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 201.504429][ T5684] device hsr_slave_1 entered promiscuous mode [ 201.520489][ T4731] EXT4-fs (loop1): unmounting filesystem. [ 201.665933][ T5684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.682481][ T5684] Cannot create hsr debugfs directory [ 202.292799][ T5567] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.299824][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.301991][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.321516][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.323908][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.326102][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.327710][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.329653][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.385793][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.389441][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.391373][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.392912][ T4466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.410612][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.413707][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.416081][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.419005][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.421282][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.425644][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.430935][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.435721][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.438040][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.457551][ T5567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.460371][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.471629][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.479110][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.547233][ T5668] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.649892][ T5668] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.696827][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.698522][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.705453][ T5567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.716989][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.719355][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.775152][ T5668] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.417257][ T4425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.465479][ T5668] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.476973][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.479301][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.565324][ T4425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.572824][ T5567] device veth0_vlan entered promiscuous mode [ 203.575567][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.577836][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.587628][ T5567] device veth1_vlan entered promiscuous mode [ 203.600348][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 203.602694][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 203.607917][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.610204][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.614411][ T5567] device veth0_macvtap entered promiscuous mode [ 203.677095][ T4425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.692649][ T5567] device veth1_macvtap entered promiscuous mode [ 203.702798][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.705637][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.708265][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.710396][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.712399][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.715473][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.717569][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.719730][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.721801][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.724960][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.729505][ T5567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.789876][ T4425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.803868][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.806174][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.808395][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.811153][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.814005][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.816206][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.818374][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.820591][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.822745][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.825172][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.827224][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.829283][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.831301][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.834077][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.837505][ T5567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.841399][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.845685][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.850245][ T5567] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.852078][ T5567] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.854435][ T5567] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.856357][ T5567] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.922644][ T5771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.924868][ T5771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.930135][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.960188][ T5771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.972162][ T5771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.000166][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.378762][ T5801] netlink: 'syz.4.319': attribute type 11 has an invalid length. [ 204.380411][ T5801] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.319'. [ 207.041160][ T5668] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.075936][ T5668] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.125125][ T5668] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.298875][ T5668] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.475123][ T5684] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.506399][ T5684] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.697287][ T5684] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.735432][ T5684] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.232047][ T5668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.247360][ T5684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.257828][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.260525][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.263299][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.265555][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.270721][ T5668] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.569018][ T5684] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.580197][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.582585][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.584993][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.586588][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.589799][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.592127][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.595235][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.596734][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.598540][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.600928][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.605321][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.606917][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.611847][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.614754][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.617106][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.619539][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.621810][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.623495][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.649938][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.652501][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.656347][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.668798][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.671699][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.674373][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.676792][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.679138][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.681413][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.686952][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.690913][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.695372][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.014386][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.016991][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.019388][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.022008][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.028108][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.030562][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.036679][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.039182][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.104512][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.107005][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.116021][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.119763][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.511573][ T4425] device hsr_slave_0 left promiscuous mode [ 209.553765][ T4425] device hsr_slave_1 left promiscuous mode [ 209.663227][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.664851][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.667146][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.668707][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.670810][ T4425] device bridge_slave_1 left promiscuous mode [ 209.672191][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.706095][ T4425] device bridge_slave_0 left promiscuous mode [ 209.707596][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.757847][ T4425] device hsr_slave_0 left promiscuous mode [ 209.815225][ T4425] device hsr_slave_1 left promiscuous mode [ 209.923253][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.925018][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.928232][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.929774][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.931964][ T4425] device bridge_slave_1 left promiscuous mode [ 209.933846][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.994057][ T4425] device bridge_slave_0 left promiscuous mode [ 209.995509][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.173266][ T4425] device veth1_macvtap left promiscuous mode [ 210.174585][ T4425] device veth0_macvtap left promiscuous mode [ 210.175883][ T4425] device veth1_vlan left promiscuous mode [ 210.177179][ T4425] device veth0_vlan left promiscuous mode [ 210.263269][ T4425] device veth1_macvtap left promiscuous mode [ 210.264772][ T4425] device veth0_macvtap left promiscuous mode [ 210.266206][ T4425] device veth1_vlan left promiscuous mode [ 210.267667][ T4425] device veth0_vlan left promiscuous mode [ 212.684939][ T4425] team0 (unregistering): Port device team_slave_1 removed [ 212.896469][ T4425] team0 (unregistering): Port device team_slave_0 removed [ 213.085665][ T4425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.364200][ T4425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.057338][ T4425] bond0 (unregistering): Released all slaves [ 218.447885][ T4425] team0 (unregistering): Port device team_slave_1 removed [ 218.682807][ T4425] team0 (unregistering): Port device team_slave_0 removed [ 218.864435][ T4425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.116054][ T4425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.017916][ T4425] bond0 (unregistering): Released all slaves [ 222.260497][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.262311][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.264637][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.266348][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.278125][ T5684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.287933][ T5668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.325179][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.328223][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.342348][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.345908][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.350842][ T5684] device veth0_vlan entered promiscuous mode [ 222.360218][ T5684] device veth1_vlan entered promiscuous mode [ 222.369331][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.371493][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.374502][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 222.376898][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 222.379022][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.381305][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.394767][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.397103][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.403711][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.405867][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.409049][ T5668] device veth0_vlan entered promiscuous mode [ 222.415245][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.417420][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.421121][ T5684] device veth0_macvtap entered promiscuous mode [ 222.426219][ T5684] device veth1_macvtap entered promiscuous mode [ 222.430856][ T5668] device veth1_vlan entered promiscuous mode [ 222.441200][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.444070][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.446158][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.449371][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.451381][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.453810][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.455870][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.458043][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.461376][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.464984][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 222.467231][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 222.469945][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.472072][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.475638][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.477937][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.484405][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.486564][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.488572][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.490798][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.492875][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.496221][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.498280][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.500394][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.504865][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.506461][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.508702][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.517178][ T5668] device veth0_macvtap entered promiscuous mode [ 222.519047][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.521379][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.525938][ T5684] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.527765][ T5684] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.529787][ T5684] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.531727][ T5684] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.538665][ T5668] device veth1_macvtap entered promiscuous mode [ 222.543804][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.545898][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.555377][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.557720][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.559773][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.561938][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.564924][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.567143][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.569131][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.571130][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.574821][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.577172][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.581722][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.602803][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.605340][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.608683][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.610879][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.613671][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.615891][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.617923][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.620117][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.622375][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.625163][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.627404][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.629607][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.632839][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.638191][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.640509][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.646228][ T5668] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.648103][ T5668] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.650071][ T5668] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.652457][ T5668] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.710111][ T5428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.717552][ T5428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.754959][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.774307][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.776232][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.781360][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 222.788716][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.791937][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.821044][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.832606][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.838541][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.869460][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 222.919931][ T5854] netlink: 'syz.4.324': attribute type 10 has an invalid length. [ 222.991927][ T5854] team0: Port device netdevsim0 added [ 222.997238][ T5851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.323'. [ 222.999261][ T5851] tipc: Started in network mode [ 223.000316][ T5851] tipc: Node identity 6, cluster identity 4711 [ 223.001584][ T5851] tipc: Node number set to 6 [ 223.004409][ T5856] netlink: 'syz.0.292': attribute type 4 has an invalid length. [ 223.016659][ T27] audit: type=1326 audit(222.980:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.2.295" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f498a8 code=0x0 [ 223.192034][ T5865] loop0: detected capacity change from 0 to 2048 [ 224.528826][ T5873] random: crng reseeded on system resumption [ 225.979566][ T5869] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.192516][ T5882] loop3: detected capacity change from 0 to 256 [ 226.194614][ T5848] udevd[5848]: symlink '../../loop0' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:0' failed: Read-only file system [ 227.203558][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 227.237006][ T5882] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 230.718262][ T5923] cgroup: No subsys list or none specified [ 231.168669][ T5924] loop3: detected capacity change from 0 to 512 [ 231.186024][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system [ 231.212713][ T5924] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 231.276241][ T27] audit: type=1326 audit(231.240:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.1.334" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb51498a8 code=0x0 [ 231.326822][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system [ 231.993814][ T27] audit: type=1326 audit(231.400:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.4.336" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff873498a8 code=0x0 [ 232.160725][ T5941] kAFS: unparsable volume name [ 232.289530][ T27] audit: type=1326 audit(232.250:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.4.341" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff873498a8 code=0x0 [ 233.054677][ T5954] loop0: detected capacity change from 0 to 256 [ 233.083217][ T5954] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 233.126618][ T5957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.302232][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 233.763317][ T5960] random: crng reseeded on system resumption [ 233.797518][ T5965] loop4: detected capacity change from 0 to 512 [ 234.793901][ T5965] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 234.872680][ T5975] loop0: detected capacity change from 0 to 2048 [ 234.923617][ T5323] EXT4-fs (loop4): unmounting filesystem. [ 234.929844][ T5975] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 234.983175][ T5974] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 235.022459][ T5974] EXT4-fs (loop0): Remounting filesystem read-only [ 235.097030][ T5684] EXT4-fs (loop0): unmounting filesystem. [ 235.160739][ T5878] udevd[5878]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 237.268204][ T6014] loop3: detected capacity change from 0 to 256 [ 237.309793][ T6014] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 238.464641][ C1] vxcan0: j1939_tp_rxtimer: 0x00000000586c8d96: rx timeout, send abort [ 239.379999][ T6026] loop2: detected capacity change from 0 to 512 [ 239.523631][ T6026] ext4: Unknown parameter 'noacl' [ 239.713559][ T5992] udevd[5992]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 241.684331][ T4303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.688300][ T4303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.692361][ T4303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.701692][ T4303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.777945][ T4303] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 241.793047][ T4303] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.481423][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 242.493834][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 242.678273][ T6055] loop2: detected capacity change from 0 to 4096 [ 242.701051][ T6062] 9pnet_fd: Insufficient options for proto=fd [ 242.747591][ T6064] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.759504][ T6057] udevd[6057]: symlink '../../loop2' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:2' failed: Read-only file system [ 242.796424][ T6068] loop4: detected capacity change from 0 to 64 [ 242.812640][ T27] audit: type=1326 audit(242.770:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d7498a8 code=0x7ffc0000 [ 242.821652][ T27] audit: type=1326 audit(242.780:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff9d7498a8 code=0x7ffc0000 [ 242.868272][ T27] audit: type=1326 audit(242.780:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d7498a8 code=0x7ffc0000 [ 242.891257][ T6057] udevd[6057]: symlink '../../loop2' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:2' failed: Read-only file system [ 242.894587][ T27] audit: type=1326 audit(242.780:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=233 compat=0 ip=0xffff9d7498a8 code=0x7ffc0000 [ 242.899237][ T27] audit: type=1326 audit(242.780:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d7498a8 code=0x7ffc0000 [ 242.904115][ T27] audit: type=1326 audit(242.790:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=230 compat=0 ip=0xffff9d7498a8 code=0x7ffc0000 [ 243.507425][ T6076] loop4: detected capacity change from 0 to 256 [ 243.539768][ T6076] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 243.660142][ T6066] device wg2 entered promiscuous mode [ 243.786213][ T27] audit: type=1326 audit(243.740:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.3.375" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8d498a8 code=0x0 [ 243.788797][ T5428] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.153500][ T47] Bluetooth: hci0: command tx timeout [ 245.006651][ T5428] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.116503][ T6092] random: crng reseeded on system resumption [ 245.854902][ T5428] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.912420][ T6101] loop0: detected capacity change from 0 to 128 [ 246.038823][ T5428] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.062159][ T6048] chnl_net:caif_netlink_parms(): no params data found [ 246.259654][ T4296] Bluetooth: hci0: command tx timeout [ 246.753899][ T6112] syz.0.379: attempt to access beyond end of device [ 246.753899][ T6112] loop0: rw=2049, sector=145, nr_sectors = 840 limit=128 [ 246.862095][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.863889][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.865914][ T6048] device bridge_slave_0 entered promiscuous mode [ 246.869166][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.870623][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.872646][ T6048] device bridge_slave_1 entered promiscuous mode [ 246.921797][ T5771] kworker/u4:19: attempt to access beyond end of device [ 246.921797][ T5771] loop0: rw=1, sector=985, nr_sectors = 56 limit=128 [ 246.980219][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.004567][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.256087][ T6048] team0: Port device team_slave_0 added [ 247.259491][ T6048] team0: Port device team_slave_1 added [ 247.294227][ T6126] loop2: detected capacity change from 0 to 256 [ 247.315803][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.315822][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.315844][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.349666][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.349684][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.349704][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.354601][ T6126] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 247.546200][ T6048] device hsr_slave_0 entered promiscuous mode [ 247.768213][ T6048] device hsr_slave_1 entered promiscuous mode [ 248.314188][ T47] Bluetooth: hci0: command tx timeout [ 248.335761][ T6048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.341947][ T6048] Cannot create hsr debugfs directory [ 248.400825][ T27] audit: type=1326 audit(248.360:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.4.389" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff873498a8 code=0x0 [ 248.836704][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.114937][ T6152] random: crng reseeded on system resumption [ 249.150193][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.274958][ T6164] loop0: detected capacity change from 0 to 256 [ 250.917895][ T4296] Bluetooth: hci0: command tx timeout [ 252.683359][ T6170] loop3: detected capacity change from 0 to 1024 [ 252.715315][ T6170] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 252.761702][ T6178] netlink: 'syz.0.397': attribute type 4 has an invalid length. [ 252.775628][ T6178] x_tables: duplicate entry at hook 3 [ 252.777675][ T6178] netlink: 'syz.0.397': attribute type 16 has an invalid length. [ 253.789193][ T6057] udevd[6057]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 253.928185][ T6057] udevd[6057]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 254.709249][ T6057] udevd[6057]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 254.974048][ T5567] EXT4-fs (loop3): unmounting filesystem. [ 257.424016][ T6232] loop2: detected capacity change from 0 to 256 [ 257.443281][ T5295] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 257.698981][ T6232] FAT-fs (loop2): Directory bread(block 64) failed [ 257.700651][ T6232] FAT-fs (loop2): Directory bread(block 65) failed [ 257.702750][ T6232] FAT-fs (loop2): Directory bread(block 66) failed [ 257.704437][ T6232] FAT-fs (loop2): Directory bread(block 67) failed [ 257.706370][ T6232] FAT-fs (loop2): Directory bread(block 68) failed [ 257.708030][ T6232] FAT-fs (loop2): Directory bread(block 69) failed [ 257.710162][ T6232] FAT-fs (loop2): Directory bread(block 70) failed [ 257.711699][ T6232] FAT-fs (loop2): Directory bread(block 71) failed [ 257.713242][ T6232] FAT-fs (loop2): Directory bread(block 72) failed [ 257.714836][ T6232] FAT-fs (loop2): Directory bread(block 73) failed [ 258.115677][ T5295] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 258.118285][ T5295] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 258.120500][ T5295] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 258.122350][ T5295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.153803][ T6226] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 258.168501][ T6240] loop4: detected capacity change from 0 to 256 [ 259.264890][ C1] vxcan0: j1939_tp_rxtimer: 0x00000000d18480c3: rx timeout, send abort [ 259.273118][ T5295] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 259.281806][ T5295] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input3 [ 259.427734][ T5295] usb 1-1: USB disconnect, device number 2 [ 260.765477][ C1] vxcan0: j1939_tp_rxtimer: 0x00000000d18480c3: abort rx timeout. Force session deactivation [ 260.883552][ T6048] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.981097][ T6048] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 261.103667][ T6267] netlink: 'syz.3.422': attribute type 10 has an invalid length. [ 261.133634][ T6268] binder: 6266:6268 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 261.135805][ T6267] team0: Port device netdevsim0 added [ 261.140354][ T6268] binder: 6268 RLIMIT_NICE not set [ 261.158472][ T6048] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 261.185056][ T6277] binder: 6266:6277 tried to acquire reference to desc 0, got 1 instead [ 261.215084][ T6048] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.219128][ T22] binder: release 6266:6277 transaction 20 out, still active [ 261.220682][ T22] binder: undelivered TRANSACTION_COMPLETE [ 261.265424][ T6270] netlink: 'syz.4.423': attribute type 12 has an invalid length. [ 261.266998][ T6270] netlink: 'syz.4.423': attribute type 29 has an invalid length. [ 261.268457][ T6270] netlink: 'syz.4.423': attribute type 2 has an invalid length. [ 261.270041][ T6270] netlink: 'syz.4.423': attribute type 2 has an invalid length. [ 261.271805][ T6270] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 261.276844][ T22] binder: send failed reply for transaction 20, target dead [ 261.290447][ T6270] netlink: 'syz.4.423': attribute type 37 has an invalid length. [ 261.292158][ T6270] netlink: 'syz.4.423': attribute type 2 has an invalid length. [ 261.315490][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.325577][ T6274] device macvlan2 entered promiscuous mode [ 263.998439][ T6302] loop2: detected capacity change from 0 to 256 [ 265.132110][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 266.045926][ T6329] loop0: detected capacity change from 0 to 2048 [ 266.051560][ T6329] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 266.160268][ T6340] loop3: detected capacity change from 0 to 8192 [ 266.197146][ T6057] udevd[6057]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 266.215518][ T6340] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 266.218286][ T6340] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 266.220331][ T6340] REISERFS (device loop3): using ordered data mode [ 266.221723][ T6340] reiserfs: using flush barriers [ 266.230732][ T6329] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 266.255901][ T6340] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 266.259573][ T6340] REISERFS (device loop3): checking transaction log (loop3) [ 266.278904][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 266.413492][ T6340] REISERFS (device loop3): Using r5 hash to sort names [ 266.460178][ T6340] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 266.608614][ T6340] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 267.001295][ T6057] udevd[6057]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 267.002234][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/12312308-1233-1233-1231-123413412412.tmp-b7:3' failed: Read-only file system [ 267.044402][ T6057] udevd[6057]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 267.088675][ T5684] EXT4-fs (loop0): unmounting filesystem. [ 267.130967][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.167145][ T6057] udevd[6057]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 267.180210][ T6337] netlink: 60 bytes leftover after parsing attributes in process `syz.2.437'. [ 267.182314][ T6337] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 267.318888][ T6351] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 267.325759][ T6351] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 267.333080][ T6351] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 267.778255][ T5428] device hsr_slave_0 left promiscuous mode [ 267.833900][ T5428] device hsr_slave_1 left promiscuous mode [ 267.953641][ T5428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.957711][ T5428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.961080][ T5428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.962825][ T5428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.972843][ T5428] device bridge_slave_1 left promiscuous mode [ 267.980805][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.036201][ T5428] device bridge_slave_0 left promiscuous mode [ 268.037866][ T5428] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.099090][ T6363] loop3: detected capacity change from 0 to 256 [ 268.383464][ T5428] device veth1_macvtap left promiscuous mode [ 268.385057][ T5428] device veth0_macvtap left promiscuous mode [ 268.386590][ T5428] device veth1_vlan left promiscuous mode [ 268.388259][ T5428] device veth0_vlan left promiscuous mode [ 270.495838][ T6387] loop4: detected capacity change from 0 to 1764 [ 272.662762][ T6405] loop2: detected capacity change from 0 to 8 [ 276.178691][ T5428] team0 (unregistering): Port device team_slave_1 removed [ 276.404560][ T5428] team0 (unregistering): Port device team_slave_0 removed [ 276.634015][ T5428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.532526][ T5428] bond0 (unregistering): Released all slaves [ 279.801512][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.804078][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.809932][ T6048] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.865412][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.867921][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.870032][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.871614][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.873900][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.884944][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.887557][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.889574][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.891024][ T5771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.902092][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.912435][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.921190][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.932950][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.936545][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.941133][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.944762][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.949578][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.951977][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.956907][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.959126][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.973594][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.061642][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.063836][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.069710][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.082757][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.085349][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.104898][ T6048] device veth0_vlan entered promiscuous mode [ 280.111074][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.114460][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.116782][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.118973][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.124735][ T6048] device veth1_vlan entered promiscuous mode [ 280.140112][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.142488][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.152866][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.156891][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.161474][ T6048] device veth0_macvtap entered promiscuous mode [ 280.167244][ T6048] device veth1_macvtap entered promiscuous mode [ 280.191503][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.194289][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.196740][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.199050][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.201291][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.204097][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.206495][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.208892][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.211072][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.213532][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.216947][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.218865][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.221097][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.224242][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.226565][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.230852][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.233275][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.235348][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.237734][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.240039][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.242351][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.251702][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.254069][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.256196][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.258337][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.261733][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.267106][ T6048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.269060][ T6048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.270963][ T6048] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.272692][ T6048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.278203][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.280895][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.331024][ T5771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.337612][ T5771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.352643][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.365807][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.367885][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.378950][ T5771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 280.487025][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.489840][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.514478][ T6419] netlink: 'syz.4.471': attribute type 21 has an invalid length. [ 280.516510][ T6419] netlink: 160 bytes leftover after parsing attributes in process `syz.4.471'. [ 280.525963][ T6415] device bridge_slave_1 left promiscuous mode [ 280.542860][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.628851][ T6420] loop1: detected capacity change from 0 to 2048 [ 280.628899][ T6415] device bridge_slave_0 left promiscuous mode [ 280.631938][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.644056][ T6406] udevd[6406]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 280.649931][ T6420] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 280.651986][ T6420] System zones: 0-7 [ 280.656802][ T6420] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 280.670204][ T6406] udevd[6406]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 281.544264][ T6048] EXT4-fs (loop1): unmounting filesystem. [ 281.688410][ T6436] loop1: detected capacity change from 0 to 256 [ 284.592144][ T6460] loop4: detected capacity change from 0 to 256 [ 284.754240][ T6460] FAT-fs (loop4): Directory bread(block 64) failed [ 284.755777][ T6460] FAT-fs (loop4): Directory bread(block 65) failed [ 284.757174][ T6460] FAT-fs (loop4): Directory bread(block 66) failed [ 284.758590][ T6460] FAT-fs (loop4): Directory bread(block 67) failed [ 284.760055][ T6460] FAT-fs (loop4): Directory bread(block 68) failed [ 284.761530][ T6460] FAT-fs (loop4): Directory bread(block 69) failed [ 284.762966][ T6460] FAT-fs (loop4): Directory bread(block 70) failed [ 284.828729][ T6460] FAT-fs (loop4): Directory bread(block 71) failed [ 284.830258][ T6460] FAT-fs (loop4): Directory bread(block 72) failed [ 284.840208][ T6460] FAT-fs (loop4): Directory bread(block 73) failed [ 286.185830][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 286.244791][ T6485] loop4: detected capacity change from 0 to 2048 [ 286.283619][ T27] audit: type=1326 audit(286.250:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.1.483" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f498a8 code=0x0 [ 286.317117][ T6485] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.479: bad orphan inode 129 [ 286.323356][ T6485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 286.379053][ T6469] udevd[6469]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 286.407008][ T6485] EXT4-fs error (device loop4): ext4_find_dest_de:2113: inode #2: block 16: comm syz.4.479: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 286.422775][ T6498] loop2: detected capacity change from 0 to 256 [ 286.438323][ T6459] loop0: detected capacity change from 0 to 32768 [ 286.438917][ T6500] netlink: 'syz.3.485': attribute type 4 has an invalid length. [ 286.442577][ T6459] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.467 (6459) [ 286.449322][ T6459] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 286.451428][ T6459] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 286.453911][ T6459] BTRFS info (device loop0): turning off barriers [ 286.455505][ T6459] BTRFS info (device loop0): enabling auto defrag [ 286.456917][ T6459] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 286.459181][ T6459] BTRFS info (device loop0): use lzo compression, level 0 [ 286.460812][ T6459] BTRFS info (device loop0): using free space tree [ 286.502370][ T6469] udevd[6469]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 286.550533][ T6468] udevd[6468]: symlink '../../loop0' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:0' failed: Read-only file system [ 286.593569][ T5323] EXT4-fs (loop4): unmounting filesystem. [ 288.680623][ T6538] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 288.691581][ T6538] loop2: detected capacity change from 0 to 1024 [ 289.152309][ T6538] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 289.155341][ T6538] EXT4-fs warning (device loop2): ext4_enable_quotas:7035: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 289.165852][ T6538] EXT4-fs (loop2): mount failed [ 289.304603][ T5684] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 289.605583][ T6553] TCP: tcp_parse_options: Illegal window scaling value 31 > 14 received [ 289.626120][ T6551] loop4: detected capacity change from 0 to 128 [ 289.659527][ T6551] EXT4-fs (loop4): Test dummy encryption mode enabled [ 289.661532][ T6406] udevd[6406]: symlink '../../loop4' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:4' failed: Read-only file system [ 289.691325][ T6551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 289.706623][ T6551] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 289.722938][ T6555] loop3: detected capacity change from 0 to 4096 [ 289.789400][ T6555] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 289.895655][ T6552] udevd[6552]: symlink '../../loop4' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:4' failed: Read-only file system [ 289.907173][ T6565] loop1: detected capacity change from 0 to 256 [ 289.974428][ T6468] udevd[6468]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 291.622403][ T5323] EXT4-fs (loop4): unmounting filesystem. [ 291.877745][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 292.117274][ T5567] EXT4-fs (loop3): unmounting filesystem. [ 294.619419][ T6607] loop1: detected capacity change from 0 to 1024 [ 295.109154][ T6613] loop0: detected capacity change from 0 to 1024 [ 295.111202][ T6613] EXT4-fs: Ignoring removed orlov option [ 295.146549][ T6613] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.148534][ T6613] EXT4-fs (loop0): Test dummy encryption mode enabled [ 295.174483][ T6613] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 295.176916][ T6613] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 295.181337][ T6613] EXT4-fs (loop0): invalid journal inode [ 295.182762][ T6613] EXT4-fs (loop0): can't get journal size [ 295.193842][ T6607] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 295.239298][ T6613] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 295.513891][ T6552] udevd[6552]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 295.536233][ T5684] EXT4-fs (loop0): unmounting filesystem. [ 295.928912][ T6552] udevd[6552]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 296.715861][ T6624] loop2: detected capacity change from 0 to 1024 [ 296.717807][ T6624] EXT4-fs: Ignoring removed oldalloc option [ 296.782304][ T6624] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 296.797458][ T6048] EXT4-fs (loop1): unmounting filesystem. [ 296.797527][ T6616] loop4: detected capacity change from 0 to 4096 [ 296.799134][ T6630] loop0: detected capacity change from 0 to 4096 [ 296.806345][ T6552] udevd[6552]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 296.810495][ T6632] loop3: detected capacity change from 0 to 512 [ 296.812331][ T6616] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 296.829568][ T6632] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 296.835497][ T6630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 296.867269][ T6624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 296.894581][ T6552] udevd[6552]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system [ 296.906843][ T6616] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 296.930896][ T6552] udevd[6552]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system [ 296.956291][ T6468] udevd[6468]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system [ 296.983102][ T6616] ntfs3: loop4: mft corrupted [ 296.984218][ T6616] ntfs3: loop4: Failed to load $Extend. [ 296.988052][ T5668] EXT4-fs (loop2): unmounting filesystem. [ 297.012423][ T6632] EXT2-fs (loop3): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 297.062663][ T6468] udevd[6468]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system [ 297.072774][ T6552] udevd[6552]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 297.091957][ T6468] udevd[6468]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system [ 297.102546][ T6468] udevd[6468]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system [ 297.846017][ T5684] EXT4-fs (loop0): unmounting filesystem. [ 298.838495][ T6662] loop4: detected capacity change from 0 to 2048 [ 298.892112][ T6662] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 298.919230][ T6662] syz.4.525: attempt to access beyond end of device [ 298.919230][ T6662] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 298.922693][ T6664] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.951570][ T6666] loop0: detected capacity change from 0 to 256 [ 298.978340][ T6666] FAT-fs (loop0): Directory bread(block 64) failed [ 298.980029][ T6666] FAT-fs (loop0): Directory bread(block 65) failed [ 298.981400][ T6666] FAT-fs (loop0): Directory bread(block 66) failed [ 298.982815][ T6666] FAT-fs (loop0): Directory bread(block 67) failed [ 298.987016][ T6666] FAT-fs (loop0): Directory bread(block 68) failed [ 298.988362][ T6666] FAT-fs (loop0): Directory bread(block 69) failed [ 298.989797][ T6666] FAT-fs (loop0): Directory bread(block 70) failed [ 298.991429][ T6666] FAT-fs (loop0): Directory bread(block 71) failed [ 298.992987][ T6666] FAT-fs (loop0): Directory bread(block 72) failed [ 298.999209][ T6666] FAT-fs (loop0): Directory bread(block 73) failed [ 301.431231][ T6677] loop2: detected capacity change from 0 to 1024 [ 301.441962][ T6468] udevd[6468]: symlink '../../loop4' '/dev/disk/by-uuid/8d5b9604-d7b7-4ece-ae00-6b765044cdb8.tmp-b7:4' failed: Read-only file system [ 301.470657][ T6469] udevd[6469]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 301.539595][ T6677] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 302.282934][ T6468] udevd[6468]: symlink '../../loop4' '/dev/disk/by-uuid/8d5b9604-d7b7-4ece-ae00-6b765044cdb8.tmp-b7:4' failed: Read-only file system [ 302.287208][ T5668] EXT4-fs (loop2): unmounting filesystem. [ 302.300200][ T6684] loop0: detected capacity change from 0 to 4096 [ 302.305510][ T6469] udevd[6469]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 302.308148][ T6684] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 302.390493][ T6552] udevd[6552]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 302.430560][ T6552] udevd[6552]: symlink '../../loop0' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:0' failed: Read-only file system [ 302.457523][ T6693] loop4: detected capacity change from 0 to 256 [ 302.480299][ T6684] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 302.499361][ T6675] loop1: detected capacity change from 0 to 262144 [ 302.501926][ T6684] ntfs3: loop0: mft corrupted [ 302.501955][ T6675] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.529 (6675) [ 302.502902][ T6684] ntfs3: loop0: Failed to load $Extend. [ 302.512728][ T6675] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 302.515201][ T6675] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 302.517480][ T6675] BTRFS info (device loop1): using free space tree [ 302.532823][ T6469] udevd[6469]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 302.568923][ T6696] loop2: detected capacity change from 0 to 4096 [ 302.570107][ T6552] udevd[6552]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 302.611946][ T6552] udevd[6552]: symlink '../../loop0' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:0' failed: Read-only file system [ 302.631534][ T6709] loop3: detected capacity change from 0 to 512 [ 302.634992][ T6696] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 302.672392][ T6552] udevd[6552]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 302.675564][ T4296] Bluetooth: hci5: command 0x0406 tx timeout [ 302.695515][ T6709] loop3: detected capacity change from 0 to 1764 [ 304.648489][ T6675] BTRFS error (device loop1): open_ctree failed [ 304.652341][ T5668] EXT4-fs (loop2): unmounting filesystem. [ 304.806377][ T6730] loop2: detected capacity change from 0 to 512 [ 304.810296][ T6730] EXT4-fs (loop2): Unsupported encryption level 9 [ 305.929318][ T6730] loop2: detected capacity change from 0 to 512 [ 305.931114][ T6730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.955064][ T6741] loop4: detected capacity change from 0 to 256 [ 305.997885][ T6741] FAT-fs (loop4): Directory bread(block 64) failed [ 306.003786][ T6741] FAT-fs (loop4): Directory bread(block 65) failed [ 306.013218][ T6741] FAT-fs (loop4): Directory bread(block 66) failed [ 306.020302][ T6741] FAT-fs (loop4): Directory bread(block 67) failed [ 306.048669][ T6741] FAT-fs (loop4): Directory bread(block 68) failed [ 306.050037][ T6741] FAT-fs (loop4): Directory bread(block 69) failed [ 306.051467][ T6741] FAT-fs (loop4): Directory bread(block 70) failed [ 306.052872][ T6741] FAT-fs (loop4): Directory bread(block 71) failed [ 306.059102][ T6730] EXT4-fs (loop2): orphan cleanup on readonly fs [ 306.061481][ T6730] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 306.065175][ T6730] EXT4-fs (loop2): 1 truncate cleaned up [ 306.066486][ T6730] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 306.095394][ T6741] FAT-fs (loop4): Directory bread(block 72) failed [ 306.096906][ T6741] FAT-fs (loop4): Directory bread(block 73) failed [ 306.261492][ T5668] EXT4-fs (loop2): unmounting filesystem. [ 307.054308][ T6753] loop0: detected capacity change from 0 to 1024 [ 307.104493][ T6757] loop4: detected capacity change from 0 to 1024 [ 307.154066][ T6753] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 307.156024][ T6468] udevd[6468]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 307.167250][ T6468] udevd[6468]: symlink '../../loop4' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:4' failed: Read-only file system [ 307.223499][ T6762] loop1: detected capacity change from 0 to 256 [ 307.430055][ T6757] hfsplus: request for non-existent node 33423360 in B*Tree [ 307.432098][ T6757] hfsplus: request for non-existent node 33423360 in B*Tree [ 307.763226][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 308.220492][ T6757] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.222207][ T6757] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.238902][ T6469] udevd[6469]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 308.253688][ T6764] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.255210][ T6764] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.278304][ T6764] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.280085][ T6764] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.305378][ T6468] udevd[6468]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 308.308885][ T6468] udevd[6468]: symlink '../../loop4' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:4' failed: Read-only file system [ 308.314934][ T6757] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.316548][ T6757] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.363785][ T6757] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.365728][ T6757] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.368713][ T6469] udevd[6469]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 308.386895][ T6764] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.388418][ T6764] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.413808][ T5684] EXT4-fs (loop0): unmounting filesystem. [ 308.415935][ T6757] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.417659][ T6757] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.441318][ T6757] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.442852][ T6757] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.472123][ T6757] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.473787][ T6757] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.489378][ T6757] hfsplus: request for non-existent node 33423360 in B*Tree [ 308.490810][ T6757] hfsplus: request for non-existent node 33423360 in B*Tree [ 310.454006][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.455452][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.691635][ T6772] loop0: detected capacity change from 0 to 262144 [ 310.750109][ T6772] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.552 (6772) [ 310.770591][ T6772] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 310.772760][ T6772] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 310.774863][ T6772] BTRFS info (device loop0): using free space tree [ 310.805605][ T6768] loop2: detected capacity change from 0 to 2048 [ 310.815180][ T6768] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 310.816953][ T6768] UDF-fs: Scanning with blocksize 512 failed [ 310.894860][ T6768] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.901675][ T6782] netlink: 'syz.4.554': attribute type 4 has an invalid length. [ 310.927672][ T4296] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.928679][ T6785] loop1: detected capacity change from 0 to 512 [ 310.934096][ T4296] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.937168][ T4296] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.940116][ T4296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.943662][ T4296] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 310.945604][ T4296] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.037936][ T6785] loop1: detected capacity change from 0 to 1764 [ 311.040449][ T6772] BTRFS info (device loop0): enabling ssd optimizations [ 311.111835][ T6469] udevd[6469]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system [ 311.118386][ T6468] udevd[6468]: symlink '../../loop0' '/dev/disk/by-uuid/7e32c2af-f87a-45a1-bcba-64dea7c56a53.tmp-b7:0' failed: Read-only file system [ 311.138347][ T6469] udevd[6469]: symlink '../../loop2' '/dev/disk/by-uuid/1234567812345678.tmp-b7:2' failed: Read-only file system [ 311.259073][ T5684] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 312.185566][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 312.187515][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'. [ 312.230004][ T6786] chnl_net:caif_netlink_parms(): no params data found [ 312.340039][ T6813] loop2: detected capacity change from 0 to 8192 [ 312.401659][ T6469] udevd[6469]: symlink '../../loop2' '/dev/disk/by-label/syzk\x03.tmp-b7:2' failed: Read-only file system [ 312.404531][ T6813] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 312.405372][ T6469] udevd[6469]: symlink '../../loop2' '/dev/disk/by-uuid/12312312-1233-1233-1231-123413412412.tmp-b7:2' failed: Read-only file system [ 312.407348][ T6813] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 312.412339][ T6813] REISERFS (device loop2): using ordered data mode [ 312.417189][ T6813] reiserfs: using flush barriers [ 312.422438][ T6813] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 312.428738][ T6820] loop4: detected capacity change from 0 to 1024 [ 312.617284][ T4303] Bluetooth: hci4: command 0x0406 tx timeout [ 312.709345][ T6813] REISERFS (device loop2): checking transaction log (loop2) [ 312.994741][ T4303] Bluetooth: hci5: command tx timeout [ 313.219334][ T6552] udevd[6552]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 313.325930][ T6813] REISERFS (device loop2): Using tea hash to sort names [ 313.327645][ T6813] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 313.330390][ T6813] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 314.329471][ T6552] udevd[6552]: symlink '../../loop2' '/dev/disk/by-label/syzk\x03.tmp-b7:2' failed: Read-only file system [ 314.332710][ T6552] udevd[6552]: symlink '../../loop2' '/dev/disk/by-uuid/12312312-1233-1233-1231-123413412412.tmp-b7:2' failed: Read-only file system [ 314.472851][ T6820] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 315.522395][ T4303] Bluetooth: hci5: command tx timeout [ 315.611330][ T5323] EXT4-fs (loop4): unmounting filesystem. [ 315.672041][ T6552] udevd[6552]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 315.803229][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.804874][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.807008][ T6786] device bridge_slave_0 entered promiscuous mode [ 315.814382][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.815968][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.818086][ T6786] device bridge_slave_1 entered promiscuous mode [ 317.469564][ T6841] loop4: detected capacity change from 0 to 4096 [ 317.534730][ T6469] udevd[6469]: symlink '../../loop4' '/dev/disk/by-uuid/3b59f4fc-a790-4a4c-9011-25a8178ccefa.tmp-b7:4' failed: Read-only file system [ 317.553546][ T47] Bluetooth: hci5: command tx timeout [ 317.562830][ T6850] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.758452][ T6854] loop0: detected capacity change from 0 to 512 [ 318.240011][ T6469] udevd[6469]: symlink '../../loop4' '/dev/disk/by-uuid/3b59f4fc-a790-4a4c-9011-25a8178ccefa.tmp-b7:4' failed: Read-only file system [ 318.346730][ T6854] loop0: detected capacity change from 0 to 1764 [ 318.443297][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.483459][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.486905][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.492550][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.496059][ T5360] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 318.499841][ T5360] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 318.502294][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 318.507692][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.734769][ T4526] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.765074][ T6786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.773538][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.574'. [ 318.780253][ T6786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.782292][ T6866] device bridge_slave_1 left promiscuous mode [ 318.800296][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.836206][ T6866] bridge1: port 1(bridge_slave_1) entered blocking state [ 318.837848][ T6866] bridge1: port 1(bridge_slave_1) entered disabled state [ 318.840138][ T6866] device bridge_slave_1 entered promiscuous mode [ 318.934847][ T4526] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.957611][ T6786] team0: Port device team_slave_0 added [ 318.962153][ T6786] team0: Port device team_slave_1 added [ 319.208532][ T4526] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.338364][ T6872] loop4: detected capacity change from 0 to 64 [ 319.765655][ T47] Bluetooth: hci5: command tx timeout [ 319.847074][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.848865][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.941806][ T6786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.946011][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.947656][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.954872][ T6786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.490009][ T4526] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.594615][ T47] Bluetooth: hci0: command tx timeout [ 320.990664][ T6786] device hsr_slave_0 entered promiscuous mode [ 321.091085][ T4303] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 321.096874][ T4303] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 321.100062][ T4303] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 321.102528][ T4303] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 321.106093][ T4303] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 321.108507][ T4303] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 321.133837][ T6786] device hsr_slave_1 entered promiscuous mode [ 321.359177][ T6786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.361429][ T6786] Cannot create hsr debugfs directory [ 321.940791][ T6860] chnl_net:caif_netlink_parms(): no params data found [ 322.030507][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.032175][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.036455][ T6860] device bridge_slave_0 entered promiscuous mode [ 322.040029][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.041598][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.045148][ T6860] device bridge_slave_1 entered promiscuous mode [ 322.115938][ T6860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.121850][ T6860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.147574][ T6860] team0: Port device team_slave_0 added [ 322.186700][ T6860] team0: Port device team_slave_1 added [ 322.237096][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.238635][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.251294][ T6860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.379620][ T6786] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.400413][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.401918][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.413689][ T6860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.597543][ T6786] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.614547][ T6884] chnl_net:caif_netlink_parms(): no params data found [ 322.673200][ T47] Bluetooth: hci0: command tx timeout [ 322.766930][ T6786] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.816591][ T6860] device hsr_slave_0 entered promiscuous mode [ 322.854267][ T6860] device hsr_slave_1 entered promiscuous mode [ 322.893226][ T6860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.894895][ T6860] Cannot create hsr debugfs directory [ 323.010024][ T6786] team0: Port device netdevsim0 removed [ 323.013776][ T6786] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.141248][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.152489][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.154346][ T47] Bluetooth: hci4: command tx timeout [ 323.158933][ T6884] device bridge_slave_0 entered promiscuous mode [ 323.231656][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.234025][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.236088][ T6884] device bridge_slave_1 entered promiscuous mode [ 323.340588][ T6884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.344904][ T6884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.382712][ T6884] team0: Port device team_slave_0 added [ 323.437361][ T6884] team0: Port device team_slave_1 added [ 323.450642][ T6786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 323.485172][ T6786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.525070][ T6786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.655301][ T6786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 323.714779][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.716258][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.722189][ T6884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.787837][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.789399][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.803078][ T6884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.056634][ T6884] device hsr_slave_0 entered promiscuous mode [ 324.094403][ T6884] device hsr_slave_1 entered promiscuous mode [ 324.133233][ T6884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.134821][ T6884] Cannot create hsr debugfs directory [ 324.574334][ T6786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.599587][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.601971][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.753253][ T47] Bluetooth: hci0: command tx timeout [ 324.932176][ T6786] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.955420][ T22] ------------[ cut here ]------------ [ 324.957010][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 324.958991][ T22] Modules linked in: [ 324.959829][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Not tainted 6.1.111-syzkaller #0 [ 324.961503][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 324.963567][ T22] Workqueue: events disconnect_work [ 324.964719][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 324.966439][ T22] pc : disconnect_work+0x264/0x324 [ 324.967543][ T22] lr : disconnect_work+0x264/0x324 [ 324.968596][ T22] sp : ffff80001d1f7af0 [ 324.969489][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 324.971233][ T22] x26: ffff8000159d0000 x25: 1fffe0001810c703 x24: 0000000000000000 [ 324.972900][ T22] x23: ffff0000d4928c90 x22: ffff0000d4928ca0 x21: ffff0000d5a00de8 [ 324.974620][ T22] x20: 1fffe0001a925192 x19: 0000000000000001 x18: 1fffe000367a3376 [ 324.976305][ T22] x17: ffff8000159cd000 x16: ffff8000084fb1ec x15: ffff0001b3d19bbc [ 324.977942][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 324.979719][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 324.981471][ T22] x8 : ffff0000c0a5b780 x7 : 2222222222222222 x6 : 0000000000000000 [ 324.983200][ T22] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80000831e4a4 [ 324.985004][ T22] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 324.986643][ T22] Call trace: [ 324.987325][ T22] disconnect_work+0x264/0x324 [ 324.988353][ T22] process_one_work+0x7ac/0x1404 [ 324.989346][ T22] worker_thread+0x8e4/0xfec [ 324.990393][ T22] kthread+0x250/0x2d8 [ 324.991262][ T22] ret_from_fork+0x10/0x20 [ 324.992146][ T22] irq event stamp: 265272 [ 324.993041][ T22] hardirqs last enabled at (265271): [] finish_lock_switch+0xbc/0x1e8 [ 324.995105][ T22] hardirqs last disabled at (265272): [] el1_dbg+0x24/0x80 [ 324.996913][ T22] softirqs last enabled at (265208): [] local_bh_enable+0x10/0x34 [ 324.998853][ T22] softirqs last disabled at (265192): [] local_bh_disable+0x10/0x34 [ 325.000866][ T22] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 325.016825][ T22] ------------[ cut here ]------------ [ 325.018393][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 325.020624][ T22] Modules linked in: [ 325.021410][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.023375][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.025503][ T22] Workqueue: events disconnect_work [ 325.026642][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.028288][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 325.029685][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 325.031034][ T22] sp : ffff80001d1f7a90 [ 325.031917][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.033594][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000d4928cd8 [ 325.035277][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 325.037015][ T22] x20: 0000000000000000 x19: ffff0000d4928c90 x18: ffff80001d1f7620 [ 325.038622][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: ffff800018589f80 [ 325.040273][ T22] x14: ffff0000c0a5c1f8 x13: dfff800000000000 x12: 0000000000000001 [ 325.041961][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 325.043597][ T22] x8 : ffff0000c0a5b780 x7 : 0000000000000000 x6 : 0000000000000000 [ 325.045319][ T22] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff8000082fbc8c [ 325.046998][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.048818][ T22] Call trace: [ 325.049626][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 325.050989][ T22] disconnect_work+0x18c/0x324 [ 325.051974][ T22] process_one_work+0x7ac/0x1404 [ 325.052990][ T22] worker_thread+0x8e4/0xfec [ 325.054002][ T22] kthread+0x250/0x2d8 [ 325.054913][ T22] ret_from_fork+0x10/0x20 [ 325.055897][ T22] irq event stamp: 265342 [ 325.056953][ T22] hardirqs last enabled at (265341): [] exit_to_kernel_mode+0xe8/0x118 [ 325.059154][ T22] hardirqs last disabled at (265342): [] el1_dbg+0x24/0x80 [ 325.061122][ T22] softirqs last enabled at (265334): [] handle_softirqs+0xb84/0xd58 [ 325.063202][ T22] softirqs last disabled at (265277): [] __do_softirq+0x14/0x20 [ 325.065239][ T22] ---[ end trace 0000000000000000 ]--- [ 325.087715][ T22] ------------[ cut here ]------------ [ 325.088935][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 325.090834][ T22] Modules linked in: [ 325.091624][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.093519][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.095593][ T22] Workqueue: events disconnect_work [ 325.096687][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.098318][ T22] pc : disconnect_work+0x270/0x324 [ 325.099394][ T22] lr : disconnect_work+0x270/0x324 [ 325.100450][ T22] sp : ffff80001d1f7af0 [ 325.101339][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.103111][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000d4928cd8 [ 325.104848][ T22] x23: 0000000000000000 x22: ffff0000d4928ca0 x21: ffff0000d5a00de8 [ 325.106572][ T22] x20: 1fffe0001a925192 x19: 0000000000000000 x18: ffff80001d1f7620 [ 325.108210][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 325.109901][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 325.111618][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 325.113340][ T22] x8 : ffff0000c0a5b780 x7 : 0000000000000000 x6 : 0000000000000000 [ 325.115056][ T22] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff8000082fbc8c [ 325.116704][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.118314][ T22] Call trace: [ 325.119014][ T22] disconnect_work+0x270/0x324 [ 325.120026][ T22] process_one_work+0x7ac/0x1404 [ 325.121032][ T22] worker_thread+0x8e4/0xfec [ 325.121995][ T22] kthread+0x250/0x2d8 [ 325.122890][ T22] ret_from_fork+0x10/0x20 [ 325.123807][ T22] irq event stamp: 265600 [ 325.124702][ T22] hardirqs last enabled at (265599): [] exit_to_kernel_mode+0xe8/0x118 [ 325.126812][ T22] hardirqs last disabled at (265600): [] el1_dbg+0x24/0x80 [ 325.128629][ T22] softirqs last enabled at (265594): [] handle_softirqs+0xb84/0xd58 [ 325.130657][ T22] softirqs last disabled at (265345): [] __do_softirq+0x14/0x20 [ 325.132541][ T22] ---[ end trace 0000000000000000 ]--- [ 325.142262][ T22] ------------[ cut here ]------------ [ 325.143434][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 325.145367][ T22] Modules linked in: [ 325.146191][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.148160][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.150298][ T22] Workqueue: events disconnect_work [ 325.151431][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.153047][ T22] pc : disconnect_work+0x264/0x324 [ 325.154109][ T22] lr : disconnect_work+0x264/0x324 [ 325.155164][ T22] sp : ffff80001d1f7af0 [ 325.156017][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.157661][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 325.159309][ T22] x23: ffff0000d109cc90 x22: ffff0000d109cca0 x21: ffff0000dead0de8 [ 325.161151][ T22] x20: 1fffe0001a213992 x19: 0000000000000000 x18: ffff80001d1f7340 [ 325.162818][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: ffff800018589f80 [ 325.164522][ T22] x14: ffff0000c0a5c1f8 x13: 1fffe0003679f176 x12: 0000000000000001 [ 325.166212][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 325.167867][ T22] x8 : ffff0000c0a5b780 x7 : 0000000000000000 x6 : 0000000000000000 [ 325.169555][ T22] x5 : 0000000000000020 x4 : 0000000000000008 x3 : ffff8000082616e4 [ 325.171402][ T22] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.173087][ T22] Call trace: [ 325.173801][ T22] disconnect_work+0x264/0x324 [ 325.174869][ T22] process_one_work+0x7ac/0x1404 [ 325.175905][ T22] worker_thread+0x8e4/0xfec [ 325.176849][ T22] kthread+0x250/0x2d8 [ 325.177703][ T22] ret_from_fork+0x10/0x20 [ 325.178658][ T22] irq event stamp: 265742 [ 325.179572][ T22] hardirqs last enabled at (265741): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 325.181811][ T22] hardirqs last disabled at (265742): [] el1_dbg+0x24/0x80 [ 325.183737][ T22] softirqs last enabled at (265732): [] handle_softirqs+0xb84/0xd58 [ 325.185861][ T22] softirqs last disabled at (265603): [] __do_softirq+0x14/0x20 [ 325.187800][ T22] ---[ end trace 0000000000000000 ]--- [ 325.201015][ T22] ------------[ cut here ]------------ [ 325.202210][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 325.204476][ T22] Modules linked in: [ 325.205313][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.207277][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.209486][ T22] Workqueue: events disconnect_work [ 325.210586][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.212303][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 325.213664][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 325.215050][ T22] sp : ffff80001d1f7a90 [ 325.215949][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.217663][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000d109ccd8 [ 325.219396][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 325.221149][ T22] x20: 0000000000000000 x19: ffff0000d109cc90 x18: ffff80001d1f7340 [ 325.222831][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: ffff800018589f80 [ 325.224496][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 325.226236][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 325.227887][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 325.229547][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 325.231260][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.232916][ T22] Call trace: [ 325.233217][ T4296] Bluetooth: hci4: command tx timeout [ 325.233606][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 325.236084][ T22] disconnect_work+0x18c/0x324 [ 325.237120][ T22] process_one_work+0x7ac/0x1404 [ 325.238207][ T22] worker_thread+0x8e4/0xfec [ 325.239168][ T22] kthread+0x250/0x2d8 [ 325.240038][ T22] ret_from_fork+0x10/0x20 [ 325.241035][ T22] irq event stamp: 266070 [ 325.241961][ T22] hardirqs last enabled at (266069): [] exit_to_kernel_mode+0xe8/0x118 [ 325.244095][ T22] hardirqs last disabled at (266070): [] el1_dbg+0x24/0x80 [ 325.245956][ T22] softirqs last enabled at (266054): [] handle_softirqs+0xb84/0xd58 [ 325.248040][ T22] softirqs last disabled at (265745): [] __do_softirq+0x14/0x20 [ 325.249992][ T22] ---[ end trace 0000000000000000 ]--- [ 325.332920][ T22] ------------[ cut here ]------------ [ 325.334162][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 325.336076][ T22] Modules linked in: [ 325.336915][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.338923][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.341037][ T22] Workqueue: events disconnect_work [ 325.342160][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.343844][ T22] pc : disconnect_work+0x270/0x324 [ 325.344921][ T22] lr : disconnect_work+0x270/0x324 [ 325.346037][ T22] sp : ffff80001d1f7af0 [ 325.346913][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.348582][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000d109ccd8 [ 325.350291][ T22] x23: 0000000000000000 x22: ffff0000d109cca0 x21: ffff0000dead0de8 [ 325.351925][ T22] x20: 1fffe0001a213992 x19: 0000000000000000 x18: ffff80001d1f7340 [ 325.353594][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 325.355267][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 325.356966][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 325.358662][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 325.360305][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 325.361971][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.363634][ T22] Call trace: [ 325.364350][ T22] disconnect_work+0x270/0x324 [ 325.365337][ T22] process_one_work+0x7ac/0x1404 [ 325.366357][ T22] worker_thread+0x8e4/0xfec [ 325.367328][ T22] kthread+0x250/0x2d8 [ 325.368205][ T22] ret_from_fork+0x10/0x20 [ 325.369166][ T22] irq event stamp: 266352 [ 325.370053][ T22] hardirqs last enabled at (266351): [] exit_to_kernel_mode+0xe8/0x118 [ 325.372144][ T22] hardirqs last disabled at (266352): [] el1_dbg+0x24/0x80 [ 325.373999][ T22] softirqs last enabled at (266346): [] handle_softirqs+0xb84/0xd58 [ 325.375958][ T22] softirqs last disabled at (266075): [] __do_softirq+0x14/0x20 [ 325.377866][ T22] ---[ end trace 0000000000000000 ]--- [ 325.392901][ T22] ------------[ cut here ]------------ [ 325.394100][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 325.395988][ T22] Modules linked in: [ 325.396839][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.398828][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.400872][ T22] Workqueue: events disconnect_work [ 325.401926][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.403771][ T22] pc : disconnect_work+0x264/0x324 [ 325.404915][ T22] lr : disconnect_work+0x264/0x324 [ 325.406015][ T22] sp : ffff80001d1f7af0 [ 325.406919][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.408654][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 325.410379][ T22] x23: ffff0000d1098c90 x22: ffff0000d1098ca0 x21: ffff0000c4190de8 [ 325.412068][ T22] x20: 1fffe0001a213192 x19: 0000000000000000 x18: ffff80001d1f7340 [ 325.413679][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 325.415467][ T22] x14: 1ffff00002b3a0b0 x13: 1fffe0003679f176 x12: 0000000000000001 [ 325.417208][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 325.418989][ T22] x8 : ffff0000c0a5b780 x7 : 0000000000000000 x6 : 0000000000000000 [ 325.420684][ T22] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff8000082616e4 [ 325.422313][ T22] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.423918][ T22] Call trace: [ 325.424591][ T22] disconnect_work+0x264/0x324 [ 325.425581][ T22] process_one_work+0x7ac/0x1404 [ 325.426575][ T22] worker_thread+0x8e4/0xfec [ 325.427547][ T22] kthread+0x250/0x2d8 [ 325.428405][ T22] ret_from_fork+0x10/0x20 [ 325.429336][ T22] irq event stamp: 266752 [ 325.430216][ T22] hardirqs last enabled at (266751): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 325.432442][ T22] hardirqs last disabled at (266752): [] el1_dbg+0x24/0x80 [ 325.434316][ T22] softirqs last enabled at (266744): [] handle_softirqs+0xb84/0xd58 [ 325.436400][ T22] softirqs last disabled at (266355): [] __do_softirq+0x14/0x20 [ 325.438386][ T22] ---[ end trace 0000000000000000 ]--- [ 325.442761][ T22] ------------[ cut here ]------------ [ 325.443959][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 325.446147][ T22] Modules linked in: [ 325.446997][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.449007][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.451169][ T22] Workqueue: events disconnect_work [ 325.452289][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.454020][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 325.455347][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 325.456701][ T22] sp : ffff80001d1f7a90 [ 325.457566][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.459241][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000d1098cd8 [ 325.460878][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 325.462551][ T22] x20: 0000000000000000 x19: ffff0000d1098c90 x18: ffff80001d1f7340 [ 325.464233][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 325.465950][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 325.467615][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 325.469311][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 325.470965][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 325.472631][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.474261][ T22] Call trace: [ 325.474930][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 325.476253][ T22] disconnect_work+0x18c/0x324 [ 325.477255][ T22] process_one_work+0x7ac/0x1404 [ 325.478332][ T22] worker_thread+0x8e4/0xfec [ 325.479382][ T22] kthread+0x250/0x2d8 [ 325.480256][ T22] ret_from_fork+0x10/0x20 [ 325.481165][ T22] irq event stamp: 266790 [ 325.482027][ T22] hardirqs last enabled at (266789): [] exit_to_kernel_mode+0xe8/0x118 [ 325.484111][ T22] hardirqs last disabled at (266790): [] el1_dbg+0x24/0x80 [ 325.485957][ T22] softirqs last enabled at (266784): [] handle_softirqs+0xb84/0xd58 [ 325.487943][ T22] softirqs last disabled at (266755): [] __do_softirq+0x14/0x20 [ 325.489928][ T22] ---[ end trace 0000000000000000 ]--- [ 325.493001][ T22] ------------[ cut here ]------------ [ 325.494158][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 325.496114][ T22] Modules linked in: [ 325.496938][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.498949][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.501038][ T22] Workqueue: events disconnect_work [ 325.502145][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.503814][ T22] pc : disconnect_work+0x270/0x324 [ 325.504909][ T22] lr : disconnect_work+0x270/0x324 [ 325.505996][ T22] sp : ffff80001d1f7af0 [ 325.506885][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.508543][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000d1098cd8 [ 325.510221][ T22] x23: 0000000000000000 x22: ffff0000d1098ca0 x21: ffff0000c4190de8 [ 325.511905][ T22] x20: 1fffe0001a213192 x19: 0000000000000000 x18: ffff80001d1f7340 [ 325.513581][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 325.515232][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 325.516903][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 325.518543][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 325.520231][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 325.521936][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.523677][ T22] Call trace: [ 325.524353][ T22] disconnect_work+0x270/0x324 [ 325.525370][ T22] process_one_work+0x7ac/0x1404 [ 325.526387][ T22] worker_thread+0x8e4/0xfec [ 325.527393][ T22] kthread+0x250/0x2d8 [ 325.528222][ T22] ret_from_fork+0x10/0x20 [ 325.529136][ T22] irq event stamp: 267128 [ 325.530018][ T22] hardirqs last enabled at (267127): [] exit_to_kernel_mode+0xe8/0x118 [ 325.532089][ T22] hardirqs last disabled at (267128): [] el1_dbg+0x24/0x80 [ 325.534002][ T22] softirqs last enabled at (267122): [] handle_softirqs+0xb84/0xd58 [ 325.536037][ T22] softirqs last disabled at (266793): [] __do_softirq+0x14/0x20 [ 325.537987][ T22] ---[ end trace 0000000000000000 ]--- [ 325.542528][ T22] ------------[ cut here ]------------ [ 325.543696][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 325.545699][ T22] Modules linked in: [ 325.546509][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.548550][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.550640][ T22] Workqueue: events disconnect_work [ 325.551780][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.553385][ T22] pc : disconnect_work+0x264/0x324 [ 325.554466][ T22] lr : disconnect_work+0x264/0x324 [ 325.555530][ T22] sp : ffff80001d1f7af0 [ 325.556447][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.558144][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 325.559862][ T22] x23: ffff0000db9b4c90 x22: ffff0000db9b4ca0 x21: ffff0000d4060de8 [ 325.561648][ T22] x20: 1fffe0001b736992 x19: 0000000000000000 x18: ffff80001d1f7440 [ 325.563326][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: ffff800018589f80 [ 325.565124][ T22] x14: 1ffff00002b3a0b0 x13: 1fffe000367a3376 x12: 0000000000000001 [ 325.566811][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 325.568504][ T22] x8 : ffff0000c0a5b780 x7 : 0000000000000000 x6 : 0000000000000000 [ 325.570232][ T22] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff8000082616e4 [ 325.571894][ T22] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.573568][ T22] Call trace: [ 325.574277][ T22] disconnect_work+0x264/0x324 [ 325.575291][ T22] process_one_work+0x7ac/0x1404 [ 325.576399][ T22] worker_thread+0x8e4/0xfec [ 325.577405][ T22] kthread+0x250/0x2d8 [ 325.578285][ T22] ret_from_fork+0x10/0x20 [ 325.579200][ T22] irq event stamp: 267228 [ 325.580203][ T22] hardirqs last enabled at (267227): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 325.582540][ T22] hardirqs last disabled at (267228): [] el1_dbg+0x24/0x80 [ 325.584458][ T22] softirqs last enabled at (267220): [] handle_softirqs+0xb84/0xd58 [ 325.586555][ T22] softirqs last disabled at (267131): [] __do_softirq+0x14/0x20 [ 325.588611][ T22] ---[ end trace 0000000000000000 ]--- [ 325.591499][ T22] ------------[ cut here ]------------ [ 325.592706][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 325.594947][ T22] Modules linked in: [ 325.595810][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.597849][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.599928][ T22] Workqueue: events disconnect_work [ 325.601036][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.602796][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 325.604177][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 325.605556][ T22] sp : ffff80001d1f7a90 [ 325.606472][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.608234][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000db9b4cd8 [ 325.609999][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 325.611776][ T22] x20: 0000000000000000 x19: ffff0000db9b4c90 x18: ffff80001d1f7440 [ 325.613547][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: ffff800018589f80 [ 325.615284][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 325.616975][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 325.618719][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 325.620418][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 325.622121][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.623850][ T22] Call trace: [ 325.624634][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 325.625926][ T22] disconnect_work+0x18c/0x324 [ 325.626961][ T22] process_one_work+0x7ac/0x1404 [ 325.628027][ T22] worker_thread+0x8e4/0xfec [ 325.629005][ T22] kthread+0x250/0x2d8 [ 325.629889][ T22] ret_from_fork+0x10/0x20 [ 325.630846][ T22] irq event stamp: 267486 [ 325.631707][ T22] hardirqs last enabled at (267485): [] exit_to_kernel_mode+0xe8/0x118 [ 325.633760][ T22] hardirqs last disabled at (267486): [] el1_dbg+0x24/0x80 [ 325.635678][ T22] softirqs last enabled at (267480): [] handle_softirqs+0xb84/0xd58 [ 325.637661][ T22] softirqs last disabled at (267231): [] __do_softirq+0x14/0x20 [ 325.639580][ T22] ---[ end trace 0000000000000000 ]--- [ 325.642818][ T22] ------------[ cut here ]------------ [ 325.643998][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 325.645990][ T22] Modules linked in: [ 325.646818][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.648830][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.650968][ T22] Workqueue: events disconnect_work [ 325.652154][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.653894][ T22] pc : disconnect_work+0x270/0x324 [ 325.654934][ T22] lr : disconnect_work+0x270/0x324 [ 325.656041][ T22] sp : ffff80001d1f7af0 [ 325.656920][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.658580][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000db9b4cd8 [ 325.660285][ T22] x23: 0000000000000000 x22: ffff0000db9b4ca0 x21: ffff0000d4060de8 [ 325.661970][ T22] x20: 1fffe0001b736992 x19: 0000000000000000 x18: ffff80001d1f7440 [ 325.663666][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 325.665475][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 325.667214][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 325.668940][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 325.670610][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 325.672251][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.673984][ T22] Call trace: [ 325.674769][ T22] disconnect_work+0x270/0x324 [ 325.675858][ T22] process_one_work+0x7ac/0x1404 [ 325.676912][ T22] worker_thread+0x8e4/0xfec [ 325.677895][ T22] kthread+0x250/0x2d8 [ 325.678770][ T22] ret_from_fork+0x10/0x20 [ 325.679731][ T22] irq event stamp: 268016 [ 325.680729][ T22] hardirqs last enabled at (268015): [] exit_to_kernel_mode+0xe8/0x118 [ 325.682747][ T22] hardirqs last disabled at (268016): [] el1_dbg+0x24/0x80 [ 325.684614][ T22] softirqs last enabled at (268010): [] handle_softirqs+0xb84/0xd58 [ 325.686696][ T22] softirqs last disabled at (267489): [] __do_softirq+0x14/0x20 [ 325.688790][ T22] ---[ end trace 0000000000000000 ]--- [ 325.691327][ T22] ------------[ cut here ]------------ [ 325.692497][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 325.694468][ T22] Modules linked in: [ 325.695274][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.697320][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.699372][ T22] Workqueue: events disconnect_work [ 325.700546][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.702304][ T22] pc : disconnect_work+0x264/0x324 [ 325.703394][ T22] lr : disconnect_work+0x264/0x324 [ 325.704459][ T22] sp : ffff80001d1f7af0 [ 325.705344][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.707119][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 325.708897][ T22] x23: ffff0000ee958c90 x22: ffff0000ee958ca0 x21: ffff0000e6888de8 [ 325.710623][ T22] x20: 1fffe0001dd2b192 x19: 0000000000000000 x18: ffff80001d1f7440 [ 325.712301][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 325.714098][ T22] x14: 1ffff00002b3a0b0 x13: 1fffe0003679f176 x12: 0000000000000001 [ 325.715839][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 325.717630][ T22] x8 : ffff0000c0a5b780 x7 : 0000000000000000 x6 : 0000000000000000 [ 325.719359][ T22] x5 : 0000000000000080 x4 : 0000000000000008 x3 : ffff8000082616e4 [ 325.721155][ T22] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.722895][ T22] Call trace: [ 325.723591][ T22] disconnect_work+0x264/0x324 [ 325.724614][ T22] process_one_work+0x7ac/0x1404 [ 325.725638][ T22] worker_thread+0x8e4/0xfec [ 325.726642][ T22] kthread+0x250/0x2d8 [ 325.727553][ T22] ret_from_fork+0x10/0x20 [ 325.728504][ T22] irq event stamp: 268386 [ 325.729439][ T22] hardirqs last enabled at (268385): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 325.731642][ T22] hardirqs last disabled at (268386): [] el1_dbg+0x24/0x80 [ 325.733529][ T22] softirqs last enabled at (268382): [] handle_softirqs+0xb84/0xd58 [ 325.735592][ T22] softirqs last disabled at (268019): [] __do_softirq+0x14/0x20 [ 325.737542][ T22] ---[ end trace 0000000000000000 ]--- [ 325.739274][ T22] ------------[ cut here ]------------ [ 325.740426][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 325.742607][ T22] Modules linked in: [ 325.743459][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.745501][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.747599][ T22] Workqueue: events disconnect_work [ 325.748833][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.750541][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 325.751915][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 325.753302][ T22] sp : ffff80001d1f7a90 [ 325.754183][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.755878][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000ee958cd8 [ 325.757569][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 325.759318][ T22] x20: 0000000000000000 x19: ffff0000ee958c90 x18: ffff80001d1f7440 [ 325.761074][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 325.762742][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 325.764527][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 325.766235][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 325.768014][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 325.769724][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.771666][ T22] Call trace: [ 325.772425][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 325.773871][ T22] disconnect_work+0x18c/0x324 [ 325.774955][ T22] process_one_work+0x7ac/0x1404 [ 325.776082][ T22] worker_thread+0x8e4/0xfec [ 325.777079][ T22] kthread+0x250/0x2d8 [ 325.777974][ T22] ret_from_fork+0x10/0x20 [ 325.778879][ T22] irq event stamp: 268420 [ 325.779774][ T22] hardirqs last enabled at (268419): [] exit_to_kernel_mode+0xe8/0x118 [ 325.781876][ T22] hardirqs last disabled at (268420): [] el1_dbg+0x24/0x80 [ 325.783738][ T22] softirqs last enabled at (268418): [] handle_softirqs+0xb84/0xd58 [ 325.785795][ T22] softirqs last disabled at (268389): [] __do_softirq+0x14/0x20 [ 325.787802][ T22] ---[ end trace 0000000000000000 ]--- [ 325.792788][ T22] ------------[ cut here ]------------ [ 325.794056][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 325.795980][ T22] Modules linked in: [ 325.796796][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.798786][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.800821][ T22] Workqueue: events disconnect_work [ 325.801920][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.803635][ T22] pc : disconnect_work+0x270/0x324 [ 325.804737][ T22] lr : disconnect_work+0x270/0x324 [ 325.805778][ T22] sp : ffff80001d1f7af0 [ 325.806634][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.808397][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000ee958cd8 [ 325.810095][ T22] x23: 0000000000000000 x22: ffff0000ee958ca0 x21: ffff0000e6888de8 [ 325.811734][ T22] x20: 1fffe0001dd2b192 x19: 0000000000000000 x18: ffff80001d1f7440 [ 325.813522][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 325.815258][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 325.816970][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 325.818716][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 325.820441][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 325.822262][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.823933][ T22] Call trace: [ 325.824616][ T22] disconnect_work+0x270/0x324 [ 325.825617][ T22] process_one_work+0x7ac/0x1404 [ 325.826680][ T22] worker_thread+0x8e4/0xfec [ 325.827645][ T22] kthread+0x250/0x2d8 [ 325.828531][ T22] ret_from_fork+0x10/0x20 [ 325.829518][ T22] irq event stamp: 268772 [ 325.830414][ T22] hardirqs last enabled at (268771): [] exit_to_kernel_mode+0xe8/0x118 [ 325.832549][ T22] hardirqs last disabled at (268772): [] el1_dbg+0x24/0x80 [ 325.834395][ T22] softirqs last enabled at (268766): [] handle_softirqs+0xb84/0xd58 [ 325.836418][ T22] softirqs last disabled at (268425): [] __do_softirq+0x14/0x20 [ 325.838395][ T22] ---[ end trace 0000000000000000 ]--- [ 325.841766][ T22] ------------[ cut here ]------------ [ 325.842907][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 325.844907][ T22] Modules linked in: [ 325.845726][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.847726][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.849838][ T22] Workqueue: events disconnect_work [ 325.851036][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.852823][ T22] pc : disconnect_work+0x264/0x324 [ 325.853911][ T22] lr : disconnect_work+0x264/0x324 [ 325.854947][ T22] sp : ffff80001d1f7af0 [ 325.855791][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.857545][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 325.859267][ T22] x23: ffff0000fb294c90 x22: ffff0000fb294ca0 x21: ffff0000eb1b0de8 [ 325.860991][ T22] x20: 1fffe0001f652992 x19: 0000000000000000 x18: ffff80001d1f7440 [ 325.862699][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 325.864403][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000000001 [ 325.866117][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 325.867842][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 325.869562][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 325.871278][ T22] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.872950][ T22] Call trace: [ 325.873622][ T22] disconnect_work+0x264/0x324 [ 325.874609][ T22] process_one_work+0x7ac/0x1404 [ 325.875659][ T22] worker_thread+0x8e4/0xfec [ 325.876622][ T22] kthread+0x250/0x2d8 [ 325.877457][ T22] ret_from_fork+0x10/0x20 [ 325.878373][ T22] irq event stamp: 268810 [ 325.879288][ T22] hardirqs last enabled at (268809): [] exit_to_kernel_mode+0xe8/0x118 [ 325.881281][ T22] hardirqs last disabled at (268810): [] el1_dbg+0x24/0x80 [ 325.883192][ T22] softirqs last enabled at (268804): [] handle_softirqs+0xb84/0xd58 [ 325.885225][ T22] softirqs last disabled at (268775): [] __do_softirq+0x14/0x20 [ 325.887140][ T22] ---[ end trace 0000000000000000 ]--- [ 325.889619][ T22] ------------[ cut here ]------------ [ 325.890994][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 325.893090][ T22] Modules linked in: [ 325.893899][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.895930][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.898020][ T22] Workqueue: events disconnect_work [ 325.899116][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.900715][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 325.902177][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 325.903585][ T22] sp : ffff80001d1f7a90 [ 325.904477][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.906167][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000fb294cd8 [ 325.907839][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 325.909509][ T22] x20: 