last executing test programs: 3.125173334s ago: executing program 2 (id=241): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000240)='./file0\x00') mknod(&(0x7f00000002c0)='./file0\x00', 0x8001420, 0x0) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./trace\x00') 2.808018412s ago: executing program 2 (id=244): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) close(r3) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000e00)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e40)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18b09}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x5, 0xffffff00, 0x3}, 0x22}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000001000), 0x56) sendmsg$kcm(r9, &(0x7f0000001040)={&(0x7f0000001080)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001140)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 2.362559703s ago: executing program 1 (id=250): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0xd3, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x8009, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.160615457s ago: executing program 2 (id=254): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000100)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) 2.096603029s ago: executing program 0 (id=255): r0 = socket$kcm(0x10, 0x2, 0x4) socket(0x2, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000a80)=ANY=[@ANYBLOB="300100004100010026bd70000400000001000000040048800c0101800801108004010880fd00528022ae7d7158cf3e53ea46006699c1b1f04a9c16cb3f7bae98bf0338db4d09be8099a1736ea64b5fde1f147b896d3beafead6cae91364efb20c5e8a8333d4a9df31b5ed74c6fd6f7be116709e9193798307c3bd95776202ce04a2866f9f6ad895eac5db17b21ee783c91b0ccd76152c8a15eaa25dd6bf70b83566adc0cbae0fbf2063dbe3c1e5aef7140c8ed32fff3eb2265b1763e514fb7f32731c17e8e142e2dc4b44de6", @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 2.04343442s ago: executing program 1 (id=258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x4}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x6}}]}, 0x40}}, 0x4894) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x8, 0x8001, 0x5, 0xfffffdff, 0x4004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0xb, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000a40)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.012429961s ago: executing program 2 (id=259): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f0000000480)='proc\x00', 0x210002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc_mnt/kcore\x00', 0x8002, 0x0) read$FUSE(r0, &(0x7f0000001dc0)={0x2020}, 0xffffffa0) 1.888707354s ago: executing program 3 (id=261): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz1\x00', 0x200002, 0x0) close(0xffffffffffffffff) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) write$tun(r0, &(0x7f0000000900)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x75, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @multicast1}, {0x0, 0x6558, 0x61, 0x0, @gue={{0x2, 0x0, 0x2, 0xff, 0x100}, "bafafae428b1cafa7fa8f8a6daae9e8fab2ce6be44a2f74f4605178765e7f133cbd80a6b4fa71b49459b8db85ad36d41e81b3332157d717900e053992545107a8567e147bec33a78738dbbee596d68e989"}}}}}}}, 0x87) 1.759385307s ago: executing program 0 (id=263): r0 = syz_open_dev$radio(&(0x7f00000006c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000700)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 1.65401224s ago: executing program 0 (id=264): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) close(r3) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000e00)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e40)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18b09}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x5, 0xffffff00, 0x3}, 0x22}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000001000), 0x56) sendmsg$kcm(r9, &(0x7f0000001040)={&(0x7f0000001080)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001140)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 1.623730961s ago: executing program 1 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x16, 0x11, &(0x7f0000000cc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000e40)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.552697892s ago: executing program 4 (id=266): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1.513825653s ago: executing program 1 (id=267): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000500)='X', 0x34000, 0x0, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x6, 0x7}]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.481314974s ago: executing program 4 (id=268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f00000007c0)={0xa4, 0x0, 0x6}) 1.394188036s ago: executing program 3 (id=269): openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000a0000000700000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)="ccd3f89eb9f91ebb8910cb3c3b8ce30c66ba00093f72df2d35fc0c7db17bc89ac8c180b39c", 0xce, r0}, 0x38) 1.196696911s ago: executing program 4 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000002240)={0x54, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @NL80211_ATTR_KEYS={0x20, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3a0c83ae1a"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 1.196553391s ago: executing program 3 (id=271): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) write$nbd(r0, 0x0, 0x0) 1.124606322s ago: executing program 0 (id=272): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ee) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='offline', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='n', 0x1) 1.087642083s ago: executing program 4 (id=273): r0 = socket$kcm(0x10, 0x2, 0x4) socket(0x2, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000a80)=ANY=[@ANYBLOB="300100004100010026bd70000400000001000000040048800c0101800801108004010880fd00528022ae7d7158cf3e53ea46006699c1b1f04a9c16cb3f7bae98bf0338db4d09be8099a1736ea64b5fde1f147b896d3beafead6cae91364efb20c5e8a8333d4a9df31b5ed74c6fd6f7be116709e9193798307c3bd95776202ce04a2866f9f6ad895eac5db17b21ee783c91b0ccd76152c8a15eaa25dd6bf70b83566adc0cbae0fbf2063dbe3c1e5aef7140c8ed32fff3eb2265b1763e514fb7f32731c17e8e142e2dc4b44de6", @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 976.816276ms ago: executing program 3 (id=274): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$sock_SIOCOUTQNSD(r0, 0x40106183, &(0x7f0000000200)) 932.297097ms ago: executing program 1 (id=275): add_key(&(0x7f00000002c0)='asymmetric\x00', 0x0, &(0x7f00000005c0)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde100a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045634453412073656c662d74657374696e67206b65793020170d3234303231333232313632365a180f32313234303332301132313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e8100000053412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403160780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c1202b409760c9af28c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24f0700149d79691c7ad75d", 0x1d8, 0xfffffffffffffffc) 924.704477ms ago: executing program 2 (id=276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x4}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x6}}]}, 0x40}}, 0x4894) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x8, 0x8001, 0x5, 0xfffffdff, 0x4004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0xb, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000a40)={'syzkaller0\x00', @random="2b0100004ec6"}) 880.757459ms ago: executing program 3 (id=277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x16, 0x11, &(0x7f0000000cc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000e40)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 805.32663ms ago: executing program 4 (id=278): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x7) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='27', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0xfff}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008090}, 0x20040010) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) 787.623601ms ago: executing program 1 (id=279): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz1\x00', 0x200002, 0x0) close(0xffffffffffffffff) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) write$tun(r0, &(0x7f0000000900)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x75, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @multicast1}, {0x0, 0x6558, 0x61, 0x0, @gue={{0x2, 0x0, 0x2, 0xff, 0x100}, "bafafae428b1cafa7fa8f8a6daae9e8fab2ce6be44a2f74f4605178765e7f133cbd80a6b4fa71b49459b8db85ad36d41e81b3332157d717900e053992545107a8567e147bec33a78738dbbee596d68e989"}}}}}}}, 0x87) 716.659343ms ago: executing program 3 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000340)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8402, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x2, 0xee, "d80161846b90a664b47f910f0352e5bde5fcc95bc7aada490310c219a15f2e432227b877158baad30e07ee261206de41d3d350a8453e8cf5e71c27cf68d9ac80cb0bfe8e664aa2aab464a4571dd441d2892563151b88245096a8e58db50e419ccf6661963d24e7d552588174768f734a822aa2fc917457ee440dc72250345a43fa4cf1d30e74b8a14797582a003ee0e6b4230baf6cce6cadc3f19c987388bf82255758eeeec01681d01fce8fcc4a9a1441c1a76783354dc9f239b5325c0222d63ea43a58240cd02142faec554a34fd48ddd1e0f33db334e26d897678363f67d3e331db355eeb049320c58e88db78"}, &(0x7f0000000200)=0xf6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r5, 0x84, 0x25, &(0x7f0000000240)={r6, @in={{0x2, 0x4e22, @multicast1}}, 0x3, 0x4, 0xd}, 0x90) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48d, 0x0, 0x1fe}]}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014000000000000028c00000008000300", @ANYRES32=r2], 0x28}}, 0x0) 535.356357ms ago: executing program 0 (id=281): setns(0xc9, 0x0) socket$inet(0x2, 0x802, 0x1) 159.198926ms ago: executing program 0 (id=282): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) close(r3) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000e00)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e40)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18b09}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x5, 0xffffff00, 0x3}, 0x22}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000001000), 0x56) sendmsg$kcm(r9, &(0x7f0000001040)={&(0x7f0000001080)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001140)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 8.68813ms ago: executing program 4 (id=283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000002240)={0x50, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 0s ago: executing program 2 (id=284): setns(0xc9, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000400), 0x10}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e0b9d5a2a00a3c6ffda2e3861121", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 63.319441][ T4173] cgroup: Unknown subsys name 'net' [ 63.461630][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.044316][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.278188][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.299340][ T4187] rdma_rxe: rxe_register_device failed with error -23 [ 66.309029][ T4192] rdma_rxe: rxe_register_device failed with error -23 [ 66.309900][ T4185] rdma_rxe: rxe_register_device failed with error -23 [ 66.318400][ T4187] rdma_rxe: failed to add rxe_eth0 [ 66.328567][ T4192] rdma_rxe: failed to add rxe_eth0 [ 66.335968][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.346410][ T4196] rdma_rxe: rxe_register_device failed with error -23 [ 66.359578][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.369910][ T4196] rdma_rxe: failed to add rxe_eth0 [ 66.375556][ T4185] rdma_rxe: failed to add rxe_eth0 [ 66.533353][ T4186] infiniband rxe0: set active [ 66.539722][ T4186] infiniband rxe0: added rxe_eth0 [ 66.556074][ T1111] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.699767][ T4186] RDS/IB: rxe0: added [ 66.710403][ T4186] smc: adding ib device rxe0 with port count 1 [ 66.717072][ T4186] smc: ib device rxe0 port 1 has pnetid [ 66.739481][ T3573] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.758339][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.829534][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 66.876707][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 66.921522][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 66.942452][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 66.986811][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.124856][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.195692][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.203765][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.212539][ T4192] device bridge_slave_0 entered promiscuous mode [ 67.221935][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.229068][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.238145][ T4196] device bridge_slave_0 entered promiscuous mode [ 67.259280][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.266598][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.279782][ T4185] device bridge_slave_0 entered promiscuous mode [ 67.288326][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.296289][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.309404][ T4192] device bridge_slave_1 entered promiscuous mode [ 67.317432][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.325156][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.333474][ T4196] device bridge_slave_1 entered promiscuous mode [ 67.347120][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.354664][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.363033][ T4187] device bridge_slave_0 entered promiscuous mode [ 67.370890][ T3851] infiniband rxe0: set active [ 67.375808][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.383184][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.391650][ T4187] device bridge_slave_1 entered promiscuous mode [ 67.399079][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.408108][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.420069][ T4185] device bridge_slave_1 entered promiscuous mode [ 67.430557][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.470036][ T1111] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.519003][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.543988][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.569866][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.581702][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.604215][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.620870][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.638464][ T4196] team0: Port device team_slave_0 added [ 67.646799][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.664987][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.709348][ T4196] team0: Port device team_slave_1 added [ 67.717574][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.732729][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.749594][ T4192] team0: Port device team_slave_0 added [ 67.796343][ T4192] team0: Port device team_slave_1 added [ 67.805848][ T4185] team0: Port device team_slave_0 added [ 67.822076][ T4187] team0: Port device team_slave_0 added [ 67.857877][ T4185] team0: Port device team_slave_1 added [ 67.864896][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.876559][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.916786][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.946893][ T4187] team0: Port device team_slave_1 added [ 67.969400][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.982529][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.008651][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.020731][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.027712][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.054024][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.092360][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.099346][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.126380][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.148353][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.156907][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.184163][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.198842][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.208593][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.223504][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 68.240751][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 68.250995][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.262071][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 68.273895][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.284790][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.315730][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 68.321853][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.337631][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 68.346778][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.354064][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.380257][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.437183][ T4196] device hsr_slave_0 entered promiscuous mode [ 68.444641][ T4196] device hsr_slave_1 entered promiscuous mode [ 68.451995][ T1111] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.515481][ T4185] device hsr_slave_0 entered promiscuous mode [ 68.522786][ T4185] device hsr_slave_1 entered promiscuous mode [ 68.530068][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.538215][ T4185] Cannot create hsr debugfs directory [ 68.547886][ T3851] infiniband rxe0: set active [ 68.569785][ T4187] device hsr_slave_0 entered promiscuous mode [ 68.576866][ T4187] device hsr_slave_1 entered promiscuous mode [ 68.586341][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.595446][ T4187] Cannot create hsr debugfs directory [ 68.607981][ T1111] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.631585][ T4192] device hsr_slave_0 entered promiscuous mode [ 68.638614][ T4192] device hsr_slave_1 entered promiscuous mode [ 68.645743][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.653436][ T4192] Cannot create hsr debugfs directory [ 68.912737][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.013101][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.033365][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.047225][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.083695][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.099778][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.107501][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.119850][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.129954][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.137517][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.146126][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.177604][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.199315][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.235420][ T4186] team0: Port device team_slave_0 added [ 69.245015][ T4186] team0: Port device team_slave_1 added [ 69.253806][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.263198][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.291782][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.306796][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.314146][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.340488][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.354851][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.361884][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.388148][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.404061][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.466769][ T4186] device hsr_slave_0 entered promiscuous mode [ 69.474848][ T4186] device hsr_slave_1 entered promiscuous mode [ 69.482115][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.489705][ T4186] Cannot create hsr debugfs directory [ 69.534530][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.545862][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.558379][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.569357][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.675791][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.700041][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.736550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.747578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.764734][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.776257][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.791294][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.800130][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.822214][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.836408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.847100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.856616][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.863987][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.897018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.909334][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.930110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.938702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.947403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.957149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.966502][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.973652][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.994515][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.012548][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.026607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.035997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.047244][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.054398][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.064248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.074102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.083136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.094033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.103200][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.110291][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.118131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.139491][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.155317][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.167567][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.176963][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.187371][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.196163][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.204708][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.215506][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.232386][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.242364][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.251790][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.260494][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.269649][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.279041][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.288043][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.295201][ T1269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.307862][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.315530][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 70.317813][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.329240][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 70.335276][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.344401][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 70.352430][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.364359][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.373170][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.382972][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.391109][ T4265] Bluetooth: hci3: command 0x041b tx timeout [ 70.397401][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 70.418679][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.428094][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.437069][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.444216][ T1269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.457981][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.468732][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.478948][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.488615][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.504439][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.517453][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.527756][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.550037][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.559957][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.570806][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.583367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.593040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.638084][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.652127][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.666601][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.679357][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.690466][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.699763][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.717474][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.730235][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.739241][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.748784][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.769477][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.847541][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.904562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.928429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.948427][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.993435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.011456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.020154][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.027349][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.041961][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.058956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.071580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.088262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.097309][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.104473][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.122250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.132070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.145179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.160985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.199335][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.212596][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.225628][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.242993][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.265823][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.272704][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.294886][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.305583][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.319189][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.329211][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.337208][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.347397][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.358197][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.367931][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.384177][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.419111][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.441582][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.461176][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.468716][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.484186][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.497922][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.516676][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.525882][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.535195][ T584] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.542461][ T584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.550455][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.585057][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.594690][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.604550][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.611686][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.620185][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.632118][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.642762][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.687976][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.713709][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.723598][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.740813][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.764532][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.825342][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.835782][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.848024][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.858545][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.867880][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.876834][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.886473][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.895715][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.905775][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.914800][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.925906][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.934229][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.946988][ T4187] device veth0_vlan entered promiscuous mode [ 71.966244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.975437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.984698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.994406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.020511][ T4187] device veth1_vlan entered promiscuous mode [ 72.033668][ T4185] device veth0_vlan entered promiscuous mode [ 72.040476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.048817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.074959][ T4196] device veth0_vlan entered promiscuous mode [ 72.083552][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.099409][ T4185] device veth1_vlan entered promiscuous mode [ 72.133204][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.144121][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.153412][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.162967][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.170517][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.179266][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.189510][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.207074][ T4196] device veth1_vlan entered promiscuous mode [ 72.216724][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.239428][ T4187] device veth0_macvtap entered promiscuous mode [ 72.253486][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.262846][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.271266][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.279314][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.290148][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.324688][ T4187] device veth1_macvtap entered promiscuous mode [ 72.335733][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.344377][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.354025][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.364133][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.376427][ T4185] device veth0_macvtap entered promiscuous mode [ 72.400952][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 72.407362][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 72.420074][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.422248][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 72.440166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.449620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.460931][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 72.467275][ T4264] Bluetooth: hci3: command 0x040f tx timeout [ 72.478700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.488164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.507816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.518813][ T4185] device veth1_macvtap entered promiscuous mode [ 72.531474][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.550215][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.559705][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.570918][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.579652][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.598468][ T4196] device veth0_macvtap entered promiscuous mode [ 72.605956][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.615360][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.625594][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.635322][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.644484][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.654241][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.663730][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.672491][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.694986][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.708712][ T4196] device veth1_macvtap entered promiscuous mode [ 72.718621][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.727455][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.738432][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.747638][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.756128][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.765876][ T4192] device veth0_vlan entered promiscuous mode [ 72.805788][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.817144][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.830449][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.862511][ T4192] device veth1_vlan entered promiscuous mode [ 72.881329][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.889936][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.900402][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.912726][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.922170][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.935874][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.946515][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.959255][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.977590][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.988860][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.999138][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.009884][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.032039][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.044579][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.055596][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.065056][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.074678][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.112151][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.121710][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.130444][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.141455][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.188760][ T4192] device veth0_macvtap entered promiscuous mode [ 73.197723][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.207908][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.217171][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.225907][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.236468][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.245028][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.255459][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.275812][ T4186] device veth0_vlan entered promiscuous mode [ 73.288130][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.299772][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.309991][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.321127][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.333200][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.343345][ T4192] device veth1_macvtap entered promiscuous mode [ 73.376708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.386168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.395658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.409884][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.419249][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.429096][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.438260][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.457100][ T4186] device veth1_vlan entered promiscuous mode [ 73.479935][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.488525][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.520752][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.530121][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.539684][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.564134][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.578170][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.589235][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.606989][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.617725][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.628556][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.641974][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.681785][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.689694][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.703476][ T4186] device veth0_macvtap entered promiscuous mode [ 73.715573][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.725956][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.735265][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.743739][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.752917][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.762503][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.781362][ T4186] device veth1_macvtap entered promiscuous mode [ 73.805670][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.816315][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.827700][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.838777][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.848942][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.859764][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.869914][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.880737][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.893229][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.902767][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.915735][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.926026][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.936788][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.948263][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.958982][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.971229][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.989212][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.006736][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.016226][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.026154][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.036317][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.047294][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.058949][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.069029][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.079621][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.089775][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.100279][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.110330][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.121224][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.132831][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.150562][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.160031][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.169234][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.179734][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.203066][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.213851][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.227721][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.238146][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.246994][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.257153][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.269417][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.278420][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.287928][ T584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.296870][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.306239][ T584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.326081][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.362997][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.372167][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.383986][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.463478][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 74.495820][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 74.522296][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.530183][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.537982][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 74.558816][ T4305] Bluetooth: hci3: command 0x0419 tx timeout [ 74.570982][ T4305] Bluetooth: hci4: command 0x0419 tx timeout [ 74.583650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.640891][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.648778][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.686132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.733173][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.748529][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.775271][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.841143][ T584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.849021][ T584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.902890][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.903862][ T1269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.937223][ T4320] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 74.950110][ T1269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.033777][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.279063][ T4334] device syzkaller0 entered promiscuous mode [ 75.290919][ T4334] tipc: Started in network mode [ 75.308047][ T4334] tipc: Node identity 426ae2e46b0e, cluster identity 4711 [ 75.338527][ T4334] tipc: Enabled bearer , priority 0 [ 75.416553][ T4332] tipc: Resetting bearer [ 75.475957][ T4332] tipc: Disabling bearer [ 75.560544][ T4339] Zero length message leads to an empty skb [ 75.809587][ T4345] device syzkaller0 entered promiscuous mode [ 76.012309][ T4349] 0: reclassify loop, rule prio 0, protocol 800 [ 76.268394][ T4354] FAULT_INJECTION: forcing a failure. [ 76.268394][ T4354] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 76.306388][ T4359] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.347262][ T4354] CPU: 1 PID: 4354 Comm: syz.2.15 Not tainted syzkaller #0 [ 76.354544][ T4354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.364665][ T4354] Call Trace: [ 76.368005][ T4354] [ 76.370969][ T4354] dump_stack_lvl+0x188/0x250 [ 76.375720][ T4354] ? show_regs_print_info+0x20/0x20 [ 76.380966][ T4354] ? load_image+0x410/0x410 [ 76.385560][ T4354] ? __lock_acquire+0x7d40/0x7d40 [ 76.390645][ T4354] should_fail+0x383/0x4b0 [ 76.395118][ T4354] prepare_alloc_pages+0x1e3/0x5b0 [ 76.400287][ T4354] __alloc_pages+0x11b/0x480 [ 76.404976][ T4354] ? stack_trace_save+0xf0/0xf0 [ 76.409863][ T4354] ? zone_statistics+0x170/0x170 [ 76.414853][ T4354] ? __x64_sys_getsockopt+0xb1/0xc0 [ 76.420098][ T4354] ? alloc_pages+0x452/0x560 [ 76.424738][ T4354] stack_depot_save+0x356/0x460 [ 76.429636][ T4354] save_stack+0x12f/0x230 [ 76.434013][ T4354] ? __reset_page_owner+0x180/0x180 [ 76.439296][ T4354] ? get_page_from_freelist+0x24f6/0x2670 [ 76.445075][ T4354] ? __alloc_pages+0x1ee/0x480 [ 76.449885][ T4354] ? stack_depot_save+0x356/0x460 [ 76.454950][ T4354] ? __kasan_kmalloc+0xc6/0xe0 [ 76.459757][ T4354] ? sctp_auth_shkey_create+0x77/0x190 [ 76.465261][ T4354] ? sctp_endpoint_new+0x43c/0xa00 [ 76.470422][ T4354] ? sctp_init_sock+0x95b/0x11c0 [ 76.475398][ T4354] ? sctp_v6_init_sock+0x12/0x60 [ 76.480384][ T4354] ? inet6_create+0xd88/0x1130 [ 76.485192][ T4354] ? __sock_create+0x473/0x910 [ 76.490046][ T4354] ? sctp_do_peeloff+0x3bb/0x690 [ 76.495022][ T4354] ? sctp_getsockopt_peeloff_common+0x63/0x290 [ 76.501215][ T4354] ? sctp_getsockopt_peeloff_flags+0x144/0x230 [ 76.507412][ T4354] ? sctp_getsockopt+0x59c/0x8a0 [ 76.512396][ T4354] ? __sys_getsockopt+0x1b0/0x230 [ 76.517456][ T4354] ? __x64_sys_getsockopt+0xb1/0xc0 [ 76.522783][ T4354] ? lock_chain_count+0x20/0x20 [ 76.527686][ T4354] ? preempt_count_add+0x8d/0x190 [ 76.532767][ T4354] __set_page_owner+0x41/0x2d0 [ 76.537581][ T4354] ? post_alloc_hook+0x106/0x220 [ 76.542570][ T4354] get_page_from_freelist+0x24f6/0x2670 [ 76.548191][ T4354] ? __alloc_pages+0x11b/0x480 [ 76.553012][ T4354] ? __lock_acquire+0x7d40/0x7d40 [ 76.558180][ T4354] ? __alloc_pages+0x480/0x480 [ 76.563027][ T4354] ? prepare_alloc_pages+0x359/0x5b0 [ 76.568545][ T4354] __alloc_pages+0x1ee/0x480 [ 76.573188][ T4354] ? unwind_get_return_address+0x49/0x80 [ 76.578871][ T4354] ? zone_statistics+0x170/0x170 [ 76.583866][ T4354] ? alloc_pages+0x452/0x560 [ 76.588503][ T4354] stack_depot_save+0x356/0x460 [ 76.593407][ T4354] __kasan_kmalloc+0xc6/0xe0 [ 76.598037][ T4354] ? __kasan_kmalloc+0xaf/0xe0 [ 76.602967][ T4354] ? sctp_auth_shkey_create+0x77/0x190 [ 76.608478][ T4354] ? sctp_endpoint_new+0x43c/0xa00 [ 76.613639][ T4354] ? sctp_init_sock+0x95b/0x11c0 [ 76.618622][ T4354] ? sctp_v6_init_sock+0x12/0x60 [ 76.623652][ T4354] ? inet6_create+0xd88/0x1130 [ 76.628461][ T4354] ? __sock_create+0x473/0x910 [ 76.633262][ T4354] ? sctp_do_peeloff+0x3bb/0x690 [ 76.638230][ T4354] ? sctp_getsockopt_peeloff_common+0x63/0x290 [ 76.644416][ T4354] ? sctp_getsockopt_peeloff_flags+0x144/0x230 [ 76.650612][ T4354] ? sctp_getsockopt+0x59c/0x8a0 [ 76.655594][ T4354] ? __sys_getsockopt+0x1b0/0x230 [ 76.660672][ T4354] ? __x64_sys_getsockopt+0xb1/0xc0 [ 76.665921][ T4354] ? do_syscall_64+0x4c/0xa0 [ 76.670575][ T4354] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.676733][ T4354] sctp_auth_shkey_create+0x77/0x190 [ 76.682070][ T4354] sctp_endpoint_new+0x43c/0xa00 [ 76.687065][ T4354] sctp_init_sock+0x95b/0x11c0 [ 76.691884][ T4354] sctp_v6_init_sock+0x12/0x60 [ 76.696689][ T4354] inet6_create+0xd88/0x1130 [ 76.701323][ T4354] __sock_create+0x473/0x910 [ 76.705963][ T4354] sctp_do_peeloff+0x3bb/0x690 [ 76.710772][ T4354] ? sctp_transport_traverse_process+0x480/0x480 [ 76.717144][ T4354] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 76.723180][ T4354] sctp_getsockopt_peeloff_common+0x63/0x290 [ 76.729222][ T4354] sctp_getsockopt_peeloff_flags+0x144/0x230 [ 76.735401][ T4354] ? sctp_getsockopt_peeloff+0x220/0x220 [ 76.741092][ T4354] sctp_getsockopt+0x59c/0x8a0 [ 76.746005][ T4354] ? sock_recv_errqueue+0x580/0x580 [ 76.751253][ T4354] __sys_getsockopt+0x1b0/0x230 [ 76.756158][ T4354] __x64_sys_getsockopt+0xb1/0xc0 [ 76.761231][ T4354] do_syscall_64+0x4c/0xa0 [ 76.765684][ T4354] ? clear_bhb_loop+0x30/0x80 [ 76.770405][ T4354] ? clear_bhb_loop+0x30/0x80 [ 76.775129][ T4354] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.781130][ T4354] RIP: 0033:0x7fe364724559 [ 76.785586][ T4354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.805355][ T4354] RSP: 002b:00007fe36297c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 76.813820][ T4354] RAX: ffffffffffffffda RBX: 00007fe3649abfa0 RCX: 