last executing test programs: 1m11.239990772s ago: executing program 0 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 1m10.999258616s ago: executing program 0 (id=20): sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000700ffff200007800c00018008000140e000002508000a400000000105000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m3.014414103s ago: executing program 1 (id=50): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m1.867878889s ago: executing program 0 (id=51): r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x6) sendfile(r1, r2, &(0x7f0000000100)=0x6, 0x100000000010001) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m1.718757621s ago: executing program 1 (id=53): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r1, 0x0, 0x0) 1m0.834056324s ago: executing program 0 (id=54): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r2, &(0x7f0000000540)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000500)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x1}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4002}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) 1m0.558302588s ago: executing program 1 (id=56): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 1m0.40264796s ago: executing program 0 (id=58): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x30}}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 59.221020948s ago: executing program 1 (id=61): bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x9, 0x3, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd2b, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 58.661396396s ago: executing program 1 (id=68): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ftruncate(r0, 0x88801) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x140) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendfile(r2, r3, 0x0, 0x8000fbffc001) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './bus\x00'}, 0x6e) 58.624851927s ago: executing program 0 (id=69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2"], 0xb4}}, 0x8000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0x3, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1403fe, 0x9, 0x0, 0xfd, 0x8, 0x0, 0xb3, 0xfe, 0x3, 0x7a, 0x80, 0xf6, 0xb82e}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 58.394348639s ago: executing program 1 (id=70): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000240)=""/133, 0x85}, {&(0x7f0000000300)=""/27, 0x1b}], 0x5, 0x154, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x19, 0x6, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x0, [0x400]}}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x2, 0x0, 0x3, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$rfkill(r2, &(0x7f00000000c0)={0xdd0, 0x6, 0x2}, 0x8) 43.456676727s ago: executing program 32 (id=69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2"], 0xb4}}, 0x8000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0x3, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1403fe, 0x9, 0x0, 0xfd, 0x8, 0x0, 0xb3, 0xfe, 0x3, 0x7a, 0x80, 0xf6, 0xb82e}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 43.2668912s ago: executing program 33 (id=70): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000240)=""/133, 0x85}, {&(0x7f0000000300)=""/27, 0x1b}], 0x5, 0x154, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x19, 0x6, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x0, [0x400]}}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x2, 0x0, 0x3, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$rfkill(r2, &(0x7f00000000c0)={0xdd0, 0x6, 0x2}, 0x8) 5.424107961s ago: executing program 3 (id=336): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.339107647s ago: executing program 4 (id=339): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r4, @ANYBLOB="0100ffffffff000000000100000008000100", @ANYRES32=r3, @ANYBLOB="b00002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1], 0xcc}, 0x1, 0xf000}, 0x0) 4.217512849s ago: executing program 2 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) 4.16038639s ago: executing program 4 (id=341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x11, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.159191059s ago: executing program 3 (id=342): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @local, @remote}}}}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)={[{@noinit_itable}, {@abort}]}, 0x0, 0x3d4, &(0x7f00000004c0)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x2, 0x2, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000540)=""/242, 0xf2}], 0x1) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) syz_emit_ethernet(0xb2, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@mpls_uc={0x8847, {[{0xe3}, {0x7, 0x0, 0x1}, {}, {0xef, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0xb}, {0x400}, {0xff}], @llc={@snap={0xaa, 0x0, '@', "15da7d", 0x6001, "0bb3699fdc1cd5be57be6f3854ec49ba769d7e29e54c0878aa153bcddfcea29e2260d6d8424c188ec077b23bea271673c3dad5c9aa6926cc6e122312ab9c34ce5005826cbcab235a744df13f5a9babd40758260c374b6ab20d4ac5982fdd4a69ff956d352fe96243e1306cf7084b47f3982aed3c07af1fedc3331382"}}}}}}, 0x0) 3.101255745s ago: executing program 2 (id=343): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sync() sync() setuid(0xffffffffffffffff) r1 = io_uring_setup(0x6f2f, &(0x7f00000002c0)={0x0, 0x23dc, 0x0, 0x800002, 0x3ca}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 3.100995315s ago: executing program 3 (id=344): r0 = gettid() unshare(0x22020600) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x1) flock(r1, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.100781085s ago: executing program 4 (id=345): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x7ffc, 0x40024e}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$sg(0x0, 0x276, 0x200) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x1000, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000000) 2.981404457s ago: executing program 4 (id=346): unlink(&(0x7f0000000200)='./cgroup\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2.709082781s ago: executing program 2 (id=347): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x94f, &(0x7f00000016c0), &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x7, 0x464f, 0x1, 0x0, 0x0) io_uring_enter(r1, 0x1815, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) io_uring_enter(r1, 0x231a, 0x0, 0x0, 0x0, 0x0) 2.70882979s ago: executing program 4 (id=348): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.830874963s ago: executing program 4 (id=349): socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.826663144s ago: executing program 2 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 1.826050774s ago: executing program 3 (id=350): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1ae) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="98"], 0x298) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20) mkdir(&(0x7f0000000040)='./bus\x00', 0x50) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') 1.738886475s ago: executing program 3 (id=351): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000180)=0x8cc, 0xc06620, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x74e, &(0x7f0000000840)="$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") ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) 905.713157ms ago: executing program 2 (id=352): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a003000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r1, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) 2.88562ms ago: executing program 2 (id=353): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x103) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000004c0)={0x1, r1}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x2018}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/62, 0x0, 0x6000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/68, 0x0, 0x8080000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x8000001) 0s ago: executing program 3 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts. [ 74.074415][ T4239] cgroup: Unknown subsys name 'net' [ 74.212237][ T4239] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.761810][ T4239] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.233777][ T4262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.236544][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.249521][ T4262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.249597][ T4265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.258198][ T4262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.266174][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.272375][ T4262] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.285705][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.286416][ T4262] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.293593][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.300639][ T4262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.307264][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.314664][ T4262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.321963][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.328825][ T4262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.337126][ T4265] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.342757][ T4262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.349463][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.356089][ T4262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.364248][ T4265] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.373095][ T4266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.377859][ T4265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.384014][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.391819][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.397710][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.406465][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.418868][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.429980][ T4252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.437669][ T4252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.446093][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.866188][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 77.897950][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 78.006465][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 78.126846][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 78.137938][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.145085][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.153701][ T4254] device bridge_slave_0 entered promiscuous mode [ 78.163045][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.170363][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.179100][ T4251] device bridge_slave_0 entered promiscuous mode [ 78.194368][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.201695][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.209849][ T4254] device bridge_slave_1 entered promiscuous mode [ 78.217894][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.225006][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.233104][ T4251] device bridge_slave_1 entered promiscuous mode [ 78.284347][ T4257] chnl_net:caif_netlink_parms(): no params data found [ 78.309465][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.317000][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.324866][ T4250] device bridge_slave_0 entered promiscuous mode [ 78.348235][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.359879][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.375812][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.382958][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.391038][ T4250] device bridge_slave_1 entered promiscuous mode [ 78.412825][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.423957][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.491117][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.504348][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.533305][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.540993][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.549899][ T4256] device bridge_slave_0 entered promiscuous mode [ 78.568242][ T4254] team0: Port device team_slave_0 added [ 78.585796][ T4251] team0: Port device team_slave_0 added [ 78.595070][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.602635][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.610614][ T4256] device bridge_slave_1 entered promiscuous mode [ 78.619402][ T4254] team0: Port device team_slave_1 added [ 78.637326][ T4250] team0: Port device team_slave_0 added [ 78.644910][ T4251] team0: Port device team_slave_1 added [ 78.686400][ T4250] team0: Port device team_slave_1 added [ 78.708854][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.716356][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.724585][ T4257] device bridge_slave_0 entered promiscuous mode [ 78.734217][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.744581][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.751710][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.777845][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.809021][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.816119][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.842103][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.853635][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.861176][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.869223][ T4257] device bridge_slave_1 entered promiscuous mode [ 78.878001][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.887764][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.894733][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.920747][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.948788][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.956293][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.982306][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.014262][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.021321][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.048090][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.082295][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.089398][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.115751][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.133453][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.154235][ T4256] team0: Port device team_slave_0 added [ 79.172094][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.190072][ T4256] team0: Port device team_slave_1 added [ 79.208958][ T4251] device hsr_slave_0 entered promiscuous mode [ 79.216101][ T4251] device hsr_slave_1 entered promiscuous mode [ 79.233160][ T4254] device hsr_slave_0 entered promiscuous mode [ 79.240746][ T4254] device hsr_slave_1 entered promiscuous mode [ 79.247972][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.255947][ T4254] Cannot create hsr debugfs directory [ 79.296929][ T4257] team0: Port device team_slave_0 added [ 79.314873][ T4250] device hsr_slave_0 entered promiscuous mode [ 79.321920][ T4250] device hsr_slave_1 entered promiscuous mode [ 79.328800][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.337246][ T4250] Cannot create hsr debugfs directory [ 79.351724][ T4257] team0: Port device team_slave_1 added [ 79.367119][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.374101][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.400362][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.444189][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.451312][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.477421][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.512150][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.519934][ T4252] Bluetooth: hci2: command 0x0409 tx timeout [ 79.526145][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 79.526414][ T4252] Bluetooth: hci4: command 0x0409 tx timeout [ 79.532466][ T4267] Bluetooth: hci3: command 0x0409 tx timeout [ 79.538688][ T4252] Bluetooth: hci1: command 0x0409 tx timeout [ 79.551395][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.577630][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.618422][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.625425][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.651481][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.720647][ T4257] device hsr_slave_0 entered promiscuous mode [ 79.727785][ T4257] device hsr_slave_1 entered promiscuous mode [ 79.734438][ T4257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.742543][ T4257] Cannot create hsr debugfs directory [ 79.784492][ T4256] device hsr_slave_0 entered promiscuous mode [ 79.791917][ T4256] device hsr_slave_1 entered promiscuous mode [ 79.798955][ T4256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.806827][ T4256] Cannot create hsr debugfs directory [ 80.064342][ T4251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.078760][ T4251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.101041][ T4251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.111553][ T4251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.173566][ T4250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.190938][ T4250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.201893][ T4250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.212285][ T4250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.264390][ T4254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.296859][ T4254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.307618][ T4254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.324753][ T4254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.353981][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.389229][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.401510][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.414118][ T4257] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.442388][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.450983][ T4257] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.463939][ T4257] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.479590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.490395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.499979][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.507335][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.521870][ T4257] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.556636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.566363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.575418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.586828][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.593950][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.602318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.633769][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.647419][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.656623][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.666683][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.701234][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.711122][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.724852][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.748839][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.759568][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.769064][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.778599][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.797995][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.808203][ T4256] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.819796][ T4256] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.835306][ T4256] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.844919][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.854370][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.863920][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.882962][ T4256] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.892325][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.901758][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.910733][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.917921][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.927873][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.955816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.964680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.983880][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.991120][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.004730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.014086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.042224][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.077333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.094589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.103709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.119640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.129173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.138890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.147908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.174812][ T4250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.186682][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.203842][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.217087][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.230496][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.240820][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.255079][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.265219][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.276011][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.284612][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.291812][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.301292][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.347923][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.363446][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.374511][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.381728][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.420701][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.451197][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.491815][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.502466][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.520833][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.537246][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.546727][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.555269][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.562972][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.570858][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.594124][ T4254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.604831][ T4252] Bluetooth: hci3: command 0x041b tx timeout [ 81.610988][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 81.611009][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 81.617050][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 81.617084][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 81.638654][ T4254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.658971][ T4257] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.667466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.686650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.722720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.742076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.781883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.801361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.838146][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.850321][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.885798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.893706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.917341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.936191][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.943347][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.976075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.987180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.005938][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.013127][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.037559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.052881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.062389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.123198][ T4257] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.145122][ T4257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.172613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.188337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.202382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.213756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.228914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.238129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.247086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.262438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.277617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.286737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.313872][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.331755][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.347442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.356987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.364873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.402302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.476184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.485508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.501078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.527895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.550735][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.557944][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.596251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.612226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.621565][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.628830][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.643004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.652549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.699393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.711060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.721958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.731451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.740949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.749994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.759929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.791860][ T4251] device veth0_vlan entered promiscuous mode [ 82.825047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.834057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.848550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.861673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.872397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.883037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.892105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.901119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.912055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.921517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.930177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.938030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.947091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.955207][ T4250] device veth0_vlan entered promiscuous mode [ 82.972239][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.991171][ T4256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.003117][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.018895][ T4250] device veth1_vlan entered promiscuous mode [ 83.032493][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.041424][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.051666][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.063395][ T4251] device veth1_vlan entered promiscuous mode [ 83.099230][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.123151][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.146524][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.154133][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.188161][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.226417][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.239916][ T4250] device veth0_macvtap entered promiscuous mode [ 83.272024][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.290818][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.300419][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.317434][ T4250] device veth1_macvtap entered promiscuous mode [ 83.335466][ T4251] device veth0_macvtap entered promiscuous mode [ 83.350447][ T4251] device veth1_macvtap entered promiscuous mode [ 83.367946][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.381878][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.392212][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.407351][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.434095][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.456810][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.465209][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.487440][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.549791][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.568076][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.594830][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.612698][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.631569][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.641749][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.657154][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.670676][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.676682][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 83.681698][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.684382][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 83.699826][ T4255] Bluetooth: hci1: command 0x040f tx timeout [ 83.699870][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 83.708840][ T4255] Bluetooth: hci4: command 0x040f tx timeout [ 83.719029][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.728886][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.738004][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.748099][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.758787][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.784182][ T4257] device veth0_vlan entered promiscuous mode [ 83.797376][ T4250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.807476][ T4250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.820757][ T4250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.831101][ T4250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.851774][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.863000][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.874976][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.898639][ T4257] device veth1_vlan entered promiscuous mode [ 83.941359][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.954714][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.970843][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.981771][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.995016][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.006483][ T4251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.015222][ T4251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.024682][ T4251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.034357][ T4251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.056865][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.122250][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.134278][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.143974][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.168248][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.178251][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.237949][ T4257] device veth0_macvtap entered promiscuous mode [ 84.267223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.276788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.285269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.294714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.303674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.312099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.320600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.334559][ T4256] device veth0_vlan entered promiscuous mode [ 84.359258][ T4257] device veth1_macvtap entered promiscuous mode [ 84.380154][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.409544][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.409670][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.427529][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.435384][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.444010][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.452701][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.461473][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.471636][ T4254] device veth0_vlan entered promiscuous mode [ 84.484732][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.496045][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.506140][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.518634][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.530291][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.543152][ T4308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.560565][ T4254] device veth1_vlan entered promiscuous mode [ 84.569767][ T4308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.580512][ T4256] device veth1_vlan entered promiscuous mode [ 84.589278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.599046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.608224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.617583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.627288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.638297][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.646782][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.647702][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.666583][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.676999][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.687772][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.700510][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.716674][ T4257] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.729164][ T4257] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.738130][ T4257] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.747009][ T4257] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.771388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.780843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.789108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.799165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.867769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.883589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.894091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.907929][ T4254] device veth0_macvtap entered promiscuous mode [ 84.922813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.932212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.941456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.954452][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.965130][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.981341][ T4254] device veth1_macvtap entered promiscuous mode [ 84.994784][ T4256] device veth0_macvtap entered promiscuous mode [ 85.029329][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.057199][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.067373][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.094145][ T4256] device veth1_macvtap entered promiscuous mode [ 85.134512][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.149663][ T4339] binder: 4338:4339 ioctl c0306201 2000000003c0 returned -14 [ 85.159982][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.175359][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.191531][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.218157][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.229609][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.242906][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.295740][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.306911][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.337019][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.363964][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.375076][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.400473][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.409402][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.419912][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.431068][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.443514][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.459885][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.472975][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.493094][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.505085][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.514548][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.538242][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.553689][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.565223][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.577345][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.588184][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.599793][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.614298][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.625723][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.638935][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.657993][ T4254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.669723][ T4254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.680263][ T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.688313][ T4254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.700289][ T4254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.716171][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.726133][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.738042][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.752107][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.763119][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 85.769384][ T4255] Bluetooth: hci4: command 0x0419 tx timeout [ 85.769404][ T4252] Bluetooth: hci2: command 0x0419 tx timeout [ 85.775434][ T4255] Bluetooth: hci0: command 0x0419 tx timeout [ 85.781537][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 85.788992][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.804554][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.814779][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.830156][ T26] audit: type=1326 audit(1749935477.739:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa590b8e929 code=0x7ffc0000 [ 85.830564][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.867157][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.877698][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.889147][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.889185][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 85.897668][ T26] audit: type=1326 audit(1749935477.769:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa590b8e929 code=0x7ffc0000 [ 85.932839][ T26] audit: type=1326 audit(1749935477.769:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa590b8e929 code=0x7ffc0000 [ 85.955650][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.957381][ T26] audit: type=1326 audit(1749935477.769:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa590b8e929 code=0x7ffc0000 [ 85.963683][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.996862][ T26] audit: type=1326 audit(1749935477.769:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa590b8e929 code=0x7ffc0000 [ 86.016156][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.033250][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.044309][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.062607][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.077548][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.086143][ T22] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.088902][ T4256] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.095389][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.118179][ T22] usb 3-1: config 0 descriptor?? [ 86.123648][ T26] audit: type=1326 audit(1749935477.769:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa590b8e929 code=0x7ffc0000 [ 86.128280][ T4256] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.154314][ T22] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 86.173942][ T26] audit: type=1326 audit(1749935477.769:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa590b8e929 code=0x7ffc0000 [ 86.202719][ T26] audit: type=1326 audit(1749935477.769:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa590b8e929 code=0x7ffc0000 [ 86.205979][ T4256] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.231402][ T26] audit: type=1326 audit(1749935477.769:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fa590b8e929 code=0x7ffc0000 [ 86.233911][ T4256] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.267137][ T26] audit: type=1326 audit(1749935477.769:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4348 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa590b8e929 code=0x7ffc0000 [ 86.453197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.555654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 86.657884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.672383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.715971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.724478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.760414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.798397][ T7] cfg80211: failed to load regulatory.db [ 86.845796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.862580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.877064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.005737][ T4296] usb 3-1: USB disconnect, device number 2 [ 87.258893][ T4359] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.379669][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.422387][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.436559][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.448666][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.457620][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.482067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.499213][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.508118][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.522686][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.597096][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.605017][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.623922][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.649805][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.805805][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 87.822205][ T7] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 87.849469][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.890859][ T7] usb 2-1: config 0 has no interface number 0 [ 87.900633][ T7] usb 2-1: config 0 interface 231 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 87.921623][ T7] usb 2-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 87.963272][ T7] usb 2-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 87.982849][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.997107][ T7] usb 2-1: Product: syz [ 88.001334][ T7] usb 2-1: Manufacturer: syz [ 88.017162][ T7] usb 2-1: SerialNumber: syz [ 88.046375][ T7] usb 2-1: config 0 descriptor?? [ 88.082565][ T7] usb-storage 2-1:0.231: USB Mass Storage device detected [ 88.309478][ T7] usb 2-1: USB disconnect, device number 2 [ 88.462076][ T4384] loop0: detected capacity change from 0 to 512 [ 88.503131][ T4384] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.513984][ T4368] loop4: detected capacity change from 0 to 32768 [ 88.540836][ T4384] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 0 [ 88.552332][ T4368] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.5 (4368) [ 88.609684][ T4368] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.639272][ T4368] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 88.661778][ T4368] BTRFS info (device loop4): force clearing of disk cache [ 88.689321][ T4368] BTRFS info (device loop4): force zlib compression, level 3 [ 88.713915][ T4368] BTRFS info (device loop4): enabling auto defrag [ 88.731112][ T4368] BTRFS info (device loop4): max_inline at 0 [ 88.751593][ T4368] BTRFS info (device loop4): enabling disk space caching [ 88.771042][ T4368] BTRFS info (device loop4): disk space caching is enabled [ 89.010939][ T4368] BTRFS info (device loop4): enabling ssd optimizations [ 89.036813][ T4368] BTRFS info (device loop4): rebuilding free space tree [ 89.137654][ T4368] BTRFS info (device loop4): disabling free space tree [ 89.149930][ T4368] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.160403][ T4368] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.850416][ T4254] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.136302][ T4448] loop2: detected capacity change from 0 to 512 [ 91.244271][ T4448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.304643][ T4448] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.664808][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 93.977621][ T4469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.36'. [ 94.019979][ T4472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 97.248824][ T4507] lo speed is unknown, defaulting to 1000 [ 97.254899][ T4507] lo speed is unknown, defaulting to 1000 [ 97.263489][ T4507] lo speed is unknown, defaulting to 1000 [ 97.273940][ T4507] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.287557][ T4507] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 97.360637][ T4507] lo speed is unknown, defaulting to 1000 [ 97.372144][ T4507] lo speed is unknown, defaulting to 1000 [ 97.382720][ T4507] lo speed is unknown, defaulting to 1000 [ 97.393370][ T4507] lo speed is unknown, defaulting to 1000 [ 97.403983][ T4507] lo speed is unknown, defaulting to 1000 [ 97.613134][ T4402] Set syz1 is full, maxelem 65536 reached [ 99.709393][ T4533] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 100.582918][ T4534] random: crng reseeded on system resumption [ 100.931497][ T4542] tipc: Started in network mode [ 100.941532][ T4544] netlink: 'syz.3.63': attribute type 1 has an invalid length. [ 100.965935][ T4542] tipc: Node identity ac1414aa, cluster identity 4711 [ 101.011533][ T4542] tipc: Enabled bearer , priority 10 [ 101.063076][ T4545] tipc: Disabling bearer [ 101.473957][ T4563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.559584][ T4568] Bluetooth: MGMT ver 1.22 [ 101.567933][ T4563] device batadv_slave_0 entered promiscuous mode [ 102.866838][ T4600] lo speed is unknown, defaulting to 1000 [ 102.878549][ T4607] loop3: detected capacity change from 0 to 164 [ 102.933972][ T4603] lo speed is unknown, defaulting to 1000 [ 103.066187][ T4607] Unable to read rock-ridge attributes [ 105.037271][ T4651] lo speed is unknown, defaulting to 1000 [ 105.643900][ T4670] loop2: detected capacity change from 0 to 2048 [ 105.694048][ T4670] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 106.379027][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 106.542651][ T4693] process 'syz.2.97' launched './file1' with NULL argv: empty string added [ 108.271955][ T4725] tipc: Started in network mode [ 108.300788][ T4725] tipc: Node identity ac14140f, cluster identity 4711 [ 108.308345][ T4725] tipc: New replicast peer: 10.1.1.2 [ 108.313912][ T4725] tipc: Enabled bearer , priority 10 [ 109.430387][ T7] tipc: Node number set to 2886997007 [ 109.601764][ T4741] loop2: detected capacity change from 0 to 8 [ 109.717301][ T4741] SQUASHFS error: lzo decompression failed, data probably corrupt [ 109.735706][ T4741] SQUASHFS error: Failed to read block 0x91: -5 [ 109.742015][ T4741] SQUASHFS error: Unable to read metadata cache entry [8f] [ 109.765617][ T4741] SQUASHFS error: Unable to read inode 0x11f [ 111.001267][ T4430] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.201801][ T4430] usb 5-1: Using ep0 maxpacket: 8 [ 111.209095][ T4430] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 111.250227][ T4430] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.281163][ T4430] usb 5-1: config 0 descriptor?? [ 111.506159][ T4430] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 113.341112][ T4430] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 113.364566][ T4430] asix: probe of 5-1:0.0 failed with error -71 [ 113.378453][ T4430] usb 5-1: USB disconnect, device number 2 [ 113.506932][ T4786] binder: 4785:4786 ioctl c0306201 200000000080 returned -14 [ 113.974316][ T4799] netlink: 'syz.2.123': attribute type 10 has an invalid length. [ 114.031876][ T4799] team0: Port device dummy0 added [ 114.048360][ T4803] netlink: 'syz.2.123': attribute type 10 has an invalid length. [ 114.066501][ T4803] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.098085][ T4803] team0: Failed to send options change via netlink (err -105) [ 114.106086][ T4803] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.116320][ T4803] team0: Port device dummy0 removed [ 114.127627][ T4803] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.305756][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.377762][ T4797] loop3: detected capacity change from 0 to 40427 [ 114.410164][ T4797] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.460460][ T4797] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 114.495668][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 114.502699][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.523187][ T14] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 114.548061][ T14] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 114.584088][ T14] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.603712][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 114.613836][ T14] usb 5-1: SerialNumber: syz [ 114.629160][ T4250] syz-executor: attempt to access beyond end of device [ 114.629160][ T4250] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 114.833140][ T14] cdc_acm 5-1:1.0: invalid descriptor buffer length [ 114.852459][ T14] usb 5-1: USB disconnect, device number 3 [ 115.705896][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.912182][ T14] usb 4-1: config 0 has no interfaces? [ 115.918986][ T14] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.969665][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.992340][ T14] usb 4-1: config 0 descriptor?? [ 116.274346][ T41] usb 4-1: USB disconnect, device number 2 [ 117.283780][ T4858] loop2: detected capacity change from 0 to 1024 [ 117.328485][ T4337] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.163950][ T4866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.144'. [ 118.819439][ T4882] binder: 4881:4882 ioctl c0306201 2000000003c0 returned -14 [ 118.920898][ T4886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.929258][ T4886] device batadv_slave_0 entered promiscuous mode [ 120.581150][ T4899] syz.4.155 uses obsolete (PF_INET,SOCK_PACKET) [ 120.905966][ T14] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 121.102438][ T14] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.168599][ T14] usb 3-1: config 0 has no interface number 0 [ 121.196372][ T14] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 121.325581][ T14] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 121.343051][ T14] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 121.358732][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.371303][ T14] usb 3-1: config 0 descriptor?? [ 121.389678][ T4901] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.451969][ T14] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 121.688882][ T4901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.709265][ T4901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.732690][ T4901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.756816][ T4901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.838311][ T4430] usb 3-1: USB disconnect, device number 3 [ 121.844204][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 123.679449][ T4974] device syzkaller0 entered promiscuous mode [ 123.686062][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 124.727292][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 124.739545][ T4981] device vlan0 entered promiscuous mode [ 124.756363][ T4981] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 124.892780][ T4984] loop3: detected capacity change from 0 to 512 [ 124.924692][ T4984] ======================================================= [ 124.924692][ T4984] WARNING: The mand mount option has been deprecated and [ 124.924692][ T4984] and is ignored by this kernel. Remove the mand [ 124.924692][ T4984] option from the mount to silence this warning. [ 124.924692][ T4984] ======================================================= [ 124.973121][ T4984] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.986394][ T4984] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.021255][ T4984] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 125.044601][ T4984] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.173: invalid indirect mapped block 4294967295 (level 1) [ 125.062740][ T4984] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.173: invalid indirect mapped block 4294967295 (level 1) [ 125.079518][ T4984] EXT4-fs (loop3): 2 truncates cleaned up [ 125.085316][ T4984] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 125.261483][ T4999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 125.427076][ T4992] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 125.666277][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 127.590869][ T5022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.598774][ T5022] IPv6: NLM_F_CREATE should be set when creating new route [ 127.606095][ T5022] IPv6: NLM_F_CREATE should be set when creating new route [ 127.680941][ T5024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.745101][ T5024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.816021][ T5024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.006645][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 128.006662][ T26] audit: type=1804 audit(1749935519.909:28): pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.194" name="/newroot/59/bus/bus" dev="overlay" ino=325 res=1 errno=0 [ 128.006704][ T5034] Driver unsupported XDP return value 0 on prog (id 63) dev N/A, expect packet loss! [ 128.019582][ T5036] Invalid ELF header magic: != ELF [ 129.671207][ T5055] loop4: detected capacity change from 0 to 16 [ 129.691876][ T5055] erofs: (device loop4): mounted with root inode @ nid 36. [ 129.714764][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 129.724296][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 129.733574][ T5055] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 129.742965][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 129.752115][ T5055] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 129.761909][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 129.771582][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 129.780719][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 129.789920][ T5055] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 129.799305][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 129.808662][ T5055] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 129.818055][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 129.827212][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 129.836387][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 129.845455][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 129.854620][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 129.863874][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 129.873167][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 129.883390][ T5055] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 129.892839][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 129.901989][ T5055] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 129.911832][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 129.921048][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 129.930333][ T5055] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 129.939755][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 129.948874][ T5055] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 129.958258][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 129.967734][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 129.976898][ T5055] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 129.986269][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 129.995340][ T5055] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 130.004743][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 130.015225][ T5055] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 130.024672][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 130.034261][ T5055] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 130.043664][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 130.052809][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 130.061955][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 130.071213][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 130.080584][ T5055] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 130.090013][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 130.099270][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 130.108539][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 130.117803][ T5055] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 130.128532][ T5055] syz.4.200: attempt to access beyond end of device [ 130.128532][ T5055] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 130.142177][ T5055] syz.4.200: attempt to access beyond end of device [ 130.142177][ T5055] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 130.156591][ T5055] syz.4.200: attempt to access beyond end of device [ 130.156591][ T5055] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 130.170922][ T5055] syz.4.200: attempt to access beyond end of device [ 130.170922][ T5055] loop4: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 130.184652][ T5055] syz.4.200: attempt to access beyond end of device [ 130.184652][ T5055] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 130.198178][ T5055] syz.4.200: attempt to access beyond end of device [ 130.198178][ T5055] loop4: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 130.332530][ T5065] loop3: detected capacity change from 0 to 256 [ 130.572607][ T5071] loop3: detected capacity change from 0 to 512 [ 130.631080][ T5071] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.206: iget: bad extended attribute block 1 [ 130.679894][ T5071] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.206: couldn't read orphan inode 15 (err -117) [ 130.684861][ T5076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 130.704597][ T5071] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 130.863521][ T5080] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 131.559627][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 132.707735][ T5118] loop2: detected capacity change from 0 to 512 [ 132.717926][ T5118] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.770270][ T5118] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 132.828628][ T5118] EXT4-fs (loop2): 1 truncate cleaned up [ 132.849073][ T5118] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 132.879354][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.887597][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.064581][ T26] audit: type=1800 audit(1749935524.969:29): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.219" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 133.232757][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 133.646583][ T4318] libceph: connect (1)[c::]:6789 error -101 [ 133.653248][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 133.737940][ T5133] ceph: No mds server is up or the cluster is laggy [ 134.104509][ T5149] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.148267][ T5150] kvm: pic: non byte write [ 134.221463][ T5152] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.337053][ T5154] loop2: detected capacity change from 0 to 256 [ 134.435766][ T26] audit: type=1800 audit(1749935526.339:30): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.225" name="/" dev="fuse" ino=0 res=0 errno=0 [ 134.890094][ T5162] kvm: pic: level sensitive irq not supported [ 134.890332][ T5162] kvm: pic: non byte read [ 134.911139][ T5162] kvm: pic: non byte read [ 134.945444][ T5162] kvm: pic: non byte read [ 134.956872][ T5162] kvm: pic: level sensitive irq not supported [ 134.956976][ T5162] kvm: pic: non byte read [ 134.986430][ T5162] kvm: pic: non byte read [ 134.991864][ T5162] kvm: pic: level sensitive irq not supported [ 134.991931][ T5162] kvm: pic: non byte read [ 135.004113][ T5162] kvm: pic: level sensitive irq not supported [ 135.004179][ T5162] kvm: pic: non byte read [ 135.101428][ T5162] kvm: pic: level sensitive irq not supported [ 135.101502][ T5162] kvm: pic: non byte read [ 135.135001][ T5162] kvm: pic: level sensitive irq not supported [ 135.135066][ T5162] kvm: pic: non byte read [ 136.261387][ T5175] loop2: detected capacity change from 0 to 512 [ 136.333907][ T5175] EXT4-fs (loop2): too many log groups per flexible block group [ 136.362637][ T5175] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 136.369809][ T5175] EXT4-fs (loop2): mount failed [ 136.813753][ T5183] loop3: detected capacity change from 0 to 32768 [ 136.813758][ T5189] loop2: detected capacity change from 0 to 16 [ 136.824849][ T5189] erofs: (device loop2): mounted with root inode @ nid 36. [ 136.880886][ T5189] overlayfs: failed to get metacopy (-117) [ 137.021997][ T5183] XFS (loop3): Mounting V5 Filesystem [ 137.116860][ T5204] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 137.142833][ T5205] loop2: detected capacity change from 0 to 16 [ 137.181215][ T5205] erofs: (device loop2): mounted with root inode @ nid 36. [ 137.201305][ T5183] XFS (loop3): Ending clean mount [ 137.244569][ T5183] XFS (loop3): Quotacheck needed: Please wait. [ 137.384176][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 137.403575][ T5183] XFS (loop3): Quotacheck: Done. [ 137.540105][ T26] audit: type=1804 audit(1749935529.449:31): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.241" name="/newroot/67/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 137.728426][ T5207] device hsr_slave_1 left promiscuous mode [ 137.809811][ T4250] XFS (loop3): Unmounting Filesystem [ 138.123253][ T5222] loop2: detected capacity change from 0 to 8 [ 138.622925][ T5231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.630243][ T5231] IPv6: NLM_F_CREATE should be set when creating new route [ 138.685635][ T14] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 138.877626][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.893072][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 138.902215][ T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 138.919783][ T14] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 138.930906][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.957358][ T5228] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.976529][ T14] hub 3-1:1.0: bad descriptor, ignoring hub [ 138.982561][ T14] hub: probe of 3-1:1.0 failed with error -5 [ 138.989577][ T14] cdc_wdm 3-1:1.0: skipping garbage [ 138.994828][ T14] cdc_wdm 3-1:1.0: skipping garbage [ 139.003838][ T14] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 139.009906][ T14] cdc_wdm 3-1:1.0: Unknown control protocol [ 139.310324][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 139.317237][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 139.324772][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 139.331421][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 139.399398][ T5240] loop3: detected capacity change from 0 to 256 [ 139.429351][ T5240] FAT-fs (loop3): Unrecognized mount option "uni_xlatž1" or missing value [ 139.547519][ T4294] usb 3-1: USB disconnect, device number 4 [ 140.042549][ T5249] loop3: detected capacity change from 0 to 512 [ 140.152170][ T5249] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.264: bad orphan inode 11862016 [ 140.180646][ T5249] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 140.194051][ T5249] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.816615][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 142.213235][ T5276] overlayfs: failed to clone upperpath [ 143.618881][ T5298] lo speed is unknown, defaulting to 1000 [ 144.467634][ T5306] loop2: detected capacity change from 0 to 4096 [ 145.974446][ T5338] overlayfs: failed to clone upperpath [ 146.293016][ T26] audit: type=1326 audit(1749935538.199:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15f18e929 code=0x7ffc0000 [ 146.315208][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.345765][ T26] audit: type=1326 audit(1749935538.239:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fa15f18e929 code=0x7ffc0000 [ 146.367868][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.401739][ T26] audit: type=1326 audit(1749935538.239:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15f18e929 code=0x7ffc0000 [ 146.444547][ T26] audit: type=1326 audit(1749935538.239:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15f18e929 code=0x7ffc0000 [ 146.466729][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.495607][ T26] audit: type=1326 audit(1749935538.239:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fa15f18e929 code=0x7ffc0000 [ 146.517713][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.548585][ T26] audit: type=1326 audit(1749935538.239:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15f18e929 code=0x7ffc0000 [ 146.611782][ T26] audit: type=1326 audit(1749935538.239:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15f18e929 code=0x7ffc0000 [ 146.633890][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.670869][ T26] audit: type=1326 audit(1749935538.239:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fa15f18e929 code=0x7ffc0000 [ 146.720410][ T26] audit: type=1326 audit(1749935538.399:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15f18e929 code=0x7ffc0000 [ 146.743706][ T26] audit: type=1326 audit(1749935538.399:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15f18e929 code=0x7ffc0000 [ 146.765838][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.953668][ T5382] loop2: detected capacity change from 0 to 1024 [ 149.817744][ T5384] netlink: 'syz.3.321': attribute type 39 has an invalid length. [ 149.894997][ T32] hfsplus: b-tree write err: -5, ino 4 [ 149.959774][ T5386] lo speed is unknown, defaulting to 1000 [ 150.095962][ T5389] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 150.142313][ T5389] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 150.157031][ T5389] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 153.331310][ T5443] loop3: detected capacity change from 0 to 1024 [ 153.383770][ T5443] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 153.400799][ T5443] hfsplus: failed to load root directory [ 154.725950][ T5456] lo speed is unknown, defaulting to 1000 [ 155.851922][ T5477] loop3: detected capacity change from 0 to 512 [ 155.906204][ T5477] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4558: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 155.961259][ T5477] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 156.014077][ T4337] udevd[4337]: incorrect ext4 checksum on /dev/loop3 [ 156.859622][ T5483] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 157.222702][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.235910][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.245164][ T5496] device bridge_slave_0 left promiscuous mode [ 157.258871][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.272557][ T5496] device bridge_slave_1 left promiscuous mode [ 157.279965][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.294009][ T5496] bond0: (slave bond_slave_0): Releasing backup interface [ 157.328709][ T5496] bond0: (slave bond_slave_1): Releasing backup interface [ 157.392780][ T5496] team0: Port device team_slave_0 removed [ 157.418202][ T5496] team0: Port device team_slave_1 removed [ 157.425235][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.437346][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.444887][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.476745][ T5499] netlink: 'syz.4.348': attribute type 10 has an invalid length. [ 157.511565][ T5499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.529987][ T5499] team0: Port device bond0 added [ 158.114022][ T5505] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.885111][ T5516] loop3: detected capacity change from 0 to 2048 [ 159.049647][ T5516] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 159.900803][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 194.319670][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.326098][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.757950][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.764281][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.315804][ T27] INFO: task kworker/1:9:4427 blocked for more than 143 seconds. [ 258.323611][ T27] Not tainted 6.1.141-syzkaller #0 [ 258.329648][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 258.338544][ T27] task:kworker/1:9 state:D stack:26632 pid:4427 ppid:2 flags:0x00004000 [ 258.351253][ T27] Workqueue: events rfkill_global_led_trigger_worker [ 258.358130][ T27] Call Trace: [ 258.361441][ T27] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 258.364405][ T27] __schedule+0x10e9/0x40d0 [ 258.369028][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 258.374954][ T27] ? __mutex_trylock_common+0x80/0x250 [ 258.380553][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 258.395517][ T27] schedule+0xb9/0x180 [ 258.399753][ T27] schedule_preempt_disabled+0xf/0x20 [ 258.405158][ T27] __mutex_lock+0x555/0xaf0 [ 258.414641][ T27] ? __mutex_lock+0x3a5/0xaf0 [ 258.419577][ T27] ? rfkill_global_led_trigger_worker+0x23/0xc0 [ 258.426028][ T27] ? mutex_lock_nested+0x10/0x10 [ 258.465618][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 258.471688][ T27] ? read_lock_is_recursive+0x10/0x10 [ 258.535513][ T27] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 258.541503][ T27] ? _raw_spin_unlock+0x40/0x40 [ 258.575736][ T27] rfkill_global_led_trigger_worker+0x23/0xc0 [ 258.581978][ T27] ? process_one_work+0x7a1/0x1160 [ 258.610713][ T27] process_one_work+0x898/0x1160 [ 258.630778][ T27] ? worker_detach_from_pool+0x240/0x240 [ 258.639669][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 258.644773][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 258.656132][ T27] ? kthread_data+0x4b/0xc0 [ 258.660737][ T27] worker_thread+0xaa2/0x1250 [ 258.670168][ T27] ? __kthread_parkme+0x162/0x1c0 [ 258.675268][ T27] kthread+0x29d/0x330 [ 258.682943][ T27] ? worker_clr_flags+0x1a0/0x1a0 [ 258.692524][ T27] ? kthread_blkcg+0xd0/0xd0 [ 258.698690][ T27] ret_from_fork+0x1f/0x30 [ 258.703188][ T27] [ 258.711750][ T27] INFO: task syz.0.69:4554 blocked for more than 143 seconds. [ 258.720831][ T27] Not tainted 6.1.141-syzkaller #0 [ 258.750824][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 258.769679][ T27] task:syz.0.69 state:D stack:25376 pid:4554 ppid:4256 flags:0x00004004 [ 258.802931][ T27] Call Trace: [ 258.806675][ T27] [ 258.809654][ T27] __schedule+0x10e9/0x40d0 [ 258.814214][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 258.840206][ T27] ? __mutex_trylock_common+0x80/0x250 [ 258.860813][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 258.881847][ T27] schedule+0xb9/0x180 [ 258.886275][ T27] schedule_preempt_disabled+0xf/0x20 [ 258.891705][ T27] __mutex_lock+0x555/0xaf0 [ 258.920877][ T27] ? __mutex_lock+0x3a5/0xaf0 [ 258.926656][ T27] ? rfkill_unregister+0xc4/0x220 [ 258.931741][ T27] ? mutex_lock_nested+0x10/0x10 [ 258.961766][ T27] ? kill_device+0x160/0x160 [ 258.985510][ T27] ? nfc_genl_device_removed+0x22a/0x310 [ 258.991250][ T27] ? nfc_genl_setup_device_added+0x310/0x310 [ 259.005657][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 259.010953][ T27] rfkill_unregister+0xc4/0x220 [ 259.025547][ T27] nfc_unregister_device+0x92/0x290 [ 259.030845][ T27] ? virtual_ncidev_open+0xc0/0xc0 [ 259.045530][ T27] virtual_ncidev_close+0x55/0x90 [ 259.050722][ T27] __fput+0x22c/0x920 [ 259.054756][ T27] task_work_run+0x1ca/0x250 [ 259.060420][ T27] ? task_work_cancel+0x230/0x230 [ 259.072856][ T27] ? __close_range+0x1c5/0x730 [ 259.077963][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 259.083482][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 259.094779][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 259.100661][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 259.111714][ T27] do_syscall_64+0x58/0xa0 [ 259.116461][ T27] ? clear_bhb_loop+0x60/0xb0 [ 259.121181][ T27] ? clear_bhb_loop+0x60/0xb0 [ 259.131633][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.139491][ T27] RIP: 0033:0x7f7d2a38e929 [ 259.143973][ T27] RSP: 002b:00007ffc859679b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 259.158006][ T27] RAX: 0000000000000000 RBX: 00007f7d2a5b7ba0 RCX: 00007f7d2a38e929 [ 259.169267][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 259.183136][ T27] RBP: 00007f7d2a5b7ba0 R08: 000000000000ef7c R09: 0000000b85967caf [ 259.193723][ T27] R10: 00000000005ee084 R11: 0000000000000246 R12: 0000000000018ef9 [ 259.205177][ T27] R13: 00007ffc85967ab0 R14: ffffffffffffffff R15: 00007ffc85967ad0 [ 259.215697][ T27] [ 259.218840][ T27] INFO: task syz.1.70:4569 blocked for more than 144 seconds. [ 259.230716][ T27] Not tainted 6.1.141-syzkaller #0 [ 259.237682][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.257632][ T27] task:syz.1.70 state:D stack:25384 pid:4569 ppid:4257 flags:0x00004004 [ 259.273753][ T27] Call Trace: [ 259.279163][ T27] [ 259.282147][ T27] __schedule+0x10e9/0x40d0 [ 259.293204][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 259.301276][ T27] ? __mutex_trylock_common+0x80/0x250 [ 259.311310][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 259.318794][ T27] schedule+0xb9/0x180 [ 259.322914][ T27] schedule_preempt_disabled+0xf/0x20 [ 259.332799][ T27] __mutex_lock+0x555/0xaf0 [ 259.338625][ T27] ? __mutex_lock+0x3a5/0xaf0 [ 259.343356][ T27] ? nfc_rfkill_set_block+0x4c/0x2d0 [ 259.353112][ T27] ? mutex_lock_nested+0x10/0x10 [ 259.360873][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 259.391490][ T27] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 259.399274][ T27] ? _raw_spin_unlock+0x40/0x40 [ 259.404196][ T27] ? nfc_unregister_device+0x290/0x290 [ 259.430606][ T27] nfc_rfkill_set_block+0x4c/0x2d0 [ 259.450815][ T27] ? nfc_unregister_device+0x290/0x290 [ 259.456594][ T27] rfkill_set_block+0x1c6/0x420 [ 259.463461][ T27] rfkill_fop_write+0x458/0x560 [ 259.475286][ T27] ? rfkill_fop_read+0x4b0/0x4b0 [ 259.480540][ T27] ? common_file_perm+0xa0/0x1c0 [ 259.488976][ T27] ? fsnotify_perm+0x5a/0x550 [ 259.493681][ T27] ? security_file_permission+0x75/0xa0 [ 259.499581][ T27] ? rfkill_fop_read+0x4b0/0x4b0 [ 259.504574][ T27] vfs_write+0x2c4/0x960 [ 259.509187][ T27] ? file_end_write+0x250/0x250 [ 259.514226][ T27] ? __fget_files+0x28/0x4d0 [ 259.520672][ T27] ? __fget_files+0x44a/0x4d0 [ 259.525593][ T27] ? __fdget_pos+0x1d4/0x360 [ 259.530230][ T27] ? ksys_write+0x71/0x240 [ 259.534742][ T27] ksys_write+0x143/0x240 [ 259.539160][ T27] ? __ia32_sys_read+0x80/0x80 [ 259.543949][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 259.549249][ T27] do_syscall_64+0x4c/0xa0 [ 259.553757][ T27] ? clear_bhb_loop+0x60/0xb0 [ 259.558519][ T27] ? clear_bhb_loop+0x60/0xb0 [ 259.563224][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.569172][ T27] RIP: 0033:0x7f7c92b8e929 [ 259.573633][ T27] RSP: 002b:00007f7c93973038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.582365][ T27] RAX: ffffffffffffffda RBX: 00007f7c92db6080 RCX: 00007f7c92b8e929 [ 259.590423][ T27] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005 [ 259.598626][ T27] RBP: 00007f7c92c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 259.606708][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.614717][ T27] R13: 0000000000000000 R14: 00007f7c92db6080 R15: 00007ffcbba2f9d8 [ 259.622773][ T27] [ 259.625953][ T27] INFO: task syz.1.70:4570 blocked for more than 144 seconds. [ 259.633452][ T27] Not tainted 6.1.141-syzkaller #0 [ 259.639196][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.647949][ T27] task:syz.1.70 state:D stack:25728 pid:4570 ppid:4257 flags:0x00004004 [ 259.657256][ T27] Call Trace: [ 259.660551][ T27] [ 259.663487][ T27] __schedule+0x10e9/0x40d0 [ 259.668088][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 259.674091][ T27] ? __mutex_trylock_common+0x80/0x250 [ 259.679752][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 259.686127][ T27] schedule+0xb9/0x180 [ 259.690228][ T27] schedule_preempt_disabled+0xf/0x20 [ 259.695680][ T27] __mutex_lock+0x555/0xaf0 [ 259.700208][ T27] ? __mutex_lock+0x3a5/0xaf0 [ 259.704888][ T27] ? rfkill_fop_write+0x19e/0x560 [ 259.709969][ T27] ? mutex_lock_nested+0x10/0x10 [ 259.714937][ T27] ? __might_fault+0xa6/0x120 [ 259.719709][ T27] ? __might_fault+0xc2/0x120 [ 259.724415][ T27] ? __might_fault+0xa6/0x120 [ 259.729244][ T27] rfkill_fop_write+0x19e/0x560 [ 259.734123][ T27] ? rfkill_fop_read+0x4b0/0x4b0 [ 259.739138][ T27] ? common_file_perm+0xa0/0x1c0 [ 259.744118][ T27] ? fsnotify_perm+0x5a/0x550 [ 259.748890][ T27] ? security_file_permission+0x75/0xa0 [ 259.754476][ T27] ? rfkill_fop_read+0x4b0/0x4b0 [ 259.759698][ T27] vfs_write+0x2c4/0x960 [ 259.763977][ T27] ? file_end_write+0x250/0x250 [ 259.768909][ T27] ? __fget_files+0x28/0x4d0 [ 259.773542][ T27] ? __fget_files+0x44a/0x4d0 [ 259.778305][ T27] ? __fdget_pos+0x1d4/0x360 [ 259.782929][ T27] ? ksys_write+0x71/0x240 [ 259.787409][ T27] ksys_write+0x143/0x240 [ 259.791766][ T27] ? __ia32_sys_read+0x80/0x80 [ 259.796737][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 259.801969][ T27] do_syscall_64+0x4c/0xa0 [ 259.806466][ T27] ? clear_bhb_loop+0x60/0xb0 [ 259.811173][ T27] ? clear_bhb_loop+0x60/0xb0 [ 259.815938][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.821871][ T27] RIP: 0033:0x7f7c92b8e929 [ 259.826349][ T27] RSP: 002b:00007f7c93952038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.834793][ T27] RAX: ffffffffffffffda RBX: 00007f7c92db6160 RCX: 00007f7c92b8e929 [ 259.843702][ T27] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000005 [ 259.851788][ T27] RBP: 00007f7c92c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 259.859835][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.867870][ T27] R13: 0000000000000000 R14: 00007f7c92db6160 R15: 00007ffcbba2f9d8 [ 259.875940][ T27] [ 259.879047][ T27] [ 259.879047][ T27] Showing all locks held in the system: [ 259.886854][ T27] 3 locks held by kworker/0:0/7: [ 259.891819][ T27] #0: ffff8880b8e3aa98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 259.901881][ T27] #1: ffff8880b8e27848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0 [ 259.913883][ T27] #2: ffffffff96caf3a8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x136/0x530 [ 259.924669][ T27] 1 lock held by rcu_tasks_kthre/12: [ 259.930013][ T27] #0: ffffffff8c92b430 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 259.940581][ T27] 1 lock held by rcu_tasks_trace/13: [ 259.945929][ T27] #0: ffffffff8c92bc50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 259.957015][ T27] 1 lock held by khungtaskd/27: [ 259.961887][ T27] #0: ffffffff8c92aaa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 259.971937][ T27] 2 locks held by getty/4012: [ 259.976691][ T27] #0: ffff88814cd56098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 259.986524][ T27] #1: ffffc9000326b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 259.996730][ T27] 1 lock held by syz-executor/4250: [ 260.001949][ T27] #0: ffffffff8ddefc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xc4/0x220 [ 260.012126][ T27] 1 lock held by syz-executor/4254: [ 260.017493][ T27] #0: ffffffff8ddefc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xc4/0x220 [ 260.027689][ T27] 5 locks held by kworker/u4:7/4353: [ 260.032992][ T27] 3 locks held by kworker/1:9/4427: [ 260.038362][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 260.048827][ T27] #1: ffffc9000476fd00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 260.061889][ T27] #2: ffffffff8ddefc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x23/0xc0 [ 260.073284][ T27] 2 locks held by syz.0.69/4554: [ 260.078272][ T27] #0: ffff888029adc100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x5f/0x290 [ 260.088122][ T27] #1: ffffffff8ddefc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xc4/0x220 [ 260.098328][ T27] 2 locks held by syz.1.70/4569: [ 260.103291][ T27] #0: ffffffff8ddefc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 260.113428][ T27] #1: ffff888029adc100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2d0 [ 260.123150][ T27] 1 lock held by syz.1.70/4570: [ 260.128158][ T27] #0: ffffffff8ddefc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 260.138472][ T27] 2 locks held by syz-executor/4852: [ 260.143776][ T27] #0: ffff88805547d118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x740 [ 260.153888][ T27] #1: ffffffff8ddefc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x33/0x8a0 [ 260.163915][ T27] 2 locks held by syz-executor/4856: [ 260.169271][ T27] #0: ffff88805547d918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x740 [ 260.179378][ T27] #1: ffffffff8ddefc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x33/0x8a0 [ 260.189430][ T27] 1 lock held by syz.2.147/4877: [ 260.194379][ T27] #0: ffffffff8ddefc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xc4/0x220 [ 260.204554][ T27] 2 locks held by syz-executor/5535: [ 260.209924][ T27] #0: ffff8880326f7918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x740 [ 260.220056][ T27] #1: ffffffff8ddefc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x33/0x8a0 [ 260.230091][ T27] 2 locks held by syz-executor/5537: [ 260.235404][ T27] #0: ffff888027ef2918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x740 [ 260.245703][ T27] #1: ffffffff8ddefc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x33/0x8a0 [ 260.255765][ T27] 2 locks held by syz-executor/5544: [ 260.261093][ T27] #0: ffff888029876118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x740 [ 260.271207][ T27] #1: ffffffff8ddefc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x33/0x8a0 [ 260.281309][ T27] 2 locks held by syz-executor/5546: [ 260.286661][ T27] #0: ffff88807f7ef918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x740 [ 260.296845][ T27] #1: ffffffff8ddefc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x33/0x8a0 [ 260.306927][ T27] [ 260.309270][ T27] ============================================= [ 260.309270][ T27] [ 260.317830][ T27] NMI backtrace for cpu 1 [ 260.322209][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.141-syzkaller #0 [ 260.330118][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.340186][ T27] Call Trace: [ 260.343479][ T27] [ 260.346499][ T27] dump_stack_lvl+0x168/0x22e [ 260.351186][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 260.356579][ T27] ? show_regs_print_info+0x12/0x12 [ 260.361823][ T27] ? load_image+0x3b0/0x3b0 [ 260.366337][ T27] ? vprintk_emit+0x571/0x680 [ 260.371133][ T27] ? printk_sprint+0x460/0x460 [ 260.375923][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 260.380907][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 260.387089][ T27] ? _printk+0xcc/0x110 [ 260.391248][ T27] ? load_image+0x3b0/0x3b0 [ 260.395774][ T27] ? load_image+0x3b0/0x3b0 [ 260.400315][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 260.406409][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 260.412406][ T27] watchdog+0xeee/0xf30 [ 260.416578][ T27] ? watchdog+0x1ed/0xf30 [ 260.420928][ T27] kthread+0x29d/0x330 [ 260.425115][ T27] ? hungtask_pm_notify+0x40/0x40 [ 260.430151][ T27] ? kthread_blkcg+0xd0/0xd0 [ 260.434759][ T27] ret_from_fork+0x1f/0x30 [ 260.439203][ T27] [ 260.442433][ T27] Sending NMI from CPU 1 to CPUs 0: [ 260.447704][ C0] NMI backtrace for cpu 0 [ 260.447714][ C0] CPU: 0 PID: 4303 Comm: kworker/u4:5 Not tainted 6.1.141-syzkaller #0 [ 260.447731][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.447741][ C0] Workqueue: bat_events batadv_nc_worker [ 260.447765][ C0] RIP: 0010:__lock_acquire+0x50a/0x7c50 [ 260.447790][ C0] Code: 28 48 8b 44 24 78 44 89 68 20 48 8d 58 24 48 89 d8 48 c1 e8 03 42 0f b6 04 00 84 c0 4c 8b a4 24 88 00 00 00 0f 85 21 62 00 00 <44> 89 33 44 89 eb 81 e3 ff 1f 00 00 41 c1 ed 03 41 81 e5 f8 03 00 [ 260.447818][ C0] RSP: 0018:ffffc90004077840 EFLAGS: 00000046 [ 260.447831][ C0] RAX: 0000000000000000 RBX: ffff88807e2ae494 RCX: 0000000000000000 [ 260.447843][ C0] RDX: 000000000000002c RSI: 0000000000000000 RDI: ffff88807e2ae480 [ 260.447853][ C0] RBP: ffffc90004077a90 R08: dffffc0000000000 R09: 0000000000000000 [ 260.447865][ C0] R10: fffffbfff1bfd0b6 R11: 1ffffffff1bfd0b5 R12: ffff88807e2ad940 [ 260.447878][ C0] R13: 000000000002002c R14: 0000000000000000 R15: 000000000000002c [ 260.447888][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 260.447902][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.447914][ C0] CR2: 00007ff37da146a8 CR3: 000000007e5e0000 CR4: 00000000003526f0 [ 260.447928][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 260.447938][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 260.447948][ C0] Call Trace: [ 260.447953][ C0] [ 260.447962][ C0] ? __lock_acquire+0x13c0/0x7c50 [ 260.447992][ C0] ? verify_lock_unused+0x140/0x140 [ 260.448016][ C0] ? verify_lock_unused+0x140/0x140 [ 260.448045][ C0] lock_acquire+0x1b4/0x490 [ 260.448065][ C0] ? batadv_nc_worker+0xce/0x600 [ 260.448087][ C0] ? read_lock_is_recursive+0x10/0x10 [ 260.448109][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 260.448134][ C0] ? batadv_nc_worker+0xce/0x600 [ 260.448152][ C0] batadv_nc_worker+0xeb/0x600 [ 260.448169][ C0] ? batadv_nc_worker+0xce/0x600 [ 260.448189][ C0] ? process_one_work+0x7a1/0x1160 [ 260.448206][ C0] process_one_work+0x898/0x1160 [ 260.448230][ C0] ? worker_detach_from_pool+0x240/0x240 [ 260.448249][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 260.448273][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 260.448297][ C0] ? kthread_data+0x4b/0xc0 [ 260.448322][ C0] worker_thread+0xaa2/0x1250 [ 260.448350][ C0] kthread+0x29d/0x330 [ 260.448373][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 260.448389][ C0] ? kthread_blkcg+0xd0/0xd0 [ 260.448414][ C0] ret_from_fork+0x1f/0x30 [ 260.448442][ C0] [ 260.448894][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 260.707751][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.141-syzkaller #0 [ 260.715652][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.725722][ T27] Call Trace: [ 260.729014][ T27] [ 260.731972][ T27] dump_stack_lvl+0x168/0x22e [ 260.736670][ T27] ? memcpy+0x3c/0x60 [ 260.740663][ T27] ? show_regs_print_info+0x12/0x12 [ 260.745876][ T27] ? load_image+0x3b0/0x3b0 [ 260.750396][ T27] panic+0x2c9/0x710 [ 260.754296][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 260.759946][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 260.764459][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 260.770629][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 260.776808][ T27] watchdog+0xf2d/0xf30 [ 260.780978][ T27] ? watchdog+0x1ed/0xf30 [ 260.785331][ T27] kthread+0x29d/0x330 [ 260.789415][ T27] ? hungtask_pm_notify+0x40/0x40 [ 260.794450][ T27] ? kthread_blkcg+0xd0/0xd0 [ 260.799062][ T27] ret_from_fork+0x1f/0x30 [ 260.803506][ T27] [ 260.806809][ T27] Kernel Offset: disabled [ 260.811140][ T27] Rebooting in 86400 seconds..