0000000000000000 x19: ffff0000fb294c90 x18: ffff80001d1f7440 [ 325.911258][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 325.912967][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 325.914703][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 325.916374][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 325.918039][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 325.919765][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.921497][ T22] Call trace: [ 325.922229][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 325.923592][ T22] disconnect_work+0x18c/0x324 [ 325.924648][ T22] process_one_work+0x7ac/0x1404 [ 325.925702][ T22] worker_thread+0x8e4/0xfec [ 325.926717][ T22] kthread+0x250/0x2d8 [ 325.927610][ T22] ret_from_fork+0x10/0x20 [ 325.928553][ T22] irq event stamp: 269162 [ 325.929462][ T22] hardirqs last enabled at (269161): [] exit_to_kernel_mode+0xe8/0x118 [ 325.931510][ T22] hardirqs last disabled at (269162): [] el1_dbg+0x24/0x80 [ 325.933362][ T22] softirqs last enabled at (269160): [] handle_softirqs+0xb84/0xd58 [ 325.935357][ T22] softirqs last disabled at (268813): [] __do_softirq+0x14/0x20 [ 325.937257][ T22] ---[ end trace 0000000000000000 ]--- [ 325.948521][ T22] ------------[ cut here ]------------ [ 325.949698][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 325.951559][ T22] Modules linked in: [ 325.952391][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 325.954375][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.956484][ T22] Workqueue: events disconnect_work [ 325.957551][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.959118][ T22] pc : disconnect_work+0x270/0x324 [ 325.960199][ T22] lr : disconnect_work+0x270/0x324 [ 325.961297][ T22] sp : ffff80001d1f7af0 [ 325.962176][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 325.963921][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000fb294cd8 [ 325.965598][ T22] x23: 0000000000000000 x22: ffff0000fb294ca0 x21: ffff0000eb1b0de8 [ 325.967321][ T22] x20: 1fffe0001f652992 x19: 0000000000000000 x18: ffff80001d1f7440 [ 325.969090][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 325.970772][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 325.972429][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 325.973954][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 325.975646][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 325.977328][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.979009][ T22] Call trace: [ 325.979716][ T22] disconnect_work+0x270/0x324 [ 325.980713][ T22] process_one_work+0x7ac/0x1404 [ 325.981777][ T22] worker_thread+0x8e4/0xfec [ 325.982721][ T22] kthread+0x250/0x2d8 [ 325.983609][ T22] ret_from_fork+0x10/0x20 [ 325.984519][ T22] irq event stamp: 269236 [ 325.985460][ T22] hardirqs last enabled at (269235): [] exit_to_kernel_mode+0xe8/0x118 [ 325.987550][ T22] hardirqs last disabled at (269236): [] el1_dbg+0x24/0x80 [ 325.989415][ T22] softirqs last enabled at (269230): [] handle_softirqs+0xb84/0xd58 [ 325.991453][ T22] softirqs last disabled at (269165): [] __do_softirq+0x14/0x20 [ 325.993368][ T22] ---[ end trace 0000000000000000 ]--- [ 325.995798][ T22] ------------[ cut here ]------------ [ 325.996982][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 325.998843][ T22] Modules linked in: [ 325.999463][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.000999][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.002747][ T22] Workqueue: events disconnect_work [ 326.003883][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.005530][ T22] pc : disconnect_work+0x264/0x324 [ 326.006642][ T22] lr : disconnect_work+0x264/0x324 [ 326.007759][ T22] sp : ffff80001d1f7af0 [ 326.008680][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.010349][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 326.012045][ T22] x23: ffff0000ef4c0c90 x22: ffff0000ef4c0ca0 x21: ffff0000e43a0de8 [ 326.013757][ T22] x20: 1fffe0001de98192 x19: 0000000000000000 x18: ffff80001d1f7440 [ 326.015420][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.017121][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000000001 [ 326.018781][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 326.020483][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 326.022141][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 326.023911][ T22] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.025587][ T22] Call trace: [ 326.026303][ T22] disconnect_work+0x264/0x324 [ 326.027301][ T22] process_one_work+0x7ac/0x1404 [ 326.028362][ T22] worker_thread+0x8e4/0xfec [ 326.029330][ T22] kthread+0x250/0x2d8 [ 326.030188][ T22] ret_from_fork+0x10/0x20 [ 326.031163][ T22] irq event stamp: 269586 [ 326.032121][ T22] hardirqs last enabled at (269585): [] exit_to_kernel_mode+0xe8/0x118 [ 326.034336][ T22] hardirqs last disabled at (269586): [] el1_dbg+0x24/0x80 [ 326.036306][ T22] softirqs last enabled at (269584): [] handle_softirqs+0xb84/0xd58 [ 326.038452][ T22] softirqs last disabled at (269239): [] __do_softirq+0x14/0x20 [ 326.040419][ T22] ---[ end trace 0000000000000000 ]--- [ 326.042464][ T22] ------------[ cut here ]------------ [ 326.043687][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 326.046014][ T22] Modules linked in: [ 326.046832][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.048874][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.051062][ T22] Workqueue: events disconnect_work [ 326.052192][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.053897][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 326.055428][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 326.056840][ T22] sp : ffff80001d1f7a90 [ 326.057730][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.059439][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000ef4c0cd8 [ 326.061172][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 326.062827][ T22] x20: 0000000000000000 x19: ffff0000ef4c0c90 x18: ffff80001d1f7440 [ 326.064459][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.066207][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 326.067920][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 326.069555][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 326.071290][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 326.073008][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.074759][ T22] Call trace: [ 326.075471][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 326.076800][ T22] disconnect_work+0x18c/0x324 [ 326.077758][ T22] process_one_work+0x7ac/0x1404 [ 326.078837][ T22] worker_thread+0x8e4/0xfec [ 326.079775][ T22] kthread+0x250/0x2d8 [ 326.080627][ T22] ret_from_fork+0x10/0x20 [ 326.081546][ T22] irq event stamp: 269636 [ 326.082474][ T22] hardirqs last enabled at (269635): [] exit_to_kernel_mode+0xe8/0x118 [ 326.084645][ T22] hardirqs last disabled at (269636): [] el1_dbg+0x24/0x80 [ 326.086500][ T22] softirqs last enabled at (269630): [] handle_softirqs+0xb84/0xd58 [ 326.088497][ T22] softirqs last disabled at (269591): [] __do_softirq+0x14/0x20 [ 326.090407][ T22] ---[ end trace 0000000000000000 ]--- [ 326.102520][ T22] ------------[ cut here ]------------ [ 326.103695][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 326.105551][ T22] Modules linked in: [ 326.106373][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.108358][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.110524][ T22] Workqueue: events disconnect_work [ 326.111679][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.113405][ T22] pc : disconnect_work+0x270/0x324 [ 326.114495][ T22] lr : disconnect_work+0x270/0x324 [ 326.115543][ T22] sp : ffff80001d1f7af0 [ 326.116408][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.118121][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000ef4c0cd8 [ 326.119870][ T22] x23: 0000000000000000 x22: ffff0000ef4c0ca0 x21: ffff0000e43a0de8 [ 326.121587][ T22] x20: 1fffe0001de98192 x19: 0000000000000000 x18: ffff80001d1f7440 [ 326.123329][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.125079][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 326.126769][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 326.128463][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 326.130223][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 326.131905][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.133571][ T22] Call trace: [ 326.134262][ T22] disconnect_work+0x270/0x324 [ 326.135277][ T22] process_one_work+0x7ac/0x1404 [ 326.136305][ T22] worker_thread+0x8e4/0xfec [ 326.137287][ T22] kthread+0x250/0x2d8 [ 326.138141][ T22] ret_from_fork+0x10/0x20 [ 326.139084][ T22] irq event stamp: 269880 [ 326.140047][ T22] hardirqs last enabled at (269879): [] exit_to_kernel_mode+0xe8/0x118 [ 326.142192][ T22] hardirqs last disabled at (269880): [] el1_dbg+0x24/0x80 [ 326.144013][ T22] softirqs last enabled at (269874): [] handle_softirqs+0xb84/0xd58 [ 326.146053][ T22] softirqs last disabled at (269639): [] __do_softirq+0x14/0x20 [ 326.147929][ T22] ---[ end trace 0000000000000000 ]--- [ 326.153208][ T22] ------------[ cut here ]------------ [ 326.154464][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 326.156422][ T22] Modules linked in: [ 326.157285][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.159299][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.161458][ T22] Workqueue: events disconnect_work [ 326.162544][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.164282][ T22] pc : disconnect_work+0x264/0x324 [ 326.165375][ T22] lr : disconnect_work+0x264/0x324 [ 326.166468][ T22] sp : ffff80001d1f7af0 [ 326.167353][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.169057][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 326.170841][ T22] x23: ffff0000efd18c90 x22: ffff0000efd18ca0 x21: ffff0000d8a48de8 [ 326.172607][ T22] x20: 1fffe0001dfa3192 x19: 0000000000000000 x18: ffff80001d1f7440 [ 326.174304][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.176048][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000000001 [ 326.177817][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 326.179519][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 326.181318][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 326.183060][ T22] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.184781][ T22] Call trace: [ 326.185540][ T22] disconnect_work+0x264/0x324 [ 326.186595][ T22] process_one_work+0x7ac/0x1404 [ 326.187627][ T22] worker_thread+0x8e4/0xfec [ 326.188598][ T22] kthread+0x250/0x2d8 [ 326.189513][ T22] ret_from_fork+0x10/0x20 [ 326.190451][ T22] irq event stamp: 270070 [ 326.191426][ T22] hardirqs last enabled at (270069): [] exit_to_kernel_mode+0xe8/0x118 [ 326.193608][ T22] hardirqs last disabled at (270070): [] el1_dbg+0x24/0x80 [ 326.195489][ T22] softirqs last enabled at (270064): [] handle_softirqs+0xb84/0xd58 [ 326.197515][ T22] softirqs last disabled at (269883): [] __do_softirq+0x14/0x20 [ 326.199454][ T22] ---[ end trace 0000000000000000 ]--- [ 326.202458][ T22] ------------[ cut here ]------------ [ 326.203747][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 326.206032][ T22] Modules linked in: [ 326.206842][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.208588][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.210669][ T22] Workqueue: events disconnect_work [ 326.211800][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.213454][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 326.214809][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 326.216175][ T22] sp : ffff80001d1f7a90 [ 326.217072][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.218806][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000efd18cd8 [ 326.220594][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 326.222363][ T22] x20: 0000000000000000 x19: ffff0000efd18c90 x18: ffff80001d1f7440 [ 326.224156][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.225929][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 326.227735][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 326.229553][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 326.231338][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 326.233039][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.234735][ T22] Call trace: [ 326.235418][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 326.236739][ T22] disconnect_work+0x18c/0x324 [ 326.237770][ T22] process_one_work+0x7ac/0x1404 [ 326.238795][ T22] worker_thread+0x8e4/0xfec [ 326.239775][ T22] kthread+0x250/0x2d8 [ 326.240706][ T22] ret_from_fork+0x10/0x20 [ 326.241685][ T22] irq event stamp: 270328 [ 326.242583][ T22] hardirqs last enabled at (270327): [] exit_to_kernel_mode+0xe8/0x118 [ 326.244698][ T22] hardirqs last disabled at (270328): [] el1_dbg+0x24/0x80 [ 326.246636][ T22] softirqs last enabled at (270322): [] handle_softirqs+0xb84/0xd58 [ 326.248718][ T22] softirqs last disabled at (270073): [] __do_softirq+0x14/0x20 [ 326.250711][ T22] ---[ end trace 0000000000000000 ]--- [ 326.252804][ T22] ------------[ cut here ]------------ [ 326.254033][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 326.256087][ T22] Modules linked in: [ 326.256952][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.258998][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.261110][ T22] Workqueue: events disconnect_work [ 326.262322][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.263978][ T22] pc : disconnect_work+0x270/0x324 [ 326.265067][ T22] lr : disconnect_work+0x270/0x324 [ 326.266186][ T22] sp : ffff80001d1f7af0 [ 326.267150][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.268965][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000efd18cd8 [ 326.270785][ T22] x23: 0000000000000000 x22: ffff0000efd18ca0 x21: ffff0000d8a48de8 [ 326.272322][ T22] x20: 1fffe0001dfa3192 x19: 0000000000000000 x18: ffff80001d1f7440 [ 326.274163][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.275897][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 326.277646][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 326.279365][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 326.281087][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 326.282809][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.284548][ T22] Call trace: [ 326.285262][ T22] disconnect_work+0x270/0x324 [ 326.286320][ T22] process_one_work+0x7ac/0x1404 [ 326.287427][ T22] worker_thread+0x8e4/0xfec [ 326.288424][ T22] kthread+0x250/0x2d8 [ 326.289306][ T22] ret_from_fork+0x10/0x20 [ 326.290185][ T22] irq event stamp: 270390 [ 326.291051][ T22] hardirqs last enabled at (270389): [] exit_to_kernel_mode+0xe8/0x118 [ 326.293180][ T22] hardirqs last disabled at (270390): [] el1_dbg+0x24/0x80 [ 326.295039][ T22] softirqs last enabled at (270384): [] handle_softirqs+0xb84/0xd58 [ 326.297114][ T22] softirqs last disabled at (270333): [] __do_softirq+0x14/0x20 [ 326.299068][ T22] ---[ end trace 0000000000000000 ]--- [ 326.303890][ T22] ------------[ cut here ]------------ [ 326.305084][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 326.306964][ T22] Modules linked in: [ 326.307759][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.309714][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.311969][ T22] Workqueue: events disconnect_work [ 326.313011][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.314613][ T22] pc : disconnect_work+0x264/0x324 [ 326.315648][ T22] lr : disconnect_work+0x264/0x324 [ 326.316697][ T22] sp : ffff80001d1f7af0 [ 326.317630][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.319321][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 326.321003][ T22] x23: ffff0000ef848c90 x22: ffff0000ef848ca0 x21: ffff0000c3760de8 [ 326.322711][ T22] x20: 1fffe0001df09192 x19: 0000000000000000 x18: ffff80001d1f7440 [ 326.324382][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.326071][ T22] x14: 1ffff00002b3a0b0 x13: 1fffe0003679f176 x12: 0000000000000001 [ 326.327866][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 326.329546][ T22] x8 : ffff0000c0a5b780 x7 : 0000000000000000 x6 : 0000000000000000 [ 326.331533][ T22] x5 : 0000000000000080 x4 : 0000000000000008 x3 : ffff8000082616e4 [ 326.333316][ T22] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.334951][ T22] Call trace: [ 326.335735][ T22] disconnect_work+0x264/0x324 [ 326.336756][ T22] process_one_work+0x7ac/0x1404 [ 326.337815][ T22] worker_thread+0x8e4/0xfec [ 326.338880][ T22] kthread+0x250/0x2d8 [ 326.339739][ T22] ret_from_fork+0x10/0x20 [ 326.340716][ T22] irq event stamp: 270812 [ 326.341580][ T22] hardirqs last enabled at (270811): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 326.343668][ T22] hardirqs last disabled at (270812): [] el1_dbg+0x24/0x80 [ 326.345588][ T22] softirqs last enabled at (270804): [] handle_softirqs+0xb84/0xd58 [ 326.347594][ T22] softirqs last disabled at (270395): [] __do_softirq+0x14/0x20 [ 326.349527][ T22] ---[ end trace 0000000000000000 ]--- [ 326.351331][ T22] ------------[ cut here ]------------ [ 326.352411][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 326.354539][ T22] Modules linked in: [ 326.355393][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.357314][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.359520][ T22] Workqueue: events disconnect_work [ 326.360576][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.362246][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 326.363610][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 326.365087][ T22] sp : ffff80001d1f7a90 [ 326.365964][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.367701][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000ef848cd8 [ 326.369450][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 326.371120][ T22] x20: 0000000000000000 x19: ffff0000ef848c90 x18: ffff80001d1f7440 [ 326.372774][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.374492][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 326.376090][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 326.377798][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 326.379588][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 326.381298][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.382997][ T22] Call trace: [ 326.383681][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 326.384975][ T22] disconnect_work+0x18c/0x324 [ 326.385950][ T22] process_one_work+0x7ac/0x1404 [ 326.386978][ T22] worker_thread+0x8e4/0xfec [ 326.388003][ T22] kthread+0x250/0x2d8 [ 326.388807][ T22] ret_from_fork+0x10/0x20 [ 326.389732][ T22] irq event stamp: 270866 [ 326.390674][ T22] hardirqs last enabled at (270865): [] exit_to_kernel_mode+0xe8/0x118 [ 326.392837][ T22] hardirqs last disabled at (270866): [] el1_dbg+0x24/0x80 [ 326.394712][ T22] softirqs last enabled at (270864): [] handle_softirqs+0xb84/0xd58 [ 326.396666][ T22] softirqs last disabled at (270815): [] __do_softirq+0x14/0x20 [ 326.398650][ T22] ---[ end trace 0000000000000000 ]--- [ 326.401054][ T22] ------------[ cut here ]------------ [ 326.402211][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 326.404182][ T22] Modules linked in: [ 326.405014][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.407110][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.409223][ T22] Workqueue: events disconnect_work [ 326.410338][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.411951][ T22] pc : disconnect_work+0x270/0x324 [ 326.413076][ T22] lr : disconnect_work+0x270/0x324 [ 326.414148][ T22] sp : ffff80001d1f7af0 [ 326.415039][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.416695][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000ef848cd8 [ 326.418412][ T22] x23: 0000000000000000 x22: ffff0000ef848ca0 x21: ffff0000c3760de8 [ 326.420134][ T22] x20: 1fffe0001df09192 x19: 0000000000000000 x18: ffff80001d1f7440 [ 326.421849][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.423588][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 326.425346][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 326.427128][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 326.428821][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 326.430527][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.432388][ T22] Call trace: [ 326.433241][ T22] disconnect_work+0x270/0x324 [ 326.434281][ T22] process_one_work+0x7ac/0x1404 [ 326.435341][ T22] worker_thread+0x8e4/0xfec [ 326.436301][ T22] kthread+0x250/0x2d8 [ 326.437181][ T22] ret_from_fork+0x10/0x20 [ 326.438142][ T22] irq event stamp: 271214 [ 326.439070][ T22] hardirqs last enabled at (271213): [] exit_to_kernel_mode+0xe8/0x118 [ 326.441199][ T22] hardirqs last disabled at (271214): [] el1_dbg+0x24/0x80 [ 326.443011][ T22] softirqs last enabled at (271212): [] handle_softirqs+0xb84/0xd58 [ 326.445034][ T22] softirqs last disabled at (270869): [] __do_softirq+0x14/0x20 [ 326.446977][ T22] ---[ end trace 0000000000000000 ]--- [ 326.450499][ T22] ------------[ cut here ]------------ [ 326.451594][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 326.453426][ T22] Modules linked in: [ 326.454236][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.456188][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.458223][ T22] Workqueue: events disconnect_work [ 326.459286][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.460904][ T22] pc : disconnect_work+0x264/0x324 [ 326.461880][ T22] lr : disconnect_work+0x264/0x324 [ 326.462939][ T22] sp : ffff80001d1f7af0 [ 326.463776][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.465482][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 326.467154][ T22] x23: ffff0000ca0a0c90 x22: ffff0000ca0a0ca0 x21: ffff0000c3bd8de8 [ 326.468851][ T22] x20: 1fffe00019414192 x19: 0000000000000000 x18: ffff80001d1f7440 [ 326.470531][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.472091][ T22] x14: 1ffff00002b3a0b0 x13: 1fffe0003679f176 x12: 0000000000000001 [ 326.473788][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 326.475455][ T22] x8 : ffff0000c0a5b780 x7 : 0000000000000000 x6 : 0000000000000000 [ 326.477146][ T22] x5 : 0000000000000080 x4 : 0000000000000008 x3 : ffff8000082616e4 [ 326.478804][ T22] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.480542][ T22] Call trace: [ 326.481202][ T22] disconnect_work+0x264/0x324 [ 326.482228][ T22] process_one_work+0x7ac/0x1404 [ 326.483243][ T22] worker_thread+0x8e4/0xfec [ 326.484202][ T22] kthread+0x250/0x2d8 [ 326.485028][ T22] ret_from_fork+0x10/0x20 [ 326.486008][ T22] irq event stamp: 271268 [ 326.486885][ T22] hardirqs last enabled at (271267): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 326.489141][ T22] hardirqs last disabled at (271268): [] el1_dbg+0x24/0x80 [ 326.491012][ T22] softirqs last enabled at (271260): [] handle_softirqs+0xb84/0xd58 [ 326.493090][ T22] softirqs last disabled at (271217): [] __do_softirq+0x14/0x20 [ 326.495365][ T22] ---[ end trace 0000000000000000 ]--- [ 326.500163][ T22] ------------[ cut here ]------------ [ 326.501339][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 326.503491][ T22] Modules linked in: [ 326.504370][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.506305][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.508373][ T22] Workqueue: events disconnect_work [ 326.509458][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.511043][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 326.512396][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 326.513789][ T22] sp : ffff80001d1f7a90 [ 326.514661][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.516323][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000ca0a0cd8 [ 326.517990][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 326.519735][ T22] x20: 0000000000000000 x19: ffff0000ca0a0c90 x18: ffff80001d1f7440 [ 326.521489][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.523163][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 326.524848][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 326.526542][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 326.528177][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 326.529967][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.531694][ T22] Call trace: [ 326.532374][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 326.533687][ T22] disconnect_work+0x18c/0x324 [ 326.534679][ T22] process_one_work+0x7ac/0x1404 [ 326.535716][ T22] worker_thread+0x8e4/0xfec [ 326.536659][ T22] kthread+0x250/0x2d8 [ 326.537515][ T22] ret_from_fork+0x10/0x20 [ 326.538417][ T22] irq event stamp: 271542 [ 326.539300][ T22] hardirqs last enabled at (271541): [] exit_to_kernel_mode+0xe8/0x118 [ 326.541419][ T22] hardirqs last disabled at (271542): [] el1_dbg+0x24/0x80 [ 326.543250][ T22] softirqs last enabled at (271536): [] handle_softirqs+0xb84/0xd58 [ 326.545314][ T22] softirqs last disabled at (271271): [] __do_softirq+0x14/0x20 [ 326.547263][ T22] ---[ end trace 0000000000000000 ]--- [ 326.552883][ T22] ------------[ cut here ]------------ [ 326.554032][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 326.555905][ T22] Modules linked in: [ 326.556686][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.558644][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.560745][ T22] Workqueue: events disconnect_work [ 326.561858][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.563426][ T22] pc : disconnect_work+0x270/0x324 [ 326.564451][ T22] lr : disconnect_work+0x270/0x324 [ 326.565553][ T22] sp : ffff80001d1f7af0 [ 326.566413][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.568065][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000ca0a0cd8 [ 326.569726][ T22] x23: 0000000000000000 x22: ffff0000ca0a0ca0 x21: ffff0000c3bd8de8 [ 326.571446][ T22] x20: 1fffe00019414192 x19: 0000000000000000 x18: ffff80001d1f7440 [ 326.573177][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.574872][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 326.576592][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 326.578296][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 326.579948][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 326.581571][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.583206][ T22] Call trace: [ 326.583848][ T22] disconnect_work+0x270/0x324 [ 326.584817][ T22] process_one_work+0x7ac/0x1404 [ 326.585829][ T22] worker_thread+0x8e4/0xfec [ 326.586833][ T22] kthread+0x250/0x2d8 [ 326.587692][ T22] ret_from_fork+0x10/0x20 [ 326.588652][ T22] irq event stamp: 271626 [ 326.589577][ T22] hardirqs last enabled at (271625): [] exit_to_kernel_mode+0xe8/0x118 [ 326.591735][ T22] hardirqs last disabled at (271626): [] el1_dbg+0x24/0x80 [ 326.593579][ T22] softirqs last enabled at (271620): [] handle_softirqs+0xb84/0xd58 [ 326.595616][ T22] softirqs last disabled at (271545): [] __do_softirq+0x14/0x20 [ 326.597580][ T22] ---[ end trace 0000000000000000 ]--- [ 326.609269][ T22] ------------[ cut here ]------------ [ 326.610487][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 326.612336][ T22] Modules linked in: [ 326.613111][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.615108][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.617169][ T22] Workqueue: events disconnect_work [ 326.618241][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.619991][ T22] pc : disconnect_work+0x264/0x324 [ 326.621054][ T22] lr : disconnect_work+0x264/0x324 [ 326.622170][ T22] sp : ffff80001d1f7af0 [ 326.623045][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.624721][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 326.626432][ T22] x23: ffff0000d40c4c90 x22: ffff0000d40c4ca0 x21: ffff0000cb278de8 [ 326.628065][ T22] x20: 1fffe0001a818992 x19: 0000000000000000 x18: ffff80001d1f7440 [ 326.629690][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.631380][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 326.633127][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 326.634823][ T22] x8 : ffff0000c0a5b780 x7 : 0000000000000000 x6 : 0000000000000000 [ 326.636521][ T22] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff8000082616e4 [ 326.638201][ T22] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.639862][ T22] Call trace: [ 326.640561][ T22] disconnect_work+0x264/0x324 [ 326.641555][ T22] process_one_work+0x7ac/0x1404 [ 326.642594][ T22] worker_thread+0x8e4/0xfec [ 326.643567][ T22] kthread+0x250/0x2d8 [ 326.644425][ T22] ret_from_fork+0x10/0x20 [ 326.645373][ T22] irq event stamp: 271918 [ 326.646280][ T22] hardirqs last enabled at (271917): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 326.648566][ T22] hardirqs last disabled at (271918): [] el1_dbg+0x24/0x80 [ 326.650450][ T22] softirqs last enabled at (271910): [] handle_softirqs+0xb84/0xd58 [ 326.652511][ T22] softirqs last disabled at (271629): [] __do_softirq+0x14/0x20 [ 326.654424][ T22] ---[ end trace 0000000000000000 ]--- [ 326.656309][ T22] ------------[ cut here ]------------ [ 326.657448][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 326.659495][ T22] Modules linked in: [ 326.660267][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.662143][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.664158][ T22] Workqueue: events disconnect_work [ 326.665256][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.666854][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 326.668190][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 326.669527][ T22] sp : ffff80001d1f7a90 [ 326.670404][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.672073][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000d40c4cd8 [ 326.673782][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 326.675367][ T22] x20: 0000000000000000 x19: ffff0000d40c4c90 x18: ffff80001d1f7440 [ 326.676962][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.678595][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 326.680258][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 326.681916][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 326.683597][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 326.685258][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.686922][ T22] Call trace: [ 326.687624][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 326.688904][ T22] disconnect_work+0x18c/0x324 [ 326.689906][ T22] process_one_work+0x7ac/0x1404 [ 326.690932][ T22] worker_thread+0x8e4/0xfec [ 326.691861][ T22] kthread+0x250/0x2d8 [ 326.692705][ T22] ret_from_fork+0x10/0x20 [ 326.693615][ T22] irq event stamp: 271960 [ 326.694509][ T22] hardirqs last enabled at (271959): [] exit_to_kernel_mode+0xe8/0x118 [ 326.696489][ T22] hardirqs last disabled at (271960): [] el1_dbg+0x24/0x80 [ 326.698282][ T22] softirqs last enabled at (271958): [] handle_softirqs+0xb84/0xd58 [ 326.700241][ T22] softirqs last disabled at (271921): [] __do_softirq+0x14/0x20 [ 326.702127][ T22] ---[ end trace 0000000000000000 ]--- [ 326.704678][ T22] ------------[ cut here ]------------ [ 326.705782][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 326.707610][ T22] Modules linked in: [ 326.708464][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.710426][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.712493][ T22] Workqueue: events disconnect_work [ 326.713596][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.715141][ T22] pc : disconnect_work+0x270/0x324 [ 326.716216][ T22] lr : disconnect_work+0x270/0x324 [ 326.717306][ T22] sp : ffff80001d1f7af0 [ 326.718180][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.719929][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000d40c4cd8 [ 326.721649][ T22] x23: 0000000000000000 x22: ffff0000d40c4ca0 x21: ffff0000cb278de8 [ 326.723341][ T22] x20: 1fffe0001a818992 x19: 0000000000000000 x18: ffff80001d1f7440 [ 326.725046][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.726728][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 326.728408][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 326.730153][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 326.731864][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 326.733408][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.735106][ T22] Call trace: [ 326.735770][ T22] disconnect_work+0x270/0x324 [ 326.736749][ T22] process_one_work+0x7ac/0x1404 [ 326.737809][ T22] worker_thread+0x8e4/0xfec [ 326.738772][ T22] kthread+0x250/0x2d8 [ 326.739621][ T22] ret_from_fork+0x10/0x20 [ 326.740525][ T22] irq event stamp: 272364 [ 326.741484][ T22] hardirqs last enabled at (272363): [] exit_to_kernel_mode+0xe8/0x118 [ 326.743591][ T22] hardirqs last disabled at (272364): [] el1_dbg+0x24/0x80 [ 326.745453][ T22] softirqs last enabled at (272362): [] handle_softirqs+0xb84/0xd58 [ 326.747399][ T22] softirqs last disabled at (271963): [] __do_softirq+0x14/0x20 [ 326.749297][ T22] ---[ end trace 0000000000000000 ]--- [ 326.761366][ T22] ------------[ cut here ]------------ [ 326.762522][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 326.764459][ T22] Modules linked in: [ 326.765274][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.767248][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.769357][ T22] Workqueue: events disconnect_work [ 326.770446][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.772189][ T22] pc : disconnect_work+0x264/0x324 [ 326.773285][ T22] lr : disconnect_work+0x264/0x324 [ 326.774344][ T22] sp : ffff80001d1f7af0 [ 326.775215][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.776960][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 326.778604][ T22] x23: ffff0000d77ac000 x22: ffff0000d77ac010 x21: ffff0000d0de2de8 [ 326.780334][ T22] x20: 1fffe0001aef5800 x19: 0000000000000000 x18: ffff80001d1f7440 [ 326.782012][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.783600][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 326.785335][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 326.787057][ T22] x8 : ffff0000c0a5b780 x7 : 0000000000000000 x6 : 0000000000000000 [ 326.788943][ T22] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff8000082616e4 [ 326.790665][ T22] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.792358][ T22] Call trace: [ 326.793050][ T22] disconnect_work+0x264/0x324 [ 326.794056][ T22] process_one_work+0x7ac/0x1404 [ 326.795190][ T22] worker_thread+0x8e4/0xfec [ 326.796177][ T22] kthread+0x250/0x2d8 [ 326.797069][ T22] ret_from_fork+0x10/0x20 [ 326.797858][ T22] irq event stamp: 272402 [ 326.798816][ T22] hardirqs last enabled at (272401): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 326.801053][ T22] hardirqs last disabled at (272402): [] el1_dbg+0x24/0x80 [ 326.802915][ T22] softirqs last enabled at (272394): [] handle_softirqs+0xb84/0xd58 [ 326.805012][ T22] softirqs last disabled at (272369): [] __do_softirq+0x14/0x20 [ 326.807014][ T22] ---[ end trace 0000000000000000 ]--- [ 326.809620][ T22] ------------[ cut here ]------------ [ 326.810799][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 326.812928][ T22] Modules linked in: [ 326.813724][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.815705][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.817801][ T22] Workqueue: events disconnect_work [ 326.818996][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.820658][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 326.822076][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 326.823436][ T22] sp : ffff80001d1f7a90 [ 326.824296][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.825989][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000d77ac048 [ 326.827739][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 326.829479][ T22] x20: 0000000000000000 x19: ffff0000d77ac000 x18: ffff80001d1f7440 [ 326.831178][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.832881][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 326.833224][ T47] Bluetooth: hci0: command tx timeout [ 326.834579][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 326.837502][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 326.839214][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 326.840978][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.842671][ T22] Call trace: [ 326.843365][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 326.844766][ T22] disconnect_work+0x18c/0x324 [ 326.845797][ T22] process_one_work+0x7ac/0x1404 [ 326.846884][ T22] worker_thread+0x8e4/0xfec [ 326.847908][ T22] kthread+0x250/0x2d8 [ 326.848803][ T22] ret_from_fork+0x10/0x20 [ 326.849771][ T22] irq event stamp: 272678 [ 326.850695][ T22] hardirqs last enabled at (272677): [] exit_to_kernel_mode+0xe8/0x118 [ 326.852843][ T22] hardirqs last disabled at (272678): [] el1_dbg+0x24/0x80 [ 326.854756][ T22] softirqs last enabled at (272672): [] handle_softirqs+0xb84/0xd58 [ 326.856811][ T22] softirqs last disabled at (272405): [] __do_softirq+0x14/0x20 [ 326.858746][ T22] ---[ end trace 0000000000000000 ]--- [ 326.860645][ T22] ------------[ cut here ]------------ [ 326.861837][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 326.863684][ T22] Modules linked in: [ 326.864513][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.866566][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.868687][ T22] Workqueue: events disconnect_work [ 326.869797][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.871399][ T22] pc : disconnect_work+0x270/0x324 [ 326.872474][ T22] lr : disconnect_work+0x270/0x324 [ 326.873647][ T22] sp : ffff80001d1f7af0 [ 326.874613][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.876366][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000d77ac048 [ 326.878122][ T22] x23: 0000000000000000 x22: ffff0000d77ac010 x21: ffff0000d0de2de8 [ 326.879845][ T22] x20: 1fffe0001aef5800 x19: 0000000000000000 x18: ffff80001d1f7440 [ 326.881623][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.883422][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 326.885103][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 326.886805][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 326.888613][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 326.890376][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.892145][ T22] Call trace: [ 326.892823][ T22] disconnect_work+0x270/0x324 [ 326.893810][ T22] process_one_work+0x7ac/0x1404 [ 326.894782][ T22] worker_thread+0x8e4/0xfec [ 326.895720][ T22] kthread+0x250/0x2d8 [ 326.896594][ T22] ret_from_fork+0x10/0x20 [ 326.897558][ T22] irq event stamp: 272724 [ 326.898495][ T22] hardirqs last enabled at (272723): [] exit_to_kernel_mode+0xe8/0x118 [ 326.900620][ T22] hardirqs last disabled at (272724): [] el1_dbg+0x24/0x80 [ 326.902545][ T22] softirqs last enabled at (272722): [] handle_softirqs+0xb84/0xd58 [ 326.904555][ T22] softirqs last disabled at (272681): [] __do_softirq+0x14/0x20 [ 326.906504][ T22] ---[ end trace 0000000000000000 ]--- [ 326.918484][ T22] ------------[ cut here ]------------ [ 326.919652][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 326.921570][ T22] Modules linked in: [ 326.922384][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.924376][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.926498][ T22] Workqueue: events disconnect_work [ 326.927619][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.929278][ T22] pc : disconnect_work+0x264/0x324 [ 326.930308][ T22] lr : disconnect_work+0x264/0x324 [ 326.931398][ T22] sp : ffff80001d1f7af0 [ 326.932302][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.933971][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 326.935637][ T22] x23: ffff0000f2c9e000 x22: ffff0000f2c9e010 x21: ffff0000d0de2de8 [ 326.937351][ T22] x20: 1fffe0001e593c00 x19: 0000000000000000 x18: ffff80001d1f7440 [ 326.939074][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.940834][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000000001 [ 326.942530][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 326.944232][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 326.945974][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 326.947634][ T22] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 326.949369][ T22] Call trace: [ 326.950052][ T22] disconnect_work+0x264/0x324 [ 326.951058][ T22] process_one_work+0x7ac/0x1404 [ 326.952116][ T22] worker_thread+0x8e4/0xfec [ 326.953125][ T22] kthread+0x250/0x2d8 [ 326.953980][ T22] ret_from_fork+0x10/0x20 [ 326.954975][ T22] irq event stamp: 272966 [ 326.955889][ T22] hardirqs last enabled at (272965): [] exit_to_kernel_mode+0xe8/0x118 [ 326.958060][ T22] hardirqs last disabled at (272966): [] el1_dbg+0x24/0x80 [ 326.959906][ T22] softirqs last enabled at (272960): [] handle_softirqs+0xb84/0xd58 [ 326.961941][ T22] softirqs last disabled at (272727): [] __do_softirq+0x14/0x20 [ 326.963903][ T22] ---[ end trace 0000000000000000 ]--- [ 326.973577][ T22] ------------[ cut here ]------------ [ 326.974730][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 326.976847][ T22] Modules linked in: [ 326.977628][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 326.979522][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.981498][ T22] Workqueue: events disconnect_work [ 326.982548][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 326.984199][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 326.985480][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 326.986798][ T22] sp : ffff80001d1f7a90 [ 326.987649][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 326.989318][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000f2c9e048 [ 326.990993][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 326.992682][ T22] x20: 0000000000000000 x19: ffff0000f2c9e000 x18: ffff80001d1f7440 [ 326.994313][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 326.995935][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 326.997607][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 326.999273][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.000946][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 327.002648][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.004378][ T22] Call trace: [ 327.005042][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 327.006376][ T22] disconnect_work+0x18c/0x324 [ 327.007363][ T22] process_one_work+0x7ac/0x1404 [ 327.008412][ T22] worker_thread+0x8e4/0xfec [ 327.009415][ T22] kthread+0x250/0x2d8 [ 327.010292][ T22] ret_from_fork+0x10/0x20 [ 327.011217][ T22] irq event stamp: 273006 [ 327.012104][ T22] hardirqs last enabled at (273005): [] exit_to_kernel_mode+0xe8/0x118 [ 327.014152][ T22] hardirqs last disabled at (273006): [] el1_dbg+0x24/0x80 [ 327.015942][ T22] softirqs last enabled at (273000): [] handle_softirqs+0xb84/0xd58 [ 327.018032][ T22] softirqs last disabled at (272969): [] __do_softirq+0x14/0x20 [ 327.019976][ T22] ---[ end trace 0000000000000000 ]--- [ 327.022446][ T22] ------------[ cut here ]------------ [ 327.023622][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 327.025560][ T22] Modules linked in: [ 327.026400][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.028381][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.030549][ T22] Workqueue: events disconnect_work [ 327.031685][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.033551][ T22] pc : disconnect_work+0x270/0x324 [ 327.034655][ T22] lr : disconnect_work+0x270/0x324 [ 327.035745][ T22] sp : ffff80001d1f7af0 [ 327.036639][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.038381][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000f2c9e048 [ 327.040210][ T22] x23: 0000000000000000 x22: ffff0000f2c9e010 x21: ffff0000d0de2de8 [ 327.041889][ T22] x20: 1fffe0001e593c00 x19: 0000000000000000 x18: ffff80001d1f7440 [ 327.043598][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.045376][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 327.047140][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 327.048841][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.050649][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 327.052265][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.054056][ T22] Call trace: [ 327.054814][ T22] disconnect_work+0x270/0x324 [ 327.055801][ T22] process_one_work+0x7ac/0x1404 [ 327.056873][ T22] worker_thread+0x8e4/0xfec [ 327.057856][ T22] kthread+0x250/0x2d8 [ 327.058760][ T22] ret_from_fork+0x10/0x20 [ 327.059706][ T22] irq event stamp: 273362 [ 327.060573][ T22] hardirqs last enabled at (273361): [] exit_to_kernel_mode+0xe8/0x118 [ 327.062723][ T22] hardirqs last disabled at (273362): [] el1_dbg+0x24/0x80 [ 327.064651][ T22] softirqs last enabled at (273360): [] handle_softirqs+0xb84/0xd58 [ 327.066707][ T22] softirqs last disabled at (273009): [] __do_softirq+0x14/0x20 [ 327.068688][ T22] ---[ end trace 0000000000000000 ]--- [ 327.070558][ T22] ------------[ cut here ]------------ [ 327.071747][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 327.073630][ T22] Modules linked in: [ 327.074484][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.076396][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.078571][ T22] Workqueue: events disconnect_work [ 327.079701][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.081335][ T22] pc : disconnect_work+0x264/0x324 [ 327.082405][ T22] lr : disconnect_work+0x264/0x324 [ 327.083455][ T22] sp : ffff80001d1f7af0 [ 327.084291][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.085879][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 327.087573][ T22] x23: ffff0000c2f56000 x22: ffff0000c2f56010 x21: ffff0000d0de2de8 [ 327.089234][ T22] x20: 1fffe000185eac00 x19: 0000000000000000 x18: ffff80001d1f7440 [ 327.090961][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.092716][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000000001 [ 327.094537][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 327.096358][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.098065][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 327.099741][ T22] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.101432][ T22] Call trace: [ 327.102129][ T22] disconnect_work+0x264/0x324 [ 327.103304][ T22] process_one_work+0x7ac/0x1404 [ 327.104349][ T22] worker_thread+0x8e4/0xfec [ 327.105310][ T22] kthread+0x250/0x2d8 [ 327.106153][ T22] ret_from_fork+0x10/0x20 [ 327.107122][ T22] irq event stamp: 273410 [ 327.108036][ T22] hardirqs last enabled at (273409): [] exit_to_kernel_mode+0xe8/0x118 [ 327.110106][ T22] hardirqs last disabled at (273410): [] el1_dbg+0x24/0x80 [ 327.112007][ T22] softirqs last enabled at (273408): [] handle_softirqs+0xb84/0xd58 [ 327.114065][ T22] softirqs last disabled at (273365): [] __do_softirq+0x14/0x20 [ 327.115974][ T22] ---[ end trace 0000000000000000 ]--- [ 327.118456][ T22] ------------[ cut here ]------------ [ 327.119598][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 327.121771][ T22] Modules linked in: [ 327.122549][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.124482][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.126620][ T22] Workqueue: events disconnect_work [ 327.127729][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.129467][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 327.130884][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 327.132277][ T22] sp : ffff80001d1f7a90 [ 327.133200][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.134851][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000c2f56048 [ 327.136602][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 327.138360][ T22] x20: 0000000000000000 x19: ffff0000c2f56000 x18: ffff80001d1f7440 [ 327.140153][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.141820][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 327.143522][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 327.145196][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.146862][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 327.148637][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.150248][ T22] Call trace: [ 327.150928][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 327.152248][ T22] disconnect_work+0x18c/0x324 [ 327.153278][ T22] process_one_work+0x7ac/0x1404 [ 327.154301][ T22] worker_thread+0x8e4/0xfec [ 327.155246][ T22] kthread+0x250/0x2d8 [ 327.156134][ T22] ret_from_fork+0x10/0x20 [ 327.157044][ T22] irq event stamp: 273786 [ 327.157969][ T22] hardirqs last enabled at (273785): [] exit_to_kernel_mode+0xe8/0x118 [ 327.160169][ T22] hardirqs last disabled at (273786): [] el1_dbg+0x24/0x80 [ 327.162045][ T22] softirqs last enabled at (273784): [] handle_softirqs+0xb84/0xd58 [ 327.164069][ T22] softirqs last disabled at (273413): [] __do_softirq+0x14/0x20 [ 327.165938][ T22] ---[ end trace 0000000000000000 ]--- [ 327.167887][ T22] ------------[ cut here ]------------ [ 327.169091][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 327.170948][ T22] Modules linked in: [ 327.171737][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.173738][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.175842][ T22] Workqueue: events disconnect_work [ 327.176962][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.178590][ T22] pc : disconnect_work+0x270/0x324 [ 327.179645][ T22] lr : disconnect_work+0x270/0x324 [ 327.180743][ T22] sp : ffff80001d1f7af0 [ 327.181665][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.183367][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000c2f56048 [ 327.185047][ T22] x23: 0000000000000000 x22: ffff0000c2f56010 x21: ffff0000d0de2de8 [ 327.186733][ T22] x20: 1fffe000185eac00 x19: 0000000000000000 x18: ffff80001d1f7440 [ 327.188379][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.190142][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 327.191828][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 327.193562][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.195230][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 327.196892][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.198536][ T22] Call trace: [ 327.199222][ T22] disconnect_work+0x270/0x324 [ 327.200208][ T22] process_one_work+0x7ac/0x1404 [ 327.201248][ T22] worker_thread+0x8e4/0xfec [ 327.202219][ T22] kthread+0x250/0x2d8 [ 327.203049][ T22] ret_from_fork+0x10/0x20 [ 327.203980][ T22] irq event stamp: 273824 [ 327.204930][ T22] hardirqs last enabled at (273823): [] exit_to_kernel_mode+0xe8/0x118 [ 327.207096][ T22] hardirqs last disabled at (273824): [] el1_dbg+0x24/0x80 [ 327.208946][ T22] softirqs last enabled at (273818): [] handle_softirqs+0xb84/0xd58 [ 327.210935][ T22] softirqs last disabled at (273789): [] __do_softirq+0x14/0x20 [ 327.212865][ T22] ---[ end trace 0000000000000000 ]--- [ 327.215250][ T22] ------------[ cut here ]------------ [ 327.216494][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 327.218375][ T22] Modules linked in: [ 327.219199][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.221093][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.223157][ T22] Workqueue: events disconnect_work [ 327.224268][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.225944][ T22] pc : disconnect_work+0x264/0x324 [ 327.227008][ T22] lr : disconnect_work+0x264/0x324 [ 327.228060][ T22] sp : ffff80001d1f7af0 [ 327.228962][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.230645][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 327.232278][ T22] x23: ffff0000f47b0000 x22: ffff0000f47b0010 x21: ffff0000d0de2de8 [ 327.233617][ T22] x20: 1fffe0001e8f6000 x19: 0000000000000000 x18: ffff80001d1f7440 [ 327.235586][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.237469][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000000001 [ 327.239258][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 327.240922][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.242630][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 327.244425][ T22] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.246224][ T22] Call trace: [ 327.246900][ T22] disconnect_work+0x264/0x324 [ 327.247906][ T22] process_one_work+0x7ac/0x1404 [ 327.248899][ T22] worker_thread+0x8e4/0xfec [ 327.249920][ T22] kthread+0x250/0x2d8 [ 327.250804][ T22] ret_from_fork+0x10/0x20 [ 327.251714][ T22] irq event stamp: 274178 [ 327.252772][ T22] hardirqs last enabled at (274177): [] exit_to_kernel_mode+0xe8/0x118 [ 327.254926][ T22] hardirqs last disabled at (274178): [] el1_dbg+0x24/0x80 [ 327.256815][ T22] softirqs last enabled at (274176): [] handle_softirqs+0xb84/0xd58 [ 327.258969][ T22] softirqs last disabled at (273827): [] __do_softirq+0x14/0x20 [ 327.260955][ T22] ---[ end trace 0000000000000000 ]--- [ 327.265131][ T22] ------------[ cut here ]------------ [ 327.266231][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 327.268415][ T22] Modules linked in: [ 327.269229][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.271105][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.273160][ T22] Workqueue: events disconnect_work [ 327.274229][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.275919][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 327.277300][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 327.278730][ T22] sp : ffff80001d1f7a90 [ 327.279658][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.281310][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000f47b0048 [ 327.282978][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 327.284694][ T22] x20: 0000000000000000 x19: ffff0000f47b0000 x18: ffff80001d1f7440 [ 327.286410][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.288150][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 327.289879][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 327.291630][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.293460][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 327.295296][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.297033][ T22] Call trace: [ 327.297761][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 327.299103][ T22] disconnect_work+0x18c/0x324 [ 327.300110][ T22] process_one_work+0x7ac/0x1404 [ 327.301134][ T22] worker_thread+0x8e4/0xfec [ 327.302096][ T22] kthread+0x250/0x2d8 [ 327.302922][ T22] ret_from_fork+0x10/0x20 [ 327.303905][ T22] irq event stamp: 274226 [ 327.304823][ T22] hardirqs last enabled at (274225): [] exit_to_kernel_mode+0xe8/0x118 [ 327.306819][ T22] hardirqs last disabled at (274226): [] el1_dbg+0x24/0x80 [ 327.308709][ T22] softirqs last enabled at (274220): [] handle_softirqs+0xb84/0xd58 [ 327.310664][ T22] softirqs last disabled at (274181): [] __do_softirq+0x14/0x20 [ 327.312651][ T22] ---[ end trace 0000000000000000 ]--- [ 327.313267][ T47] Bluetooth: hci4: command tx timeout [ 327.317938][ T22] ------------[ cut here ]------------ [ 327.319163][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 327.321081][ T22] Modules linked in: [ 327.321860][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.323736][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.325843][ T22] Workqueue: events disconnect_work [ 327.326916][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.328616][ T22] pc : disconnect_work+0x270/0x324 [ 327.329682][ T22] lr : disconnect_work+0x270/0x324 [ 327.330692][ T22] sp : ffff80001d1f7af0 [ 327.331512][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.333083][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000f47b0048 [ 327.334650][ T22] x23: 0000000000000000 x22: ffff0000f47b0010 x21: ffff0000d0de2de8 [ 327.336201][ T22] x20: 1fffe0001e8f6000 x19: 0000000000000000 x18: ffff80001d1f7440 [ 327.337859][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.339457][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 327.341038][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 327.342591][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.344197][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 327.345793][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.347447][ T22] Call trace: [ 327.348114][ T22] disconnect_work+0x270/0x324 [ 327.349070][ T22] process_one_work+0x7ac/0x1404 [ 327.350085][ T22] worker_thread+0x8e4/0xfec [ 327.350976][ T22] kthread+0x250/0x2d8 [ 327.351766][ T22] ret_from_fork+0x10/0x20 [ 327.352626][ T22] irq event stamp: 274526 [ 327.353453][ T22] hardirqs last enabled at (274525): [] exit_to_kernel_mode+0xe8/0x118 [ 327.355363][ T22] hardirqs last disabled at (274526): [] el1_dbg+0x24/0x80 [ 327.357127][ T22] softirqs last enabled at (274520): [] handle_softirqs+0xb84/0xd58 [ 327.359032][ T22] softirqs last disabled at (274229): [] __do_softirq+0x14/0x20 [ 327.360951][ T22] ---[ end trace 0000000000000000 ]--- [ 327.365208][ T22] ------------[ cut here ]------------ [ 327.366417][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 327.368324][ T22] Modules linked in: [ 327.369154][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.371067][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.373113][ T22] Workqueue: events disconnect_work [ 327.374203][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.376172][ T22] pc : disconnect_work+0x264/0x324 [ 327.377274][ T22] lr : disconnect_work+0x264/0x324 [ 327.378340][ T22] sp : ffff80001d1f7af0 [ 327.379216][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.380904][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 327.382639][ T22] x23: ffff0000dccbe000 x22: ffff0000dccbe010 x21: ffff0000d0de2de8 [ 327.384342][ T22] x20: 1fffe0001b997c00 x19: 0000000000000000 x18: ffff80001d1f7440 [ 327.385998][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.387731][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000000001 [ 327.389484][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 327.391134][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.392821][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 327.394580][ T22] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.396278][ T22] Call trace: [ 327.396956][ T22] disconnect_work+0x264/0x324 [ 327.397965][ T22] process_one_work+0x7ac/0x1404 [ 327.399008][ T22] worker_thread+0x8e4/0xfec [ 327.399952][ T22] kthread+0x250/0x2d8 [ 327.400792][ T22] ret_from_fork+0x10/0x20 [ 327.401732][ T22] irq event stamp: 274550 [ 327.402636][ T22] hardirqs last enabled at (274549): [] exit_to_kernel_mode+0xe8/0x118 [ 327.404814][ T22] hardirqs last disabled at (274550): [] el1_dbg+0x24/0x80 [ 327.406667][ T22] softirqs last enabled at (274544): [] handle_softirqs+0xb84/0xd58 [ 327.408716][ T22] softirqs last disabled at (274529): [] __do_softirq+0x14/0x20 [ 327.410554][ T22] ---[ end trace 0000000000000000 ]--- [ 327.415464][ T22] ------------[ cut here ]------------ [ 327.416621][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 327.418732][ T22] Modules linked in: [ 327.419509][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.421460][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.423442][ T22] Workqueue: events disconnect_work [ 327.424600][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.426187][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 327.427530][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 327.428914][ T22] sp : ffff80001d1f7a90 [ 327.429778][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.431458][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000dccbe048 [ 327.433145][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 327.434851][ T22] x20: 0000000000000000 x19: ffff0000dccbe000 x18: ffff80001d1f7440 [ 327.436533][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.438193][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 327.439837][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 327.441519][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.443150][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 327.444805][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.446480][ T22] Call trace: [ 327.447115][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 327.448367][ T22] disconnect_work+0x18c/0x324 [ 327.449373][ T22] process_one_work+0x7ac/0x1404 [ 327.450433][ T22] worker_thread+0x8e4/0xfec [ 327.451391][ T22] kthread+0x250/0x2d8 [ 327.452231][ T22] ret_from_fork+0x10/0x20 [ 327.453184][ T22] irq event stamp: 274806 [ 327.454119][ T22] hardirqs last enabled at (274805): [] exit_to_kernel_mode+0xe8/0x118 [ 327.456136][ T22] hardirqs last disabled at (274806): [] el1_dbg+0x24/0x80 [ 327.457932][ T22] softirqs last enabled at (274800): [] handle_softirqs+0xb84/0xd58 [ 327.459931][ T22] softirqs last disabled at (274553): [] __do_softirq+0x14/0x20 [ 327.461803][ T22] ---[ end trace 0000000000000000 ]--- [ 327.466556][ T22] ------------[ cut here ]------------ [ 327.467710][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 327.469487][ T22] Modules linked in: [ 327.470289][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.472306][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.474338][ T22] Workqueue: events disconnect_work [ 327.475410][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.477143][ T22] pc : disconnect_work+0x270/0x324 [ 327.478191][ T22] lr : disconnect_work+0x270/0x324 [ 327.479292][ T22] sp : ffff80001d1f7af0 [ 327.480151][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.481823][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000dccbe048 [ 327.483472][ T22] x23: 0000000000000000 x22: ffff0000dccbe010 x21: ffff0000d0de2de8 [ 327.485187][ T22] x20: 1fffe0001b997c00 x19: 0000000000000000 x18: ffff80001d1f7440 [ 327.486899][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.488635][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 327.490341][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 327.492041][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.493674][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 327.495375][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.497117][ T22] Call trace: [ 327.497812][ T22] disconnect_work+0x270/0x324 [ 327.498772][ T22] process_one_work+0x7ac/0x1404 [ 327.499790][ T22] worker_thread+0x8e4/0xfec [ 327.500764][ T22] kthread+0x250/0x2d8 [ 327.501608][ T22] ret_from_fork+0x10/0x20 [ 327.502539][ T22] irq event stamp: 274834 [ 327.503424][ T22] hardirqs last enabled at (274833): [] exit_to_kernel_mode+0xe8/0x118 [ 327.505438][ T22] hardirqs last disabled at (274834): [] el1_dbg+0x24/0x80 [ 327.507204][ T22] softirqs last enabled at (274828): [] handle_softirqs+0xb84/0xd58 [ 327.509223][ T22] softirqs last disabled at (274811): [] __do_softirq+0x14/0x20 [ 327.511099][ T22] ---[ end trace 0000000000000000 ]--- [ 327.515960][ T22] ------------[ cut here ]------------ [ 327.517129][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 327.518958][ T22] Modules linked in: [ 327.519808][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.521711][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.523764][ T22] Workqueue: events disconnect_work [ 327.524854][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.526598][ T22] pc : disconnect_work+0x264/0x324 [ 327.527682][ T22] lr : disconnect_work+0x264/0x324 [ 327.528773][ T22] sp : ffff80001d1f7af0 [ 327.529658][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.531329][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 327.532969][ T22] x23: ffff0000d9ad0000 x22: ffff0000d9ad0010 x21: ffff0000d0de2de8 [ 327.534626][ T22] x20: 1fffe0001b35a000 x19: 0000000000000000 x18: ffff80001d1f7440 [ 327.536286][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.537932][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000000001 [ 327.539604][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 327.541261][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.542964][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 327.544680][ T22] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.546362][ T22] Call trace: [ 327.547029][ T22] disconnect_work+0x264/0x324 [ 327.548018][ T22] process_one_work+0x7ac/0x1404 [ 327.549118][ T22] worker_thread+0x8e4/0xfec [ 327.550069][ T22] kthread+0x250/0x2d8 [ 327.550934][ T22] ret_from_fork+0x10/0x20 [ 327.551890][ T22] irq event stamp: 275088 [ 327.552765][ T22] hardirqs last enabled at (275087): [] exit_to_kernel_mode+0xe8/0x118 [ 327.554949][ T22] hardirqs last disabled at (275088): [] el1_dbg+0x24/0x80 [ 327.556688][ T22] softirqs last enabled at (275082): [] handle_softirqs+0xb84/0xd58 [ 327.558745][ T22] softirqs last disabled at (274837): [] __do_softirq+0x14/0x20 [ 327.560666][ T22] ---[ end trace 0000000000000000 ]--- [ 327.562660][ T22] ------------[ cut here ]------------ [ 327.563846][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 327.566038][ T22] Modules linked in: [ 327.566857][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.568781][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.570842][ T22] Workqueue: events disconnect_work [ 327.571948][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.573583][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 327.574948][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 327.576340][ T22] sp : ffff80001d1f7a90 [ 327.577225][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.578924][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000d9ad0048 [ 327.580595][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 327.582320][ T22] x20: 0000000000000000 x19: ffff0000d9ad0000 x18: ffff80001d1f7440 [ 327.584050][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.585789][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 327.587519][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 327.589141][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.590931][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 327.592682][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.594336][ T22] Call trace: [ 327.595089][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 327.596461][ T22] disconnect_work+0x18c/0x324 [ 327.597476][ T22] process_one_work+0x7ac/0x1404 [ 327.598524][ T22] worker_thread+0x8e4/0xfec [ 327.599484][ T22] kthread+0x250/0x2d8 [ 327.600490][ T22] ret_from_fork+0x10/0x20 [ 327.601569][ T22] irq event stamp: 275166 [ 327.602444][ T22] hardirqs last enabled at (275165): [] exit_to_kernel_mode+0xe8/0x118 [ 327.604551][ T22] hardirqs last disabled at (275166): [] el1_dbg+0x24/0x80 [ 327.606425][ T22] softirqs last enabled at (275160): [] handle_softirqs+0xb84/0xd58 [ 327.608495][ T22] softirqs last disabled at (275091): [] __do_softirq+0x14/0x20 [ 327.610374][ T22] ---[ end trace 0000000000000000 ]--- [ 327.615523][ T22] ------------[ cut here ]------------ [ 327.616757][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 327.618577][ T22] Modules linked in: [ 327.619432][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.621296][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.623499][ T22] Workqueue: events disconnect_work [ 327.624606][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.626211][ T22] pc : disconnect_work+0x270/0x324 [ 327.627317][ T22] lr : disconnect_work+0x270/0x324 [ 327.628354][ T22] sp : ffff80001d1f7af0 [ 327.629157][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.630856][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000d9ad0048 [ 327.632522][ T22] x23: 0000000000000000 x22: ffff0000d9ad0010 x21: ffff0000d0de2de8 [ 327.634189][ T22] x20: 1fffe0001b35a000 x19: 0000000000000000 x18: ffff80001d1f7440 [ 327.635817][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.637450][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 327.639198][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 327.640891][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.642568][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 327.644343][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.646025][ T22] Call trace: [ 327.646681][ T22] disconnect_work+0x270/0x324 [ 327.647731][ T22] process_one_work+0x7ac/0x1404 [ 327.648782][ T22] worker_thread+0x8e4/0xfec [ 327.649723][ T22] kthread+0x250/0x2d8 [ 327.650567][ T22] ret_from_fork+0x10/0x20 [ 327.651573][ T22] irq event stamp: 275428 [ 327.652567][ T22] hardirqs last enabled at (275427): [] exit_to_kernel_mode+0xe8/0x118 [ 327.654680][ T22] hardirqs last disabled at (275428): [] el1_dbg+0x24/0x80 [ 327.656468][ T22] softirqs last enabled at (275422): [] handle_softirqs+0xb84/0xd58 [ 327.658452][ T22] softirqs last disabled at (275171): [] __do_softirq+0x14/0x20 [ 327.660433][ T22] ---[ end trace 0000000000000000 ]--- [ 327.664767][ T22] ------------[ cut here ]------------ [ 327.666059][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 327.667874][ T22] Modules linked in: [ 327.668597][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.670503][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.672499][ T22] Workqueue: events disconnect_work [ 327.673584][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.675245][ T22] pc : disconnect_work+0x264/0x324 [ 327.676336][ T22] lr : disconnect_work+0x264/0x324 [ 327.677390][ T22] sp : ffff80001d1f7af0 [ 327.678243][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.679978][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 327.681688][ T22] x23: ffff0000f9de2000 x22: ffff0000f9de2010 x21: ffff0000d0de2de8 [ 327.683387][ T22] x20: 1fffe0001f3bc400 x19: 0000000000000000 x18: ffff80001d1f7440 [ 327.685081][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.686835][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000000001 [ 327.688559][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 327.690277][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.692043][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 327.693884][ T22] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.695697][ T22] Call trace: [ 327.696434][ T22] disconnect_work+0x264/0x324 [ 327.697522][ T22] process_one_work+0x7ac/0x1404 [ 327.698586][ T22] worker_thread+0x8e4/0xfec [ 327.699539][ T22] kthread+0x250/0x2d8 [ 327.700401][ T22] ret_from_fork+0x10/0x20 [ 327.701322][ T22] irq event stamp: 275474 [ 327.702197][ T22] hardirqs last enabled at (275473): [] exit_to_kernel_mode+0xe8/0x118 [ 327.704264][ T22] hardirqs last disabled at (275474): [] el1_dbg+0x24/0x80 [ 327.706145][ T22] softirqs last enabled at (275468): [] handle_softirqs+0xb84/0xd58 [ 327.708198][ T22] softirqs last disabled at (275433): [] __do_softirq+0x14/0x20 [ 327.710121][ T22] ---[ end trace 0000000000000000 ]--- [ 327.715964][ T22] ------------[ cut here ]------------ [ 327.717119][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 327.719272][ T22] Modules linked in: [ 327.720051][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.721970][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.724008][ T22] Workqueue: events disconnect_work [ 327.725084][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.726719][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 327.728052][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 327.729512][ T22] sp : ffff80001d1f7a90 [ 327.730408][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.732092][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000f9de2048 [ 327.733787][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 327.735597][ T22] x20: 0000000000000000 x19: ffff0000f9de2000 x18: ffff80001d1f7440 [ 327.737276][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.738957][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 327.740628][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 327.742274][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.743984][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 327.745710][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.747331][ T22] Call trace: [ 327.748028][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 327.749353][ T22] disconnect_work+0x18c/0x324 [ 327.750373][ T22] process_one_work+0x7ac/0x1404 [ 327.751422][ T22] worker_thread+0x8e4/0xfec [ 327.752390][ T22] kthread+0x250/0x2d8 [ 327.753254][ T22] ret_from_fork+0x10/0x20 [ 327.754155][ T22] irq event stamp: 275532 [ 327.755059][ T22] hardirqs last enabled at (275531): [] exit_to_kernel_mode+0xe8/0x118 [ 327.757194][ T22] hardirqs last disabled at (275532): [] el1_dbg+0x24/0x80 [ 327.759013][ T22] softirqs last enabled at (275526): [] handle_softirqs+0xb84/0xd58 [ 327.761120][ T22] softirqs last disabled at (275477): [] __do_softirq+0x14/0x20 [ 327.763008][ T22] ---[ end trace 0000000000000000 ]--- [ 327.767276][ T22] ------------[ cut here ]------------ [ 327.768478][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 327.770293][ T22] Modules linked in: [ 327.771070][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.773051][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.775224][ T22] Workqueue: events disconnect_work [ 327.776298][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.778000][ T22] pc : disconnect_work+0x270/0x324 [ 327.779109][ T22] lr : disconnect_work+0x270/0x324 [ 327.780213][ T22] sp : ffff80001d1f7af0 [ 327.781141][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.782815][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000f9de2048 [ 327.784504][ T22] x23: 0000000000000000 x22: ffff0000f9de2010 x21: ffff0000d0de2de8 [ 327.786250][ T22] x20: 1fffe0001f3bc400 x19: 0000000000000000 x18: ffff80001d1f7440 [ 327.787986][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.789615][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 327.791301][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 327.793012][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.794678][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 327.796240][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.797968][ T22] Call trace: [ 327.798648][ T22] disconnect_work+0x270/0x324 [ 327.799644][ T22] process_one_work+0x7ac/0x1404 [ 327.800671][ T22] worker_thread+0x8e4/0xfec [ 327.801619][ T22] kthread+0x250/0x2d8 [ 327.802537][ T22] ret_from_fork+0x10/0x20 [ 327.803461][ T22] irq event stamp: 275564 [ 327.804367][ T22] hardirqs last enabled at (275563): [] exit_to_kernel_mode+0xe8/0x118 [ 327.806506][ T22] hardirqs last disabled at (275564): [] el1_dbg+0x24/0x80 [ 327.808177][ T22] softirqs last enabled at (275558): [] handle_softirqs+0xb84/0xd58 [ 327.810144][ T22] softirqs last disabled at (275535): [] __do_softirq+0x14/0x20 [ 327.812127][ T22] ---[ end trace 0000000000000000 ]--- [ 327.817101][ T22] ------------[ cut here ]------------ [ 327.818289][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 327.820072][ T22] Modules linked in: [ 327.820874][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.822807][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.824888][ T22] Workqueue: events disconnect_work [ 327.826070][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.827732][ T22] pc : disconnect_work+0x264/0x324 [ 327.828788][ T22] lr : disconnect_work+0x264/0x324 [ 327.829840][ T22] sp : ffff80001d1f7af0 [ 327.830733][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.832407][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 327.834153][ T22] x23: ffff0000ef692000 x22: ffff0000ef692010 x21: ffff0000d0de2de8 [ 327.835831][ T22] x20: 1fffe0001ded2400 x19: 0000000000000000 x18: ffff80001d1f7440 [ 327.837556][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.839181][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000000001 [ 327.840925][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 