00007fe364724559 [ 76.821822][ T4354] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 76.829821][ T4354] RBP: 00007fe3647bb8b0 R08: 0000200000000640 R09: 0000000000000000 [ 76.837825][ T4354] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 76.845826][ T4354] R13: 00007fe3649ac038 R14: 00007fe3649abfa0 R15: 00007fff042e79a8 [ 76.853834][ T4354] [ 77.016946][ T4373] device syzkaller0 entered promiscuous mode [ 77.210449][ T4383] tipc: Can't bind to reserved service type 0 [ 77.331241][ T4388] device syzkaller0 entered promiscuous mode [ 77.469737][ T4398] ======================================================= [ 77.469737][ T4398] WARNING: The mand mount option has been deprecated and [ 77.469737][ T4398] and is ignored by this kernel. Remove the mand [ 77.469737][ T4398] option from the mount to silence this warning. [ 77.469737][ T4398] ======================================================= [ 77.528008][ T4398] 9pnet_virtio: no channels available for device syz [ 78.875985][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.761948][ T4365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.066708][ T4198] Bluetooth: hci4: hcon ffff88801f39e000 sent 1 < count 15 [ 80.074536][ T4198] Bluetooth: hci4: hcon ffff88801afd6000 sent 1 < count 6 [ 80.162258][ T4442] device syzkaller0 entered promiscuous mode [ 80.276094][ T4454] device syzkaller0 entered promiscuous mode [ 80.426028][ T4464] tipc: Started in network mode [ 80.431637][ T4464] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 80.439089][ T4464] tipc: Enabled bearer , priority 0 [ 80.877560][ T4477] device syzkaller0 entered promiscuous mode [ 81.030761][ T4491] device syzkaller0 entered promiscuous mode [ 81.248899][ T4504] binder: 4502:4504 ioctl c018620c 200000000040 returned -1 [ 81.398318][ T3573] wiimote 0005:057E:0330.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 81.448376][ T3573] wiimote 0005:057E:0330.0001: New device registered [ 81.485959][ T4511] wiimote 0005:057E:0330.0001: Device removed [ 81.523403][ T3573] tipc: Node number set to 43690 [ 81.565345][ T4513] fido_id[4513]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.695478][ T4529] device syzkaller0 entered promiscuous mode [ 81.897808][ T4538] device syzkaller0 entered promiscuous mode [ 81.908339][ T4540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 82.313111][ T4267] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.435557][ T4562] device syzkaller0 entered promiscuous mode [ 82.541054][ T23] wiimote 0005:057E:0330.0001: detected device: Nintendo Wii Remote Plus (Gen 2) [ 82.595134][ T23] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input6 [ 82.620761][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.656786][ T23] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input7 [ 82.675237][ T4570] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 82.695556][ T4267] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 82.704796][ T23] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input5 [ 82.720702][ T4267] usb 4-1: config 1 has no interface number 0 [ 82.816122][ T4578] device syzkaller0 entered promiscuous mode [ 82.880964][ T4267] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 82.890116][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.898376][ T4267] usb 4-1: Product: syz [ 82.902830][ T4267] usb 4-1: Manufacturer: syz [ 82.907805][ T4267] usb 4-1: SerialNumber: syz [ 82.912779][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 83.027489][ T4264] Bluetooth: hci4: command 0x0406 tx timeout [ 83.118262][ T4592] netlink: 'syz.0.100': attribute type 1 has an invalid length. [ 83.126479][ T4592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 83.189636][ T4596] device syzkaller0 entered promiscuous mode [ 83.236259][ T4267] usb 4-1: 3:0 : does not exist [ 83.242231][ T4267] usb 4-1: 3:0 : does not exist [ 83.251272][ T21] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 83.260983][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.269057][ T21] usb 2-1: Product: syz [ 83.283741][ T21] usb 2-1: Manufacturer: syz [ 83.293960][ T21] usb 2-1: SerialNumber: syz [ 83.311885][ T4267] usb 4-1: USB disconnect, device number 2 [ 83.331564][ T21] usb 2-1: config 0 descriptor?? [ 83.595665][ T4331] udevd[4331]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.625921][ T21] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 83.648320][ T21] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 83.682512][ T4267] wacom 0003:056A:003F.0002: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 83.696800][ T21] usb 2-1: USB disconnect, device number 2 [ 83.798851][ T4608] fido_id[4608]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.837455][ T4612] device syzkaller0 entered promiscuous mode [ 84.009869][ T4623] netlink: 'syz.3.111': attribute type 1 has an invalid length. [ 84.029349][ T4623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 84.047580][ T4622] device syzkaller0 entered promiscuous mode [ 84.208356][ T4631] tmpfs: Unknown parameter 'quota' [ 84.450040][ T4636] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 5 (only 8 groups) [ 84.818466][ T4642] device syzkaller0 entered promiscuous mode [ 84.942346][ T21] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 84.965773][ T4646] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 84.972525][ T21] Bluetooth: hci1: Injecting HCI hardware error event [ 84.982001][ T4193] Bluetooth: hci1: hardware error 0x00 [ 85.021369][ T4646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 85.169150][ T4649] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.295181][ T4658] device syzkaller0 entered promiscuous mode [ 85.499309][ T4673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.132'. [ 85.499450][ T4649] chnl_net:caif_netlink_parms(): no params data found [ 85.609817][ T4677] device syzkaller0 entered promiscuous mode [ 85.701135][ T4687] netlink: 'syz.1.137': attribute type 1 has an invalid length. [ 85.726647][ T4687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.137'. [ 85.771682][ T4649] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.804436][ T4649] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.822419][ T4649] device bridge_slave_0 entered promiscuous mode [ 85.831420][ T4649] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.838683][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.847552][ T4649] device bridge_slave_1 entered promiscuous mode [ 85.896371][ T4649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.931476][ T4649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.992351][ T4649] team0: Port device team_slave_0 added [ 86.046542][ T4649] team0: Port device team_slave_1 added [ 86.105174][ T4697] device syzkaller0 entered promiscuous mode [ 86.117472][ T4649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.128455][ T4649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.166049][ T4649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.251159][ T4649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.258194][ T4649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.299615][ T4649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.411528][ T4649] device hsr_slave_0 entered promiscuous mode [ 86.444658][ T4649] device hsr_slave_1 entered promiscuous mode [ 86.465503][ T4649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.484062][ T4649] Cannot create hsr debugfs directory [ 86.625787][ T1108] cfg80211: failed to load regulatory.db [ 86.805944][ T4649] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.843682][ T4726] netlink: 'syz.2.150': attribute type 1 has an invalid length. [ 86.884413][ T4726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 86.935725][ T4727] device syzkaller0 entered promiscuous mode [ 87.121690][ T4649] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.283757][ T4737] device syzkaller0 entered promiscuous mode [ 87.340411][ T4649] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.584906][ T4649] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.874450][ T4649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.893923][ T4649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.940138][ T4649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.968729][ T4649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.096924][ T4649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.126084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.150438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.189015][ T4649] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.213044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.232681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.256751][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.263934][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.292795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.349461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.361658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.388990][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.396185][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.410166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.438072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.457350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.476191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.489201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.532848][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.554415][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.570514][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.600124][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.628889][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.638675][ T4757] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 88.647795][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.664085][ T4757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.162'. [ 88.677427][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.698871][ T4752] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.039662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.052476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.082350][ T4649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.146754][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.163827][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.194170][ T4771] tipc: Enabled bearer , priority 0 [ 89.215735][ T4771] tipc: Resetting bearer [ 89.235979][ T4770] tipc: Disabling bearer [ 89.284823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.299701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.331383][ T4649] device veth0_vlan entered promiscuous mode [ 89.350813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.364924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.393061][ T4649] device veth1_vlan entered promiscuous mode [ 89.451804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.460255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.530135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.548751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.563050][ T4649] device veth0_macvtap entered promiscuous mode [ 89.607298][ T4779] device syzkaller0 entered promiscuous mode [ 89.624997][ T4649] device veth1_macvtap entered promiscuous mode [ 89.758500][ T4649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.792030][ T4649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.820893][ T4649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.844530][ T4649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.870711][ T4649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.901523][ T4649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.930639][ T4649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.951461][ T4649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.990875][ T4649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.020664][ T4649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.040237][ T4791] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 90.052157][ T4790] FAULT_INJECTION: forcing a failure. [ 90.052157][ T4790] name failslab, interval 1, probability 0, space 0, times 1 [ 90.072458][ T4649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.083156][ T4791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'. [ 90.117101][ T4649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.141097][ T4790] CPU: 1 PID: 4790 Comm: syz.1.174 Not tainted syzkaller #0 [ 90.148463][ T4790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 90.158572][ T4790] Call Trace: [ 90.161896][ T4790] [ 90.164967][ T4790] dump_stack_lvl+0x188/0x250 [ 90.168362][ T4649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.169694][ T4790] ? show_regs_print_info+0x20/0x20 [ 90.184735][ T4790] ? load_image+0x410/0x410 [ 90.189339][ T4790] ? __might_sleep+0xf0/0xf0 [ 90.193990][ T4790] ? __lock_acquire+0x7d40/0x7d40 [ 90.199074][ T4790] should_fail+0x383/0x4b0 [ 90.203546][ T4790] should_failslab+0x5/0x20 [ 90.208090][ T4790] slab_pre_alloc_hook+0x51/0xc0 [ 90.210966][ T4649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.213065][ T4790] kmem_cache_alloc_trace+0x47/0x290 [ 90.228794][ T4790] ? raw_ioctl+0x192f/0x3750 [ 90.233448][ T4790] raw_ioctl+0x192f/0x3750 [ 90.237925][ T4790] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 90.243619][ T4790] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 90.249126][ T4790] ? make_qualifier+0x3b0/0x3b0 [ 90.250803][ T4649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.254136][ T4790] ? bpf_lsm_file_ioctl+0x5/0x10 [ 90.268792][ T4790] ? security_file_ioctl+0x7c/0xa0 [ 90.273958][ T4790] ? make_qualifier+0x3b0/0x3b0 [ 90.278869][ T4790] __se_sys_ioctl+0xfa/0x170 [ 90.280816][ T4649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.283506][ T4790] do_syscall_64+0x4c/0xa0 [ 90.283536][ T4790] ? clear_bhb_loop+0x30/0x80 [ 90.283562][ T4790] ? clear_bhb_loop+0x30/0x80 [ 90.283588][ T4790] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.283616][ T4790] RIP: 0033:0x7f97c22671eb [ 90.283638][ T4790] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 90.283658][ T4790] RSP: 002b:00007f97c04bcf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.283684][ T4790] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f97c22671eb [ 90.283702][ T4790] RDX: 00007f97c04bdfd0 RSI: 0000000041015500 RDI: 0000000000000006 [ 90.283718][ T4790] RBP: 00007f97c04bdfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 90.283735][ T4790] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f97c04bcfa0 [ 90.283750][ T4790] R13: 0000200000000240 R14: 0000000000000005 R15: 0000000000000000 [ 90.283783][ T4790] [ 90.433041][ T4649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.444949][ T4649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.455859][ T4649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.468222][ T4649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.479446][ T4649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.495851][ T4649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.512092][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.521896][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.530325][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.551668][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.564700][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.574226][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.595099][ T4649] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.619647][ T4649] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.639024][ T4649] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.659307][ T4649] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.713110][ T4801] netlink: 32 bytes leftover after parsing attributes in process `syz.2.178'. [ 90.727771][ T4801] bridge: RTM_NEWNEIGH with invalid ether address [ 90.736832][ T4801] netlink: 32 bytes leftover after parsing attributes in process `syz.2.178'. [ 90.765402][ T4799] FAULT_INJECTION: forcing a failure. [ 90.765402][ T4799] name failslab, interval 1, probability 0, space 0, times 0 [ 90.784240][ T4799] CPU: 1 PID: 4799 Comm: syz.4.177 Not tainted syzkaller #0 [ 90.791600][ T4799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 90.801697][ T4799] Call Trace: [ 90.805193][ T4799] [ 90.808168][ T4799] dump_stack_lvl+0x188/0x250 [ 90.812892][ T4799] ? show_regs_print_info+0x20/0x20 [ 90.818131][ T4799] ? load_image+0x410/0x410 [ 90.822675][ T4799] ? __lock_acquire+0x7d40/0x7d40 [ 90.827835][ T4799] should_fail+0x383/0x4b0 [ 90.832297][ T4799] should_failslab+0x5/0x20 [ 90.836841][ T4799] slab_pre_alloc_hook+0x51/0xc0 [ 90.841821][ T4799] kmem_cache_alloc_trace+0x47/0x290 [ 90.847144][ T4799] ? ceph_mdsc_init+0x53/0x920 [ 90.851986][ T4799] ? __rwlock_init+0x140/0x140 [ 90.856808][ T4799] ceph_mdsc_init+0x53/0x920 [ 90.861448][ T4799] ceph_get_tree+0x54b/0x1290 [ 90.866170][ T4799] ? bpf_lsm_capable+0x5/0x10 [ 90.870890][ T4799] ? security_capable+0x85/0xb0 [ 90.875784][ T4799] vfs_get_tree+0x88/0x270 [ 90.880246][ T4799] do_new_mount+0x247/0xa40 [ 90.884799][ T4799] __se_sys_mount+0x2e3/0x3d0 [ 90.889531][ T4799] ? __x64_sys_mount+0xc0/0xc0 [ 90.894379][ T4799] ? lockdep_hardirqs_on+0x94/0x140 [ 90.899622][ T4799] ? __x64_sys_mount+0x1c/0xc0 [ 90.904437][ T4799] do_syscall_64+0x4c/0xa0 [ 90.908890][ T4799] ? clear_bhb_loop+0x30/0x80 [ 90.913611][ T4799] ? clear_bhb_loop+0x30/0x80 [ 90.918428][ T4799] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.924361][ T4799] RIP: 0033:0x7ff61fa49559 [ 90.928817][ T4799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.948456][ T4799] RSP: 002b:00007ff61dca1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 90.956948][ T4799] RAX: ffffffffffffffda RBX: 00007ff61fcd0fa0 RCX: 00007ff61fa49559 [ 90.964973][ T4799] RDX: 0000200000001780 RSI: 0000200000001740 RDI: 0000200000001700 [ 90.973097][ T4799] RBP: 00007ff61fae08b0 R08: 0000000000000000 R09: 0000000000000000 [ 90.981108][ T4799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.989146][ T4799] R13: 00007ff61fcd1038 R14: 00007ff61fcd0fa0 R15: 00007fff249ceb08 [ 90.997173][ T4799] [ 91.036168][ T4809] tipc: Started in network mode [ 91.063974][ T4809] tipc: Node identity 5ed86e0e7e53, cluster identity 4711 [ 91.074165][ T4809] tipc: Enabled bearer , priority 0 [ 91.102837][ T4807] tipc: Resetting bearer [ 91.199466][ T4802] tipc: Disabling bearer [ 91.212100][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.220349][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.243278][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.292488][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.300373][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.355355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.559322][ T4836] db_root: cannot be changed: target drivers registered [ 91.563808][ T4844] netlink: 'syz.3.189': attribute type 1 has an invalid length. [ 91.599174][ T4844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.189'. [ 91.906621][ T4863] tipc: Started in network mode [ 91.920729][ T4863] tipc: Node identity 864b7e1288c6, cluster identity 4711 [ 91.929163][ T4863] tipc: Enabled bearer , priority 0 [ 91.982866][ T4863] tipc: Resetting bearer [ 92.004192][ T4860] tipc: Disabling bearer [ 92.142733][ T4879] FAULT_INJECTION: forcing a failure. [ 92.142733][ T4879] name failslab, interval 1, probability 0, space 0, times 0 [ 92.178599][ T4879] CPU: 1 PID: 4879 Comm: syz.1.204 Not tainted syzkaller #0 [ 92.185975][ T4879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.196067][ T4879] Call Trace: [ 92.199378][ T4879] [ 92.202338][ T4879] dump_stack_lvl+0x188/0x250 [ 92.207053][ T4879] ? show_regs_print_info+0x20/0x20 [ 92.212312][ T4879] ? load_image+0x410/0x410 [ 92.216853][ T4879] ? __lock_acquire+0x7d40/0x7d40 [ 92.221925][ T4879] should_fail+0x383/0x4b0 [ 92.226386][ T4879] should_failslab+0x5/0x20 [ 92.230919][ T4879] slab_pre_alloc_hook+0x51/0xc0 [ 92.235897][ T4879] kmem_cache_alloc_trace+0x47/0x290 [ 92.241215][ T4879] ? alloc_fdtable+0xca/0x2c0 [ 92.245924][ T4879] ? __rwlock_init+0x140/0x140 [ 92.250739][ T4879] alloc_fdtable+0xca/0x2c0 [ 92.255286][ T4879] dup_fd+0x982/0xc70 [ 92.259317][ T4879] __close_range+0x194/0x510 [ 92.263947][ T4879] ? pick_file+0x220/0x220 [ 92.268401][ T4879] __x64_sys_close_range+0x76/0x80 [ 92.273543][ T4879] do_syscall_64+0x4c/0xa0 [ 92.278000][ T4879] ? clear_bhb_loop+0x30/0x80 [ 92.282719][ T4879] ? clear_bhb_loop+0x30/0x80 [ 92.287444][ T4879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.293375][ T4879] RIP: 0033:0x7f97c2267559 [ 92.297860][ T4879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.317520][ T4879] RSP: 002b:00007f97c049e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 92.325979][ T4879] RAX: ffffffffffffffda RBX: 00007f97c24ef090 RCX: 00007f97c2267559 [ 92.333990][ T4879] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 92.342026][ T4879] RBP: 00007f97c22fe8b0 R08: 0000000000000000 R09: 0000000000000000 [ 92.350042][ T4879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.358058][ T4879] R13: 00007f97c24ef128 R14: 00007f97c24ef090 R15: 00007ffd6574aac8 [ 92.366085][ T4879] [ 92.438962][ T4888] netlink: 'syz.4.207': attribute type 1 has an invalid length. [ 92.460374][ T4888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.207'. [ 92.879682][ T4920] device syzkaller0 entered promiscuous mode [ 92.898176][ T4920] tipc: Started in network mode [ 92.906452][ T4920] tipc: Node identity 76cf2a852724, cluster identity 4711 [ 92.926402][ T4920] tipc: Enabled bearer , priority 0 [ 92.939151][ T4922] netlink: 'syz.2.218': attribute type 10 has an invalid length. [ 92.999178][ T4922] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 93.038751][ T4922] syz.2.218 (4922) used greatest stack depth: 20048 bytes left [ 93.049927][ T4920] tipc: Resetting bearer [ 93.087015][ T4919] tipc: Resetting bearer [ 93.121778][ T4919] tipc: Disabling bearer [ 93.213537][ T4938] netlink: 'syz.3.223': attribute type 1 has an invalid length. [ 93.231835][ T4938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.223'. [ 93.726182][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 93.823485][ T4983] device syzkaller0 entered promiscuous mode [ 93.844034][ T4985] netlink: 44 bytes leftover after parsing attributes in process `syz.3.238'. [ 93.885793][ T4983] tipc: Started in network mode [ 93.930024][ T4983] tipc: Node identity aa1222760eca, cluster identity 4711 [ 93.933617][ T4992] 9pnet_virtio: no channels available for device syz [ 93.955680][ T4983] tipc: Enabled bearer , priority 0 [ 93.983432][ T4997] FAULT_INJECTION: forcing a failure. [ 93.983432][ T4997] name failslab, interval 1, probability 0, space 0, times 0 [ 94.001918][ T4999] netlink: 'syz.0.239': attribute type 1 has an invalid length. [ 94.031015][ T4983] tipc: Resetting bearer [ 94.037485][ T4999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 94.056887][ T4982] tipc: Resetting bearer [ 94.063075][ T4997] CPU: 1 PID: 4997 Comm: syz.3.242 Not tainted syzkaller #0 [ 94.070424][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 94.080523][ T4997] Call Trace: [ 94.083841][ T4997] [ 94.086801][ T4997] dump_stack_lvl+0x188/0x250 [ 94.091521][ T4997] ? show_regs_print_info+0x20/0x20 [ 94.096758][ T4997] ? load_image+0x410/0x410 [ 94.101310][ T4997] ? __might_sleep+0xf0/0xf0 [ 94.105943][ T4997] ? __lock_acquire+0x7d40/0x7d40 [ 94.111011][ T4997] should_fail+0x383/0x4b0 [ 94.115478][ T4997] should_failslab+0x5/0x20 [ 94.120025][ T4997] slab_pre_alloc_hook+0x51/0xc0 [ 94.125001][ T4997] ? __d_alloc+0x27/0x6d0 [ 94.129367][ T4997] kmem_cache_alloc+0x3d/0x280 [ 94.134173][ T4997] __d_alloc+0x27/0x6d0 [ 94.138374][ T4997] d_alloc_name+0xb7/0x320 [ 94.142824][ T4997] ? do_raw_spin_unlock+0x11d/0x230 [ 94.148061][ T4997] ? d_alloc_pseudo+0x70/0x70 [ 94.152818][ T4997] ? do_raw_spin_unlock+0x11d/0x230 [ 94.158062][ T4997] simple_fill_super+0x2db/0x5e0 [ 94.163044][ T4997] nfsd_fill_super+0x80/0x110 [ 94.167754][ T4997] ? nfsd_fs_get_tree+0xc0/0xc0 [ 94.172639][ T4997] get_tree_keyed+0xd8/0x190 [ 94.177271][ T4997] vfs_get_tree+0x88/0x270 [ 94.181726][ T4997] do_new_mount+0x247/0xa40 [ 94.186279][ T4997] __se_sys_mount+0x2e3/0x3d0 [ 94.190997][ T4997] ? __x64_sys_mount+0xc0/0xc0 [ 94.195803][ T4997] ? lockdep_hardirqs_on+0x94/0x140 [ 94.201029][ T4997] ? __x64_sys_mount+0x1c/0xc0 [ 94.205830][ T4997] do_syscall_64+0x4c/0xa0 [ 94.210285][ T4997] ? clear_bhb_loop+0x30/0x80 [ 94.214999][ T4997] ? clear_bhb_loop+0x30/0x80 [ 94.219720][ T4997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.225669][ T4997] RIP: 0033:0x7fe2a8b30559 [ 94.230150][ T4997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.249797][ T4997] RSP: 002b:00007fe2a6d88028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.258252][ T4997] RAX: ffffffffffffffda RBX: 00007fe2a8db7fa0 RCX: 00007fe2a8b30559 [ 94.266262][ T4997] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000000000000000 [ 94.274282][ T4997] RBP: 00007fe2a8bc78b0 R08: 0000000000000000 R09: 0000000000000000 [ 94.282326][ T4997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.290330][ T4997] R13: 00007fe2a8db8038 R14: 00007fe2a8db7fa0 R15: 00007ffccf62dae8 [ 94.298355][ T4997] [ 94.339819][ T4982] tipc: Disabling bearer [ 94.485529][ T5015] jffs2: notice: (5015) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.808342][ T5035] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.816961][ T5035] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.031106][ T5056] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 95.059223][ T5056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.255'. [ 95.086125][ T5058] device syzkaller0 entered promiscuous mode [ 95.125246][ T5058] tipc: Enabled bearer , priority 0 [ 95.169411][ T5058] tipc: Resetting bearer [ 95.209659][ T5055] tipc: Resetting bearer [ 95.271533][ T5055] tipc: Disabling bearer [ 95.853485][ T26] audit: type=1326 audit(1792145983.066:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97c2267559 code=0x0 [ 96.022120][ T5120] netlink: 'syz.4.273': attribute type 1 has an invalid length. [ 96.029820][ T5120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 96.189360][ T5130] device syzkaller0 entered promiscuous mode [ 96.240230][ T5130] tipc: Enabled bearer , priority 0 [ 96.284975][ T5137] process 'syz.4.278' launched './file2' with NULL argv: empty string added [ 96.310919][ T5130] tipc: Resetting bearer [ 96.392884][ T5126] tipc: Resetting bearer [ 96.419765][ T5126] tipc: Disabling bearer [ 96.440536][ T5137] FAULT_INJECTION: forcing a failure. [ 96.440536][ T5137] name failslab, interval 1, probability 0, space 0, times 0 [ 96.468246][ T5142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 96.502621][ T5137] CPU: 0 PID: 5137 Comm: syz.4.278 Not tainted syzkaller #0 [ 96.510017][ T5137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.520118][ T5137] Call Trace: [ 96.523435][ T5137] [ 96.526400][ T5137] dump_stack_lvl+0x188/0x250 [ 96.531121][ T5137] ? show_regs_print_info+0x20/0x20 [ 96.536361][ T5137] ? load_image+0x410/0x410 [ 96.540907][ T5137] ? __might_sleep+0xf0/0xf0 [ 96.545541][ T5137] ? __lock_acquire+0x7d40/0x7d40 [ 96.550611][ T5137] should_fail+0x383/0x4b0 [ 96.555078][ T5137] should_failslab+0x5/0x20 [ 96.559623][ T5137] slab_pre_alloc_hook+0x51/0xc0 [ 96.564603][ T5137] kmem_cache_alloc_trace+0x47/0x290 [ 96.569955][ T5137] ? tomoyo_init_log+0x183/0x1e90 [ 96.575029][ T5137] tomoyo_init_log+0x183/0x1e90 [ 96.579921][ T5137] ? kfree+0xef/0x2a0 [ 96.583945][ T5137] ? tomoyo_realpath_from_path+0x5ad/0x5e0 [ 96.589797][ T5137] ? tomoyo_path_mkdir+0xad/0xf0 [ 96.595227][ T5137] ? do_mkdirat+0x15e/0x5c0 [ 96.599790][ T5137] ? __x64_sys_mkdirat+0x85/0x90 [ 96.604772][ T5137] ? do_syscall_64+0x4c/0xa0 [ 96.609408][ T5137] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.615536][ T5137] ? format_decode+0x19b/0x1330 [ 96.620439][ T5137] ? rcu_lock_release+0x20/0x20 [ 96.625328][ T5137] ? tomoyo_profile+0xd/0x50 [ 96.629953][ T5137] ? tomoyo_profile+0xd/0x50 [ 96.634581][ T5137] ? tomoyo_domain_quota_is_ok+0x3e7/0x530 [ 96.640448][ T5137] tomoyo_supervisor+0x38d/0x1190 [ 96.645538][ T5137] ? tomoyo_profile+0x50/0x50 [ 96.650264][ T5137] ? vsnprintf+0x1b22/0x1c20 [ 96.654917][ T5137] ? vscnprintf+0x80/0x80 [ 96.659298][ T5137] ? tomoyo_check_acl+0x3a4/0x420 [ 96.664461][ T5137] tomoyo_path_number_perm+0x4fb/0x6b0 [ 96.669967][ T5137] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 96.675479][ T5137] ? __lock_acquire+0x7d40/0x7d40 [ 96.680549][ T5137] ? do_raw_spin_lock+0x128/0x2f0 [ 96.685664][ T5137] ? do_raw_spin_unlock+0x11d/0x230 [ 96.690914][ T5137] ? d_set_d_op+0x25b/0x370 [ 96.695500][ T5137] ? simple_lookup+0xc1/0xf0 [ 96.700139][ T5137] ? lookup_one_qstr_excl+0x11c/0x240 [ 96.705566][ T5137] tomoyo_path_mkdir+0xad/0xf0 [ 96.710381][ T5137] ? tomoyo_path_unlink+0xf0/0xf0 [ 96.715467][ T5137] ? kern_path_create+0x190/0x190 [ 96.720620][ T5137] security_path_mkdir+0xe0/0x130 [ 96.725683][ T5137] do_mkdirat+0x15e/0x5c0 [ 96.730065][ T5137] ? vfs_mkdir+0x570/0x570 [ 96.734537][ T5137] __x64_sys_mkdirat+0x85/0x90 [ 96.739349][ T5137] do_syscall_64+0x4c/0xa0 [ 96.743807][ T5137] ? clear_bhb_loop+0x30/0x80 [ 96.748544][ T5137] ? clear_bhb_loop+0x30/0x80 [ 96.753271][ T5137] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.759214][ T5137] RIP: 0033:0x7ff61fa49559 [ 96.763974][ T5137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.783712][ T5137] RSP: 002b:00007ff61dca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 96.792176][ T5137] RAX: ffffffffffffffda RBX: 00007ff61fcd0fa0 RCX: 00007ff61fa49559 [ 96.800198][ T5137] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 96.808208][ T5137] RBP: 00007ff61fae08b0 R08: 0000000000000000 R09: 0000000000000000 [ 96.816221][ T5137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.824260][ T5137] R13: 00007ff61fcd1038 R14: 00007ff61fcd0fa0 R15: 00007fff249ceb08 [ 96.832287][ T5137] [ 97.061233][ T5140] [ 97.063624][ T5140] ====================================================== [ 97.070667][ T5140] WARNING: possible circular locking dependency detected [ 97.077734][ T5140] syzkaller #0 Not tainted [ 97.082173][ T5140] ------------------------------------------------------ [ 97.089212][ T5140] syz.3.280/5140 is trying to acquire lock: [ 97.095133][ T5140] ffff8880637c5028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 97.106230][ T5140] [ 97.106230][ T5140] but task is already holding lock: [ 97.113651][ T5140] ffffffff8e4d7308 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 97.123360][ T5140] [ 97.123360][ T5140] which lock already depends on the new lock. [ 97.123360][ T5140] [ 97.133794][ T5140] [ 97.133794][ T5140] the existing dependency chain (in reverse order) is: [ 97.142835][ T5140] [ 97.142835][ T5140] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 97.150934][ T5140] __mutex_lock_common+0x1e5/0x2400 [ 97.156721][ T5140] mutex_lock_nested+0x17/0x20 [ 97.162046][ T5140] rfkill_register+0x2f/0x970 [ 97.167281][ T5140] hci_register_dev+0x459/0x980 [ 97.172694][ T5140] vhci_create_device+0x32e/0x5c0 [ 97.178282][ T5140] vhci_write+0x389/0x440 [ 97.183173][ T5140] vfs_write+0x748/0xd70 [ 97.187969][ T5140] ksys_write+0x153/0x260 [ 97.192847][ T5140] do_syscall_64+0x4c/0xa0 [ 97.197824][ T5140] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.204276][ T5140] [ 97.204276][ T5140] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 97.212131][ T5140] __mutex_lock_common+0x1e5/0x2400 [ 97.217886][ T5140] mutex_lock_nested+0x17/0x20 [ 97.223222][ T5140] vhci_send_frame+0x88/0x100 [ 97.228462][ T5140] hci_send_frame+0x1a9/0x2e0 [ 97.233703][ T5140] hci_tx_work+0x9b5/0x16d0 [ 97.238765][ T5140] process_one_work+0x867/0xff0 [ 97.244180][ T5140] worker_thread+0xad7/0x12a0 [ 97.249423][ T5140] kthread+0x42e/0x520 [ 97.254048][ T5140] ret_from_fork+0x1f/0x30 [ 97.259029][ T5140] [ 97.259029][ T5140] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 97.268282][ T5140] __flush_work+0x116/0x210 [ 97.273367][ T5140] hci_dev_do_close+0x201/0x1020 [ 97.278897][ T5140] hci_unregister_dev+0x2eb/0x590 [ 97.284479][ T5140] vhci_release+0x73/0xc0 [ 97.289471][ T5140] __fput+0x212/0x8c0 [ 97.294012][ T5140] task_work_run+0x125/0x1a0 [ 97.299160][ T5140] do_exit+0x635/0x2110 [ 97.303873][ T5140] do_group_exit+0x12c/0x2f0 [ 97.309049][ T5140] __x64_sys_exit_group+0x3b/0x40 [ 97.314633][ T5140] do_syscall_64+0x4c/0xa0 [ 97.319611][ T5140] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.326089][ T5140] [ 97.326089][ T5140] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 97.333814][ T5140] __mutex_lock_common+0x1e5/0x2400 [ 97.339576][ T5140] mutex_lock_nested+0x17/0x20 [ 97.344909][ T5140] bg_scan_update+0x44/0x3b0 [ 97.350063][ T5140] process_one_work+0x867/0xff0 [ 97.355476][ T5140] worker_thread+0xad7/0x12a0 [ 97.360714][ T5140] kthread+0x42e/0x520 [ 97.365335][ T5140] ret_from_fork+0x1f/0x30 [ 97.370302][ T5140] [ 97.370302][ T5140] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 97.380155][ T5140] __lock_acquire+0x38f7/0x7d40 [ 97.385602][ T5140] lock_acquire+0x19f/0x400 [ 97.390670][ T5140] __flush_work+0x116/0x210 [ 97.395734][ T5140] __cancel_work_timer+0x3f4/0x560 [ 97.401429][ T5140] hci_request_cancel_all+0xcc/0x300 [ 97.407292][ T5140] hci_dev_do_close+0x4e/0x1020 [ 97.412697][ T5140] hci_rfkill_set_block+0x101/0x180 [ 97.418454][ T5140] rfkill_set_block+0x1c1/0x3c0 [ 97.423889][ T5140] rfkill_fop_write+0x453/0x560 [ 97.429307][ T5140] vfs_write+0x304/0xd70 [ 97.434106][ T5140] ksys_write+0x153/0x260 [ 97.439016][ T5140] do_syscall_64+0x4c/0xa0 [ 97.443995][ T5140] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.450480][ T5140] [ 97.450480][ T5140] other info that might help us debug this: [ 97.450480][ T5140] [ 97.460733][ T5140] Chain exists of: [ 97.460733][ T5140] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 97.460733][ T5140] [ 97.476501][ T5140] Possible unsafe locking scenario: [ 97.476501][ T5140] [ 97.483978][ T5140] CPU0 CPU1 [ 97.489366][ T5140] ---- ---- [ 97.494762][ T5140] lock(rfkill_global_mutex); [ 97.499560][ T5140] lock(&data->open_mutex); [ 97.506699][ T5140] lock(rfkill_global_mutex); [ 97.514017][ T5140] lock((work_completion)(&hdev->bg_scan_update)); [ 97.520659][ T5140] [ 97.520659][ T5140] *** DEADLOCK *** [ 97.520659][ T5140] [ 97.528827][ T5140] 1 lock held by syz.3.280/5140: [ 97.533798][ T5140] #0: ffffffff8e4d7308 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 97.543940][ T5140] [ 97.543940][ T5140] stack backtrace: [ 97.549841][ T5140] CPU: 0 PID: 5140 Comm: syz.3.280 Not tainted syzkaller #0 [ 97.557142][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.567212][ T5140] Call Trace: [ 97.570511][ T5140] [ 97.573455][ T5140] dump_stack_lvl+0x188/0x250 [ 97.578154][ T5140] ? load_image+0x410/0x410 [ 97.582667][ T5140] ? show_regs_print_info+0x20/0x20 [ 97.587883][ T5140] ? print_circular_bug+0x12b/0x1a0 [ 97.593106][ T5140] check_noncircular+0x2f8/0x400 [ 97.598068][ T5140] ? print_deadlock_bug+0x5d0/0x5d0 [ 97.603276][ T5140] ? lockdep_lock+0xf1/0x1f0 [ 97.607888][ T5140] ? __lock_acquire+0x12df/0x7d40 [ 97.612929][ T5140] ? mark_lock+0x94/0x320 [ 97.617267][ T5140] ? _find_first_zero_bit+0xd1/0xf0 [ 97.622480][ T5140] __lock_acquire+0x38f7/0x7d40 [ 97.627358][ T5140] ? verify_lock_unused+0x140/0x140 [ 97.632574][ T5140] ? verify_lock_unused+0x140/0x140 [ 97.637796][ T5140] lock_acquire+0x19f/0x400 [ 97.642321][ T5140] ? __flush_work+0xfa/0x210 [ 97.646923][ T5140] ? __lock_acquire+0x7d40/0x7d40 [ 97.651964][ T5140] ? read_lock_is_recursive+0x10/0x10 [ 97.657384][ T5140] ? start_flush_work+0x784/0x830 [ 97.662530][ T5140] __flush_work+0x116/0x210 [ 97.667060][ T5140] ? __flush_work+0xfa/0x210 [ 97.671669][ T5140] ? flush_work+0x20/0x20 [ 97.676009][ T5140] ? try_to_grab_pending+0xfb/0x820 [ 97.681217][ T5140] ? mark_lock+0x94/0x320 [ 97.685579][ T5140] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 97.691579][ T5140] ? lock_chain_count+0x20/0x20 [ 97.696444][ T5140] ? mark_lock+0x94/0x320 [ 97.700781][ T5140] ? __cancel_work_timer+0x36a/0x560 [ 97.706096][ T5140] __cancel_work_timer+0x3f4/0x560 [ 97.711218][ T5140] ? cancel_work_sync+0x20/0x20 [ 97.716079][ T5140] ? __cancel_work+0x1f9/0x2e0 [ 97.720857][ T5140] ? lockdep_hardirqs_on+0x94/0x140 [ 97.726074][ T5140] ? __cancel_work+0x27b/0x2e0 [ 97.730851][ T5140] ? cancel_work+0x20/0x20 [ 97.735283][ T5140] hci_request_cancel_all+0xcc/0x300 [ 97.740588][ T5140] hci_dev_do_close+0x4e/0x1020 [ 97.745455][ T5140] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 97.751383][ T5140] ? _raw_spin_unlock+0x40/0x40 [ 97.756251][ T5140] hci_rfkill_set_block+0x101/0x180 [ 97.761461][ T5140] ? rcu_lock_release+0x20/0x20 [ 97.766327][ T5140] rfkill_set_block+0x1c1/0x3c0 [ 97.771198][ T5140] rfkill_fop_write+0x453/0x560 [ 97.776063][ T5140] ? rfkill_fop_read+0x560/0x560 [ 97.781015][ T5140] ? common_file_perm+0x160/0x1c0 [ 97.786074][ T5140] ? fsnotify_perm+0x5d/0x560 [ 97.790780][ T5140] ? security_file_permission+0x75/0xa0 [ 97.796361][ T5140] ? rfkill_fop_read+0x560/0x560 [ 97.801317][ T5140] vfs_write+0x304/0xd70 [ 97.805579][ T5140] ? file_end_write+0x250/0x250 [ 97.810443][ T5140] ? __fget_files+0x402/0x470 [ 97.815131][ T5140] ? __fdget_pos+0x1e2/0x370 [ 97.819728][ T5140] ? ksys_write+0x70/0x260 [ 97.824160][ T5140] ksys_write+0x153/0x260 [ 97.828502][ T5140] ? __ia32_sys_read+0x80/0x80 [ 97.833275][ T5140] ? lockdep_hardirqs_on+0x94/0x140 [ 97.838491][ T5140] do_syscall_64+0x4c/0xa0 [ 97.842924][ T5140] ? clear_bhb_loop+0x30/0x80 [ 97.847616][ T5140] ? clear_bhb_loop+0x30/0x80 [ 97.852304][ T5140] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.858211][ T5140] RIP: 0033:0x7fe2a8b30559 [ 97.862637][ T5140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.882973][ T5140] RSP: 002b:00007fe2a6d88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.891435][ T5140] RAX: ffffffffffffffda RBX: 00007fe2a8db7fa0 RCX: 00007fe2a8b30559 [ 97.899434][ T5140] RDX: 0000000000000008 RSI: 0000200000000340 RDI: 0000000000000004 [ 97.907435][ T5140] RBP: 00007fe2a8bc78b0 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 97.915427][ T5140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.923414][ T5140] R13: 00007fe2a8db8038 R14: 00007fe2a8db7fa0 R15: 00007ffccf62dae8 [ 97.931406][ T5140] [ 97.980715][ T5176] page:ffffea0001800000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60000 [ 98.022871][ T5176] head:ffffea0001800000 order:2 compound_mapcount:0 compound_pincount:0 [ 98.033919][ T5176] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 98.044222][ T5176] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017841c80 [ 98.073903][ T5176] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 98.102883][ T5176] page dumped because: unmovable page [ 98.118343][ T5176] page_owner tracks the page as allocated [ 98.126972][ T5176] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4196, ts 69719447062, free_ts 24502807445 [ 98.156128][ T5176] get_page_from_freelist+0x24f6/0x2670 [ 98.170375][ T5176] __alloc_pages+0x1ee/0x480 [ 98.199080][ T5176] new_slab+0xc0/0x4b0 [ 98.213448][ T5176] ___slab_alloc+0x807/0xdd0 [ 98.230752][ T5176] kmem_cache_alloc_trace+0xf9/0x290 [ 98.236116][ T5176] rtnl_newlink+0x17f/0x1920 [ 98.255312][ T5176] rtnetlink_rcv_msg+0x7f1/0xf10 [ 98.260359][ T5176] netlink_rcv_skb+0x1e9/0x430 [ 98.290676][ T5176] netlink_unicast+0x78f/0x940 [ 98.295550][ T5176] netlink_sendmsg+0x8ba/0xbe0 [ 98.300351][ T5176] __sys_sendto+0x46d/0x620 [ 98.312838][ T5176] __x64_sys_sendto+0xda/0xf0 [ 98.335349][ T5176] do_syscall_64+0x4c/0xa0 [ 98.339833][ T5176] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.353365][ T5176] page last free stack trace: [ 98.358115][ T5176] free_unref_page_prepare+0x637/0x6c0 [ 98.366535][ T5176] free_unref_page+0x8f/0x2a0 [ 98.371488][ T5176] free_contig_range+0x96/0xf0 [ 98.376815][ T5176] destroy_args+0xef/0xa00 [ 98.403552][ T5176] debug_vm_pgtable+0x321/0x380 [ 98.408488][ T5176] do_one_initcall+0x272/0x730 [ 98.424342][ T5176] do_initcall_level+0x13d/0x1f0 [ 98.429358][ T5176] do_initcalls+0x4b/0x90 [ 98.447784][ T5176] kernel_init_freeable+0x3d5/0x560 [ 98.462330][ T5176] kernel_init+0x19/0x1b0 [ 98.466734][ T5176] ret_from_fork+0x1f/0x30 [ 98.827412][ T4192] tipc: Resetting bearer [ 98.864843][ T4192] tipc: Disabling bearer [ 99.753698][ T4279] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.808330][ T4279] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.865208][ T4279] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.913946][ T4279] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.016532][ T4279] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.055765][ T4279] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.105198][ T4279] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.165280][ T4279] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.281873][ T4279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.346342][ T4279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.387243][ T4279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.446454][ T4279] bond0: (slave netdevsim0): Releasing backup interface [ 100.455972][ T4279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.563293][ T4279] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.604757][ T4279] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.674819][ T4279] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.714927][ T4279] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.791412][ T4279] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.844989][ T4279] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.897125][ T4279] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.935787][ T4279] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.085091][ T4279] tipc: Left network mode [ 101.090217][ T4279] tipc: Left network mode [ 101.095433][ T4279] tipc: Left network mode [ 101.100339][ T4279] tipc: Left network mode [ 101.106462][ T4279] tipc: Left network mode [ 102.748306][ T4279] device hsr_slave_0 left promiscuous mode [ 102.754882][ T4279] device hsr_slave_1 left promiscuous mode [ 102.762734][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.770189][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.778591][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.786526][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.794925][ T4279] device bridge_slave_1 left promiscuous mode [ 102.801390][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.809846][ T4279] device bridge_slave_0 left promiscuous mode [ 102.816583][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.828280][ T4279] device hsr_slave_0 left promiscuous mode [ 102.834762][ T4279] device hsr_slave_1 left promiscuous mode [ 102.844139][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.851778][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.859514][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.867579][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.876559][ T4279] device bridge_slave_1 left promiscuous mode [ 102.883002][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.891214][ T4279] device bridge_slave_0 left promiscuous mode [ 102.897420][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.909163][ T4279] device hsr_slave_0 left promiscuous mode [ 102.915666][ T4279] device hsr_slave_1 left promiscuous mode [ 102.931254][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.938713][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.946866][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.954546][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.962943][ T4279] device bridge_slave_1 left promiscuous mode [ 102.969158][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.977812][ T4279] device bridge_slave_0 left promiscuous mode [ 102.984404][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.995769][ T4279] device hsr_slave_0 left promiscuous mode [ 103.002246][ T4279] device hsr_slave_1 left promiscuous mode [ 103.008606][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.017048][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.028849][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.036451][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.044475][ T4279] device bridge_slave_1 left promiscuous mode [ 103.050987][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.059005][ T4279] device bridge_slave_0 left promiscuous mode [ 103.065355][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.075954][ T4279] device hsr_slave_0 left promiscuous mode [ 103.082425][ T4279] device hsr_slave_1 left promiscuous mode [ 103.088717][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.096206][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.104192][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.111661][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.119235][ T4279] device bridge_slave_1 left promiscuous mode [ 103.125669][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.134025][ T4279] device bridge_slave_0 left promiscuous mode [ 103.140204][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.155621][ T4279] device veth1_macvtap left promiscuous mode [ 103.161769][ T4279] device veth0_macvtap left promiscuous mode [ 103.167793][ T4279] device veth1_vlan left promiscuous mode [ 103.173710][ T4279] device veth0_vlan left promiscuous mode [ 103.180010][ T4279] device veth1_macvtap left promiscuous mode [ 103.186412][ T4279] device veth0_macvtap left promiscuous mode [ 103.192912][ T4279] device veth1_vlan left promiscuous mode [ 103.198724][ T4279] device veth0_vlan left promiscuous mode [ 103.205627][ T4279] device veth1_macvtap left promiscuous mode [ 103.212398][ T4279] device veth0_macvtap left promiscuous mode [ 103.218448][ T4279] device veth1_vlan left promiscuous mode [ 103.224268][ T4279] device veth0_vlan left promiscuous mode [ 103.230547][ T4279] device veth1_macvtap left promiscuous mode [ 103.236848][ T4279] device veth0_macvtap left promiscuous mode [ 103.243209][ T4279] device veth1_vlan left promiscuous mode [ 103.249469][ T4279] device veth0_vlan left promiscuous mode [ 103.256443][ T4279] device veth1_macvtap left promiscuous mode [ 103.264347][ T4279] device veth0_macvtap left promiscuous mode [ 103.270420][ T4279] device veth1_vlan left promiscuous mode [ 103.276475][ T4279] device veth0_vlan left promiscuous mode [ 103.599165][ T4279] team0 (unregistering): Port device team_slave_1 removed [ 103.612773][ T4279] team0 (unregistering): Port device team_slave_0 removed [ 103.625551][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.638791][ T4279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.683751][ T4279] bond0 (unregistering): Released all slaves [ 103.744729][ T4279] team0 (unregistering): Port device team_slave_1 removed [ 103.757162][ T4279] team0 (unregistering): Port device team_slave_0 removed [ 103.768408][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.780730][ T4279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.830437][ T4279] bond0 (unregistering): Released all slaves [ 103.893099][ T4279] team0 (unregistering): Port device team_slave_1 removed [ 103.905883][ T4279] team0 (unregistering): Port device team_slave_0 removed [ 103.919160][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.934524][ T4279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.978579][ T4279] bond0 (unregistering): Released all slaves [ 104.039022][ T4279] team0 (unregistering): Port device team_slave_1 removed [ 104.050434][ T4279] team0 (unregistering): Port device team_slave_0 removed [ 104.062326][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.076192][ T4279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.121119][ T4279] bond0 (unregistering): Released all slaves [ 104.179646][ T4279] team0 (unregistering): Port device team_slave_1 removed [ 104.195263][ T4279] team0 (unregistering): Port device team_slave_0 removed [ 104.207265][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.221607][ T4279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.266397][ T4279] bond0 (unregistering): Released all slaves