327.842592][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.844322][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 327.845999][ T22] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.847693][ T22] Call trace: [ 327.848409][ T22] disconnect_work+0x264/0x324 [ 327.849494][ T22] process_one_work+0x7ac/0x1404 [ 327.850591][ T22] worker_thread+0x8e4/0xfec [ 327.851594][ T22] kthread+0x250/0x2d8 [ 327.852445][ T22] ret_from_fork+0x10/0x20 [ 327.853386][ T22] irq event stamp: 275606 [ 327.854299][ T22] hardirqs last enabled at (275605): [] exit_to_kernel_mode+0xe8/0x118 [ 327.856599][ T22] hardirqs last disabled at (275606): [] el1_dbg+0x24/0x80 [ 327.858537][ T22] softirqs last enabled at (275600): [] handle_softirqs+0xb84/0xd58 [ 327.860639][ T22] softirqs last disabled at (275567): [] __do_softirq+0x14/0x20 [ 327.862583][ T22] ---[ end trace 0000000000000000 ]--- [ 327.866765][ T22] ------------[ cut here ]------------ [ 327.867923][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 327.870040][ T22] Modules linked in: [ 327.870832][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.872742][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.874808][ T22] Workqueue: events disconnect_work [ 327.875889][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.877550][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 327.878870][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 327.880244][ T22] sp : ffff80001d1f7a90 [ 327.881132][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.882822][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000ef692048 [ 327.884482][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 327.886098][ T22] x20: 0000000000000000 x19: ffff0000ef692000 x18: ffff80001d1f7440 [ 327.887813][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.889445][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 327.891079][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 327.892727][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.894399][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 327.896117][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.897828][ T22] Call trace: [ 327.898513][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 327.899772][ T22] disconnect_work+0x18c/0x324 [ 327.900819][ T22] process_one_work+0x7ac/0x1404 [ 327.901879][ T22] worker_thread+0x8e4/0xfec [ 327.902869][ T22] kthread+0x250/0x2d8 [ 327.903765][ T22] ret_from_fork+0x10/0x20 [ 327.904680][ T22] irq event stamp: 275638 [ 327.905591][ T22] hardirqs last enabled at (275637): [] exit_to_kernel_mode+0xe8/0x118 [ 327.907675][ T22] hardirqs last disabled at (275638): [] el1_dbg+0x24/0x80 [ 327.909479][ T22] softirqs last enabled at (275632): [] handle_softirqs+0xb84/0xd58 [ 327.911518][ T22] softirqs last disabled at (275609): [] __do_softirq+0x14/0x20 [ 327.913604][ T22] ---[ end trace 0000000000000000 ]--- [ 327.920500][ T22] ------------[ cut here ]------------ [ 327.921654][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 327.923534][ T22] Modules linked in: [ 327.924331][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.926315][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.928424][ T22] Workqueue: events disconnect_work [ 327.929530][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.931253][ T22] pc : disconnect_work+0x270/0x324 [ 327.932261][ T22] lr : disconnect_work+0x270/0x324 [ 327.933333][ T22] sp : ffff80001d1f7af0 [ 327.934224][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.935873][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000ef692048 [ 327.937604][ T22] x23: 0000000000000000 x22: ffff0000ef692010 x21: ffff0000d0de2de8 [ 327.939260][ T22] x20: 1fffe0001ded2400 x19: 0000000000000000 x18: ffff80001d1f7440 [ 327.941034][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.942642][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 327.944287][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 327.945968][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.947671][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 327.949378][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 327.951217][ T22] Call trace: [ 327.951874][ T22] disconnect_work+0x270/0x324 [ 327.952922][ T22] process_one_work+0x7ac/0x1404 [ 327.953984][ T22] worker_thread+0x8e4/0xfec [ 327.954965][ T22] kthread+0x250/0x2d8 [ 327.955798][ T22] ret_from_fork+0x10/0x20 [ 327.956703][ T22] irq event stamp: 275702 [ 327.957607][ T22] hardirqs last enabled at (275701): [] exit_to_kernel_mode+0xe8/0x118 [ 327.959610][ T22] hardirqs last disabled at (275702): [] el1_dbg+0x24/0x80 [ 327.961490][ T22] softirqs last enabled at (275696): [] handle_softirqs+0xb84/0xd58 [ 327.963503][ T22] softirqs last disabled at (275641): [] __do_softirq+0x14/0x20 [ 327.965449][ T22] ---[ end trace 0000000000000000 ]--- [ 327.969727][ T22] ------------[ cut here ]------------ [ 327.970801][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 327.972593][ T22] Modules linked in: [ 327.973405][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 327.975449][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.977626][ T22] Workqueue: events disconnect_work [ 327.978701][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 327.980406][ T22] pc : disconnect_work+0x264/0x324 [ 327.981472][ T22] lr : disconnect_work+0x264/0x324 [ 327.982546][ T22] sp : ffff80001d1f7af0 [ 327.983444][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 327.985131][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 327.986856][ T22] x23: ffff0000d211e000 x22: ffff0000d211e010 x21: ffff0000d0de2de8 [ 327.988570][ T22] x20: 1fffe0001a423c00 x19: 0000000000000000 x18: ffff80001d1f7440 [ 327.990375][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 327.992063][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000000001 [ 327.993774][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 327.995391][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 327.997083][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 327.998800][ T22] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 328.000372][ T22] Call trace: [ 328.001081][ T22] disconnect_work+0x264/0x324 [ 328.002072][ T22] process_one_work+0x7ac/0x1404 [ 328.003102][ T22] worker_thread+0x8e4/0xfec [ 328.004060][ T22] kthread+0x250/0x2d8 [ 328.004909][ T22] ret_from_fork+0x10/0x20 [ 328.005900][ T22] irq event stamp: 275752 [ 328.006798][ T22] hardirqs last enabled at (275751): [] exit_to_kernel_mode+0xe8/0x118 [ 328.008975][ T22] hardirqs last disabled at (275752): [] el1_dbg+0x24/0x80 [ 328.010977][ T22] softirqs last enabled at (275746): [] handle_softirqs+0xb84/0xd58 [ 328.012967][ T22] softirqs last disabled at (275705): [] __do_softirq+0x14/0x20 [ 328.014886][ T22] ---[ end trace 0000000000000000 ]--- [ 328.019195][ T22] ------------[ cut here ]------------ [ 328.020362][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 328.022612][ T22] Modules linked in: [ 328.023410][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 328.025305][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 328.027412][ T22] Workqueue: events disconnect_work [ 328.028511][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 328.030131][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 328.031485][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 328.032953][ T22] sp : ffff80001d1f7a90 [ 328.033800][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 328.035464][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000d211e048 [ 328.037113][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 328.038788][ T22] x20: 0000000000000000 x19: ffff0000d211e000 x18: ffff80001d1f7440 [ 328.040448][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 328.042253][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 328.043918][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 328.045575][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 328.047247][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 328.048930][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 328.050632][ T22] Call trace: [ 328.051339][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 328.052631][ T22] disconnect_work+0x18c/0x324 [ 328.053629][ T22] process_one_work+0x7ac/0x1404 [ 328.054660][ T22] worker_thread+0x8e4/0xfec [ 328.055602][ T22] kthread+0x250/0x2d8 [ 328.056498][ T22] ret_from_fork+0x10/0x20 [ 328.057462][ T22] irq event stamp: 275798 [ 328.058337][ T22] hardirqs last enabled at (275797): [] exit_to_kernel_mode+0xe8/0x118 [ 328.060501][ T22] hardirqs last disabled at (275798): [] el1_dbg+0x24/0x80 [ 328.062307][ T22] softirqs last enabled at (275792): [] handle_softirqs+0xb84/0xd58 [ 328.064484][ T22] softirqs last disabled at (275755): [] __do_softirq+0x14/0x20 [ 328.066333][ T22] ---[ end trace 0000000000000000 ]--- [ 328.071879][ T22] ------------[ cut here ]------------ [ 328.073081][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 328.074940][ T22] Modules linked in: [ 328.075820][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 328.077808][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 328.079896][ T22] Workqueue: events disconnect_work [ 328.080971][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 328.082629][ T22] pc : disconnect_work+0x270/0x324 [ 328.083649][ T22] lr : disconnect_work+0x270/0x324 [ 328.084684][ T22] sp : ffff80001d1f7af0 [ 328.085542][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 328.087225][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000d211e048 [ 328.088954][ T22] x23: 0000000000000000 x22: ffff0000d211e010 x21: ffff0000d0de2de8 [ 328.090687][ T22] x20: 1fffe0001a423c00 x19: 0000000000000000 x18: ffff80001d1f7440 [ 328.092411][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 328.094054][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 328.095758][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 328.097441][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 328.099142][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 328.100874][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 328.102597][ T22] Call trace: [ 328.103292][ T22] disconnect_work+0x270/0x324 [ 328.104283][ T22] process_one_work+0x7ac/0x1404 [ 328.105316][ T22] worker_thread+0x8e4/0xfec [ 328.106318][ T22] kthread+0x250/0x2d8 [ 328.107184][ T22] ret_from_fork+0x10/0x20 [ 328.108157][ T22] irq event stamp: 276196 [ 328.108987][ T22] hardirqs last enabled at (276195): [] exit_to_kernel_mode+0xe8/0x118 [ 328.111057][ T22] hardirqs last disabled at (276196): [] el1_dbg+0x24/0x80 [ 328.112870][ T22] softirqs last enabled at (276190): [] handle_softirqs+0xb84/0xd58 [ 328.114880][ T22] softirqs last disabled at (275801): [] __do_softirq+0x14/0x20 [ 328.116831][ T22] ---[ end trace 0000000000000000 ]--- [ 328.118847][ T22] ------------[ cut here ]------------ [ 328.119941][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 328.121764][ T22] Modules linked in: [ 328.122609][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 328.124584][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 328.126647][ T22] Workqueue: events disconnect_work [ 328.127787][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 328.129451][ T22] pc : disconnect_work+0x264/0x324 [ 328.130489][ T22] lr : disconnect_work+0x264/0x324 [ 328.131513][ T22] sp : ffff80001d1f7af0 [ 328.132373][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 328.134110][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 328.135816][ T22] x23: ffff0000d0c30c90 x22: ffff0000d0c30ca0 x21: ffff0000d0d38de8 [ 328.137514][ T22] x20: 1fffe0001a186192 x19: 0000000000000000 x18: ffff80001d1f7440 [ 328.139276][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 328.140932][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000000001 [ 328.142623][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 328.144334][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 328.145998][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 328.147677][ T22] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 328.149351][ T22] Call trace: [ 328.150021][ T22] disconnect_work+0x264/0x324 [ 328.150996][ T22] process_one_work+0x7ac/0x1404 [ 328.152015][ T22] worker_thread+0x8e4/0xfec [ 328.152986][ T22] kthread+0x250/0x2d8 [ 328.153803][ T22] ret_from_fork+0x10/0x20 [ 328.154766][ T22] irq event stamp: 276294 [ 328.155680][ T22] hardirqs last enabled at (276293): [] exit_to_kernel_mode+0xe8/0x118 [ 328.157714][ T22] hardirqs last disabled at (276294): [] el1_dbg+0x24/0x80 [ 328.159601][ T22] softirqs last enabled at (276288): [] handle_softirqs+0xb84/0xd58 [ 328.161624][ T22] softirqs last disabled at (276199): [] __do_softirq+0x14/0x20 [ 328.163571][ T22] ---[ end trace 0000000000000000 ]--- [ 328.166105][ T22] ------------[ cut here ]------------ [ 328.167231][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 328.169336][ T22] Modules linked in: [ 328.170128][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 328.172009][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 328.174107][ T22] Workqueue: events disconnect_work [ 328.175295][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 328.176976][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 328.178329][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 328.179706][ T22] sp : ffff80001d1f7a90 [ 328.180651][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 328.182378][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000d0c30cd8 [ 328.184051][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 328.185834][ T22] x20: 0000000000000000 x19: ffff0000d0c30c90 x18: ffff80001d1f7440 [ 328.187552][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 328.189263][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 328.190987][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 328.192714][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 328.194489][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 328.196230][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 328.197981][ T22] Call trace: [ 328.198693][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 328.200002][ T22] disconnect_work+0x18c/0x324 [ 328.201037][ T22] process_one_work+0x7ac/0x1404 [ 328.202123][ T22] worker_thread+0x8e4/0xfec [ 328.203132][ T22] kthread+0x250/0x2d8 [ 328.203956][ T22] ret_from_fork+0x10/0x20 [ 328.204857][ T22] irq event stamp: 276580 [ 328.205825][ T22] hardirqs last enabled at (276579): [] exit_to_kernel_mode+0xe8/0x118 [ 328.208003][ T22] hardirqs last disabled at (276580): [] el1_dbg+0x24/0x80 [ 328.209934][ T22] softirqs last enabled at (276574): [] handle_softirqs+0xb84/0xd58 [ 328.212020][ T22] softirqs last disabled at (276297): [] __do_softirq+0x14/0x20 [ 328.213993][ T22] ---[ end trace 0000000000000000 ]--- [ 328.218844][ T22] ------------[ cut here ]------------ [ 328.220018][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 328.221826][ T22] Modules linked in: [ 328.222676][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 328.224631][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 328.226722][ T22] Workqueue: events disconnect_work [ 328.227852][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 328.229462][ T22] pc : disconnect_work+0x270/0x324 [ 328.230535][ T22] lr : disconnect_work+0x270/0x324 [ 328.231604][ T22] sp : ffff80001d1f7af0 [ 328.232527][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 328.234286][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000d0c30cd8 [ 328.235996][ T22] x23: 0000000000000000 x22: ffff0000d0c30ca0 x21: ffff0000d0d38de8 [ 328.237771][ T22] x20: 1fffe0001a186192 x19: 0000000000000000 x18: ffff80001d1f7440 [ 328.239455][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 328.241282][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 328.243080][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 328.244763][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 328.246466][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 328.248178][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 328.249916][ T22] Call trace: [ 328.250643][ T22] disconnect_work+0x270/0x324 [ 328.251706][ T22] process_one_work+0x7ac/0x1404 [ 328.252770][ T22] worker_thread+0x8e4/0xfec [ 328.253733][ T22] kthread+0x250/0x2d8 [ 328.254575][ T22] ret_from_fork+0x10/0x20 [ 328.255463][ T22] irq event stamp: 276750 [ 328.256150][ T22] hardirqs last enabled at (276749): [] exit_to_kernel_mode+0xe8/0x118 [ 328.257716][ T22] hardirqs last disabled at (276750): [] el1_dbg+0x24/0x80 [ 328.259155][ T22] softirqs last enabled at (276744): [] handle_softirqs+0xb84/0xd58 [ 328.260775][ T22] softirqs last disabled at (276583): [] __do_softirq+0x14/0x20 [ 328.262599][ T22] ---[ end trace 0000000000000000 ]--- [ 328.273465][ T22] ------------[ cut here ]------------ [ 328.274616][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 328.276502][ T22] Modules linked in: [ 328.277328][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 328.279301][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 328.281442][ T22] Workqueue: events disconnect_work [ 328.282580][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 328.284237][ T22] pc : disconnect_work+0x264/0x324 [ 328.285295][ T22] lr : disconnect_work+0x264/0x324 [ 328.286355][ T22] sp : ffff80001d1f7af0 [ 328.287198][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 328.288922][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 328.290601][ T22] x23: ffff0000d0c20c90 x22: ffff0000d0c20ca0 x21: ffff0000d0cd0de8 [ 328.292282][ T22] x20: 1fffe0001a184192 x19: 0000000000000000 x18: ffff80001d1f7440 [ 328.294047][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 328.295712][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000000001 [ 328.297406][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 328.299126][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 328.300783][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 328.302430][ T22] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 328.304111][ T22] Call trace: [ 328.304817][ T22] disconnect_work+0x264/0x324 [ 328.305817][ T22] process_one_work+0x7ac/0x1404 [ 328.306845][ T22] worker_thread+0x8e4/0xfec [ 328.307828][ T22] kthread+0x250/0x2d8 [ 328.308677][ T22] ret_from_fork+0x10/0x20 [ 328.309614][ T22] irq event stamp: 277004 [ 328.310560][ T22] hardirqs last enabled at (277003): [] exit_to_kernel_mode+0xe8/0x118 [ 328.312682][ T22] hardirqs last disabled at (277004): [] el1_dbg+0x24/0x80 [ 328.314511][ T22] softirqs last enabled at (276998): [] handle_softirqs+0xb84/0xd58 [ 328.316563][ T22] softirqs last disabled at (276753): [] __do_softirq+0x14/0x20 [ 328.318482][ T22] ---[ end trace 0000000000000000 ]--- [ 328.320500][ T22] ------------[ cut here ]------------ [ 328.321805][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 328.323826][ T22] Modules linked in: [ 328.324627][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 328.326650][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 328.328759][ T22] Workqueue: events disconnect_work [ 328.329802][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 328.331447][ T22] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 328.332840][ T22] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 328.334158][ T22] sp : ffff80001d1f7a90 [ 328.335033][ T22] x29: ffff80001d1f7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 328.336649][ T22] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000d0c20cd8 [ 328.338322][ T22] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 328.339942][ T22] x20: 0000000000000000 x19: ffff0000d0c20c90 x18: ffff80001d1f7440 [ 328.341610][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 328.343233][ T22] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 328.344869][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 328.346478][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 328.348103][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 328.349773][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 328.351429][ T22] Call trace: [ 328.352104][ T22] cfg80211_beaconing_iface_active+0x370/0x424 [ 328.353357][ T22] disconnect_work+0x18c/0x324 [ 328.354349][ T22] process_one_work+0x7ac/0x1404 [ 328.355354][ T22] worker_thread+0x8e4/0xfec [ 328.356327][ T22] kthread+0x250/0x2d8 [ 328.357237][ T22] ret_from_fork+0x10/0x20 [ 328.358102][ T22] irq event stamp: 277056 [ 328.358938][ T22] hardirqs last enabled at (277055): [] exit_to_kernel_mode+0xe8/0x118 [ 328.360954][ T22] hardirqs last disabled at (277056): [] el1_dbg+0x24/0x80 [ 328.362781][ T22] softirqs last enabled at (277054): [] handle_softirqs+0xb84/0xd58 [ 328.364822][ T22] softirqs last disabled at (277007): [] __do_softirq+0x14/0x20 [ 328.366635][ T22] ---[ end trace 0000000000000000 ]--- [ 328.369824][ T22] ------------[ cut here ]------------ [ 328.371085][ T22] WARNING: CPU: 1 PID: 22 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 328.372981][ T22] Modules linked in: [ 328.373850][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Tainted: G W 6.1.111-syzkaller #0 [ 328.375967][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 328.378032][ T22] Workqueue: events disconnect_work [ 328.379161][ T22] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 328.380859][ T22] pc : disconnect_work+0x270/0x324 [ 328.382004][ T22] lr : disconnect_work+0x270/0x324 [ 328.383046][ T22] sp : ffff80001d1f7af0 [ 328.383829][ T22] x29: ffff80001d1f7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 328.385693][ T22] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000d0c20cd8 [ 328.387378][ T22] x23: 0000000000000000 x22: ffff0000d0c20ca0 x21: ffff0000d0cd0de8 [ 328.389106][ T22] x20: 1fffe0001a184192 x19: 0000000000000000 x18: ffff80001d1f7440 [ 328.390737][ T22] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 328.392387][ T22] x14: 000000000000000d x13: ffff0000c0a5b780 x12: 0000000000ff0100 [ 328.394123][ T22] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 328.395824][ T22] x8 : ffff0000c0a5b780 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 328.397669][ T22] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 328.399414][ T22] x2 : ffff0000c0a5b780 x1 : 0000000000000000 x0 : 0000000000000000 [ 328.401182][ T22] Call trace: [ 328.401865][ T22] disconnect_work+0x270/0x324 [ 328.402941][ T22] process_one_work+0x7ac/0x1404 [ 328.404089][ T22] worker_thread+0x8e4/0xfec [ 328.405110][ T22] kthread+0x250/0x2d8 [ 328.405990][ T22] ret_from_fork+0x10/0x20 [ 328.406966][ T22] irq event stamp: 277684 [ 328.407883][ T22] hardirqs last enabled at (277683): [] exit_to_kernel_mode+0xe8/0x118 [ 328.410188][ T22] hardirqs last disabled at (277684): [] el1_dbg+0x24/0x80 [ 328.412155][ T22] softirqs last enabled at (277682): [] handle_softirqs+0xb84/0xd58 [ 328.414249][ T22] softirqs last disabled at (277059): [] __do_softirq+0x14/0x20 [ 328.416331][ T22] ---[ end trace 0000000000000000 ]--- [ 328.497679][ T6884] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.506145][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.508733][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.510786][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.512321][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.515381][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.517704][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.519924][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.521481][ T4357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.523688][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.526250][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.780322][ T6884] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.925872][ T6884] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.937917][ T4526] device hsr_slave_0 left promiscuous mode [ 328.973400][ T4526] device hsr_slave_1 left promiscuous mode [ 329.033671][ T4526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.035349][ T4526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.038141][ T4526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.039836][ T4526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.042105][ T4526] device bridge_slave_1 left promiscuous mode [ 329.044607][ T4526] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.084369][ T4526] device bridge_slave_0 left promiscuous mode [ 329.085849][ T4526] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.223541][ T4526] device veth1_macvtap left promiscuous mode [ 329.224824][ T4526] device veth0_macvtap left promiscuous mode [ 329.226103][ T4526] device veth1_vlan left promiscuous mode [ 329.227342][ T4526] device veth0_vlan left promiscuous mode [ 329.393248][ T4296] Bluetooth: hci4: command tx timeout [ 331.498641][ T4526] team0 (unregistering): Port device team_slave_1 removed [ 331.705894][ T4526] team0 (unregistering): Port device team_slave_0 removed [ 331.903966][ T4526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.174790][ T4526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface