last executing test programs: 13.921853031s ago: executing program 1 (id=936): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) socket(0x6, 0xa, 0x80000003) unshare(0x62040200) add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000b00)="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", 0xbfa, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x400, 0x103) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 12.743575269s ago: executing program 1 (id=939): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1200000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB]) 12.576441584s ago: executing program 1 (id=941): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @local}}}], 0x20}}], 0x1, 0x0) 11.64161685s ago: executing program 1 (id=942): timerfd_create(0x2, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x6, 0x1500, &(0x7f0000003f40)="$eJzs3AnYjtXWOPC19t63XpKeJJn22uvmSYZNkmRIkiFJkuSTTAkhSZKQeMmUhCTzlGQOyRSSeZ4yJ8mRJElISLL/l9Kl83W+r/P/zjmf8/+/63dd+3r3eu9n7Wfd73qe5x6u632+aTegYu1K5WoyM/xD8NcfqQCQAgC9AeBaAIgAoFjmYpkvbk+vMfUfexLxz/XIlCtdgbiSpP9pm/Q/bZP+p23S/7RN+p+2Sf/TNul/2ib9FyIt2zI1+3Uy0u74s/v/Xf7eF5Lc//9/kBz/06RBv02k/2mb9P//Q+l/H5TV/91Dpf9pm/Q/bZP+p23S/7RN+p+2Sf+FSMv+B/eMKzz6b3Df+n9xKAC40jX8y8aVfv0JIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhEgbzobLDAD8Nr/SdQkhhBBCCCGEEOKfJ1x1pSsQQgghhBBCCCHEvx6CAg0GIkgHV0EKpIcMcDVkhGsgE1wLCbgOMsP1kAVuKPtbRg7ICbnAAoEDhhhyQx5Iwk2QF26GfJAfCkBB8FAICsMtUARuhaJwGxSD26E43AEloCSUgtJwJ5SBu6As3A3l4B4oDxWgIlSCe6Ey3AdV4H6oCg9ANXgQqsNDUAMehprwCNSC/4Da8CjUgcegLtSD+tAAGv6P8l+ETvASdIYukApdoRu8DN2hB/SEXtAbXoE+8Cr0hdegH/SHAfA6DIQ3YBC8CYNhCAyFYTAcRsBIGAWjYQyMhbdgHLwN4+EdmAATYRJMhikwFabBuzAdZsBMeA9mwfswG+bAXJgH8+EDWAALYRF8CIvhI1gCS2EZLIcVsBJWwWpYA2thHayHDbARNsFm2AIfw1bYBtthB+yEXbAbPoE98Cnshc9gH3z+f5l/5j/lt0dAQIUKDRpMh+kwBVMwA2bAjJgRM2EmTGACM2NmzIJZMCtmxWyYDXNgDsyFuZCQkJExN+bGJCYxL+bFfJgPC2AB9OixMBbGIngrFsWiWAyLYXEsjiWwJJbE0lgay2AZLItlsRyWw/JYHitiRbwX78X7sApWwapYFathNayO1bEG1sCaWBNrYS2sjbWxDtbBulgX62N9bIgNsRE2wsbYGJtiU2yGzbAFtsCW2BJbYStsjq2xDbbBttgW22E7bI8dsAO+iC/iS/gSdsHyqit2w27YHbtjT+yFvfAV7IOv4qv4GvbD/jgAX8fX8Q0chKdxMA7BoTgUy6gROBJHIasxOBbH4jgch+NxPE7AiTgRJ+MUnIrTcBpOxxk4A9/DWfg+vo9zcA7Ow/k4HxfgQlyEi3AxnsEluBSX4XJcgStxBa7GNbga1+F6XIcbcSNuxs34MX6Mw3Ab7sAduAt34Sf4CX6Kn2I/3If7cD/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOJ7Ak3gCT+EpPI1n8CyexXN4Ds/j8zm+qrUr/9p+oC4yyqh0Kp1KUSkqg8qgMqqMKpPKpBIqoTKrzCqLyqKyqqwqm8qmcqgcKpfKpUiRYhWr3Cq3SqqkyqtSLn1CFFBeeVVYFVZFVBFVVBVVxdTtqri6Q5VQJVUTX1qVVmVUU19W3a3KqXKqvKqgKqpKCJCqKqsqqoqqqqqqaqqaqq4eUjVUV+yJj6iLnamt+mMdNQDrqnqqvmqg3sDHVSM1CBurJqqpelINwcHYQjXyLdXTqpUaia3Vs2oUPqfaqjHYTr2g2qsOqqN6UXVSjX1n1UVNwK6qm5qM3VUP1VP1UtOxgrrYsYrqNdVP9VcD1OtqHr6hBqk31WA1RA1Vw9RwNUKNVKPUaDVGjVVvqXHqbTVevaMmqIlqkpqspqipapp6V01XM8rOVO+pWep9NVvNUXPVPDVffaAWqIVqkfpQLVYfqSVqqVqmlqsVaqVapVarNWqtWqfWqw1qo9qkNqst6mO1VW1T29UOtVPtUrvVJ2qP+lTtVZ+pfepztV/9RR1QX6iD6kt1SH2lDquv1RH1jTqqvlXH1HfquDqhTqrv1Sn1gzqtzqiz6kd1Tv2kzquf1QUVFGjUSmttdKTT6at0ik6vM+irdUZ9jc6kr9UJfZ3OrK/XWfQNOqu+UWfT2XUOnVOD+rXTrGOdW+fRSX2Tzqtv1vl0fl1AF9ReF9KF9S26iL5VF9W36WL6dl1c36FL6JK6lC6t79Rl9F26rL5bl9P36PK6gq6oK+l7dWV9n66i79dV9QO6mn5QV9cP6Rr6YV1TP6Jr6QZJgEd1Hf2Yrqvr6fq6gW6oH9eN9BO6sW6im+ondTPdXLfQT+mW+mndSj+jW+tndRv9nG6rn9ft9Au6ve6gO+qf9QUddGfdRafqrrqbfll31z10T91L99av6D76Vd1Xv6b76f56gH5dD9Rv6EH6TT1YD9FD9TA9XI/QI/UoPVqP0WP1W3qcfluP1+/oCXqinqQn6yl6qu55aaWZf0f+238jv+8vz75Zb9Ef6616m96ud+idepferXfrPXqP3qv36n16n96v9+sD+oA+qA/qQ/qQPqwP6yP6iD6qj+pj+pg+rk/oH/X3+pT+QZ/WZ/QZ/aM+p8/p85f+BmDQKKONMZFJZ64yKSa9yWCuNhnNNSaTudYkzHUms7neZDE3mKzmRpPNZDc5TE6Ty1hDxhk2sclt8pikucnkNTebfCa/KWAKGm8KmcLmln84/8/qa2gamkamkWlsGpumpqlpZpqZFqaFaWlamlamlWltWps2po1pa9qadqadaW/am46mo+lkOpnOprNJNammm3nZdDc9TE/Ty/Q2r5g+po/pa/qafqafGWAGmIFmoBlkBpnBZrAZaoaa4Wa4GWlGmtFmtBlrxppxZpwZb8abCWaCmWQmmSlmiplmppnpZrqZaWaaWWaWmX3xzWLmmvlmvllgFphFZpFZbBabJWapWWqWm+VmpVlpVpvVZq1Za9ab9Waj2WiWmC1mi9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agOXTx49ccNkfMEXPUHDXHzDFz3Bw3J81Jc8qcMqfNaXPWnDXnzDlz3pw3F8yFi6d9kYpUZCITpYvSRSlRSpQhyhBljDJGmaJMUSJKRJmjzFGW6IYoa3RjlC3KHuWIcka5IhtR5CKO4ih3lCdKRjdFeaObo3xR/qhAVDDyUaGocHRLVCS6NSoa3RYVi26Pikd3RCWiklGpqHR0Z1QmuisqG90dlYvuicpHFaKKUaXo3qhydF9UJbo/qho9EFWLHoyqRw9FNaKHo5rRI1GtyFw6vjwW1Y3qRfWjBlHDf+r6IZy+8Qnf2Xaxqbar7WZftt1tD9vT9rK97Su2j33V9rWv2X62vx1gX7cD7Rt2kH3TDrZD7FA7zA63I+xIO8qOtmPsWPuWHWfftuPtO3aCnWgn2cl2ip1qp9l37XQ7w86079lZ9n07286xc+08mw4AFtiFdpH90C62H9kldqldZpfbFXalXWVX2zV2rV1n19sNdqPdZDfbLfZju9Vus9vtDrvT7rK77Sd2j/3U7rWf2X32c7vf/sUesF/Yg/ZLe8h+ZQ/br+0R+409ar+1x+x39rg9YU/a7+0p+4M9bc/Ys/ZHe87+ZM/bn+0FGy6e3F88vJMhQ+koHaVQCmWgDJSRMlImykQJSlBmykxZKAtlpayUjbJRDspBuSgXXcTElJtyU5KSlJfyUj7KRwWoAHnyVJgKUxEqQkWpKBWjYlScilMJKkGlqBTdSXfSXXQX3U130z10D1WgClSJKlFlqkxVqApVpapUjapRdapONagG1aSaVItqUW2qTXWoDtWlulSf6lNDakiNqBE1psbUlJpSM2pGLagFtaSW1IpaUWtqTW2oDbWlttSO2lF7ak8dqSN1ok7UmTpTKqVSN+pG3ak79aSe1Jt6Ux/qQ32pL/WjfjSABtBAGkiDaBANpiE0lIbRcBpBI2kUjaYxNJbG0jgaR+NpPE2gCTSJJtEUmkLTaBpNp+k0k2bSLJpFs2k2zaW5NJ/m0wJaQItoES2mxbSEltAyWkYraAWtolW0htbQOlpHG2gDbaJNtIW20FbaSttpO+2knbSbdtMe2kN7aS/to320n/bTATpAB+kgHaJDdJgO0xE6QkfpKB2jY3ScjtNJOkmn6BSdptN0ls7SOfqJztPPdIECpbj0LoO72mV017hM7lr3n+NsLrvL4XK6XM66rO7Gv4rJOZfP5XcFXEHnXSFX2N3yh7iEK+lKudLuTlfG3eXK/iGu7O5zVdz9rqp7wFVy9/5VXM096KqXfdTVcI+5mq6eq+UauNruUVfHPebqunquvmvgmrnmroV7yrV0T7tW7pk/xAvcQgS31q1z690e96k76350R9w37pz7yXV2XVxv94rr4151fd1rrp/r/4d4qBvmhrsRbqQb5Ua7MX+IJ7nJboqb6qa5d910N+MP8Xz3gZvlFrnZbo6b6+b9Ei9wC90i96Fb7D5yS9xSt8wtdyvcSrfKrXZrLtW63G10m9xmt9t94ra6bW672+F2ul2/xBf3Y6/7zO1zn7vD7mt3wH3hDrqj7pD76pf44v4ddd+6Y+47d9ydcCfd9+6U+8Gddmd+2f+L+/69+9ldcMEBIyvWbDjidHwVp3B6zsBXc0a+hjPxtZzg6zgzX89Z+AbOyjdyNs7OOTgn52LLxI6ZY87NeTjJN3FevpnzcX4uwAXZcyEuzLdwEb6Vi/JtXIxv5+J8B5fgklyKS/OdXIbv4rJ8N5fje7g8V+CKXInv5cp8H1fh+7kqP8DV+EGuzg9xDX6Ya/IjXIv/g2vzo1yHH+O6XI/rcwNuyI9zI36CG3MTbspPcjNuzi34KW7JT3MrfoZb87MMqb8eTdrxC9yeO3BHfpE78UvcmbtwKqdyN36Zu3MP7sm9uDe/wn34Ve7Lr3E/7s8D+HUeyG/wIH6TB/MQHsrDeDiP4JE8ikfzGB7Lb/E4fpvH8zs8gSfyJJ7MU3gqT+N3eTrP4Jn8Hs/i93k2z+G5PI/n8we8gBfyIv6QF/NHvISX8jJezit4Ja/i1byG1/I6Xs8beCNv4s28hT/mrbyNt/MO3sm7eDd/wnv4U97Ln/E+/pz381/4AH/BB/lLPsRf8WH+mo/wN3yUv+Vj/B0f5xN8kr/nU/wDn+YzfJZ/5HP8E5/nn/kCB4YYYxXr2MRRnC6+Kk6J08cZ9i+LM8bXxJnia+NEfF2cOb4+zhLfEGeNb4yzxdnjHHHOOFdsY4pdzHEc547zxMn4pjhvfHOcL84fF4gLxj4uFBeOb4mLxLfGRePb4mLx7XHx+I64RFwyfvSB0vGdcZn4rrhsfHdcLr4nLh9XiCvGleJ748rxfXGV+P64avxAXDR+MK4ePxTXiB+Oa8aPxLXi/4hrx4/GdeLH4rpxvbh+3CBuGD8eN4qfiBvHTeKm8ZNxs7h53CJ+Km4ZPx23ip/50+2pcde4W/xy/HIcwv16bnJecn7yg+SC5MJk+kvnIEuSS5PLksuTK5Irk6uSq5NrkmuT65LrkxuSG5ObkpuTIVS6Cjx65bU3PvLp/FU+xaf3GfzVPqO/xmfy1/qEv85n9tf7LP4Gn9Xf6LP57D6Hz+lzeevJO88+9rl9Hp/0N/m8/mafz+f3BXxB730hX9g38A19Q9/IP+Eb+ya+qX/SP+mb++b+Kf+Uf9q38s/41v5Z38Y/59v65/3z/gXf3nfwHf2LvpN/yXf2XXyqT/XdfDff3Xf3PX1P39v39n18H9/X9/X9fD8/wA/wA/1AP8gP8oP9YD/UD/XD/XA/0o/0o/1oP9aP9eP8OD/ej/cT/AQ/yU/yU/wUP81P89P9dD/Tz/Sz8s3ys/1sP9fP9fP9fL/AL/CL/CK/2C/2S/wSv8wv8yv8Cr/Kr/Jr/Bq/zq/zG/wGv8lv8lv8Fr/Vb/Xb/Xa/0+/0u/1uv8fv8Xv9Xr/P7/P7/X5/wB/wB/2X/pD/yh/2X/sj/ht/1H/rj/nv/HF/wp/03/tT/gd/2p/xZ/2P/pz/yZ/3P/sLPvixibcS4xJvJ8Yn3klMSExMTEpMTkxJTE1MS7ybmJ6YkZiZeC8xK/F+YnZiTmJuYl5ifuKDxILEwsSixIeJxYmPEksSSxPLEssTKxIrEyHk3BqH3CFPSIabQt5wc8gX8ocCoWDwoVAoHG4JRcKtoWi4LRQLt4fi4Y5QIpQMpcJjoW6oF+qHBqFheDw0Ck+ExqFJaBqeDM1C89AiPBVahqdDq/BMaB2eDW3Cc6FteD60Cy+E9qFD6BheDJ3CS6Fz6BJSQ9fQLbwcuoceoWfoFXqHV0Kf8GroG14L/UL/MCC8HgaGN8Kg8GYYHIaEoWFYGB5GhJFhVBgdxoSx4a0wLrwdxod3woQwMUwKk8OUMDVMC++G6WFGmBneC7PC+2F2mBPmhnlhfvggLAgLw6LwYVgcPgpLwtKwLCwPK8LKsCqsDmsCXnqvbAybwuawJXwctoZtYXvYEXaGXWF3+CTsCZ+GveGzsC98HvaHv4QD4YtwMHwZDoWvwuHwdTgSvglHw7fhWPguHA8nwsnwfTgVfginw5lwNvwYzoWfwvnwc7gg/7MmhBBCCPF3Gfcn27v+jd+pS+OibgBwzbbsh36/XQPAhqy/znuoHM0SAPB0l3aP/DbKl09NvXTpDUs0RHnmAEAC0v2W/8v3DyR+nS+FptAcWkITKPI36+uhOpzjP1k/eTtAht/lpMDlOHT5bf1b/4v1R8z60/XnAOTLcznn4hXib/Hl+ov+F+vf2OhP1k//xViAxr/LyQiX48vrF4Yn4Blo+VePFEIIIYQQQgghftVDlWrzZ9e3F6/Pc5jLOVfB5Xgp4H97fS6EEEIIIYQQQogr77kOHZ96vGXLJm3S5KTrv0cZ//4Tfenl8rtNBYoDXPnCZPKvmlzhDyYhhBBCCCHEP93lk/4rXYkQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJF2/W98ndiV3kchhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDiSvs/AQAA//82uSMK") 8.71160666s ago: executing program 2 (id=956): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[], 0x0) 8.562780943s ago: executing program 0 (id=959): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000480), 0x80, 0x2e2001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getsig(0x4202, r0, 0x8, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) capget(&(0x7f0000000040)={0x19980330, r0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 7.229565426s ago: executing program 0 (id=960): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = epoll_create1(0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000180)) 7.140401094s ago: executing program 2 (id=961): io_setup(0x1, &(0x7f0000000180)) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) 6.721200743s ago: executing program 3 (id=964): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x22a600c, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chdir(&(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 6.663855758s ago: executing program 1 (id=966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 6.450448877s ago: executing program 3 (id=967): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}}, 0x20}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @local}}}], 0x20}}], 0x1, 0x0) 6.248299836s ago: executing program 3 (id=970): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) sendto$inet(r4, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r4) waitid(0x1, r1, 0x0, 0x8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000100"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) 5.240429909s ago: executing program 2 (id=972): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, 0x0) 5.239839919s ago: executing program 3 (id=973): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x6) socket$igmp6(0xa, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0xce6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) socket(0x10, 0x80003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c000200020000000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c0004800c0001000200000060d506000c000100000000000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x94}}, 0x0) 5.099820962s ago: executing program 2 (id=974): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000a80)="b9ff03076003008cb89e08f586ddec5bde9a8dc676b10aaf6424b12a2d0835850855f9c8d56903f277", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.908996289s ago: executing program 2 (id=975): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="6261636b67726f756e645f67633d73796e632c6163746976655f6c6f67733d322c6e6f71756f74612c6e6f71756f74612c6e6f696e6c696e655f78617474722c64697361626c655f6578745f6964656e746966792c6a71666d743d76667376312c6673796e635f6d6f64653d7374726963742c6772706a71756f74613d272c6a71666d743d76667376302c696e6c696e655f78617474722c00a3d783e0bf6d79bc2fa16e7f"], 0x1, 0x551a, &(0x7f0000005a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x10888, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) renameat2(r0, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000040)='./file1\x00', 0x0) 3.936434418s ago: executing program 3 (id=977): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004090}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.838396179s ago: executing program 4 (id=980): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}}, 0x20}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @local}}}], 0x20}}], 0x1, 0x0) 2.665111475s ago: executing program 4 (id=981): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x1f, 0xd6, 0x5, 0x1c, @private2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x10, 0xfffffffc, 0xfffffffa}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@tclass={{0x14}}, @dontfrag={{0x14}}], 0x30}, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040), &(0x7f0000000240)=0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getpid() socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001000010000000040000000000a00008013e6f277a9d00000"], 0x1c}], 0x1}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="0c010000110021040400"/20, @ANYRES32, @ANYBLOB="01000000000000001400030073797a5f74756e"], 0x10c}}, 0x0) 2.374880582s ago: executing program 4 (id=982): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000800)={0x18, 0x2, {0xfeff, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff1a, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0xffffffffffffffff) 2.17662432s ago: executing program 4 (id=983): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) execve(0x0, 0x0, 0x0) 1.992327647s ago: executing program 1 (id=984): socket(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000000200), 0xd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) 1.935573952s ago: executing program 4 (id=985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 1.170029413s ago: executing program 0 (id=986): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000300)={@local, @broadcast, @void, {@generic={0x890d}}}, 0x0) 1.169723653s ago: executing program 4 (id=987): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x240) 1.143088005s ago: executing program 2 (id=988): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x6) socket$igmp6(0xa, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0xce6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) socket(0x10, 0x80003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c000200020000000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c0004800c0001000200000060d506000c000100000000000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x94}}, 0x0) 1.048377384s ago: executing program 0 (id=989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x6, 0x1500, &(0x7f0000003f40)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 80.829073ms ago: executing program 0 (id=990): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 45.012046ms ago: executing program 0 (id=991): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @local}}}], 0x20}}], 0x1, 0x0) 0s ago: executing program 3 (id=992): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x1f, 0xd6, 0x5, 0x1c, @private2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x10, 0xfffffffc, 0xfffffffa}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@tclass={{0x14}}, @dontfrag={{0x14}}], 0x30}, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040), &(0x7f0000000240)=0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getpid() socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001000010000000040000000000a00008013e6f277a9d00000"], 0x1c}], 0x1}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="0c010000110021040400"/20, @ANYRES32, @ANYBLOB="01000000000000001400030073797a5f74756e"], 0x10c}}, 0x0) kernel console output (not intermixed with test programs): h parent 'hsr' already present! [ 34.801886][ T4293] Cannot create hsr debugfs directory [ 34.851183][ T4306] device hsr_slave_0 entered promiscuous mode [ 34.889671][ T4306] device hsr_slave_1 entered promiscuous mode [ 34.929454][ T4306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.931431][ T4306] Cannot create hsr debugfs directory [ 34.948873][ T4301] team0: Port device team_slave_0 added [ 34.990419][ T4301] team0: Port device team_slave_1 added [ 35.031155][ T4294] device hsr_slave_0 entered promiscuous mode [ 35.089834][ T4294] device hsr_slave_1 entered promiscuous mode [ 35.129465][ T4294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.131616][ T4294] Cannot create hsr debugfs directory [ 35.181333][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.183211][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.190319][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.196240][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.198077][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.205356][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.321104][ T4301] device hsr_slave_0 entered promiscuous mode [ 35.369984][ T4301] device hsr_slave_1 entered promiscuous mode [ 35.419465][ T4301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.421548][ T4301] Cannot create hsr debugfs directory [ 35.557422][ T4295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.604686][ T4295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.645372][ T4295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.685195][ T4295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.700289][ T4303] Bluetooth: hci3: command tx timeout [ 35.701480][ T4309] Bluetooth: hci2: command tx timeout [ 35.701888][ T4303] Bluetooth: hci1: command tx timeout [ 35.703245][ T4309] Bluetooth: hci0: command tx timeout [ 35.704622][ T4303] Bluetooth: hci4: command tx timeout [ 35.754055][ T4293] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.795119][ T4293] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.839012][ T4293] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.891098][ T4293] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.969045][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.978648][ T4306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.030989][ T4306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.082985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.086142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.088719][ T4306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.132986][ T4306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.184142][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.199665][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.203817][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.206698][ T499] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.208630][ T499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.212312][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.218594][ T4294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.285632][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.288598][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.297272][ T499] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.299382][ T499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.301620][ T4294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.351672][ T4294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.412158][ T4294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.492428][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.516851][ T4306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.524071][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.527805][ T4301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.581222][ T4301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.623443][ T4301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.695424][ T4293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.707098][ T4293] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.712021][ T4306] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.716265][ T4301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.742193][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.745280][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.748045][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.751843][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.754674][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.757247][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.760050][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.762747][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.765320][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.767724][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.770780][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.773250][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.775680][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.778939][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.791183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.794172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.796548][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.798807][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.806669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.809145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.812070][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.813852][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.816053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.818784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.825293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.827727][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.829695][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.865962][ T4293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.868416][ T4293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.876590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.878935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.883167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.885902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.888477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.894314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.896760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.899357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.901598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.904075][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.905800][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.907856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.912420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.915463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.918027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.921424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.924179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.931482][ T4294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.956329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.964454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.967413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.974205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.985249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.990594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.995549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.015487][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.018117][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.037130][ T4294] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.046894][ T4306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.051021][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.053588][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.055736][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.057907][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.062606][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.065738][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.068370][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.074043][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.098679][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.103240][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.105774][ T499] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.107512][ T499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.114710][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.117290][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.120733][ T499] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.122477][ T499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.124562][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.135476][ T4293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.172788][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.175061][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.177073][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.179023][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.183142][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.186746][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.194806][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.197379][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.201861][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.204304][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.206824][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.210926][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.213428][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.215841][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.218893][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.221703][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.224190][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.236201][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.244921][ T4294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.248275][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.259770][ T4293] device veth0_vlan entered promiscuous mode [ 37.267034][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.270143][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.272591][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.277453][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.282823][ T4293] device veth1_vlan entered promiscuous mode [ 37.314853][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.321205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.323753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.326110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.328384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.331308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.334032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.337223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.339264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.345109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.347462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.351824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.354666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.360512][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.366262][ T4293] device veth0_macvtap entered promiscuous mode [ 37.373945][ T4295] device veth0_vlan entered promiscuous mode [ 37.381524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.384545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.387356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.401181][ T4293] device veth1_macvtap entered promiscuous mode [ 37.411647][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.415664][ T4295] device veth1_vlan entered promiscuous mode [ 37.431468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.434944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.437730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.442321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.444859][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.446740][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.449247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.453759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.456201][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.457990][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.460841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.463422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.465819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.468285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.472272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.478627][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.486545][ T4293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.488839][ T4293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.492012][ T4293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.494284][ T4293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.516416][ T4295] device veth0_macvtap entered promiscuous mode [ 37.520728][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.523320][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.525827][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.528972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.533607][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.536197][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.540759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.544171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.558333][ T4295] device veth1_macvtap entered promiscuous mode [ 37.561722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.564096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.567456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.570722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.573473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.575889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.589580][ T4306] device veth0_vlan entered promiscuous mode [ 37.594457][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.597258][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.622673][ T4306] device veth1_vlan entered promiscuous mode [ 37.638725][ T4294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.644353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.647243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.649033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.653708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.656301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.658935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.662933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.666313][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.669101][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.673649][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.678397][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.693673][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.696031][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.698465][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.704148][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.707917][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.712718][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.715216][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.718376][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.747973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.750585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.756039][ T4295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.758368][ T4295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.767660][ T4295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.771079][ T4295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.779565][ T4299] Bluetooth: hci0: command tx timeout [ 37.780919][ T4299] Bluetooth: hci4: command tx timeout [ 37.782272][ T4299] Bluetooth: hci1: command tx timeout [ 37.783651][ T4299] Bluetooth: hci2: command tx timeout [ 37.785027][ T4299] Bluetooth: hci3: command tx timeout [ 37.796096][ T4306] device veth0_macvtap entered promiscuous mode [ 37.802331][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.804333][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.823575][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.825678][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.827167][ T4306] device veth1_macvtap entered promiscuous mode [ 37.831916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.834381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.836993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.839976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.842284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.844522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.847029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.849163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.852052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.854262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.886854][ T4294] device veth0_vlan entered promiscuous mode [ 37.912453][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.915052][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.917539][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.926424][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.931718][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.933943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.936589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.956070][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.958763][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.962111][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.964765][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.968160][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.971941][ T4294] device veth1_vlan entered promiscuous mode [ 37.976803][ T4306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.979083][ T4306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.983785][ T4306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.986143][ T4306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.002196][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.004494][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.008386][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.033688][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.035773][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.065359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.068066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.072724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.074618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.216754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.219572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.225371][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.227448][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.236453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.244497][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.253662][ T4294] device veth0_macvtap entered promiscuous mode [ 38.257977][ T4294] device veth1_macvtap entered promiscuous mode [ 38.767687][ T1755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.770468][ T1755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.772109][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.775251][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.791308][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.793954][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.796343][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.798844][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.810633][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.817544][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.824563][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.826947][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.830581][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.833608][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.838023][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.841575][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.843958][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.846621][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.871936][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.877344][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.882962][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.959667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.962167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.972977][ T4294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.975309][ T4294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.977470][ T4294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.982691][ T499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.984750][ T499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.001795][ T4294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.023953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.181364][ T1755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.183735][ T1755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.187002][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.254363][ T4389] random: crng reseeded on system resumption [ 39.287236][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.289074][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.296151][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.377267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.389134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.457515][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.461792][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.475884][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.484049][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.496273][ T4301] device veth0_vlan entered promiscuous mode [ 39.541737][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 39.547224][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.549913][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.555046][ T4400] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 39.578208][ T4301] device veth1_vlan entered promiscuous mode [ 39.653607][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.656009][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.658468][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.670344][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.678340][ T4301] device veth0_macvtap entered promiscuous mode [ 39.698806][ T4403] netlink: 216 bytes leftover after parsing attributes in process `syz.1.10'. [ 39.811364][ T4301] device veth1_macvtap entered promiscuous mode [ 39.814955][ T4410] netlink: 'syz.2.11': attribute type 10 has an invalid length. [ 39.851433][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.854546][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.857098][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.862899][ T4409] tipc: Can't bind to reserved service type 2 [ 39.864412][ T4303] Bluetooth: hci3: command tx timeout [ 39.865729][ T4303] Bluetooth: hci2: command tx timeout [ 39.867132][ T4303] Bluetooth: hci1: command tx timeout [ 39.868555][ T4303] Bluetooth: hci4: command tx timeout [ 39.870432][ T4303] Bluetooth: hci0: command tx timeout [ 39.878168][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.883985][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.887092][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.890913][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.893591][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.899221][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.040465][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.043472][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.056582][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.081471][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.107909][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.111832][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.135285][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.155597][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.175256][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.191891][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.205345][ T4417] process 'syz.3.15' launched './file2' with NULL argv: empty string added [ 40.206218][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.214112][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.234777][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.274842][ T4419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 40.278695][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.286506][ T1755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.356118][ T4416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 40.363050][ T4301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.365667][ T4301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.367946][ T4301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.403498][ T4301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.463001][ T4416] device bridge_slave_1 left promiscuous mode [ 40.465678][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.652477][ T4423] Bluetooth: MGMT ver 1.22 [ 40.880460][ T1755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.883374][ T1755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.890517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.403691][ T1755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.406038][ T1755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.438376][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.941568][ T4309] Bluetooth: hci4: command tx timeout [ 41.941669][ T4302] Bluetooth: hci1: command tx timeout [ 41.943211][ T4309] Bluetooth: hci2: command tx timeout [ 41.945048][ T4296] Bluetooth: hci3: command tx timeout [ 41.949653][ T4303] Bluetooth: hci0: command tx timeout [ 42.281113][ T4442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22'. [ 42.646151][ T4446] netlink: 'syz.4.24': attribute type 10 has an invalid length. [ 42.747065][ T4299] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 43.231125][ T4442] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.242371][ T4442] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 43.251166][ T4453] IPVS: Error joining to the multicast group [ 44.167503][ T4299] Bluetooth: hci0: command 0x0c1a tx timeout [ 44.413444][ T4471] capability: warning: `syz.2.32' uses 32-bit capabilities (legacy support in use) [ 44.556593][ T4478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.36'. [ 44.582343][ T4484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 44.673072][ T4486] netlink: 87 bytes leftover after parsing attributes in process `syz.2.40'. [ 45.280663][ T4506] Zero length message leads to an empty skb [ 45.310058][ T4506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.540476][ T4506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.477689][ T4511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.50'. [ 47.316200][ T4540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.400728][ T4540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.944570][ T4540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.991895][ T4540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.109104][ T4552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'. [ 50.032597][ T4574] sched: RT throttling activated [ 50.452336][ T4405] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 50.849765][ T4405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.852971][ T4405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.855557][ T4405] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 50.858033][ T4405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.920512][ T4405] usb 1-1: config 0 descriptor?? [ 51.225916][ T4593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 51.433436][ T4604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.82'. [ 51.689011][ T4615] capability: warning: `syz.2.89' uses deprecated v2 capabilities in a way that may be insecure [ 51.769461][ T4618] netlink: 'syz.4.87': attribute type 9 has an invalid length. [ 52.440441][ T4620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'. [ 52.469457][ T4405] usbhid 1-1:0.0: can't add hid device: -71 [ 52.471231][ T4405] usbhid: probe of 1-1:0.0 failed with error -71 [ 52.503877][ T4405] usb 1-1: USB disconnect, device number 2 [ 52.868724][ T4645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.104'. [ 53.149892][ T4657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.579615][ T4657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.196884][ T4686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.117'. [ 54.235519][ T4688] loop4: detected capacity change from 0 to 512 [ 54.248036][ T4688] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 54.257908][ T4688] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 54.268039][ T4688] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 54.279925][ T4688] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 54.282241][ T4688] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e118, mo2=0000] [ 54.284247][ T4688] EXT4-fs (loop4): failed to initialize system zone (-117) [ 54.286412][ T4688] EXT4-fs (loop4): mount failed [ 54.344961][ T4542] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 54.414570][ T4701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.123'. [ 54.634810][ T4717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.131'. [ 54.806452][ T4725] loop3: detected capacity change from 0 to 512 [ 54.827689][ T4725] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 54.839434][ T4725] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 54.845959][ T4725] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 54.860051][ T4725] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 54.862114][ T4725] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e118, mo2=0000] [ 54.874595][ T4725] EXT4-fs (loop3): failed to initialize system zone (-117) [ 54.876701][ T4725] EXT4-fs (loop3): mount failed [ 55.267380][ T4742] syz.3.141 uses obsolete (PF_INET,SOCK_PACKET) [ 55.379611][ T4746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.144'. [ 55.539231][ T4710] loop0: detected capacity change from 0 to 65536 [ 55.605866][ T4710] XFS (loop0): Mounting V5 Filesystem [ 55.666191][ T4710] XFS (loop0): Ending clean mount [ 55.676729][ T4710] XFS (loop0): Quotacheck needed: Please wait. [ 55.710538][ T4763] loop1: detected capacity change from 0 to 512 [ 55.718941][ T4710] XFS (loop0): Quotacheck: Done. [ 55.724381][ T4763] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 55.728196][ T4763] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 55.736414][ T4763] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 55.748223][ T4710] overlayfs: './file1' not a directory [ 55.761318][ T4763] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 55.768689][ T4763] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e118, mo2=0000] [ 55.782938][ T4763] EXT4-fs (loop1): failed to initialize system zone (-117) [ 55.784397][ T4765] loop4: detected capacity change from 0 to 512 [ 55.784812][ T4763] EXT4-fs (loop1): mount failed [ 55.786881][ T4765] EXT4-fs: Ignoring removed i_version option [ 55.792389][ T4765] EXT4-fs: Ignoring removed nobh option [ 55.799209][ T4765] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 55.811848][ T4765] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.824037][ T4294] XFS (loop0): Unmounting Filesystem [ 55.839069][ T4765] EXT4-fs (loop4): 1 truncate cleaned up [ 55.841483][ T4765] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 56.815728][ T4301] EXT4-fs (loop4): unmounting filesystem. [ 56.930790][ T4788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.155'. [ 57.283947][ T4805] loop1: detected capacity change from 0 to 512 [ 57.295404][ T4805] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 57.308140][ T4805] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 57.317156][ T4805] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 57.332328][ T4805] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 57.335678][ T4805] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e118, mo2=0000] [ 57.340162][ T4805] EXT4-fs (loop1): failed to initialize system zone (-117) [ 57.344416][ T4805] EXT4-fs (loop1): mount failed [ 57.470774][ T4811] loop4: detected capacity change from 0 to 512 [ 57.473054][ T4811] EXT4-fs: Ignoring removed i_version option [ 57.474583][ T4811] EXT4-fs: Ignoring removed nobh option [ 57.489500][ T4811] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.551918][ T4811] EXT4-fs (loop4): 1 truncate cleaned up [ 57.554344][ T4811] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 58.085802][ T4822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'. [ 58.462942][ T4796] loop3: detected capacity change from 0 to 65536 [ 58.534780][ T4796] XFS (loop3): Mounting V5 Filesystem [ 58.601706][ T4301] EXT4-fs (loop4): unmounting filesystem. [ 58.654735][ T4796] XFS (loop3): Ending clean mount [ 58.657882][ T4796] XFS (loop3): Quotacheck needed: Please wait. [ 58.694043][ T4796] XFS (loop3): Quotacheck: Done. [ 58.705096][ T4848] loop2: detected capacity change from 0 to 512 [ 58.715924][ T4852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 58.726743][ T4848] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 58.729251][ T4848] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 58.729908][ T4796] overlayfs: failed to resolve './file1': -2 [ 58.766941][ T4848] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 58.789272][ T4306] XFS (loop3): Unmounting Filesystem [ 58.801426][ T4848] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 58.803708][ T4848] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e118, mo2=0000] [ 58.806040][ T4848] EXT4-fs (loop2): failed to initialize system zone (-117) [ 58.807885][ T4848] EXT4-fs (loop2): mount failed [ 59.819984][ T4867] tmpfs: Unknown parameter 'usrquota' [ 59.838027][ T27] audit: type=1326 audit(59.810:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4866 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f499e8 code=0x7ffc0000 [ 59.864028][ T27] audit: type=1326 audit(59.840:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4866 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=49 compat=0 ip=0xffff92f499e8 code=0x7ffc0000 [ 59.879388][ T27] audit: type=1326 audit(59.840:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4866 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f499e8 code=0x7ffc0000 [ 59.888078][ T4869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 59.905424][ T27] audit: type=1326 audit(59.840:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4866 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff92f499e8 code=0x7ffc0000 [ 59.924455][ T27] audit: type=1326 audit(59.840:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4866 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f499e8 code=0x7ffc0000 [ 59.945856][ T27] audit: type=1326 audit(59.840:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4866 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=443 compat=0 ip=0xffff92f499e8 code=0x7ffc0000 [ 59.977515][ T27] audit: type=1326 audit(59.840:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4866 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f499e8 code=0x7ffc0000 [ 60.012351][ T4873] loop1: detected capacity change from 0 to 512 [ 60.014444][ T4873] EXT4-fs: Ignoring removed i_version option [ 60.015925][ T4873] EXT4-fs: Ignoring removed nobh option [ 60.051104][ T4873] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.083846][ T4873] EXT4-fs (loop1): 1 truncate cleaned up [ 60.085831][ T4873] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 60.100145][ T4880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 60.198961][ T4888] loop4: detected capacity change from 0 to 512 [ 60.245223][ T4888] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 60.247667][ T4888] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 60.264835][ T4888] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 60.305052][ T4888] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 60.307110][ T4888] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e118, mo2=0000] [ 60.321522][ T4888] EXT4-fs (loop4): failed to initialize system zone (-117) [ 60.323493][ T4888] EXT4-fs (loop4): mount failed [ 61.017800][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 61.053389][ T4897] binder: 4896:4897 tried to acquire reference to desc 0, got 1 instead [ 61.101260][ T4897] binder: 4896:4897 got reply transaction with bad transaction stack, transaction 5 has target 4896:0 [ 61.104159][ T4897] binder: 4896:4897 transaction reply to 0:0 failed 12/29201/-71, size 0-0 line 2970 [ 61.134083][ T4897] binder: 4896:4897 ioctl c0306201 20000940 returned -14 [ 61.136558][ T4344] binder: release 4896:4897 transaction 5 out, still active [ 61.138670][ T4344] binder: undelivered TRANSACTION_COMPLETE [ 61.140983][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 61.176119][ T4340] binder: send failed reply for transaction 5, target dead [ 61.387949][ T4918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'. [ 61.587681][ T4928] loop1: detected capacity change from 0 to 512 [ 61.603631][ T4928] EXT4-fs: Ignoring removed i_version option [ 61.608877][ T4928] EXT4-fs: Ignoring removed nobh option [ 61.614463][ T4928] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.633608][ T4928] EXT4-fs (loop1): 1 truncate cleaned up [ 61.635301][ T4928] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 61.689005][ T4931] loop3: detected capacity change from 0 to 512 [ 61.700816][ T4887] loop2: detected capacity change from 0 to 65536 [ 61.718901][ T4931] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 61.726953][ T4931] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 61.741046][ T4931] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 61.790666][ T4931] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 61.792971][ T4931] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e118, mo2=0000] [ 61.795116][ T4931] EXT4-fs (loop3): failed to initialize system zone (-117) [ 61.803661][ T4931] EXT4-fs (loop3): mount failed [ 61.837941][ T4887] XFS (loop2): Mounting V5 Filesystem [ 62.559855][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 62.602733][ T4887] XFS (loop2): Ending clean mount [ 62.610562][ T4887] XFS (loop2): Quotacheck needed: Please wait. [ 62.666530][ T4887] XFS (loop2): Quotacheck: Done. [ 62.680647][ T4887] overlayfs: failed to resolve './file1': -2 [ 62.725025][ T4295] XFS (loop2): Unmounting Filesystem [ 62.726117][ T4958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.218'. [ 62.766242][ T4960] 9pnet_virtio: no channels available for device syz [ 62.899847][ T4967] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 62.919235][ T4970] loop3: detected capacity change from 0 to 512 [ 62.935836][ T4970] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 62.938550][ T4970] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 62.954700][ T4970] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 62.956601][ T4972] loop0: detected capacity change from 0 to 512 [ 62.965328][ T4972] EXT4-fs: Ignoring removed i_version option [ 62.966849][ T4972] EXT4-fs: Ignoring removed nobh option [ 62.978269][ T4972] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.990281][ T4970] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 62.992508][ T4970] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e118, mo2=0000] [ 62.994475][ T4970] EXT4-fs (loop3): failed to initialize system zone (-117) [ 63.011698][ T4972] EXT4-fs (loop0): 1 truncate cleaned up [ 63.013467][ T4972] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 63.018711][ T4970] EXT4-fs (loop3): mount failed [ 63.958805][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 64.034098][ T4993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 64.215165][ T27] audit: type=1326 audit(64.190:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b499e8 code=0x7ffc0000 [ 64.220738][ T27] audit: type=1326 audit(64.190:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff80b499e8 code=0x7ffc0000 [ 64.227415][ T27] audit: type=1326 audit(64.190:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b499e8 code=0x7ffc0000 [ 64.506791][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.509728][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.571012][ T5019] binder: 5011:5019 ioctl 4018620d 0 returned -22 [ 64.602088][ T5019] binder: 5011:5019 ioctl c0306201 0 returned -14 [ 64.623889][ T5019] binder: 5011:5019 got transaction to invalid handle, 1 [ 64.644827][ T5019] binder: 5019:5011 cannot find target node [ 64.676938][ T5019] binder: 5011:5019 transaction call to 0:0 failed 15/29201/-22, size 0-24 line 3054 [ 64.685130][ T5021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.246'. [ 65.179703][ T5028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 65.220857][ T4340] binder: undelivered TRANSACTION_ERROR: 29201 [ 65.324801][ T5032] netlink: 324 bytes leftover after parsing attributes in process `syz.1.251'. [ 65.479190][ T5045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.255'. [ 65.536430][ T4983] loop4: detected capacity change from 0 to 65536 [ 65.692491][ T4983] XFS (loop4): Mounting V5 Filesystem [ 66.049838][ T4340] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 66.409602][ T4340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.412544][ T4340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.415178][ T4340] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 66.417463][ T4340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.439773][ T4983] XFS (loop4): log mount failed [ 66.440609][ T4340] usb 1-1: config 0 descriptor?? [ 66.612581][ T5070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'. [ 67.683484][ T4302] Bluetooth: hci0: unexpected event for opcode 0x0c12 [ 67.792271][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.829741][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.947374][ T5111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.273'. [ 68.609693][ T4340] usbhid 1-1:0.0: can't add hid device: -71 [ 68.611180][ T4340] usbhid: probe of 1-1:0.0 failed with error -71 [ 68.616765][ T4340] usb 1-1: USB disconnect, device number 3 [ 68.840943][ T5136] syz.0.282 (5136): drop_caches: 2 [ 68.899252][ T5133] syz.3.281 (5133): drop_caches: 2 [ 68.949469][ T5133] syz.3.281 (5133): drop_caches: 2 [ 68.987786][ T5143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'. [ 69.171404][ T5132] syz.3.281 (5132): drop_caches: 2 [ 70.120325][ T110] cfg80211: failed to load regulatory.db [ 70.258928][ T5175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.299'. [ 70.417078][ T5176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.298'. [ 70.505548][ T5186] loop4: detected capacity change from 0 to 512 [ 70.526866][ T5186] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 70.534218][ T5186] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 70.538656][ T5186] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 70.556841][ T5186] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 70.559815][ T5186] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e118, mo2=0000] [ 70.564231][ T5186] EXT4-fs (loop4): failed to initialize system zone (-117) [ 70.566114][ T5186] EXT4-fs (loop4): mount failed [ 70.574173][ T5189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.625767][ T5189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.658801][ T5193] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.306'. [ 70.662001][ T5193] netlink: zone id is out of range [ 70.663426][ T5193] netlink: zone id is out of range [ 70.664744][ T5193] netlink: zone id is out of range [ 70.666062][ T5193] netlink: zone id is out of range [ 70.667417][ T5193] netlink: del zone limit has 8 unknown bytes [ 70.671175][ T5189] device vlan2 entered promiscuous mode [ 70.673598][ T5189] bond0: (slave vlan2): Opening slave failed [ 70.739818][ T110] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 71.103877][ T5199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.109337][ T110] usb 1-1: Using ep0 maxpacket: 8 [ 71.240305][ T110] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 71.242739][ T110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.302439][ T5199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.322740][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'. [ 71.339903][ T5199] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 71.364464][ T5199] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 71.402748][ T110] usb 1-1: config 0 descriptor?? [ 71.461120][ T110] rndis_wlan 1-1:0.0: skipping garbage [ 71.464675][ T110] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 71.466710][ T110] rndis_host 1-1:0.0: skipping garbage [ 71.468293][ T110] rndis_host: probe of 1-1:0.0 failed with error -22 [ 71.470561][ T110] cdc_acm 1-1:0.0: skipping garbage [ 71.471856][ T110] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 71.479782][ T110] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 71.484598][ T110] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 71.700853][ T4302] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 71.704470][ T4302] Bluetooth: hci0: Injecting HCI hardware error event [ 71.707998][ T4299] Bluetooth: hci0: hardware error 0x00 [ 73.311581][ T4343] usb 1-1: USB disconnect, device number 4 [ 73.315332][ T5232] loop1: detected capacity change from 0 to 512 [ 73.332775][ T5232] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 73.340725][ T5232] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 73.345719][ T5232] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 73.356885][ T5232] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 73.380469][ T4302] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 73.382786][ T4302] Bluetooth: hci4: Injecting HCI hardware error event [ 73.385510][ T4296] Bluetooth: hci4: hardware error 0x00 [ 73.388574][ T5232] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e118, mo2=0000] [ 73.410717][ T5232] EXT4-fs (loop1): failed to initialize system zone (-117) [ 73.412787][ T5232] EXT4-fs (loop1): mount failed [ 73.479390][ T5240] device vlan2 entered promiscuous mode [ 74.029491][ T4299] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 74.820484][ T4299] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 74.823417][ T4299] Bluetooth: hci3: Injecting HCI hardware error event [ 74.837806][ T4302] Bluetooth: hci3: hardware error 0x00 [ 75.339699][ T4303] Bluetooth: hci4: unexpected event for opcode 0x200d [ 75.344256][ T5266] rdma_rxe: rxe_register_device failed with error -23 [ 75.346992][ T5266] rdma_rxe: failed to add ipvlan0 [ 75.549504][ T4296] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 76.551029][ T5285] netlink: 60 bytes leftover after parsing attributes in process `syz.3.337'. [ 77.283155][ T5290] loop3: detected capacity change from 0 to 512 [ 77.286375][ T5290] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 77.303374][ T5290] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 77.336433][ T5290] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 77.379674][ T4302] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 77.417218][ T5290] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 77.420184][ T5290] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e118, mo2=0000] [ 77.435181][ T5290] EXT4-fs (loop3): failed to initialize system zone (-117) [ 77.437189][ T5290] EXT4-fs (loop3): mount failed [ 77.537658][ T5302] loop2: detected capacity change from 0 to 512 [ 77.555177][ T5302] EXT4-fs: Ignoring removed i_version option [ 77.556785][ T5302] EXT4-fs: Ignoring removed nobh option [ 77.576631][ T5302] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.636727][ T5302] EXT4-fs (loop2): 1 truncate cleaned up [ 77.638476][ T5302] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 78.410286][ T5317] mkiss: ax0: crc mode is auto. [ 78.648197][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 78.763793][ T5331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.350'. [ 79.390252][ T5333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'. [ 79.537943][ T5340] loop3: detected capacity change from 0 to 512 [ 79.612274][ T5340] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 79.614471][ T5340] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 79.616966][ T5340] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 79.643434][ T5340] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 79.645940][ T5340] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e118, mo2=0000] [ 79.648060][ T5340] EXT4-fs (loop3): failed to initialize system zone (-117) [ 79.840300][ T5340] EXT4-fs (loop3): mount failed [ 80.481394][ T5358] loop2: detected capacity change from 0 to 512 [ 80.484596][ T5358] EXT4-fs: Ignoring removed i_version option [ 80.509191][ T5358] EXT4-fs: Ignoring removed nobh option [ 80.511713][ T5358] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.517726][ T5358] EXT4-fs (loop2): 1 truncate cleaned up [ 80.519201][ T5358] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 81.202673][ T5371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.365'. [ 81.890896][ T5373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.366'. [ 82.325865][ T5392] loop0: detected capacity change from 0 to 512 [ 82.418394][ T5392] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 82.422444][ T5392] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 82.425058][ T5392] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 82.479630][ T5392] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 82.481826][ T5392] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e118, mo2=0000] [ 82.516344][ T5392] EXT4-fs (loop0): failed to initialize system zone (-117) [ 82.518396][ T5392] EXT4-fs (loop0): mount failed [ 82.897765][ T5403] loop3: detected capacity change from 0 to 512 [ 84.070690][ T5403] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.106115][ T5403] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 84.134392][ T5403] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 84.173839][ T5403] EXT4-fs (loop3): 1 truncate cleaned up [ 84.178617][ T5403] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 84.346260][ T5412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.367423][ T5410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.379'. [ 84.400521][ T5412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.416470][ T5412] device vlan2 entered promiscuous mode [ 84.630691][ T5416] netlink: 60 bytes leftover after parsing attributes in process `syz.3.377'. [ 85.128305][ T5418] binder: 5418:5414 cannot find target node [ 85.130115][ T5418] binder: 5414:5418 transaction call to 0:0 failed 16/29189/-22, size 0-0 line 3054 [ 85.132712][ T5418] binder: 5414:5418 ioctl c0306201 200011c0 returned -14 [ 85.320196][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 85.660619][ T5424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.385'. [ 86.758058][ T5442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.391'. [ 87.106087][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 87.119908][ T5452] loop3: detected capacity change from 0 to 512 [ 87.146168][ T5452] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.180208][ T5452] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 87.192514][ T5452] EXT4-fs (loop3): 1 truncate cleaned up [ 87.194112][ T5452] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 87.461981][ T5472] netlink: 60 bytes leftover after parsing attributes in process `syz.3.395'. [ 88.089737][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 88.112615][ T5480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'. [ 88.116150][ T5476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.880999][ T5476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.074148][ T5476] device vlan2 entered promiscuous mode [ 89.205161][ T5490] IPVS: Error joining to the multicast group [ 89.252523][ T5492] loop1: detected capacity change from 0 to 512 [ 89.254468][ T5492] EXT4-fs: Ignoring removed i_version option [ 89.255895][ T5492] EXT4-fs: Ignoring removed nobh option [ 89.278270][ T5492] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.315663][ T5492] EXT4-fs (loop1): 1 truncate cleaned up [ 89.317248][ T5492] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 90.222685][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 90.327324][ T5516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.418'. [ 90.348150][ T5515] netlink: 216 bytes leftover after parsing attributes in process `syz.0.419'. [ 90.547732][ T5525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.419741][ T5525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.499617][ T5520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.415'. [ 91.735189][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 91.865272][ T5536] netlink: 36 bytes leftover after parsing attributes in process `syz.2.425'. [ 91.969782][ T5546] loop3: detected capacity change from 0 to 512 [ 91.971927][ T5546] EXT4-fs: Ignoring removed i_version option [ 91.973547][ T5546] EXT4-fs: Ignoring removed nobh option [ 92.007803][ T5546] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.060126][ T5551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.432'. [ 92.063983][ T5546] EXT4-fs (loop3): 1 truncate cleaned up [ 92.065479][ T5546] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 92.963346][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 94.296729][ T5592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.445'. [ 94.440814][ T5597] loop4: detected capacity change from 0 to 512 [ 94.444237][ T5597] EXT4-fs: Ignoring removed i_version option [ 94.446199][ T5597] EXT4-fs: Ignoring removed nobh option [ 94.448939][ T5597] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.465718][ T5597] EXT4-fs (loop4): 1 truncate cleaned up [ 94.467450][ T5597] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 95.393615][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 95.393629][ T27] audit: type=1326 audit(95.360:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff92f4154c code=0x7ffc0000 [ 95.408397][ T4301] EXT4-fs (loop4): unmounting filesystem. [ 95.437579][ T27] audit: type=1326 audit(95.360:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff93da089c code=0x7ffc0000 [ 95.473625][ T27] audit: type=1326 audit(95.360:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff92f4154c code=0x7ffc0000 [ 95.479147][ T27] audit: type=1326 audit(95.360:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff93da089c code=0x7ffc0000 [ 95.499454][ T27] audit: type=1326 audit(95.360:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff92f4154c code=0x7ffc0000 [ 95.504968][ T27] audit: type=1326 audit(95.360:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff93da089c code=0x7ffc0000 [ 95.519410][ T27] audit: type=1326 audit(95.360:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff92f4154c code=0x7ffc0000 [ 95.529606][ T27] audit: type=1326 audit(95.360:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff93da089c code=0x7ffc0000 [ 95.534975][ T27] audit: type=1326 audit(95.360:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff92f4154c code=0x7ffc0000 [ 95.549347][ T27] audit: type=1326 audit(95.360:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff93da089c code=0x7ffc0000 [ 96.421826][ T110] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.454559][ T5625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'. [ 96.467900][ T5623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.512776][ T5623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 96.545081][ T5623] device bridge_slave_1 left promiscuous mode [ 96.547596][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.622863][ T5623] bridge1: port 1(bridge_slave_1) entered blocking state [ 96.624805][ T5623] bridge1: port 1(bridge_slave_1) entered disabled state [ 96.627898][ T5623] device bridge_slave_1 entered promiscuous mode [ 96.659414][ T110] usb 1-1: Using ep0 maxpacket: 8 [ 96.784399][ T110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.787894][ T110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.791060][ T110] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 96.793506][ T110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.813708][ T110] usb 1-1: config 0 descriptor?? [ 97.189966][ T110] usbhid 1-1:0.0: can't add hid device: -71 [ 97.192229][ T110] usbhid: probe of 1-1:0.0 failed with error -71 [ 97.196044][ T110] usb 1-1: USB disconnect, device number 5 [ 97.323887][ T5642] loop1: detected capacity change from 0 to 512 [ 97.336161][ T5642] EXT4-fs: Ignoring removed i_version option [ 97.337800][ T5642] EXT4-fs: Ignoring removed nobh option [ 97.346104][ T5642] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.377607][ T5642] EXT4-fs (loop1): 1 truncate cleaned up [ 97.379000][ T5642] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 97.731617][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 97.903605][ T5657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'. [ 97.953042][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 98.788742][ T5676] loop3: detected capacity change from 0 to 512 [ 98.791130][ T5676] EXT4-fs: Ignoring removed i_version option [ 98.792756][ T5676] EXT4-fs: Ignoring removed nobh option [ 98.801492][ T5676] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.956407][ T5676] EXT4-fs (loop3): 1 truncate cleaned up [ 98.957916][ T5676] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.483702][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 101.491725][ T5710] ALSA: seq fatal error: cannot create timer (-22) [ 101.509543][ T4343] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.519086][ T5712] futex_wake_op: syz.3.489 tries to shift op by 32; fix this program [ 101.564502][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 101.590434][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.408847][ T5714] device bridge_slave_0 left promiscuous mode [ 102.431436][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.479416][ T4343] usb 1-1: Using ep0 maxpacket: 8 [ 102.604950][ T4343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.609899][ T4343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.614714][ T4343] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 102.626136][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.644007][ T4343] usb 1-1: config 0 descriptor?? [ 103.289493][ T4343] usbhid 1-1:0.0: can't add hid device: -71 [ 103.291423][ T4343] usbhid: probe of 1-1:0.0 failed with error -71 [ 103.296815][ T4343] usb 1-1: USB disconnect, device number 6 [ 103.467137][ T5739] futex_wake_op: syz.1.499 tries to shift op by 32; fix this program [ 105.923826][ T5774] futex_wake_op: syz.2.512 tries to shift op by 32; fix this program [ 107.597573][ T5787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.645822][ T5787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.838840][ T5814] Illegal XDP return value 4294967274 on prog (id 30) dev N/A, expect packet loss! [ 109.500546][ T5841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.583850][ T5841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.593215][ T5841] device vlan2 entered promiscuous mode [ 111.465160][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 113.014659][ T5914] 9pnet_fd: Insufficient options for proto=fd [ 113.229486][ T4344] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.426579][ T5932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.573'. [ 113.480718][ T4344] usb 1-1: Using ep0 maxpacket: 8 [ 113.603406][ T4344] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.605785][ T4344] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.608463][ T4344] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.610874][ T5941] 9pnet_fd: Insufficient options for proto=fd [ 113.630687][ T4344] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.634388][ T4344] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.637118][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.648847][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 113.919512][ T4344] usb 1-1: GET_CAPABILITIES returned 0 [ 113.921094][ T4344] usbtmc 1-1:16.0: can't read capabilities [ 114.089016][ T5950] netlink: 'syz.3.581': attribute type 13 has an invalid length. [ 114.126231][ T4344] usb 1-1: USB disconnect, device number 7 [ 114.495073][ T5972] loop4: detected capacity change from 0 to 512 [ 114.505046][ T5972] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.516718][ T5972] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 114.522173][ T5972] EXT4-fs (loop4): 1 truncate cleaned up [ 114.523746][ T5972] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.863702][ T5995] netlink: 60 bytes leftover after parsing attributes in process `syz.4.592'. [ 117.374146][ T6009] device syzkaller1 entered promiscuous mode [ 117.433441][ T6009] mmap: syz.1.601 (6009) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.182765][ T4301] EXT4-fs (loop4): unmounting filesystem. [ 118.237826][ T6029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.280876][ T6029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.187463][ T6056] loop3: detected capacity change from 0 to 512 [ 119.211351][ T6056] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.349370][ T6056] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 119.354055][ T6056] EXT4-fs (loop3): 1 truncate cleaned up [ 119.388049][ T6056] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 120.666814][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.708278][ T6093] netlink: 60 bytes leftover after parsing attributes in process `syz.3.616'. [ 121.091834][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.127638][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 122.918400][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.970542][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.006759][ T6133] 9pnet_fd: Insufficient options for proto=fd [ 123.035716][ T6135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.068270][ T6135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.993576][ T6167] 9pnet_fd: Insufficient options for proto=fd [ 125.667417][ T6187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.712776][ T6188] device syzkaller1 entered promiscuous mode [ 125.789925][ T6187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.940125][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.941857][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.282424][ T6210] loop3: detected capacity change from 0 to 512 [ 126.294715][ T6210] ======================================================= [ 126.294715][ T6210] WARNING: The mand mount option has been deprecated and [ 126.294715][ T6210] and is ignored by this kernel. Remove the mand [ 126.294715][ T6210] option from the mount to silence this warning. [ 126.294715][ T6210] ======================================================= [ 126.311718][ T6210] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.313427][ T6210] EXT4-fs: Ignoring removed i_version option [ 126.318222][ T6210] EXT4-fs error (device loop3): __ext4_iget:5055: inode #11: block 1: comm syz.3.664: invalid block [ 126.322831][ T6210] EXT4-fs (loop3): Remounting filesystem read-only [ 126.325178][ T6210] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.664: couldn't read orphan inode 11 (err -117) [ 126.331789][ T6210] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 127.736359][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 130.240993][ T6270] loop3: detected capacity change from 0 to 8192 [ 130.296611][ T4542] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.550262][ T6268] loop4: detected capacity change from 0 to 40427 [ 130.572117][ T6268] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 130.575552][ T6268] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 130.755924][ T6268] F2FS-fs (loop4): Found nat_bits in checkpoint [ 131.494611][ T6268] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 131.496698][ T6268] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 131.722086][ T6292] loop3: detected capacity change from 0 to 512 [ 131.768764][ T6292] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.891839][ T6296] syz.4.683: attempt to access beyond end of device [ 131.891839][ T6296] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.947159][ T6296] syz.4.683: attempt to access beyond end of device [ 131.947159][ T6296] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 132.176430][ T6292] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 132.181397][ T6292] EXT4-fs (loop3): 1 truncate cleaned up [ 132.182973][ T6292] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 132.486481][ T6300] netlink: 60 bytes leftover after parsing attributes in process `syz.3.688'. [ 132.990923][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 133.554916][ T6319] tipc: Started in network mode [ 133.556539][ T6319] tipc: Node identity 56e776db3a27, cluster identity 4711 [ 133.558458][ T6319] tipc: Enabled bearer , priority 0 [ 134.214178][ T6309] tipc: Disabling bearer [ 134.616216][ T6333] loop2: detected capacity change from 0 to 512 [ 134.763626][ T6333] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #3: comm syz.2.701: corrupted inode contents [ 134.781412][ T6333] EXT4-fs error (device loop2): ext4_dirty_inode:6086: inode #3: comm syz.2.701: mark_inode_dirty error [ 134.805488][ T6333] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #3: comm syz.2.701: corrupted inode contents [ 134.838977][ T6333] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.701: mark_inode_dirty error [ 134.893154][ T6333] __quota_error: 1461 callbacks suppressed [ 134.893170][ T6333] Quota error (device loop2): write_blk: dquota write failed [ 134.896709][ T6333] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 134.931681][ T6333] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.701: Failed to acquire dquot type 0 [ 135.014339][ T6333] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.701: corrupted inode contents [ 135.034308][ T6333] EXT4-fs error (device loop2): ext4_dirty_inode:6086: inode #16: comm syz.2.701: mark_inode_dirty error [ 135.072872][ T6333] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.701: corrupted inode contents [ 135.092843][ T6333] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.701: mark_inode_dirty error [ 135.113132][ T6333] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.701: corrupted inode contents [ 135.130503][ T6333] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 135.152059][ T6333] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.701: corrupted inode contents [ 135.199698][ T6333] EXT4-fs error (device loop2): ext4_truncate:4311: inode #16: comm syz.2.701: mark_inode_dirty error [ 135.203047][ T6333] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 135.229215][ T6333] EXT4-fs (loop2): 1 truncate cleaned up [ 135.238773][ T6333] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 135.266565][ T6353] loop3: detected capacity change from 0 to 512 [ 135.268766][ T6353] EXT4-fs: Ignoring removed orlov option [ 135.309532][ T4355] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.171731][ T6363] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 136.175706][ T6363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.217529][ T6363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.231372][ T6363] IPv6: ADDRCONF(NETDEV_CHANGE): wg1: link becomes ready [ 136.234500][ T6363] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 136.283071][ T4355] usb 1-1: Using ep0 maxpacket: 8 [ 136.298990][ T6353] EXT4-fs (loop3): Test dummy encryption mode enabled [ 136.312060][ T6363] netlink: 216 bytes leftover after parsing attributes in process `syz.4.711'. [ 136.374972][ T6353] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 136.377146][ T6353] System zones: 1-12 [ 136.384088][ T6353] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.710: casefold flag without casefold feature [ 136.388439][ T6353] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.710: couldn't read orphan inode 15 (err -117) [ 136.393719][ T6353] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 136.413199][ T4355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.420084][ T4355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.422988][ T4355] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 137.176930][ T4355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.183322][ T4355] usb 1-1: config 0 descriptor?? [ 137.612789][ T6345] device vlan3 entered promiscuous mode [ 137.825381][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 137.919494][ T4355] usbhid 1-1:0.0: can't add hid device: -71 [ 137.921255][ T4355] usbhid: probe of 1-1:0.0 failed with error -71 [ 137.924031][ T4355] usb 1-1: USB disconnect, device number 8 [ 137.950377][ T6384] netlink: 36 bytes leftover after parsing attributes in process `syz.3.710'. [ 138.168269][ T6395] 9pnet_fd: Insufficient options for proto=fd [ 138.297203][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 139.372282][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.377320][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.387625][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.396161][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): wg1: link becomes ready [ 139.398958][ T6419] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 139.471252][ T6427] netlink: 216 bytes leftover after parsing attributes in process `syz.4.727'. [ 140.099959][ T5812] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.379843][ T5812] usb 1-1: Using ep0 maxpacket: 8 [ 140.499980][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.503739][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.510397][ T5812] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 140.533145][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.547271][ T5812] usb 1-1: config 0 descriptor?? [ 141.620028][ T5812] usbhid 1-1:0.0: can't add hid device: -71 [ 141.667288][ T5812] usbhid: probe of 1-1:0.0 failed with error -71 [ 141.881297][ T5812] usb 1-1: USB disconnect, device number 9 [ 143.654404][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.663782][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.666044][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.693896][ T6481] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 143.734632][ T6484] netlink: 216 bytes leftover after parsing attributes in process `syz.1.747'. [ 143.911717][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.980940][ T6511] loop1: detected capacity change from 0 to 1024 [ 143.999610][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.007812][ T6510] device vlan2 entered promiscuous mode [ 144.037753][ T6511] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 144.212293][ T5812] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 144.949602][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 145.673738][ T6524] netlink: 'syz.1.757': attribute type 4 has an invalid length. [ 145.939634][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 145.942513][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 145.946933][ T5812] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 145.960174][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.971096][ T5812] usb 1-1: config 0 descriptor?? [ 145.989641][ T6504] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.010156][ T5812] hub 1-1:0.0: USB hub found [ 146.089727][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 146.229570][ T5812] hub 1-1:0.0: 2 ports detected [ 146.238585][ T6536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.303163][ T6536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.317109][ T6536] loop4: detected capacity change from 0 to 16 [ 146.352927][ T6536] erofs: (device loop4): mounted with root inode @ nid 36. [ 147.249519][ T5812] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 147.251641][ T5812] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 147.261332][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.266520][ T6549] syz.4.763: attempt to access beyond end of device [ 147.266520][ T6549] loop4: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 147.287037][ T6549] syz.4.763: attempt to access beyond end of device [ 147.287037][ T6549] loop4: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 147.288983][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.294104][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.333364][ T6548] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 147.349434][ T5812] usbhid 1-1:0.0: can't add hid device: -71 [ 147.351241][ T5812] usbhid: probe of 1-1:0.0 failed with error -71 [ 147.371943][ T6548] netlink: 216 bytes leftover after parsing attributes in process `syz.2.767'. [ 147.383953][ T5812] usb 1-1: USB disconnect, device number 10 [ 149.297064][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.383772][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.404499][ T6577] device vlan2 entered promiscuous mode [ 149.407364][ T6577] device nlmon0 entered promiscuous mode [ 149.483475][ T6577] device nlmon0 left promiscuous mode [ 150.903535][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.907986][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.910966][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.915525][ T6601] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 150.948160][ T6599] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.977324][ T6599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.983376][ T6599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.011201][ T6609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.038481][ T6599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.052386][ T6607] netlink: 216 bytes leftover after parsing attributes in process `syz.0.782'. [ 151.065367][ T6609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.683356][ T6622] loop1: detected capacity change from 0 to 512 [ 152.784897][ T6622] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 153.105349][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.787'. [ 153.659219][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 153.694228][ T6627] loop2: detected capacity change from 0 to 40427 [ 153.695732][ T6627] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 153.695770][ T6627] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 153.749232][ T6627] F2FS-fs (loop2): Found nat_bits in checkpoint [ 153.833115][ T6627] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 153.835031][ T6627] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 154.676244][ T6656] syz.2.788: attempt to access beyond end of device [ 154.676244][ T6656] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.683048][ T6656] syz.2.788: attempt to access beyond end of device [ 154.683048][ T6656] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 155.014667][ T6657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.065974][ T6657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.068135][ T6657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.081966][ T6660] loop4: detected capacity change from 0 to 512 [ 155.145976][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.149198][ T6660] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz.4.795: casefold flag without casefold feature [ 155.160826][ T6660] EXT4-fs (loop4): get root inode failed [ 155.162464][ T6660] EXT4-fs (loop4): mount failed [ 155.259551][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.268084][ T6662] device vlan2 entered promiscuous mode [ 155.293734][ T6662] device nlmon0 entered promiscuous mode [ 155.387246][ T6662] device nlmon0 left promiscuous mode [ 156.214988][ T6657] netlink: 216 bytes leftover after parsing attributes in process `syz.0.794'. [ 156.435691][ T6677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.490664][ T6677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.879019][ T6690] loop2: detected capacity change from 0 to 512 [ 159.190429][ T6690] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 159.193632][ T6690] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 159.196054][ T6690] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.804: Failed to acquire dquot type 0 [ 159.220225][ T4302] Bluetooth: hci2: command 0x0406 tx timeout [ 159.230531][ T6690] EXT4-fs (loop2): Remounting filesystem read-only [ 159.232303][ T6690] EXT4-fs (loop2): 1 orphan inode deleted [ 159.233844][ T6690] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 159.268732][ T4302] Bluetooth: hci1: command 0x0406 tx timeout [ 159.438910][ T6711] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.473033][ T6711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.475126][ T6711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.564260][ T6711] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 159.672268][ T6719] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 159.675409][ T6719] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 159.677752][ T6719] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.804: Failed to acquire dquot type 0 [ 159.889197][ T6719] EXT4-fs (loop2): Remounting filesystem read-only [ 159.992676][ T6711] netlink: 216 bytes leftover after parsing attributes in process `syz.0.810'. [ 160.250596][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 160.554666][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.558770][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.561290][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.564955][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): wg1: link becomes ready [ 161.189232][ T6743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.245368][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.513014][ T27] audit: type=1326 audit(163.490:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f499e8 code=0x7ffc0000 [ 163.539610][ T27] audit: type=1326 audit(163.520:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f499e8 code=0x7ffc0000 [ 163.584247][ T27] audit: type=1326 audit(163.530:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff92f499e8 code=0x7ffc0000 [ 163.619021][ T27] audit: type=1326 audit(163.530:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f499e8 code=0x7ffc0000 [ 163.632258][ T6764] loop1: detected capacity change from 0 to 2048 [ 163.654411][ T27] audit: type=1326 audit(163.530:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f499e8 code=0x7ffc0000 [ 163.668217][ T27] audit: type=1326 audit(163.530:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff92f499e8 code=0x7ffc0000 [ 163.710760][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.725464][ T6764] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 163.734808][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.755115][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.787289][ T6768] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 163.891368][ T6768] netlink: 216 bytes leftover after parsing attributes in process `syz.2.825'. [ 164.055450][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'. [ 164.595580][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 165.063411][ T5812] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 165.388755][ T6799] overlayfs: failed to resolve './file2': -2 [ 165.953306][ T6811] loop3: detected capacity change from 0 to 256 [ 166.000861][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.004472][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.009160][ T5812] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 166.084427][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.086020][ T6814] loop2: detected capacity change from 0 to 256 [ 166.090860][ T5812] usb 1-1: config 0 descriptor?? [ 166.097760][ T6811] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3962bc8b, utbl_chksum : 0xe619d30d) [ 166.139158][ T6814] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 167.251019][ T6822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.320063][ T6822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.345965][ T6822] device vlan2 entered promiscuous mode [ 167.352499][ T6822] device nlmon0 entered promiscuous mode [ 167.411471][ T6822] device nlmon0 left promiscuous mode [ 167.459558][ T5812] usbhid 1-1:0.0: can't add hid device: -71 [ 167.461408][ T5812] usbhid: probe of 1-1:0.0 failed with error -71 [ 167.468633][ T5812] usb 1-1: USB disconnect, device number 11 [ 167.908842][ T6817] loop4: detected capacity change from 0 to 65536 [ 167.986142][ T6817] XFS (loop4): Mounting V5 Filesystem [ 168.049815][ T6817] XFS (loop4): Ending clean mount [ 168.065984][ T6817] XFS (loop4): Quotacheck needed: Please wait. [ 168.114485][ T6817] XFS (loop4): Quotacheck: Done. [ 168.178698][ T6817] overlayfs: missing 'workdir' [ 168.198301][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.229916][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.274307][ T4301] XFS (loop4): Unmounting Filesystem [ 170.243075][ T6870] 9pnet_fd: Insufficient options for proto=fd [ 170.298030][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.358229][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.387892][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.430891][ T6868] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 170.517281][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.564735][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.573515][ T6879] device vlan2 entered promiscuous mode [ 170.576110][ T6879] device nlmon0 entered promiscuous mode [ 170.660344][ T6879] device nlmon0 left promiscuous mode [ 171.599649][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.670384][ T6881] loop3: detected capacity change from 0 to 65536 [ 171.708278][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.431882][ T6881] XFS (loop3): Mounting V5 Filesystem [ 172.469478][ T6881] XFS (loop3): Ending clean mount [ 172.514793][ T6881] XFS (loop3): Quotacheck needed: Please wait. [ 172.663123][ T6881] XFS (loop3): Quotacheck: Done. [ 172.851156][ T6917] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.868673][ T6917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.879421][ T6917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.891788][ T6917] IPv6: ADDRCONF(NETDEV_CHANGE): wg1: link becomes ready [ 172.901591][ T6917] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 173.522193][ T4306] XFS (loop3): Unmounting Filesystem [ 175.040175][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.081271][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.685204][ T27] kauditd_printk_skb: 50 callbacks suppressed [ 176.685217][ T27] audit: type=1326 audit(176.660:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.3.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b499e8 code=0x7ffc0000 [ 176.693459][ T27] audit: type=1326 audit(176.670:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.3.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=232 compat=0 ip=0xffff80b499e8 code=0x7ffc0000 [ 176.699096][ T27] audit: type=1326 audit(176.670:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.3.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b499e8 code=0x7ffc0000 [ 176.818104][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.862457][ T7000] loop3: detected capacity change from 0 to 256 [ 177.041690][ T6963] loop2: detected capacity change from 0 to 65536 [ 177.049920][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.745795][ T6963] XFS (loop2): Mounting V5 Filesystem [ 177.890522][ T6963] XFS (loop2): log mount failed [ 178.181128][ T7031] loop3: detected capacity change from 0 to 2048 [ 178.235418][ T7031] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 178.400648][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.477882][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.589100][ T27] audit: type=1326 audit(179.560:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f7499e8 code=0x7ffc0000 [ 179.668514][ T27] audit: type=1326 audit(179.580:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=164 compat=0 ip=0xffff8f7499e8 code=0x7ffc0000 [ 179.692411][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 179.705277][ T7057] loop4: detected capacity change from 0 to 128 [ 179.709542][ T27] audit: type=1326 audit(179.580:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f7499e8 code=0x7ffc0000 [ 179.725810][ T27] audit: type=1326 audit(179.580:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f7499e8 code=0x7ffc0000 [ 179.768017][ T7057] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 180.708937][ T4301] EXT4-fs (loop4): unmounting filesystem. [ 180.995144][ T7086] loop3: detected capacity change from 0 to 256 [ 181.001939][ T7086] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.978257][ T4302] Bluetooth: hci5: sending frame failed (-49) [ 181.981724][ T4296] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 182.214542][ T7098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.249552][ T7098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.447946][ T7080] loop4: detected capacity change from 0 to 65536 [ 182.507054][ T7080] XFS (loop4): Mounting V5 Filesystem [ 182.589775][ T7080] XFS (loop4): Ending clean mount [ 182.591937][ T7080] XFS (loop4): Quotacheck needed: Please wait. [ 182.632794][ T7080] XFS (loop4): Quotacheck: Done. [ 183.573927][ T7120] loop1: detected capacity change from 0 to 512 [ 183.667671][ T7120] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 183.754731][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 183.785978][ T4301] XFS (loop4): Unmounting Filesystem [ 186.684740][ T7159] 9pnet_fd: Insufficient options for proto=fd [ 187.058933][ T7168] binder: 7160:7168 got transaction to invalid handle, 2 [ 187.060889][ T7168] binder: 7168:7160 cannot find target node [ 187.062387][ T7168] binder: 7160:7168 transaction async to 0:0 failed 17/29201/-22, size 0-24 line 3054 [ 187.400206][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.402439][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.627772][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.859668][ T7176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.929837][ T7176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.025376][ T7180] loop1: detected capacity change from 0 to 256 [ 188.134914][ T7180] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 188.167391][ T7185] syz.3.947 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 190.641471][ T7203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.680020][ T7203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.847159][ T7222] loop3: detected capacity change from 0 to 128 [ 191.004175][ T7222] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 191.765721][ T7228] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 191.768119][ T7228] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 192.372012][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 193.053474][ T7256] tipc: Started in network mode [ 193.063223][ T7256] tipc: Node identity 5a99b32baf2d, cluster identity 4711 [ 193.076159][ T7256] tipc: Enabled bearer , priority 0 [ 194.138740][ T7244] tipc: Disabling bearer [ 194.156828][ T27] audit: type=1326 audit(195.127:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad3499e8 code=0x7ffc0000 [ 194.177767][ T27] audit: type=1326 audit(195.147:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad3499e8 code=0x7ffc0000 [ 194.190605][ T110] tipc: Node number set to 4122260267 [ 194.220576][ T27] audit: type=1326 audit(195.147:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=443 compat=0 ip=0xffffad3499e8 code=0x7ffc0000 [ 194.226316][ T27] audit: type=1326 audit(195.147:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad3499e8 code=0x7ffc0000 [ 194.253978][ T7268] loop4: detected capacity change from 0 to 2048 [ 194.258509][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.290348][ T27] audit: type=1326 audit(195.147:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad3499e8 code=0x7ffc0000 [ 194.319681][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.326492][ T7268] Alternate GPT is invalid, using primary GPT. [ 194.328481][ T7268] loop4: p1 p2 p3 [ 194.328758][ T7267] device vlan2 entered promiscuous mode [ 194.334256][ T7267] device nlmon0 entered promiscuous mode [ 194.343303][ T7267] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 195.467151][ T4542] udevd[4542]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 195.512907][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 195.592731][ T4547] udevd[4547]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 196.788188][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 196.816247][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.818424][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.846790][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): wg1: link becomes ready [ 196.866556][ T7290] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 196.890115][ T7292] netlink: 216 bytes leftover after parsing attributes in process `syz.4.981'. [ 197.019951][ T7274] loop2: detected capacity change from 0 to 40427 [ 197.053084][ T7274] F2FS-fs (loop2): invalid crc value [ 197.093144][ T7274] F2FS-fs (loop2): Found nat_bits in checkpoint [ 197.129088][ T7274] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 197.147064][ T7274] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 198.193605][ T4295] syz-executor: attempt to access beyond end of device [ 198.193605][ T4295] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 198.197921][ T4295] syz-executor: attempt to access beyond end of device [ 198.197921][ T4295] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 198.245944][ T7308] device syzkaller0 entered promiscuous mode [ 198.407150][ T4581] kworker/u4:10: attempt to access beyond end of device [ 198.407150][ T4581] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 208.359236][ T4302] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.363197][ T4302] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.365873][ T4302] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.368533][ T4302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.373509][ T4302] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.375951][ T4302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.461205][ T4302] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.464943][ T4302] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.467826][ T4302] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.476829][ T4302] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.479182][ T4302] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.481543][ T4302] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.505141][ T4302] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.510328][ T4302] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.516996][ T4302] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.520631][ T4302] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.522965][ T4302] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.525078][ T4302] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.878508][ T4296] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.882405][ T4296] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.886008][ T4296] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.889246][ T4299] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.894719][ T4303] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 209.903166][ T4299] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.905238][ T47] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.906788][ T4303] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 209.910440][ T4303] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 209.913674][ T4303] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 209.922763][ T4303] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 209.924796][ T4303] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 210.404782][ T7311] tipc: Enabling of bearer rejected, failed to enable media [ 210.419604][ T7321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.423744][ T4303] Bluetooth: hci1: command tx timeout [ 210.427005][ T7324] netlink: 216 bytes leftover after parsing attributes in process `syz.3.992'. [ 210.500983][ T4303] Bluetooth: hci5: command tx timeout [ 210.579464][ T4303] Bluetooth: hci6: command tx timeout [ 210.954110][ T5076] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.055558][ T5076] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.162054][ T5076] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.251366][ T5076] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.351390][ T7331] chnl_net:caif_netlink_parms(): no params data found [ 211.410891][ T7336] chnl_net:caif_netlink_parms(): no params data found [ 211.425320][ T7338] chnl_net:caif_netlink_parms(): no params data found [ 211.434365][ T7347] chnl_net:caif_netlink_parms(): no params data found [ 211.459716][ T7345] chnl_net:caif_netlink_parms(): no params data found [ 211.549222][ T7336] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.551585][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.554263][ T7336] device bridge_slave_0 entered promiscuous mode [ 211.562674][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.564428][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.566880][ T7331] device bridge_slave_0 entered promiscuous mode [ 211.580276][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.582086][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.584893][ T7331] device bridge_slave_1 entered promiscuous mode [ 211.601119][ T7336] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.603045][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.605545][ T7336] device bridge_slave_1 entered promiscuous mode [ 211.676249][ T7338] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.678300][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.683627][ T7338] device bridge_slave_0 entered promiscuous mode [ 211.688442][ T7331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.693369][ T7331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.708351][ T7347] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.716574][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.719245][ T7347] device bridge_slave_0 entered promiscuous mode [ 211.732471][ T7345] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.734304][ T7345] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.736920][ T7345] device bridge_slave_0 entered promiscuous mode [ 211.742803][ T7338] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.744590][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.747104][ T7338] device bridge_slave_1 entered promiscuous mode [ 211.755147][ T5076] tipc: Left network mode [ 211.759278][ T7331] team0: Port device team_slave_0 added [ 211.768779][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.770957][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.773668][ T7347] device bridge_slave_1 entered promiscuous mode [ 211.778324][ T7336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.787819][ T7345] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.790147][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.792747][ T7345] device bridge_slave_1 entered promiscuous mode [ 211.804780][ T7331] team0: Port device team_slave_1 added [ 211.826588][ T7336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.831741][ T7347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.940327][ T4303] Bluetooth: hci7: command tx timeout [ 211.949853][ T4303] Bluetooth: hci8: command tx timeout [ 211.970760][ T7338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.984045][ T7347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.004954][ T7338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.024387][ T7336] team0: Port device team_slave_0 added [ 212.095738][ T7345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.104844][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.106620][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.119788][ T7331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.147150][ T7336] team0: Port device team_slave_1 added [ 212.156721][ T7345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.161860][ T7347] team0: Port device team_slave_0 added [ 212.175012][ T7338] team0: Port device team_slave_0 added [ 212.178453][ T7338] team0: Port device team_slave_1 added [ 212.243219][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.245042][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.260263][ T7331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.274089][ T7347] team0: Port device team_slave_1 added [ 212.350330][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.352392][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.358847][ T7338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.363067][ T7336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.364939][ T7336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.372618][ T7336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.376439][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.378503][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.385581][ T7338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.468790][ T7345] team0: Port device team_slave_0 added [ 212.482340][ T7336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.484297][ T7336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.490814][ T7336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.500849][ T4303] Bluetooth: hci1: command tx timeout [ 212.504853][ T7345] team0: Port device team_slave_1 added [ 212.506971][ T7347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.508825][ T7347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.516337][ T7347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.579530][ T4303] Bluetooth: hci5: command tx timeout [ 212.588740][ T7347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.590545][ T7347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.597022][ T7347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.651311][ T7331] device hsr_slave_0 entered promiscuous mode [ 212.669511][ T4296] Bluetooth: hci6: command tx timeout [ 212.689838][ T7331] device hsr_slave_1 entered promiscuous mode [ 212.729556][ T7331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.731603][ T7331] Cannot create hsr debugfs directory [ 212.824751][ T7345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.826578][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.834177][ T7345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.840055][ T7345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.841838][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.847965][ T7345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.901208][ T7338] device hsr_slave_0 entered promiscuous mode [ 212.939895][ T7338] device hsr_slave_1 entered promiscuous mode [ 212.990645][ T7338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.992423][ T7338] Cannot create hsr debugfs directory [ 213.131263][ T7336] device hsr_slave_0 entered promiscuous mode [ 213.169919][ T7336] device hsr_slave_1 entered promiscuous mode [ 213.209534][ T7336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.211534][ T7336] Cannot create hsr debugfs directory [ 213.401253][ T7347] device hsr_slave_0 entered promiscuous mode [ 213.440750][ T7347] device hsr_slave_1 entered promiscuous mode [ 213.479585][ T7347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.481549][ T7347] Cannot create hsr debugfs directory [ 213.521717][ T7345] device hsr_slave_0 entered promiscuous mode [ 213.561516][ T7345] device hsr_slave_1 entered promiscuous mode [ 213.599497][ T7345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.601532][ T7345] Cannot create hsr debugfs directory [ 214.019624][ T4296] Bluetooth: hci8: command tx timeout [ 214.019746][ T4303] Bluetooth: hci7: command tx timeout [ 214.244167][ T7338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.401388][ T7338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.579511][ T4302] Bluetooth: hci1: command tx timeout [ 214.624760][ T4355] ------------[ cut here ]------------ [ 214.626425][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 214.628850][ T4355] Modules linked in: [ 214.629863][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Not tainted 6.1.111-syzkaller #0 [ 214.632108][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 214.634835][ T4355] Workqueue: events disconnect_work [ 214.636200][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 214.638262][ T4355] pc : disconnect_work+0x264/0x324 [ 214.639622][ T4355] lr : disconnect_work+0x264/0x324 [ 214.640961][ T4355] sp : ffff800021bd7af0 [ 214.642163][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 214.644274][ T4355] x26: ffff8000159d0000 x25: 1fffe0001a4516c3 x24: 0000000000000000 [ 214.646274][ T4355] x23: ffff0000d0fccc90 x22: ffff0000d0fccca0 x21: ffff0000d2688de8 [ 214.648354][ T4355] x20: 1fffe0001a1f9992 x19: 0000000000000001 x18: 1fffe0003679f176 [ 214.650387][ T4355] x17: ffff8000159cd000 x16: ffff8000084fb1ec x15: ffff0001b3cf8bbc [ 214.652430][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 214.654632][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 214.656855][ T4355] x8 : ffff0000d32b5340 x7 : 2222222222222222 x6 : 0000000000000000 [ 214.659200][ T4355] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80000831e4a4 [ 214.661197][ T4355] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 214.663269][ T4355] Call trace: [ 214.664064][ T4355] disconnect_work+0x264/0x324 [ 214.665295][ T4355] process_one_work+0x7ac/0x1404 [ 214.666674][ T4355] worker_thread+0x8e4/0xfec [ 214.667751][ T4355] kthread+0x250/0x2d8 [ 214.668835][ T4355] ret_from_fork+0x10/0x20 [ 214.669918][ T4355] irq event stamp: 252216 [ 214.670981][ T4355] hardirqs last enabled at (252215): [] finish_lock_switch+0xbc/0x1e8 [ 214.673594][ T4355] hardirqs last disabled at (252216): [] el1_dbg+0x24/0x80 [ 214.676095][ T4355] softirqs last enabled at (252128): [] handle_softirqs+0xb84/0xd58 [ 214.678742][ T4355] softirqs last disabled at (252105): [] __do_softirq+0x14/0x20 [ 214.681197][ T4355] ---[ end trace 0000000000000000 ]--- [ 214.683400][ T4303] Bluetooth: hci5: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 214.694247][ T4355] ------------[ cut here ]------------ [ 214.696112][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 214.699060][ T4355] Modules linked in: [ 214.700139][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 214.702933][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 214.705669][ T4355] Workqueue: events disconnect_work [ 214.707050][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 214.709183][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 214.710939][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 214.712621][ T4355] sp : ffff800021bd7a90 [ 214.713642][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 214.715866][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000d0fcccd8 [ 214.718124][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 214.720323][ T4355] x20: 0000000000000000 x19: ffff0000d0fccc90 x18: ffff800021bd7620 [ 214.722531][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: ffff800018589f80 [ 214.724763][ T4355] x14: ffff0000d32b5db8 x13: dfff800000000000 x12: 0000000000000001 [ 214.726794][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 214.728945][ T4355] x8 : ffff0000d32b5340 x7 : 0000000000000000 x6 : 0000000000000000 [ 214.731167][ T4355] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff8000082fbc8c [ 214.733306][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 214.735572][ T4355] Call trace: [ 214.736477][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 214.738270][ T4355] disconnect_work+0x18c/0x324 [ 214.739511][ T4355] process_one_work+0x7ac/0x1404 [ 214.740977][ T4355] worker_thread+0x8e4/0xfec [ 214.742168][ T4355] kthread+0x250/0x2d8 [ 214.743240][ T4355] ret_from_fork+0x10/0x20 [ 214.744430][ T4355] irq event stamp: 252430 [ 214.745618][ T4355] hardirqs last enabled at (252429): [] exit_to_kernel_mode+0xe8/0x118 [ 214.748450][ T4355] hardirqs last disabled at (252430): [] el1_dbg+0x24/0x80 [ 214.750900][ T4355] softirqs last enabled at (252424): [] handle_softirqs+0xb84/0xd58 [ 214.753564][ T4355] softirqs last disabled at (252221): [] __do_softirq+0x14/0x20 [ 214.756120][ T4355] ---[ end trace 0000000000000000 ]--- [ 214.759634][ T4302] Bluetooth: hci6: command tx timeout [ 214.797647][ T4355] ------------[ cut here ]------------ [ 214.799128][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 214.801610][ T4355] Modules linked in: [ 214.802616][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 214.805102][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 214.807602][ T4355] Workqueue: events disconnect_work [ 214.809008][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 214.810982][ T4355] pc : disconnect_work+0x270/0x324 [ 214.812265][ T4355] lr : disconnect_work+0x270/0x324 [ 214.813621][ T4355] sp : ffff800021bd7af0 [ 214.814689][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 214.816635][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000d0fcccd8 [ 214.818798][ T4355] x23: 0000000000000000 x22: ffff0000d0fccca0 x21: ffff0000d2688de8 [ 214.820761][ T4355] x20: 1fffe0001a1f9992 x19: 0000000000000000 x18: ffff800021bd7620 [ 214.822845][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 214.824900][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 214.826905][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 214.829004][ T4355] x8 : ffff0000d32b5340 x7 : 0000000000000000 x6 : 0000000000000000 [ 214.831007][ T4355] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff8000082fbc8c [ 214.832978][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 214.835020][ T4355] Call trace: [ 214.835800][ T4355] disconnect_work+0x270/0x324 [ 214.837102][ T4355] process_one_work+0x7ac/0x1404 [ 214.838256][ T4355] worker_thread+0x8e4/0xfec [ 214.839517][ T4355] kthread+0x250/0x2d8 [ 214.840676][ T4355] ret_from_fork+0x10/0x20 [ 214.841798][ T4355] irq event stamp: 252548 [ 214.842625][ T4355] hardirqs last enabled at (252547): [] exit_to_kernel_mode+0xe8/0x118 [ 214.845135][ T4355] hardirqs last disabled at (252548): [] el1_dbg+0x24/0x80 [ 214.847372][ T4355] softirqs last enabled at (252542): [] handle_softirqs+0xb84/0xd58 [ 214.849846][ T4355] softirqs last disabled at (252433): [] __do_softirq+0x14/0x20 [ 214.852130][ T4355] ---[ end trace 0000000000000000 ]--- [ 214.867244][ T4355] ------------[ cut here ]------------ [ 214.868632][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 214.871181][ T4355] Modules linked in: [ 214.872182][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 214.874652][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 214.877068][ T4355] Workqueue: events disconnect_work [ 214.878431][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 214.880299][ T4355] pc : disconnect_work+0x264/0x324 [ 214.881539][ T4355] lr : disconnect_work+0x264/0x324 [ 214.882866][ T4355] sp : ffff800021bd7af0 [ 214.883881][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 214.885871][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 214.887975][ T4355] x23: ffff0000da858c90 x22: ffff0000da858ca0 x21: ffff0000f2e98de8 [ 214.890089][ T4355] x20: 1fffe0001b50b192 x19: 0000000000000000 x18: 1fffe0003679f176 [ 214.892051][ T4355] x17: ffff8000159cd000 x16: ffff8000084fb1ec x15: ffff0001b3cf8bbc [ 214.894149][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 214.896077][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 214.898023][ T4355] x8 : ffff0000d32b5340 x7 : ffff80000827d484 x6 : 0000000000000000 [ 214.900279][ T4355] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff8000082616e4 [ 214.902180][ T4355] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 214.904184][ T4355] Call trace: [ 214.904973][ T4355] disconnect_work+0x264/0x324 [ 214.906250][ T4355] process_one_work+0x7ac/0x1404 [ 214.907577][ T4355] worker_thread+0x8e4/0xfec [ 214.909030][ T4355] kthread+0x250/0x2d8 [ 214.910091][ T4355] ret_from_fork+0x10/0x20 [ 214.911286][ T4355] irq event stamp: 252868 [ 214.912391][ T4355] hardirqs last enabled at (252867): [] finish_lock_switch+0xbc/0x1e8 [ 214.914997][ T4355] hardirqs last disabled at (252868): [] el1_dbg+0x24/0x80 [ 214.917319][ T4355] softirqs last enabled at (252864): [] handle_softirqs+0xb84/0xd58 [ 214.919550][ T4355] softirqs last disabled at (252723): [] __do_softirq+0x14/0x20 [ 214.921788][ T4355] ---[ end trace 0000000000000000 ]--- [ 214.931173][ T4355] ------------[ cut here ]------------ [ 214.932488][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 214.934952][ T4355] Modules linked in: [ 214.935815][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 214.937907][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 214.940257][ T4355] Workqueue: events disconnect_work [ 214.941423][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 214.943134][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 214.944652][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 214.946202][ T4355] sp : ffff800021bd7a90 [ 214.947194][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 214.949210][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000da858cd8 [ 214.951049][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 214.953003][ T4355] x20: 0000000000000000 x19: ffff0000da858c90 x18: 1fffe0003679f176 [ 214.955107][ T4355] x17: ffff8000159cd000 x16: ffff8000084fb1ec x15: ffff0001b3cf8bbc [ 214.957474][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 214.959798][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 214.961925][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 214.963703][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 214.965040][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 214.966539][ T4355] Call trace: [ 214.967307][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 214.968984][ T4355] disconnect_work+0x18c/0x324 [ 214.970275][ T4355] process_one_work+0x7ac/0x1404 [ 214.971578][ T4355] worker_thread+0x8e4/0xfec [ 214.972816][ T4355] kthread+0x250/0x2d8 [ 214.973933][ T4355] ret_from_fork+0x10/0x20 [ 214.975132][ T4355] irq event stamp: 253066 [ 214.976195][ T4355] hardirqs last enabled at (253065): [] exit_to_kernel_mode+0xe8/0x118 [ 214.978808][ T4355] hardirqs last disabled at (253066): [] el1_dbg+0x24/0x80 [ 214.980935][ T4355] softirqs last enabled at (253060): [] handle_softirqs+0xb84/0xd58 [ 214.983498][ T4355] softirqs last disabled at (252871): [] __do_softirq+0x14/0x20 [ 214.985972][ T4355] ---[ end trace 0000000000000000 ]--- [ 214.988632][ T4355] ------------[ cut here ]------------ [ 214.990154][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 214.992345][ T4355] Modules linked in: [ 214.993365][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 214.995813][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 214.998329][ T4355] Workqueue: events disconnect_work [ 214.999485][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.001529][ T4355] pc : disconnect_work+0x270/0x324 [ 215.002905][ T4355] lr : disconnect_work+0x270/0x324 [ 215.004209][ T4355] sp : ffff800021bd7af0 [ 215.005169][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.007187][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000da858cd8 [ 215.009029][ T4355] x23: 0000000000000000 x22: ffff0000da858ca0 x21: ffff0000f2e98de8 [ 215.011159][ T4355] x20: 1fffe0001b50b192 x19: 0000000000000000 x18: 1fffe0003679f176 [ 215.013292][ T4355] x17: ffff8000159cd000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 215.015378][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 215.017590][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 215.019651][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 215.021607][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 215.023780][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.025918][ T4355] Call trace: [ 215.026792][ T4355] disconnect_work+0x270/0x324 [ 215.027981][ T4355] process_one_work+0x7ac/0x1404 [ 215.029366][ T4355] worker_thread+0x8e4/0xfec [ 215.030580][ T4355] kthread+0x250/0x2d8 [ 215.031633][ T4355] ret_from_fork+0x10/0x20 [ 215.032802][ T4355] irq event stamp: 253256 [ 215.033991][ T4355] hardirqs last enabled at (253255): [] exit_to_kernel_mode+0xe8/0x118 [ 215.036380][ T4355] hardirqs last disabled at (253256): [] el1_dbg+0x24/0x80 [ 215.038611][ T4355] softirqs last enabled at (253250): [] handle_softirqs+0xb84/0xd58 [ 215.041162][ T4355] softirqs last disabled at (253069): [] __do_softirq+0x14/0x20 [ 215.043286][ T4355] ---[ end trace 0000000000000000 ]--- [ 215.046396][ T4355] ------------[ cut here ]------------ [ 215.047609][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 215.049943][ T4355] Modules linked in: [ 215.050888][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 215.053386][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.055943][ T4355] Workqueue: events disconnect_work [ 215.057142][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.059132][ T4355] pc : disconnect_work+0x264/0x324 [ 215.060485][ T4355] lr : disconnect_work+0x264/0x324 [ 215.061649][ T4355] sp : ffff800021bd7af0 [ 215.062801][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.064860][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 215.066804][ T4355] x23: ffff0000ca5e0c90 x22: ffff0000ca5e0ca0 x21: ffff0000df120de8 [ 215.068966][ T4355] x20: 1fffe000194bc192 x19: 0000000000000000 x18: 1fffe0003679f176 [ 215.070789][ T4355] x17: ffff8000159cd000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 215.072864][ T4355] x14: 1ffff00002b3a0b0 x13: 1fffe000367a3376 x12: 0000000000000001 [ 215.074917][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 215.076958][ T4355] x8 : ffff0000d32b5340 x7 : 0000000000000000 x6 : 0000000000000000 [ 215.078933][ T4355] x5 : 0000000000000080 x4 : 0000000000000008 x3 : ffff8000082616e4 [ 215.080817][ T4355] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.082863][ T4355] Call trace: [ 215.083718][ T4355] disconnect_work+0x264/0x324 [ 215.084838][ T4355] process_one_work+0x7ac/0x1404 [ 215.086004][ T4355] worker_thread+0x8e4/0xfec [ 215.087090][ T4355] kthread+0x250/0x2d8 [ 215.088072][ T4355] ret_from_fork+0x10/0x20 [ 215.089254][ T4355] irq event stamp: 253372 [ 215.090480][ T4355] hardirqs last enabled at (253371): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 215.093469][ T4355] hardirqs last disabled at (253372): [] el1_dbg+0x24/0x80 [ 215.095900][ T4355] softirqs last enabled at (253364): [] handle_softirqs+0xb84/0xd58 [ 215.098558][ T4355] softirqs last disabled at (253259): [] __do_softirq+0x14/0x20 [ 215.100976][ T4355] ---[ end trace 0000000000000000 ]--- [ 215.106023][ T4355] ------------[ cut here ]------------ [ 215.107495][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 215.110102][ T4355] Modules linked in: [ 215.111149][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 215.113793][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.116355][ T4355] Workqueue: events disconnect_work [ 215.117575][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.119527][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 215.121234][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 215.122914][ T4355] sp : ffff800021bd7a90 [ 215.123948][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.126029][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000ca5e0cd8 [ 215.128202][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 215.130231][ T4355] x20: 0000000000000000 x19: ffff0000ca5e0c90 x18: 1fffe0003679f176 [ 215.132178][ T4355] x17: ffff8000159cd000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 215.134188][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 215.136487][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 215.138611][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 215.140542][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 215.142534][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.144441][ T4355] Call trace: [ 215.145308][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 215.147031][ T4355] disconnect_work+0x18c/0x324 [ 215.148279][ T4355] process_one_work+0x7ac/0x1404 [ 215.149604][ T4355] worker_thread+0x8e4/0xfec [ 215.150839][ T4355] kthread+0x250/0x2d8 [ 215.151892][ T4355] ret_from_fork+0x10/0x20 [ 215.153047][ T4355] irq event stamp: 253556 [ 215.154211][ T4355] hardirqs last enabled at (253555): [] exit_to_kernel_mode+0xe8/0x118 [ 215.156840][ T4355] hardirqs last disabled at (253556): [] el1_dbg+0x24/0x80 [ 215.159097][ T4355] softirqs last enabled at (253550): [] handle_softirqs+0xb84/0xd58 [ 215.161392][ T4355] softirqs last disabled at (253375): [] __do_softirq+0x14/0x20 [ 215.163719][ T4355] ---[ end trace 0000000000000000 ]--- [ 215.166463][ T4355] ------------[ cut here ]------------ [ 215.167829][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 215.170054][ T4355] Modules linked in: [ 215.171125][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 215.173693][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.176333][ T4355] Workqueue: events disconnect_work [ 215.177626][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.179767][ T4355] pc : disconnect_work+0x270/0x324 [ 215.181185][ T4355] lr : disconnect_work+0x270/0x324 [ 215.182584][ T4355] sp : ffff800021bd7af0 [ 215.183555][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.185476][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000ca5e0cd8 [ 215.187415][ T4355] x23: 0000000000000000 x22: ffff0000ca5e0ca0 x21: ffff0000df120de8 [ 215.189713][ T4355] x20: 1fffe000194bc192 x19: 0000000000000000 x18: 1fffe0003679f176 [ 215.191839][ T4355] x17: ffff8000159cd000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 215.193939][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 215.195888][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 215.197863][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 215.199808][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 215.201926][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.204007][ T4355] Call trace: [ 215.204797][ T4355] disconnect_work+0x270/0x324 [ 215.206014][ T4355] process_one_work+0x7ac/0x1404 [ 215.207224][ T4355] worker_thread+0x8e4/0xfec [ 215.208417][ T4355] kthread+0x250/0x2d8 [ 215.209476][ T4355] ret_from_fork+0x10/0x20 [ 215.210738][ T4355] irq event stamp: 253822 [ 215.211804][ T4355] hardirqs last enabled at (253821): [] exit_to_kernel_mode+0xe8/0x118 [ 215.214150][ T4355] hardirqs last disabled at (253822): [] el1_dbg+0x24/0x80 [ 215.216444][ T4355] softirqs last enabled at (253816): [] handle_softirqs+0xb84/0xd58 [ 215.218963][ T4355] softirqs last disabled at (253559): [] __do_softirq+0x14/0x20 [ 215.221306][ T4355] ---[ end trace 0000000000000000 ]--- [ 215.225935][ T4355] ------------[ cut here ]------------ [ 215.227358][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 215.229520][ T4355] Modules linked in: [ 215.230444][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 215.232979][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.235652][ T4355] Workqueue: events disconnect_work [ 215.237072][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.238834][ T4355] pc : disconnect_work+0x264/0x324 [ 215.240068][ T4355] lr : disconnect_work+0x264/0x324 [ 215.241253][ T4355] sp : ffff800021bd7af0 [ 215.242244][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.244273][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 215.246401][ T4355] x23: ffff0000dc7bcc90 x22: ffff0000dc7bcca0 x21: ffff0000d04c8de8 [ 215.248651][ T4355] x20: 1fffe0001b8f7992 x19: 0000000000000000 x18: 1fffe0003679f176 [ 215.250592][ T4355] x17: ffff8000159cd000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 215.252786][ T4355] x14: 1ffff00002b3a0b0 x13: 1fffe000367a3376 x12: 0000000000000001 [ 215.254942][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 215.256999][ T4355] x8 : ffff0000d32b5340 x7 : 0000000000000000 x6 : 0000000000000000 [ 215.259093][ T4355] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff8000082616e4 [ 215.261231][ T4355] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.263204][ T4355] Call trace: [ 215.264039][ T4355] disconnect_work+0x264/0x324 [ 215.265248][ T4355] process_one_work+0x7ac/0x1404 [ 215.266583][ T4355] worker_thread+0x8e4/0xfec [ 215.267760][ T4355] kthread+0x250/0x2d8 [ 215.268876][ T4355] ret_from_fork+0x10/0x20 [ 215.270085][ T4355] irq event stamp: 253944 [ 215.271216][ T4355] hardirqs last enabled at (253943): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 215.274044][ T4355] hardirqs last disabled at (253944): [] el1_dbg+0x24/0x80 [ 215.276254][ T4355] softirqs last enabled at (253936): [] handle_softirqs+0xb84/0xd58 [ 215.278850][ T4355] softirqs last disabled at (253825): [] __do_softirq+0x14/0x20 [ 215.281046][ T4355] ---[ end trace 0000000000000000 ]--- [ 215.286613][ T4355] ------------[ cut here ]------------ [ 215.287923][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 215.290625][ T4355] Modules linked in: [ 215.291550][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 215.294088][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.296646][ T4355] Workqueue: events disconnect_work [ 215.297918][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.299913][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 215.301633][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 215.303419][ T4355] sp : ffff800021bd7a90 [ 215.304451][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.306702][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000dc7bccd8 [ 215.308916][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 215.310991][ T4355] x20: 0000000000000000 x19: ffff0000dc7bcc90 x18: 1fffe0003679f176 [ 215.313177][ T4355] x17: ffff8000159cd000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 215.315281][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 215.317362][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 215.319411][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 215.321449][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 215.323488][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.325564][ T4355] Call trace: [ 215.326444][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 215.328096][ T4355] disconnect_work+0x18c/0x324 [ 215.329276][ T4355] process_one_work+0x7ac/0x1404 [ 215.330586][ T4355] worker_thread+0x8e4/0xfec [ 215.331762][ T4355] kthread+0x250/0x2d8 [ 215.332770][ T4355] ret_from_fork+0x10/0x20 [ 215.334021][ T4355] irq event stamp: 254146 [ 215.335108][ T4355] hardirqs last enabled at (254145): [] exit_to_kernel_mode+0xe8/0x118 [ 215.337560][ T4355] hardirqs last disabled at (254146): [] el1_dbg+0x24/0x80 [ 215.339713][ T4355] softirqs last enabled at (254140): [] handle_softirqs+0xb84/0xd58 [ 215.342245][ T4355] softirqs last disabled at (253947): [] __do_softirq+0x14/0x20 [ 215.344603][ T4355] ---[ end trace 0000000000000000 ]--- [ 215.349154][ T4355] ------------[ cut here ]------------ [ 215.350512][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 215.352835][ T4355] Modules linked in: [ 215.353734][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 215.356469][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.359113][ T4355] Workqueue: events disconnect_work [ 215.360470][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.362576][ T4355] pc : disconnect_work+0x270/0x324 [ 215.364032][ T4355] lr : disconnect_work+0x270/0x324 [ 215.365390][ T4355] sp : ffff800021bd7af0 [ 215.366525][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.368748][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000dc7bccd8 [ 215.370913][ T4355] x23: 0000000000000000 x22: ffff0000dc7bcca0 x21: ffff0000d04c8de8 [ 215.372958][ T4355] x20: 1fffe0001b8f7992 x19: 0000000000000000 x18: 1fffe0003679f176 [ 215.375037][ T4355] x17: ffff8000159cd000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 215.377277][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 215.379399][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 215.381609][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 215.383881][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 215.386056][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.388447][ T4355] Call trace: [ 215.389263][ T4355] disconnect_work+0x270/0x324 [ 215.390405][ T4355] process_one_work+0x7ac/0x1404 [ 215.391808][ T4355] worker_thread+0x8e4/0xfec [ 215.393015][ T4355] kthread+0x250/0x2d8 [ 215.394005][ T4355] ret_from_fork+0x10/0x20 [ 215.395085][ T4355] irq event stamp: 254238 [ 215.396226][ T4355] hardirqs last enabled at (254237): [] exit_to_kernel_mode+0xe8/0x118 [ 215.398962][ T4355] hardirqs last disabled at (254238): [] el1_dbg+0x24/0x80 [ 215.401253][ T4355] softirqs last enabled at (254232): [] handle_softirqs+0xb84/0xd58 [ 215.403776][ T4355] softirqs last disabled at (254149): [] __do_softirq+0x14/0x20 [ 215.406119][ T4355] ---[ end trace 0000000000000000 ]--- [ 215.412923][ T4355] ------------[ cut here ]------------ [ 215.414458][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 215.416729][ T4355] Modules linked in: [ 215.417742][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 215.420183][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.422982][ T4355] Workqueue: events disconnect_work [ 215.424352][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.426359][ T4355] pc : disconnect_work+0x264/0x324 [ 215.427608][ T4355] lr : disconnect_work+0x264/0x324 [ 215.428840][ T4355] sp : ffff800021bd7af0 [ 215.429886][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.432013][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 215.434091][ T4355] x23: ffff0000f18f8c90 x22: ffff0000f18f8ca0 x21: ffff0000f13b8de8 [ 215.435906][ T4355] x20: 1fffe0001e31f192 x19: 0000000000000000 x18: 1fffe0003679f176 [ 215.437866][ T4355] x17: ffff8000159cd000 x16: ffff8000084fb1ec x15: ffff0001b3cf8bbc [ 215.439855][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 215.441825][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 215.443937][ T4355] x8 : ffff0000d32b5340 x7 : ffff80000827d484 x6 : 0000000000000000 [ 215.445859][ T4355] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff8000082616e4 [ 215.447709][ T4355] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.449738][ T4355] Call trace: [ 215.450619][ T4355] disconnect_work+0x264/0x324 [ 215.451795][ T4355] process_one_work+0x7ac/0x1404 [ 215.452939][ T4355] worker_thread+0x8e4/0xfec [ 215.454116][ T4355] kthread+0x250/0x2d8 [ 215.455199][ T4355] ret_from_fork+0x10/0x20 [ 215.456366][ T4355] irq event stamp: 254448 [ 215.457551][ T4355] hardirqs last enabled at (254447): [] finish_lock_switch+0xbc/0x1e8 [ 215.460046][ T4355] hardirqs last disabled at (254448): [] el1_dbg+0x24/0x80 [ 215.462345][ T4355] softirqs last enabled at (254438): [] handle_softirqs+0xb84/0xd58 [ 215.464748][ T4355] softirqs last disabled at (254241): [] __do_softirq+0x14/0x20 [ 215.467035][ T4355] ---[ end trace 0000000000000000 ]--- [ 215.472526][ T4355] ------------[ cut here ]------------ [ 215.474077][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 215.476673][ T4355] Modules linked in: [ 215.477623][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 215.480013][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.482674][ T4355] Workqueue: events disconnect_work [ 215.484116][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.486098][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 215.487219][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 215.488968][ T4355] sp : ffff800021bd7a90 [ 215.489987][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.492089][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000f18f8cd8 [ 215.494208][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 215.496382][ T4355] x20: 0000000000000000 x19: ffff0000f18f8c90 x18: 1fffe0003679f176 [ 215.498466][ T4355] x17: ffff8000159cd000 x16: ffff8000084fb1ec x15: ffff0001b3cf8bbc [ 215.500492][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 215.502692][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 215.505004][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 215.507030][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 215.508941][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.511072][ T4355] Call trace: [ 215.511904][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 215.513653][ T4355] disconnect_work+0x18c/0x324 [ 215.514978][ T4355] process_one_work+0x7ac/0x1404 [ 215.516241][ T4355] worker_thread+0x8e4/0xfec [ 215.517497][ T4355] kthread+0x250/0x2d8 [ 215.518417][ T4355] ret_from_fork+0x10/0x20 [ 215.519590][ T4355] irq event stamp: 254518 [ 215.520784][ T4355] hardirqs last enabled at (254517): [] exit_to_kernel_mode+0xe8/0x118 [ 215.523334][ T4355] hardirqs last disabled at (254518): [] el1_dbg+0x24/0x80 [ 215.525533][ T4355] softirqs last enabled at (254512): [] handle_softirqs+0xb84/0xd58 [ 215.528139][ T4355] softirqs last disabled at (254451): [] __do_softirq+0x14/0x20 [ 215.530588][ T4355] ---[ end trace 0000000000000000 ]--- [ 215.535429][ T4355] ------------[ cut here ]------------ [ 215.536777][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 215.539199][ T4355] Modules linked in: [ 215.540200][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 215.542733][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.545356][ T4355] Workqueue: events disconnect_work [ 215.546846][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.549051][ T4355] pc : disconnect_work+0x270/0x324 [ 215.550330][ T4355] lr : disconnect_work+0x270/0x324 [ 215.551600][ T4355] sp : ffff800021bd7af0 [ 215.552673][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.554847][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000f18f8cd8 [ 215.556942][ T4355] x23: 0000000000000000 x22: ffff0000f18f8ca0 x21: ffff0000f13b8de8 [ 215.559285][ T4355] x20: 1fffe0001e31f192 x19: 0000000000000000 x18: 1fffe0003679f176 [ 215.561351][ T4355] x17: ffff8000159cd000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 215.563521][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 215.565812][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 215.567989][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 215.570101][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 215.572174][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.574305][ T4355] Call trace: [ 215.575166][ T4355] disconnect_work+0x270/0x324 [ 215.576362][ T4355] process_one_work+0x7ac/0x1404 [ 215.577596][ T4355] worker_thread+0x8e4/0xfec [ 215.578808][ T4355] kthread+0x250/0x2d8 [ 215.579913][ T4355] ret_from_fork+0x10/0x20 [ 215.581088][ T4355] irq event stamp: 254632 [ 215.582219][ T4355] hardirqs last enabled at (254631): [] exit_to_kernel_mode+0xe8/0x118 [ 215.584764][ T4355] hardirqs last disabled at (254632): [] el1_dbg+0x24/0x80 [ 215.587311][ T4355] softirqs last enabled at (254626): [] handle_softirqs+0xb84/0xd58 [ 215.589627][ T4355] softirqs last disabled at (254521): [] __do_softirq+0x14/0x20 [ 215.591961][ T4355] ---[ end trace 0000000000000000 ]--- [ 215.598433][ T4355] ------------[ cut here ]------------ [ 215.600074][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 215.602557][ T4355] Modules linked in: [ 215.603244][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 215.605849][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.608499][ T4355] Workqueue: events disconnect_work [ 215.609894][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.611689][ T4355] pc : disconnect_work+0x264/0x324 [ 215.613003][ T4355] lr : disconnect_work+0x264/0x324 [ 215.614230][ T4355] sp : ffff800021bd7af0 [ 215.615261][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.617121][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 215.619141][ T4355] x23: ffff0000f1054c90 x22: ffff0000f1054ca0 x21: ffff0000f1280de8 [ 215.621391][ T4355] x20: 1fffe0001e20a992 x19: 0000000000000000 x18: ffff800021bd7280 [ 215.623366][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: ffff800018589f80 [ 215.625530][ T4355] x14: ffff0000d32b5db8 x13: dfff800000000000 x12: 0000000000000001 [ 215.628011][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 215.630153][ T4355] x8 : ffff0000d32b5340 x7 : 0000000000000000 x6 : 0000000000000000 [ 215.632131][ T4355] x5 : 0000000000000020 x4 : 0000000000000008 x3 : ffff8000082616e4 [ 215.634182][ T4355] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.636290][ T4355] Call trace: [ 215.637138][ T4355] disconnect_work+0x264/0x324 [ 215.638283][ T4355] process_one_work+0x7ac/0x1404 [ 215.639555][ T4355] worker_thread+0x8e4/0xfec [ 215.640627][ T4355] kthread+0x250/0x2d8 [ 215.641706][ T4355] ret_from_fork+0x10/0x20 [ 215.642877][ T4355] irq event stamp: 254864 [ 215.644016][ T4355] hardirqs last enabled at (254863): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 215.646997][ T4355] hardirqs last disabled at (254864): [] el1_dbg+0x24/0x80 [ 215.649407][ T4355] softirqs last enabled at (254856): [] handle_softirqs+0xb84/0xd58 [ 215.651809][ T4355] softirqs last disabled at (254635): [] __do_softirq+0x14/0x20 [ 215.654291][ T4355] ---[ end trace 0000000000000000 ]--- [ 215.658943][ T4355] ------------[ cut here ]------------ [ 215.660296][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 215.663213][ T4355] Modules linked in: [ 215.664186][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 215.666893][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.669583][ T4355] Workqueue: events disconnect_work [ 215.670805][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.672932][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 215.674611][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 215.676323][ T4355] sp : ffff800021bd7a90 [ 215.677309][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.679301][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000f1054cd8 [ 215.681268][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 215.683396][ T4355] x20: 0000000000000000 x19: ffff0000f1054c90 x18: ffff800021bd7280 [ 215.685443][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: ffff800018589f80 [ 215.687542][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 215.689597][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 215.691661][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 215.693634][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 215.695768][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.697888][ T4355] Call trace: [ 215.698598][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 215.700224][ T4355] disconnect_work+0x18c/0x324 [ 215.701370][ T4355] process_one_work+0x7ac/0x1404 [ 215.702719][ T4355] worker_thread+0x8e4/0xfec [ 215.703942][ T4355] kthread+0x250/0x2d8 [ 215.705041][ T4355] ret_from_fork+0x10/0x20 [ 215.706206][ T4355] irq event stamp: 254940 [ 215.707369][ T4355] hardirqs last enabled at (254939): [] exit_to_kernel_mode+0xe8/0x118 [ 215.709887][ T4355] hardirqs last disabled at (254940): [] el1_dbg+0x24/0x80 [ 215.712212][ T4355] softirqs last enabled at (254934): [] handle_softirqs+0xb84/0xd58 [ 215.714669][ T4355] softirqs last disabled at (254867): [] __do_softirq+0x14/0x20 [ 215.716901][ T4355] ---[ end trace 0000000000000000 ]--- [ 215.722085][ T4355] ------------[ cut here ]------------ [ 215.723385][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 215.725735][ T4355] Modules linked in: [ 215.726720][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 215.729018][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.731713][ T4355] Workqueue: events disconnect_work [ 215.732987][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.734926][ T4355] pc : disconnect_work+0x270/0x324 [ 215.736279][ T4355] lr : disconnect_work+0x270/0x324 [ 215.737515][ T4355] sp : ffff800021bd7af0 [ 215.738568][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.740559][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000f1054cd8 [ 215.742704][ T4355] x23: 0000000000000000 x22: ffff0000f1054ca0 x21: ffff0000f1280de8 [ 215.744743][ T4355] x20: 1fffe0001e20a992 x19: 0000000000000000 x18: ffff800021bd7280 [ 215.746773][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 215.748823][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 215.750800][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 215.752892][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 215.754861][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 215.756839][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.758861][ T4355] Call trace: [ 215.759751][ T4355] disconnect_work+0x270/0x324 [ 215.760911][ T4355] process_one_work+0x7ac/0x1404 [ 215.762150][ T4355] worker_thread+0x8e4/0xfec [ 215.763307][ T4355] kthread+0x250/0x2d8 [ 215.764294][ T4355] ret_from_fork+0x10/0x20 [ 215.765520][ T4355] irq event stamp: 255146 [ 215.766736][ T4355] hardirqs last enabled at (255145): [] exit_to_kernel_mode+0xe8/0x118 [ 215.769165][ T4355] hardirqs last disabled at (255146): [] el1_dbg+0x24/0x80 [ 215.771465][ T4355] softirqs last enabled at (255140): [] handle_softirqs+0xb84/0xd58 [ 215.773906][ T4355] softirqs last disabled at (254943): [] __do_softirq+0x14/0x20 [ 215.776034][ T4355] ---[ end trace 0000000000000000 ]--- [ 215.779311][ T4355] ------------[ cut here ]------------ [ 215.780765][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 215.783129][ T4355] Modules linked in: [ 215.784142][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 215.786456][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.788920][ T4355] Workqueue: events disconnect_work [ 215.790304][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.792222][ T4355] pc : disconnect_work+0x264/0x324 [ 215.793489][ T4355] lr : disconnect_work+0x264/0x324 [ 215.794920][ T4355] sp : ffff800021bd7af0 [ 215.795829][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.797813][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 215.799954][ T4355] x23: ffff0000f0f34c90 x22: ffff0000f0f34ca0 x21: ffff0000cd678de8 [ 215.802024][ T4355] x20: 1fffe0001e1e6992 x19: 0000000000000000 x18: ffff800021bd7280 [ 215.804304][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 215.806358][ T4355] x14: 1ffff00002b3a0b0 x13: 1fffe000367a3376 x12: 0000000000000001 [ 215.808488][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 215.810300][ T4355] x8 : ffff0000d32b5340 x7 : 0000000000000000 x6 : 0000000000000000 [ 215.812314][ T4355] x5 : 0000000000000080 x4 : 0000000000000008 x3 : ffff8000082616e4 [ 215.814345][ T4355] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.816266][ T4355] Call trace: [ 215.817006][ T4355] disconnect_work+0x264/0x324 [ 215.818136][ T4355] process_one_work+0x7ac/0x1404 [ 215.819393][ T4355] worker_thread+0x8e4/0xfec [ 215.820616][ T4355] kthread+0x250/0x2d8 [ 215.821619][ T4355] ret_from_fork+0x10/0x20 [ 215.822782][ T4355] irq event stamp: 255344 [ 215.823863][ T4355] hardirqs last enabled at (255343): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 215.826628][ T4355] hardirqs last disabled at (255344): [] el1_dbg+0x24/0x80 [ 215.828717][ T4355] softirqs last enabled at (255336): [] handle_softirqs+0xb84/0xd58 [ 215.831294][ T4355] softirqs last disabled at (255149): [] __do_softirq+0x14/0x20 [ 215.833688][ T4355] ---[ end trace 0000000000000000 ]--- [ 215.838315][ T4355] ------------[ cut here ]------------ [ 215.839888][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 215.842859][ T4355] Modules linked in: [ 215.843892][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 215.846344][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.848834][ T4355] Workqueue: events disconnect_work [ 215.850280][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.852219][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 215.853994][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 215.855711][ T4355] sp : ffff800021bd7a90 [ 215.856868][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.859091][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000f0f34cd8 [ 215.860516][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 215.861878][ T4355] x20: 0000000000000000 x19: ffff0000f0f34c90 x18: ffff800021bd7280 [ 215.863204][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 215.864518][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 215.866681][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 215.868835][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 215.871113][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 215.873265][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.875391][ T4355] Call trace: [ 215.876211][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 215.877850][ T4355] disconnect_work+0x18c/0x324 [ 215.879121][ T4355] process_one_work+0x7ac/0x1404 [ 215.880397][ T4355] worker_thread+0x8e4/0xfec [ 215.881554][ T4355] kthread+0x250/0x2d8 [ 215.882592][ T4355] ret_from_fork+0x10/0x20 [ 215.883680][ T4355] irq event stamp: 255424 [ 215.884678][ T4355] hardirqs last enabled at (255423): [] exit_to_kernel_mode+0xe8/0x118 [ 215.887310][ T4355] hardirqs last disabled at (255424): [] el1_dbg+0x24/0x80 [ 215.889501][ T4355] softirqs last enabled at (255418): [] handle_softirqs+0xb84/0xd58 [ 215.892064][ T4355] softirqs last disabled at (255347): [] __do_softirq+0x14/0x20 [ 215.894336][ T4355] ---[ end trace 0000000000000000 ]--- [ 215.897400][ T4355] ------------[ cut here ]------------ [ 215.898642][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 215.900952][ T4355] Modules linked in: [ 215.902007][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 215.904169][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.906676][ T4355] Workqueue: events disconnect_work [ 215.908010][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.910022][ T4355] pc : disconnect_work+0x270/0x324 [ 215.911228][ T4355] lr : disconnect_work+0x270/0x324 [ 215.912559][ T4355] sp : ffff800021bd7af0 [ 215.913671][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.915780][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000f0f34cd8 [ 215.917732][ T4355] x23: 0000000000000000 x22: ffff0000f0f34ca0 x21: ffff0000cd678de8 [ 215.919796][ T4355] x20: 1fffe0001e1e6992 x19: 0000000000000000 x18: ffff800021bd7280 [ 215.921952][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 215.924114][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 215.926043][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 215.928081][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 215.930399][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 215.932456][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.934529][ T4355] Call trace: [ 215.935350][ T4355] disconnect_work+0x270/0x324 [ 215.936637][ T4355] process_one_work+0x7ac/0x1404 [ 215.937948][ T4355] worker_thread+0x8e4/0xfec [ 215.939185][ T4355] kthread+0x250/0x2d8 [ 215.940260][ T4355] ret_from_fork+0x10/0x20 [ 215.941515][ T4355] irq event stamp: 255678 [ 215.942673][ T4355] hardirqs last enabled at (255677): [] exit_to_kernel_mode+0xe8/0x118 [ 215.945328][ T4355] hardirqs last disabled at (255678): [] el1_dbg+0x24/0x80 [ 215.947684][ T4355] softirqs last enabled at (255672): [] handle_softirqs+0xb84/0xd58 [ 215.950230][ T4355] softirqs last disabled at (255427): [] __do_softirq+0x14/0x20 [ 215.952646][ T4355] ---[ end trace 0000000000000000 ]--- [ 215.961108][ T4355] ------------[ cut here ]------------ [ 215.962324][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 215.964740][ T4355] Modules linked in: [ 215.965645][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 215.968019][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.970456][ T4355] Workqueue: events disconnect_work [ 215.971897][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 215.973871][ T4355] pc : disconnect_work+0x264/0x324 [ 215.975368][ T4355] lr : disconnect_work+0x264/0x324 [ 215.976891][ T4355] sp : ffff800021bd7af0 [ 215.977958][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 215.979880][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 215.982047][ T4355] x23: ffff0000f0eb4c90 x22: ffff0000f0eb4ca0 x21: ffff0000cc9e0de8 [ 215.984141][ T4355] x20: 1fffe0001e1d6992 x19: 0000000000000000 x18: ffff800021bd7280 [ 215.986235][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 215.988662][ T4355] x14: 1ffff00002b3a0b0 x13: 1fffe000367a3376 x12: 0000000000000001 [ 215.990869][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 215.993026][ T4355] x8 : ffff0000d32b5340 x7 : 0000000000000000 x6 : 0000000000000000 [ 215.994973][ T4355] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff8000082616e4 [ 215.996931][ T4355] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 215.999031][ T4355] Call trace: [ 215.999899][ T4355] disconnect_work+0x264/0x324 [ 216.001007][ T4355] process_one_work+0x7ac/0x1404 [ 216.002274][ T4355] worker_thread+0x8e4/0xfec [ 216.003639][ T4355] kthread+0x250/0x2d8 [ 216.004915][ T4355] ret_from_fork+0x10/0x20 [ 216.006257][ T4355] irq event stamp: 255758 [ 216.007470][ T4355] hardirqs last enabled at (255757): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 216.010384][ T4355] hardirqs last disabled at (255758): [] el1_dbg+0x24/0x80 [ 216.012754][ T4355] softirqs last enabled at (255750): [] handle_softirqs+0xb84/0xd58 [ 216.015228][ T4355] softirqs last disabled at (255681): [] __do_softirq+0x14/0x20 [ 216.017865][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.021121][ T4355] ------------[ cut here ]------------ [ 216.022485][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 216.025266][ T4355] Modules linked in: [ 216.026215][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.028720][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.031415][ T4355] Workqueue: events disconnect_work [ 216.032773][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.034699][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 216.036481][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 216.038413][ T4355] sp : ffff800021bd7a90 [ 216.039537][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 216.041586][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000f0eb4cd8 [ 216.043523][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 216.045673][ T4355] x20: 0000000000000000 x19: ffff0000f0eb4c90 x18: ffff800021bd7280 [ 216.047604][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 216.049646][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 216.051702][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 216.053876][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 216.055964][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 216.057907][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.059791][ T4355] Call trace: [ 216.060534][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 216.062070][ T4355] disconnect_work+0x18c/0x324 [ 216.063400][ T4355] process_one_work+0x7ac/0x1404 [ 216.064571][ T4355] worker_thread+0x8e4/0xfec [ 216.065842][ T4355] kthread+0x250/0x2d8 [ 216.066796][ T4355] ret_from_fork+0x10/0x20 [ 216.067955][ T4355] irq event stamp: 256070 [ 216.069099][ T4355] hardirqs last enabled at (256069): [] exit_to_kernel_mode+0xe8/0x118 [ 216.071616][ T4355] hardirqs last disabled at (256070): [] el1_dbg+0x24/0x80 [ 216.073898][ T4355] softirqs last enabled at (256064): [] handle_softirqs+0xb84/0xd58 [ 216.076376][ T4355] softirqs last disabled at (255761): [] __do_softirq+0x14/0x20 [ 216.078625][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.080916][ T4355] ------------[ cut here ]------------ [ 216.082397][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 216.084564][ T4355] Modules linked in: [ 216.085622][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.088206][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.090613][ T4355] Workqueue: events disconnect_work [ 216.091937][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.093981][ T4355] pc : disconnect_work+0x270/0x324 [ 216.095206][ T4355] lr : disconnect_work+0x270/0x324 [ 216.096632][ T4355] sp : ffff800021bd7af0 [ 216.097623][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 216.099799][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000f0eb4cd8 [ 216.101897][ T4355] x23: 0000000000000000 x22: ffff0000f0eb4ca0 x21: ffff0000cc9e0de8 [ 216.104032][ T4355] x20: 1fffe0001e1d6992 x19: 0000000000000000 x18: ffff800021bd7280 [ 216.106132][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 216.108199][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 216.110382][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 216.112610][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 216.114677][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 216.116864][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.119128][ T4355] Call trace: [ 216.120059][ T4355] disconnect_work+0x270/0x324 [ 216.121207][ T4355] process_one_work+0x7ac/0x1404 [ 216.122584][ T4355] worker_thread+0x8e4/0xfec [ 216.123844][ T4355] kthread+0x250/0x2d8 [ 216.124756][ T4355] ret_from_fork+0x10/0x20 [ 216.125888][ T4355] irq event stamp: 256158 [ 216.127061][ T4355] hardirqs last enabled at (256157): [] exit_to_kernel_mode+0xe8/0x118 [ 216.129767][ T4355] hardirqs last disabled at (256158): [] el1_dbg+0x24/0x80 [ 216.132058][ T4355] softirqs last enabled at (256152): [] handle_softirqs+0xb84/0xd58 [ 216.134774][ T4355] softirqs last disabled at (256073): [] __do_softirq+0x14/0x20 [ 216.137298][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.139437][ T4302] Bluetooth: hci7: command tx timeout [ 216.139457][ T4303] Bluetooth: hci8: command tx timeout [ 216.142146][ T4355] ------------[ cut here ]------------ [ 216.143679][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 216.146101][ T4355] Modules linked in: [ 216.147150][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.149663][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.152259][ T4355] Workqueue: events disconnect_work [ 216.153714][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.155797][ T4355] pc : disconnect_work+0x264/0x324 [ 216.157157][ T4355] lr : disconnect_work+0x264/0x324 [ 216.158513][ T4355] sp : ffff800021bd7af0 [ 216.159618][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 216.161762][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 216.163775][ T4355] x23: ffff0000c45f6000 x22: ffff0000c45f6010 x21: ffff0000d10fcde8 [ 216.165853][ T4355] x20: 1fffe000188bec00 x19: 0000000000000000 x18: ffff800021bd7280 [ 216.167891][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 216.169884][ T4355] x14: 1ffff00002b3a0b0 x13: 1fffe000367a3376 x12: 0000000000000001 [ 216.172048][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 216.174064][ T4355] x8 : ffff0000d32b5340 x7 : 0000000000000000 x6 : 0000000000000000 [ 216.176151][ T4355] x5 : 0000000000000080 x4 : 0000000000000008 x3 : ffff8000082616e4 [ 216.178252][ T4355] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.180243][ T4355] Call trace: [ 216.181107][ T4355] disconnect_work+0x264/0x324 [ 216.182391][ T4355] process_one_work+0x7ac/0x1404 [ 216.183712][ T4355] worker_thread+0x8e4/0xfec [ 216.184953][ T4355] kthread+0x250/0x2d8 [ 216.185995][ T4355] ret_from_fork+0x10/0x20 [ 216.187116][ T4355] irq event stamp: 256428 [ 216.188245][ T4355] hardirqs last enabled at (256427): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 216.190978][ T4355] hardirqs last disabled at (256428): [] el1_dbg+0x24/0x80 [ 216.193461][ T4355] softirqs last enabled at (256420): [] handle_softirqs+0xb84/0xd58 [ 216.195946][ T4355] softirqs last disabled at (256161): [] __do_softirq+0x14/0x20 [ 216.198522][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.201184][ T4355] ------------[ cut here ]------------ [ 216.202624][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 216.205400][ T4355] Modules linked in: [ 216.206463][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.208785][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.211413][ T4355] Workqueue: events disconnect_work [ 216.212833][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.214960][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 216.216625][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 216.218352][ T4355] sp : ffff800021bd7a90 [ 216.219346][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 216.221388][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000c45f6048 [ 216.223295][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 216.225421][ T4355] x20: 0000000000000000 x19: ffff0000c45f6000 x18: ffff800021bd7280 [ 216.227432][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 216.229393][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 216.231455][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 216.233365][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 216.235414][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 216.237437][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.239454][ T4355] Call trace: [ 216.240379][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 216.242070][ T4355] disconnect_work+0x18c/0x324 [ 216.243237][ T4355] process_one_work+0x7ac/0x1404 [ 216.244292][ T4355] worker_thread+0x8e4/0xfec [ 216.245311][ T4355] kthread+0x250/0x2d8 [ 216.246326][ T4355] ret_from_fork+0x10/0x20 [ 216.247541][ T4355] irq event stamp: 256656 [ 216.248669][ T4355] hardirqs last enabled at (256655): [] exit_to_kernel_mode+0xe8/0x118 [ 216.251256][ T4355] hardirqs last disabled at (256656): [] el1_dbg+0x24/0x80 [ 216.253544][ T4355] softirqs last enabled at (256650): [] handle_softirqs+0xb84/0xd58 [ 216.255912][ T4355] softirqs last disabled at (256433): [] __do_softirq+0x14/0x20 [ 216.258254][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.260403][ T4355] ------------[ cut here ]------------ [ 216.261754][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 216.264013][ T4355] Modules linked in: [ 216.264991][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.267403][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.269949][ T4355] Workqueue: events disconnect_work [ 216.271221][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.273266][ T4355] pc : disconnect_work+0x270/0x324 [ 216.274574][ T4355] lr : disconnect_work+0x270/0x324 [ 216.275905][ T4355] sp : ffff800021bd7af0 [ 216.276928][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 216.279137][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000c45f6048 [ 216.281227][ T4355] x23: 0000000000000000 x22: ffff0000c45f6010 x21: ffff0000d10fcde8 [ 216.283401][ T4355] x20: 1fffe000188bec00 x19: 0000000000000000 x18: ffff800021bd7280 [ 216.285608][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 216.287562][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 216.289543][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 216.291457][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 216.293840][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 216.296037][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.298482][ T4355] Call trace: [ 216.299321][ T4355] disconnect_work+0x270/0x324 [ 216.300635][ T4355] process_one_work+0x7ac/0x1404 [ 216.301880][ T4355] worker_thread+0x8e4/0xfec [ 216.303086][ T4355] kthread+0x250/0x2d8 [ 216.304130][ T4355] ret_from_fork+0x10/0x20 [ 216.305278][ T4355] irq event stamp: 256734 [ 216.306528][ T4355] hardirqs last enabled at (256733): [] exit_to_kernel_mode+0xe8/0x118 [ 216.309263][ T4355] hardirqs last disabled at (256734): [] el1_dbg+0x24/0x80 [ 216.311836][ T4355] softirqs last enabled at (256728): [] handle_softirqs+0xb84/0xd58 [ 216.314258][ T4355] softirqs last disabled at (256659): [] __do_softirq+0x14/0x20 [ 216.316543][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.319285][ T4355] ------------[ cut here ]------------ [ 216.320819][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 216.323334][ T4355] Modules linked in: [ 216.324607][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.327155][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.329793][ T4355] Workqueue: events disconnect_work [ 216.331102][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.333314][ T4355] pc : disconnect_work+0x264/0x324 [ 216.334668][ T4355] lr : disconnect_work+0x264/0x324 [ 216.335947][ T4355] sp : ffff800021bd7af0 [ 216.337017][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 216.339050][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 216.341020][ T4355] x23: ffff0000dc7ac000 x22: ffff0000dc7ac010 x21: ffff0000d10fcde8 [ 216.342979][ T4355] x20: 1fffe0001b8f5800 x19: 0000000000000000 x18: ffff800021bd7280 [ 216.344947][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 216.347090][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000000001 [ 216.349131][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 216.351266][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 216.353565][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 216.355814][ T4355] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.358009][ T4355] Call trace: [ 216.358804][ T4355] disconnect_work+0x264/0x324 [ 216.360068][ T4355] process_one_work+0x7ac/0x1404 [ 216.361302][ T4355] worker_thread+0x8e4/0xfec [ 216.362461][ T4355] kthread+0x250/0x2d8 [ 216.363552][ T4355] ret_from_fork+0x10/0x20 [ 216.364770][ T4355] irq event stamp: 256924 [ 216.365967][ T4355] hardirqs last enabled at (256923): [] exit_to_kernel_mode+0xe8/0x118 [ 216.368566][ T4355] hardirqs last disabled at (256924): [] el1_dbg+0x24/0x80 [ 216.371087][ T4355] softirqs last enabled at (256918): [] handle_softirqs+0xb84/0xd58 [ 216.373635][ T4355] softirqs last disabled at (256739): [] __do_softirq+0x14/0x20 [ 216.376047][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.378082][ T4355] ------------[ cut here ]------------ [ 216.379666][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 216.382582][ T4355] Modules linked in: [ 216.383662][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.386180][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.388907][ T4355] Workqueue: events disconnect_work [ 216.390222][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.392264][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 216.394110][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 216.395858][ T4355] sp : ffff800021bd7a90 [ 216.396861][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 216.398862][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000dc7ac048 [ 216.401108][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 216.403110][ T4355] x20: 0000000000000000 x19: ffff0000dc7ac000 x18: ffff800021bd7280 [ 216.405170][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 216.407399][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 216.409440][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 216.411636][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 216.413742][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 216.415846][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.418043][ T4355] Call trace: [ 216.418842][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 216.420354][ T4355] disconnect_work+0x18c/0x324 [ 216.421677][ T4355] process_one_work+0x7ac/0x1404 [ 216.422952][ T4355] worker_thread+0x8e4/0xfec [ 216.424244][ T4355] kthread+0x250/0x2d8 [ 216.425370][ T4355] ret_from_fork+0x10/0x20 [ 216.426545][ T4355] irq event stamp: 257010 [ 216.427683][ T4355] hardirqs last enabled at (257009): [] exit_to_kernel_mode+0xe8/0x118 [ 216.430196][ T4355] hardirqs last disabled at (257010): [] el1_dbg+0x24/0x80 [ 216.432569][ T4355] softirqs last enabled at (257004): [] handle_softirqs+0xb84/0xd58 [ 216.435435][ T4355] softirqs last disabled at (256927): [] __do_softirq+0x14/0x20 [ 216.437957][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.440652][ T4355] ------------[ cut here ]------------ [ 216.442093][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 216.444486][ T4355] Modules linked in: [ 216.445484][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.448065][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.450624][ T4355] Workqueue: events disconnect_work [ 216.452077][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.454127][ T4355] pc : disconnect_work+0x270/0x324 [ 216.455493][ T4355] lr : disconnect_work+0x270/0x324 [ 216.456935][ T4355] sp : ffff800021bd7af0 [ 216.457941][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 216.460233][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000dc7ac048 [ 216.462304][ T4355] x23: 0000000000000000 x22: ffff0000dc7ac010 x21: ffff0000d10fcde8 [ 216.464201][ T4355] x20: 1fffe0001b8f5800 x19: 0000000000000000 x18: ffff800021bd7280 [ 216.466236][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 216.468409][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 216.470568][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 216.472568][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 216.474507][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 216.476627][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.478641][ T4355] Call trace: [ 216.479370][ T4355] disconnect_work+0x270/0x324 [ 216.480623][ T4355] process_one_work+0x7ac/0x1404 [ 216.481825][ T4355] worker_thread+0x8e4/0xfec [ 216.482896][ T4355] kthread+0x250/0x2d8 [ 216.483966][ T4355] ret_from_fork+0x10/0x20 [ 216.485093][ T4355] irq event stamp: 257314 [ 216.486277][ T4355] hardirqs last enabled at (257313): [] exit_to_kernel_mode+0xe8/0x118 [ 216.488838][ T4355] hardirqs last disabled at (257314): [] el1_dbg+0x24/0x80 [ 216.491207][ T4355] softirqs last enabled at (257312): [] handle_softirqs+0xb84/0xd58 [ 216.493623][ T4355] softirqs last disabled at (257013): [] __do_softirq+0x14/0x20 [ 216.496010][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.498401][ T4355] ------------[ cut here ]------------ [ 216.499775][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 216.502024][ T4355] Modules linked in: [ 216.503179][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.505806][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.508344][ T4355] Workqueue: events disconnect_work [ 216.509750][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.511599][ T4355] pc : disconnect_work+0x264/0x324 [ 216.512970][ T4355] lr : disconnect_work+0x264/0x324 [ 216.514348][ T4355] sp : ffff800021bd7af0 [ 216.515353][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 216.517488][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 216.519470][ T4355] x23: ffff0000d4786000 x22: ffff0000d4786010 x21: ffff0000d10fcde8 [ 216.521610][ T4355] x20: 1fffe0001a8f0c00 x19: 0000000000000000 x18: ffff800021bd7280 [ 216.523748][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 216.525811][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000000001 [ 216.527765][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 216.529824][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 216.531763][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 216.533713][ T4355] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.535761][ T4355] Call trace: [ 216.536579][ T4355] disconnect_work+0x264/0x324 [ 216.537820][ T4355] process_one_work+0x7ac/0x1404 [ 216.539091][ T4355] worker_thread+0x8e4/0xfec [ 216.540333][ T4355] kthread+0x250/0x2d8 [ 216.541336][ T4355] ret_from_fork+0x10/0x20 [ 216.542394][ T4355] irq event stamp: 257576 [ 216.543454][ T4355] hardirqs last enabled at (257575): [] exit_to_kernel_mode+0xe8/0x118 [ 216.545916][ T4355] hardirqs last disabled at (257576): [] el1_dbg+0x24/0x80 [ 216.548025][ T4355] softirqs last enabled at (257574): [] handle_softirqs+0xb84/0xd58 [ 216.550514][ T4355] softirqs last disabled at (257319): [] __do_softirq+0x14/0x20 [ 216.552873][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.554969][ T4355] ------------[ cut here ]------------ [ 216.556340][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 216.558811][ T4355] Modules linked in: [ 216.559817][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.562226][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.564766][ T4355] Workqueue: events disconnect_work [ 216.566173][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.568057][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 216.569678][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 216.571439][ T4355] sp : ffff800021bd7a90 [ 216.572598][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 216.574747][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000d4786048 [ 216.576921][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 216.579037][ T4355] x20: 0000000000000000 x19: ffff0000d4786000 x18: ffff800021bd7280 [ 216.581094][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 216.583242][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 216.585206][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 216.587291][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 216.589321][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 216.591463][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.593407][ T4355] Call trace: [ 216.594299][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 216.596000][ T4355] disconnect_work+0x18c/0x324 [ 216.597234][ T4355] process_one_work+0x7ac/0x1404 [ 216.598465][ T4355] worker_thread+0x8e4/0xfec [ 216.599536][ T4355] kthread+0x250/0x2d8 [ 216.600559][ T4355] ret_from_fork+0x10/0x20 [ 216.601596][ T4355] irq event stamp: 257652 [ 216.602631][ T4355] hardirqs last enabled at (257651): [] exit_to_kernel_mode+0xe8/0x118 [ 216.605160][ T4355] hardirqs last disabled at (257652): [] el1_dbg+0x24/0x80 [ 216.607334][ T4355] softirqs last enabled at (257650): [] handle_softirqs+0xb84/0xd58 [ 216.609724][ T4355] softirqs last disabled at (257579): [] __do_softirq+0x14/0x20 [ 216.612110][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.614790][ T4355] ------------[ cut here ]------------ [ 216.616115][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 216.618645][ T4355] Modules linked in: [ 216.619736][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.622226][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.624866][ T4355] Workqueue: events disconnect_work [ 216.626297][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.628323][ T4355] pc : disconnect_work+0x270/0x324 [ 216.629677][ T4355] lr : disconnect_work+0x270/0x324 [ 216.630969][ T4355] sp : ffff800021bd7af0 [ 216.632080][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 216.634142][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000d4786048 [ 216.636323][ T4355] x23: 0000000000000000 x22: ffff0000d4786010 x21: ffff0000d10fcde8 [ 216.638436][ T4355] x20: 1fffe0001a8f0c00 x19: 0000000000000000 x18: ffff800021bd7280 [ 216.640832][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 216.643047][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 216.645029][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 216.647092][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 216.649086][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 216.651144][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.653172][ T4355] Call trace: [ 216.653992][ T4355] disconnect_work+0x270/0x324 [ 216.655354][ T4355] process_one_work+0x7ac/0x1404 [ 216.656529][ T4355] worker_thread+0x8e4/0xfec [ 216.657777][ T4355] kthread+0x250/0x2d8 [ 216.658823][ T4355] ret_from_fork+0x10/0x20 [ 216.660110][ T4355] irq event stamp: 257968 [ 216.661314][ T4355] hardirqs last enabled at (257967): [] exit_to_kernel_mode+0xe8/0x118 [ 216.663928][ T4355] hardirqs last disabled at (257968): [] el1_dbg+0x24/0x80 [ 216.666343][ T4355] softirqs last enabled at (257966): [] handle_softirqs+0xb84/0xd58 [ 216.668931][ T4355] softirqs last disabled at (257655): [] __do_softirq+0x14/0x20 [ 216.671351][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.672946][ T4296] Bluetooth: hci1: command tx timeout [ 216.675923][ T4355] ------------[ cut here ]------------ [ 216.677355][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 216.679638][ T4355] Modules linked in: [ 216.680578][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.683091][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.685703][ T4355] Workqueue: events disconnect_work [ 216.687118][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.689225][ T4355] pc : disconnect_work+0x264/0x324 [ 216.690519][ T4355] lr : disconnect_work+0x264/0x324 [ 216.691447][ T4355] sp : ffff800021bd7af0 [ 216.692122][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 216.693435][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 216.694743][ T4355] x23: ffff0000f3182000 x22: ffff0000f3182010 x21: ffff0000d10fcde8 [ 216.696488][ T4355] x20: 1fffe0001e630400 x19: 0000000000000000 x18: ffff800021bd7280 [ 216.698514][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 216.700567][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000000001 [ 216.702645][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 216.704823][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 216.706852][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 216.708898][ T4355] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.710821][ T4355] Call trace: [ 216.711619][ T4355] disconnect_work+0x264/0x324 [ 216.712791][ T4355] process_one_work+0x7ac/0x1404 [ 216.714129][ T4355] worker_thread+0x8e4/0xfec [ 216.715299][ T4355] kthread+0x250/0x2d8 [ 216.716420][ T4355] ret_from_fork+0x10/0x20 [ 216.717557][ T4355] irq event stamp: 258058 [ 216.718578][ T4355] hardirqs last enabled at (258057): [] exit_to_kernel_mode+0xe8/0x118 [ 216.720957][ T4355] hardirqs last disabled at (258058): [] el1_dbg+0x24/0x80 [ 216.723157][ T4355] softirqs last enabled at (258052): [] handle_softirqs+0xb84/0xd58 [ 216.725705][ T4355] softirqs last disabled at (257971): [] __do_softirq+0x14/0x20 [ 216.728102][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.733243][ T4355] ------------[ cut here ]------------ [ 216.734598][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 216.737376][ T4355] Modules linked in: [ 216.738428][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.739595][ T4303] Bluetooth: hci5: command tx timeout [ 216.741056][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.744982][ T4355] Workqueue: events disconnect_work [ 216.746292][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.748498][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 216.750252][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 216.752031][ T4355] sp : ffff800021bd7a90 [ 216.753109][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 216.755202][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000f3182048 [ 216.757458][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 216.759461][ T4355] x20: 0000000000000000 x19: ffff0000f3182000 x18: ffff800021bd7280 [ 216.761676][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 216.763740][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 216.765875][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 216.768017][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 216.770043][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 216.772222][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.774284][ T4355] Call trace: [ 216.775085][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 216.776606][ T4355] disconnect_work+0x18c/0x324 [ 216.777797][ T4355] process_one_work+0x7ac/0x1404 [ 216.779012][ T4355] worker_thread+0x8e4/0xfec [ 216.780209][ T4355] kthread+0x250/0x2d8 [ 216.781309][ T4355] ret_from_fork+0x10/0x20 [ 216.782621][ T4355] irq event stamp: 258270 [ 216.783876][ T4355] hardirqs last enabled at (258269): [] exit_to_kernel_mode+0xe8/0x118 [ 216.786249][ T4355] hardirqs last disabled at (258270): [] el1_dbg+0x24/0x80 [ 216.788445][ T4355] softirqs last enabled at (258264): [] handle_softirqs+0xb84/0xd58 [ 216.791021][ T4355] softirqs last disabled at (258061): [] __do_softirq+0x14/0x20 [ 216.793572][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.806969][ T4355] ------------[ cut here ]------------ [ 216.808262][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 216.810672][ T4355] Modules linked in: [ 216.811651][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.814201][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.816910][ T4355] Workqueue: events disconnect_work [ 216.818474][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.820583][ T4355] pc : disconnect_work+0x270/0x324 [ 216.821978][ T4355] lr : disconnect_work+0x270/0x324 [ 216.823253][ T4355] sp : ffff800021bd7af0 [ 216.824287][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 216.826562][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000f3182048 [ 216.828635][ T4355] x23: 0000000000000000 x22: ffff0000f3182010 x21: ffff0000d10fcde8 [ 216.830783][ T4355] x20: 1fffe0001e630400 x19: 0000000000000000 x18: ffff800021bd7280 [ 216.832849][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 216.835088][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 216.837146][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 216.839282][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 216.841310][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 216.843426][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.845660][ T4355] Call trace: [ 216.846576][ T4355] disconnect_work+0x270/0x324 [ 216.847805][ T4355] process_one_work+0x7ac/0x1404 [ 216.849080][ T4355] worker_thread+0x8e4/0xfec [ 216.850324][ T4355] kthread+0x250/0x2d8 [ 216.851473][ T4355] ret_from_fork+0x10/0x20 [ 216.852614][ T4355] irq event stamp: 258362 [ 216.853643][ T4355] hardirqs last enabled at (258361): [] exit_to_kernel_mode+0xe8/0x118 [ 216.856158][ T4355] hardirqs last disabled at (258362): [] el1_dbg+0x24/0x80 [ 216.858481][ T4355] softirqs last enabled at (258356): [] handle_softirqs+0xb84/0xd58 [ 216.860970][ T4355] softirqs last disabled at (258273): [] __do_softirq+0x14/0x20 [ 216.863367][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.865026][ T4303] Bluetooth: hci6: command tx timeout [ 216.865695][ T4355] ------------[ cut here ]------------ [ 216.867448][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 216.869902][ T4355] Modules linked in: [ 216.870959][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.873547][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.876266][ T4355] Workqueue: events disconnect_work [ 216.877496][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.879448][ T4355] pc : disconnect_work+0x264/0x324 [ 216.880875][ T4355] lr : disconnect_work+0x264/0x324 [ 216.882339][ T4355] sp : ffff800021bd7af0 [ 216.883136][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 216.884947][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 216.887368][ T4355] x23: ffff0000dbfa2000 x22: ffff0000dbfa2010 x21: ffff0000d10fcde8 [ 216.889580][ T4355] x20: 1fffe0001b7f4400 x19: 0000000000000000 x18: ffff800021bd7280 [ 216.891883][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 216.893728][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000000001 [ 216.895521][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 216.897447][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 216.899242][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 216.901096][ T4355] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.902989][ T4355] Call trace: [ 216.903599][ T4355] disconnect_work+0x264/0x324 [ 216.904561][ T4355] process_one_work+0x7ac/0x1404 [ 216.905564][ T4355] worker_thread+0x8e4/0xfec [ 216.906572][ T4355] kthread+0x250/0x2d8 [ 216.907499][ T4355] ret_from_fork+0x10/0x20 [ 216.908485][ T4355] irq event stamp: 258426 [ 216.909601][ T4355] hardirqs last enabled at (258425): [] exit_to_kernel_mode+0xe8/0x118 [ 216.912224][ T4355] hardirqs last disabled at (258426): [] el1_dbg+0x24/0x80 [ 216.914363][ T4355] softirqs last enabled at (258420): [] handle_softirqs+0xb84/0xd58 [ 216.916924][ T4355] softirqs last disabled at (258365): [] __do_softirq+0x14/0x20 [ 216.919381][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.924147][ T4355] ------------[ cut here ]------------ [ 216.925613][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 216.928358][ T4355] Modules linked in: [ 216.929378][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.931835][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.934516][ T4355] Workqueue: events disconnect_work [ 216.935757][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.937763][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 216.939467][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 216.941204][ T4355] sp : ffff800021bd7a90 [ 216.942320][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 216.944322][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000dbfa2048 [ 216.946552][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 216.948721][ T4355] x20: 0000000000000000 x19: ffff0000dbfa2000 x18: ffff800021bd7280 [ 216.950712][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 216.952811][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 216.954836][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 216.956888][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 216.958893][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 216.960962][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.962816][ T4355] Call trace: [ 216.963664][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 216.965179][ T4355] disconnect_work+0x18c/0x324 [ 216.966447][ T4355] process_one_work+0x7ac/0x1404 [ 216.967666][ T4355] worker_thread+0x8e4/0xfec [ 216.968801][ T4355] kthread+0x250/0x2d8 [ 216.970136][ T4355] ret_from_fork+0x10/0x20 [ 216.971322][ T4355] irq event stamp: 258744 [ 216.972438][ T4355] hardirqs last enabled at (258743): [] exit_to_kernel_mode+0xe8/0x118 [ 216.974955][ T4355] hardirqs last disabled at (258744): [] el1_dbg+0x24/0x80 [ 216.977346][ T4355] softirqs last enabled at (258738): [] handle_softirqs+0xb84/0xd58 [ 216.979907][ T4355] softirqs last disabled at (258431): [] __do_softirq+0x14/0x20 [ 216.982099][ T4355] ---[ end trace 0000000000000000 ]--- [ 216.986818][ T4355] ------------[ cut here ]------------ [ 216.988026][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 216.990466][ T4355] Modules linked in: [ 216.991569][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 216.994015][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.996709][ T4355] Workqueue: events disconnect_work [ 216.998056][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.000111][ T4355] pc : disconnect_work+0x270/0x324 [ 217.001386][ T4355] lr : disconnect_work+0x270/0x324 [ 217.002833][ T4355] sp : ffff800021bd7af0 [ 217.003923][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.005958][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000dbfa2048 [ 217.008075][ T4355] x23: 0000000000000000 x22: ffff0000dbfa2010 x21: ffff0000d10fcde8 [ 217.010090][ T4355] x20: 1fffe0001b7f4400 x19: 0000000000000000 x18: ffff800021bd7280 [ 217.011806][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.013823][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 217.015829][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 217.018059][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.020106][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 217.022206][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.024475][ T4355] Call trace: [ 217.025188][ T4355] disconnect_work+0x270/0x324 [ 217.026537][ T4355] process_one_work+0x7ac/0x1404 [ 217.027888][ T4355] worker_thread+0x8e4/0xfec [ 217.029090][ T4355] kthread+0x250/0x2d8 [ 217.030171][ T4355] ret_from_fork+0x10/0x20 [ 217.031380][ T4355] irq event stamp: 258844 [ 217.032436][ T4355] hardirqs last enabled at (258843): [] exit_to_kernel_mode+0xe8/0x118 [ 217.034979][ T4355] hardirqs last disabled at (258844): [] el1_dbg+0x24/0x80 [ 217.037188][ T4355] softirqs last enabled at (258838): [] handle_softirqs+0xb84/0xd58 [ 217.039922][ T4355] softirqs last disabled at (258747): [] __do_softirq+0x14/0x20 [ 217.042319][ T4355] ---[ end trace 0000000000000000 ]--- [ 217.048350][ T4355] ------------[ cut here ]------------ [ 217.049826][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 217.052061][ T4355] Modules linked in: [ 217.053070][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 217.055638][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.058118][ T4355] Workqueue: events disconnect_work [ 217.059530][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.061649][ T4355] pc : disconnect_work+0x264/0x324 [ 217.063036][ T4355] lr : disconnect_work+0x264/0x324 [ 217.064345][ T4355] sp : ffff800021bd7af0 [ 217.065423][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.067714][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 217.069881][ T4355] x23: ffff0000ef964000 x22: ffff0000ef964010 x21: ffff0000d10fcde8 [ 217.072029][ T4355] x20: 1fffe0001df2c800 x19: 0000000000000000 x18: ffff800021bd7280 [ 217.074092][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.076373][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000000001 [ 217.078425][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 217.080540][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.082725][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 217.084813][ T4355] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.086740][ T4355] Call trace: [ 217.087520][ T4355] disconnect_work+0x264/0x324 [ 217.088703][ T4355] process_one_work+0x7ac/0x1404 [ 217.090123][ T4355] worker_thread+0x8e4/0xfec [ 217.091405][ T4355] kthread+0x250/0x2d8 [ 217.092969][ T4355] ret_from_fork+0x10/0x20 [ 217.094137][ T4355] irq event stamp: 259030 [ 217.095253][ T4355] hardirqs last enabled at (259029): [] exit_to_kernel_mode+0xe8/0x118 [ 217.097823][ T4355] hardirqs last disabled at (259030): [] el1_dbg+0x24/0x80 [ 217.099979][ T4355] softirqs last enabled at (259024): [] handle_softirqs+0xb84/0xd58 [ 217.102496][ T4355] softirqs last disabled at (258847): [] __do_softirq+0x14/0x20 [ 217.104892][ T4355] ---[ end trace 0000000000000000 ]--- [ 217.118937][ T4355] ------------[ cut here ]------------ [ 217.120347][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 217.123238][ T4355] Modules linked in: [ 217.124342][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 217.126768][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.129442][ T4355] Workqueue: events disconnect_work [ 217.130793][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.132733][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 217.134363][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 217.136150][ T4355] sp : ffff800021bd7a90 [ 217.137157][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.139054][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000ef964048 [ 217.141108][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 217.143081][ T4355] x20: 0000000000000000 x19: ffff0000ef964000 x18: ffff800021bd7280 [ 217.145183][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.147113][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 217.149397][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 217.151572][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.153590][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 217.155794][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.157782][ T4355] Call trace: [ 217.158684][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 217.160274][ T4355] disconnect_work+0x18c/0x324 [ 217.161415][ T4355] process_one_work+0x7ac/0x1404 [ 217.162722][ T4355] worker_thread+0x8e4/0xfec [ 217.163861][ T4355] kthread+0x250/0x2d8 [ 217.164979][ T4355] ret_from_fork+0x10/0x20 [ 217.166000][ T4355] irq event stamp: 259150 [ 217.167076][ T4355] hardirqs last enabled at (259149): [] exit_to_kernel_mode+0xe8/0x118 [ 217.169493][ T4355] hardirqs last disabled at (259150): [] el1_dbg+0x24/0x80 [ 217.171701][ T4355] softirqs last enabled at (259144): [] handle_softirqs+0xb84/0xd58 [ 217.174287][ T4355] softirqs last disabled at (259033): [] __do_softirq+0x14/0x20 [ 217.176685][ T4355] ---[ end trace 0000000000000000 ]--- [ 217.189266][ T4355] ------------[ cut here ]------------ [ 217.190633][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 217.193013][ T4355] Modules linked in: [ 217.194000][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 217.196492][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.199120][ T4355] Workqueue: events disconnect_work [ 217.200437][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.202411][ T4355] pc : disconnect_work+0x270/0x324 [ 217.203703][ T4355] lr : disconnect_work+0x270/0x324 [ 217.205065][ T4355] sp : ffff800021bd7af0 [ 217.206236][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.208339][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000ef964048 [ 217.210329][ T4355] x23: 0000000000000000 x22: ffff0000ef964010 x21: ffff0000d10fcde8 [ 217.212321][ T4355] x20: 1fffe0001df2c800 x19: 0000000000000000 x18: ffff800021bd7280 [ 217.214370][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.216423][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 217.218617][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 217.220763][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.222797][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 217.225068][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.227105][ T4355] Call trace: [ 217.227916][ T4355] disconnect_work+0x270/0x324 [ 217.229203][ T4355] process_one_work+0x7ac/0x1404 [ 217.230442][ T4355] worker_thread+0x8e4/0xfec [ 217.231612][ T4355] kthread+0x250/0x2d8 [ 217.232706][ T4355] ret_from_fork+0x10/0x20 [ 217.233759][ T4355] irq event stamp: 259320 [ 217.234960][ T4355] hardirqs last enabled at (259319): [] exit_to_kernel_mode+0xe8/0x118 [ 217.237724][ T4355] hardirqs last disabled at (259320): [] el1_dbg+0x24/0x80 [ 217.239980][ T4355] softirqs last enabled at (259314): [] handle_softirqs+0xb84/0xd58 [ 217.242330][ T4355] softirqs last disabled at (259153): [] __do_softirq+0x14/0x20 [ 217.244726][ T4355] ---[ end trace 0000000000000000 ]--- [ 217.248597][ T4355] ------------[ cut here ]------------ [ 217.250099][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 217.252430][ T4355] Modules linked in: [ 217.253448][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 217.255988][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.258594][ T4355] Workqueue: events disconnect_work [ 217.259976][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.262041][ T4355] pc : disconnect_work+0x264/0x324 [ 217.263392][ T4355] lr : disconnect_work+0x264/0x324 [ 217.264709][ T4355] sp : ffff800021bd7af0 [ 217.265822][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.267887][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 217.270047][ T4355] x23: ffff0000ef454000 x22: ffff0000ef454010 x21: ffff0000d10fcde8 [ 217.272000][ T4355] x20: 1fffe0001de8a800 x19: 0000000000000000 x18: ffff800021bd7280 [ 217.274101][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.276124][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000000001 [ 217.278430][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 217.280511][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.282673][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 217.284684][ T4355] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.286787][ T4355] Call trace: [ 217.287736][ T4355] disconnect_work+0x264/0x324 [ 217.288955][ T4355] process_one_work+0x7ac/0x1404 [ 217.290251][ T4355] worker_thread+0x8e4/0xfec [ 217.291434][ T4355] kthread+0x250/0x2d8 [ 217.292506][ T4355] ret_from_fork+0x10/0x20 [ 217.293640][ T4355] irq event stamp: 259576 [ 217.294736][ T4355] hardirqs last enabled at (259575): [] exit_to_kernel_mode+0xe8/0x118 [ 217.297387][ T4355] hardirqs last disabled at (259576): [] el1_dbg+0x24/0x80 [ 217.299661][ T4355] softirqs last enabled at (259570): [] handle_softirqs+0xb84/0xd58 [ 217.302270][ T4355] softirqs last disabled at (259323): [] __do_softirq+0x14/0x20 [ 217.304460][ T4355] ---[ end trace 0000000000000000 ]--- [ 217.306942][ T4355] ------------[ cut here ]------------ [ 217.308197][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 217.310695][ T4355] Modules linked in: [ 217.311578][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 217.313958][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.316385][ T4355] Workqueue: events disconnect_work [ 217.317661][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.319600][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 217.321291][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 217.322948][ T4355] sp : ffff800021bd7a90 [ 217.323940][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.326160][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000ef454048 [ 217.328120][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 217.330100][ T4355] x20: 0000000000000000 x19: ffff0000ef454000 x18: ffff800021bd7280 [ 217.332239][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.334215][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 217.336187][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 217.338263][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.340257][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 217.342344][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.344369][ T4355] Call trace: [ 217.345237][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 217.346913][ T4355] disconnect_work+0x18c/0x324 [ 217.348089][ T4355] process_one_work+0x7ac/0x1404 [ 217.349272][ T4355] worker_thread+0x8e4/0xfec [ 217.350438][ T4355] kthread+0x250/0x2d8 [ 217.351553][ T4355] ret_from_fork+0x10/0x20 [ 217.352564][ T4355] irq event stamp: 259628 [ 217.353796][ T4355] hardirqs last enabled at (259627): [] exit_to_kernel_mode+0xe8/0x118 [ 217.356281][ T4355] hardirqs last disabled at (259628): [] el1_dbg+0x24/0x80 [ 217.358513][ T4355] softirqs last enabled at (259622): [] handle_softirqs+0xb84/0xd58 [ 217.360862][ T4355] softirqs last disabled at (259579): [] __do_softirq+0x14/0x20 [ 217.363342][ T4355] ---[ end trace 0000000000000000 ]--- [ 217.366096][ T4355] ------------[ cut here ]------------ [ 217.367366][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 217.369635][ T4355] Modules linked in: [ 217.370555][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 217.373054][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.375639][ T4355] Workqueue: events disconnect_work [ 217.377054][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.379418][ T4355] pc : disconnect_work+0x270/0x324 [ 217.380587][ T4355] lr : disconnect_work+0x270/0x324 [ 217.381923][ T4355] sp : ffff800021bd7af0 [ 217.382853][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.384873][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000ef454048 [ 217.386730][ T4355] x23: 0000000000000000 x22: ffff0000ef454010 x21: ffff0000d10fcde8 [ 217.388755][ T4355] x20: 1fffe0001de8a800 x19: 0000000000000000 x18: ffff800021bd7280 [ 217.390604][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.392609][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 217.394748][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 217.396890][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.398898][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 217.400704][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.402794][ T4355] Call trace: [ 217.403549][ T4355] disconnect_work+0x270/0x324 [ 217.404601][ T4355] process_one_work+0x7ac/0x1404 [ 217.405723][ T4355] worker_thread+0x8e4/0xfec [ 217.406913][ T4355] kthread+0x250/0x2d8 [ 217.407959][ T4355] ret_from_fork+0x10/0x20 [ 217.409152][ T4355] irq event stamp: 259924 [ 217.410317][ T4355] hardirqs last enabled at (259923): [] exit_to_kernel_mode+0xe8/0x118 [ 217.412833][ T4355] hardirqs last disabled at (259924): [] el1_dbg+0x24/0x80 [ 217.414955][ T4355] softirqs last enabled at (259918): [] handle_softirqs+0xb84/0xd58 [ 217.417420][ T4355] softirqs last disabled at (259631): [] __do_softirq+0x14/0x20 [ 217.419969][ T4355] ---[ end trace 0000000000000000 ]--- [ 217.423696][ T4355] ------------[ cut here ]------------ [ 217.425399][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 217.427836][ T4355] Modules linked in: [ 217.428833][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 217.431527][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.434229][ T4355] Workqueue: events disconnect_work [ 217.435602][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.437618][ T4355] pc : disconnect_work+0x264/0x324 [ 217.438976][ T4355] lr : disconnect_work+0x264/0x324 [ 217.440217][ T4355] sp : ffff800021bd7af0 [ 217.441352][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.443505][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 217.445651][ T4355] x23: ffff0000ef3bc000 x22: ffff0000ef3bc010 x21: ffff0000d10fcde8 [ 217.447846][ T4355] x20: 1fffe0001de77800 x19: 0000000000000000 x18: ffff800021bd7280 [ 217.449913][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.452074][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000000001 [ 217.454014][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 217.455914][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.457861][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 217.459848][ T4355] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.461891][ T4355] Call trace: [ 217.462711][ T4355] disconnect_work+0x264/0x324 [ 217.463864][ T4355] process_one_work+0x7ac/0x1404 [ 217.464983][ T4355] worker_thread+0x8e4/0xfec [ 217.466247][ T4355] kthread+0x250/0x2d8 [ 217.467280][ T4355] ret_from_fork+0x10/0x20 [ 217.468447][ T4355] irq event stamp: 260270 [ 217.469551][ T4355] hardirqs last enabled at (260269): [] exit_to_kernel_mode+0xe8/0x118 [ 217.472183][ T4355] hardirqs last disabled at (260270): [] el1_dbg+0x24/0x80 [ 217.474402][ T4355] softirqs last enabled at (260268): [] handle_softirqs+0xb84/0xd58 [ 217.477016][ T4355] softirqs last disabled at (259927): [] __do_softirq+0x14/0x20 [ 217.479473][ T4355] ---[ end trace 0000000000000000 ]--- [ 217.489875][ T4355] ------------[ cut here ]------------ [ 217.491443][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 217.494108][ T4355] Modules linked in: [ 217.495013][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 217.497507][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.500042][ T4355] Workqueue: events disconnect_work [ 217.501467][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.503359][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 217.504994][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 217.506549][ T4355] sp : ffff800021bd7a90 [ 217.507511][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.509588][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000ef3bc048 [ 217.511537][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 217.513689][ T4355] x20: 0000000000000000 x19: ffff0000ef3bc000 x18: ffff800021bd7280 [ 217.515700][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.517627][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 217.519647][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 217.521652][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.523859][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 217.525815][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.527758][ T4355] Call trace: [ 217.528734][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 217.530308][ T4355] disconnect_work+0x18c/0x324 [ 217.531496][ T4355] process_one_work+0x7ac/0x1404 [ 217.532698][ T4355] worker_thread+0x8e4/0xfec [ 217.533725][ T4355] kthread+0x250/0x2d8 [ 217.534700][ T4355] ret_from_fork+0x10/0x20 [ 217.535875][ T4355] irq event stamp: 260378 [ 217.536947][ T4355] hardirqs last enabled at (260377): [] exit_to_kernel_mode+0xe8/0x118 [ 217.539415][ T4355] hardirqs last disabled at (260378): [] el1_dbg+0x24/0x80 [ 217.541766][ T4355] softirqs last enabled at (260372): [] handle_softirqs+0xb84/0xd58 [ 217.544223][ T4355] softirqs last disabled at (260275): [] __do_softirq+0x14/0x20 [ 217.546511][ T4355] ---[ end trace 0000000000000000 ]--- [ 217.549209][ T4355] ------------[ cut here ]------------ [ 217.550626][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 217.552892][ T4355] Modules linked in: [ 217.553705][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 217.555918][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.558644][ T4355] Workqueue: events disconnect_work [ 217.559831][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.562054][ T4355] pc : disconnect_work+0x270/0x324 [ 217.563299][ T4355] lr : disconnect_work+0x270/0x324 [ 217.564752][ T4355] sp : ffff800021bd7af0 [ 217.565859][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.568083][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000ef3bc048 [ 217.570199][ T4355] x23: 0000000000000000 x22: ffff0000ef3bc010 x21: ffff0000d10fcde8 [ 217.572399][ T4355] x20: 1fffe0001de77800 x19: 0000000000000000 x18: ffff800021bd7280 [ 217.574354][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.576411][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 217.578506][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 217.580477][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.582495][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 217.584738][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.586870][ T4355] Call trace: [ 217.587679][ T4355] disconnect_work+0x270/0x324 [ 217.589054][ T4355] process_one_work+0x7ac/0x1404 [ 217.590322][ T4355] worker_thread+0x8e4/0xfec [ 217.591579][ T4355] kthread+0x250/0x2d8 [ 217.592732][ T4355] ret_from_fork+0x10/0x20 [ 217.593933][ T4355] irq event stamp: 260628 [ 217.595164][ T4355] hardirqs last enabled at (260627): [] exit_to_kernel_mode+0xe8/0x118 [ 217.597867][ T4355] hardirqs last disabled at (260628): [] el1_dbg+0x24/0x80 [ 217.600336][ T4355] softirqs last enabled at (260626): [] handle_softirqs+0xb84/0xd58 [ 217.602970][ T4355] softirqs last disabled at (260381): [] __do_softirq+0x14/0x20 [ 217.605358][ T4355] ---[ end trace 0000000000000000 ]--- [ 217.607554][ T4355] ------------[ cut here ]------------ [ 217.608956][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 217.611313][ T4355] Modules linked in: [ 217.612380][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 217.615024][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.617694][ T4355] Workqueue: events disconnect_work [ 217.619165][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.621309][ T4355] pc : disconnect_work+0x264/0x324 [ 217.622712][ T4355] lr : disconnect_work+0x264/0x324 [ 217.624084][ T4355] sp : ffff800021bd7af0 [ 217.625194][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.627178][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 217.629288][ T4355] x23: ffff0000dbeaa000 x22: ffff0000dbeaa010 x21: ffff0000d10fcde8 [ 217.631647][ T4355] x20: 1fffe0001b7d5400 x19: 0000000000000000 x18: ffff800021bd7280 [ 217.633828][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.635748][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000000001 [ 217.637743][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 217.639878][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.641885][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 217.643960][ T4355] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.646050][ T4355] Call trace: [ 217.646885][ T4355] disconnect_work+0x264/0x324 [ 217.648101][ T4355] process_one_work+0x7ac/0x1404 [ 217.649463][ T4355] worker_thread+0x8e4/0xfec [ 217.650678][ T4355] kthread+0x250/0x2d8 [ 217.651719][ T4355] ret_from_fork+0x10/0x20 [ 217.652771][ T4355] irq event stamp: 260762 [ 217.653783][ T4355] hardirqs last enabled at (260761): [] exit_to_kernel_mode+0xe8/0x118 [ 217.656355][ T4355] hardirqs last disabled at (260762): [] el1_dbg+0x24/0x80 [ 217.658370][ T4355] softirqs last enabled at (260760): [] handle_softirqs+0xb84/0xd58 [ 217.660785][ T4355] softirqs last disabled at (260631): [] __do_softirq+0x14/0x20 [ 217.663181][ T4355] ---[ end trace 0000000000000000 ]--- [ 217.665805][ T4355] ------------[ cut here ]------------ [ 217.667169][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 217.669834][ T4355] Modules linked in: [ 217.670944][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 217.673599][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.676209][ T4355] Workqueue: events disconnect_work [ 217.677553][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.679456][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 217.681017][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 217.682636][ T4355] sp : ffff800021bd7a90 [ 217.683735][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.685750][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000dbeaa048 [ 217.687874][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 217.689883][ T4355] x20: 0000000000000000 x19: ffff0000dbeaa000 x18: ffff800021bd7280 [ 217.691900][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.693901][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 217.695912][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 217.697935][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.699813][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 217.701831][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.704067][ T4355] Call trace: [ 217.704961][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 217.706556][ T4355] disconnect_work+0x18c/0x324 [ 217.707886][ T4355] process_one_work+0x7ac/0x1404 [ 217.709141][ T4355] worker_thread+0x8e4/0xfec [ 217.710404][ T4355] kthread+0x250/0x2d8 [ 217.711444][ T4355] ret_from_fork+0x10/0x20 [ 217.712597][ T4355] irq event stamp: 261074 [ 217.713739][ T4355] hardirqs last enabled at (261073): [] exit_to_kernel_mode+0xe8/0x118 [ 217.716199][ T4355] hardirqs last disabled at (261074): [] el1_dbg+0x24/0x80 [ 217.718400][ T4355] softirqs last enabled at (261072): [] handle_softirqs+0xb84/0xd58 [ 217.720853][ T4355] softirqs last disabled at (260765): [] __do_softirq+0x14/0x20 [ 217.723277][ T4355] ---[ end trace 0000000000000000 ]--- [ 217.725765][ T4355] ------------[ cut here ]------------ [ 217.727167][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 217.729711][ T4355] Modules linked in: [ 217.730771][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 217.733241][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.735847][ T4355] Workqueue: events disconnect_work [ 217.737236][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.739331][ T4355] pc : disconnect_work+0x270/0x324 [ 217.740580][ T4355] lr : disconnect_work+0x270/0x324 [ 217.741775][ T4355] sp : ffff800021bd7af0 [ 217.742814][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.744869][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000dbeaa048 [ 217.747102][ T4355] x23: 0000000000000000 x22: ffff0000dbeaa010 x21: ffff0000d10fcde8 [ 217.749033][ T4355] x20: 1fffe0001b7d5400 x19: 0000000000000000 x18: ffff800021bd7280 [ 217.751162][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.753345][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 217.755471][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 217.757641][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.759489][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 217.761562][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.763596][ T4355] Call trace: [ 217.764299][ T4355] disconnect_work+0x270/0x324 [ 217.765469][ T4355] process_one_work+0x7ac/0x1404 [ 217.766756][ T4355] worker_thread+0x8e4/0xfec [ 217.767920][ T4355] kthread+0x250/0x2d8 [ 217.768896][ T4355] ret_from_fork+0x10/0x20 [ 217.770011][ T4355] irq event stamp: 261344 [ 217.771161][ T4355] hardirqs last enabled at (261343): [] exit_to_kernel_mode+0xe8/0x118 [ 217.773629][ T4355] hardirqs last disabled at (261344): [] el1_dbg+0x24/0x80 [ 217.775922][ T4355] softirqs last enabled at (261342): [] handle_softirqs+0xb84/0xd58 [ 217.778355][ T4355] softirqs last disabled at (261077): [] __do_softirq+0x14/0x20 [ 217.780644][ T4355] ---[ end trace 0000000000000000 ]--- [ 217.791602][ T4355] ------------[ cut here ]------------ [ 217.792921][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 217.795203][ T4355] Modules linked in: [ 217.796186][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 217.798571][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.801102][ T4355] Workqueue: events disconnect_work [ 217.802423][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.804435][ T4355] pc : disconnect_work+0x264/0x324 [ 217.805726][ T4355] lr : disconnect_work+0x264/0x324 [ 217.807074][ T4355] sp : ffff800021bd7af0 [ 217.808103][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.810121][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 217.812314][ T4355] x23: ffff0000db75c000 x22: ffff0000db75c010 x21: ffff0000d10fcde8 [ 217.814278][ T4355] x20: 1fffe0001b6eb800 x19: 0000000000000000 x18: ffff800021bd7280 [ 217.816327][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.818501][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000000001 [ 217.820639][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 217.822668][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.824471][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 217.826631][ T4355] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.828699][ T4355] Call trace: [ 217.829416][ T4355] disconnect_work+0x264/0x324 [ 217.830625][ T4355] process_one_work+0x7ac/0x1404 [ 217.831832][ T4355] worker_thread+0x8e4/0xfec [ 217.832951][ T4355] kthread+0x250/0x2d8 [ 217.833902][ T4355] ret_from_fork+0x10/0x20 [ 217.834988][ T4355] irq event stamp: 261434 [ 217.836096][ T4355] hardirqs last enabled at (261433): [] exit_to_kernel_mode+0xe8/0x118 [ 217.838587][ T4355] hardirqs last disabled at (261434): [] el1_dbg+0x24/0x80 [ 217.840768][ T4355] softirqs last enabled at (261420): [] handle_softirqs+0xb84/0xd58 [ 217.843025][ T4355] softirqs last disabled at (261347): [] __do_softirq+0x14/0x20 [ 217.844680][ T4355] ---[ end trace 0000000000000000 ]--- [ 217.846699][ T4355] ------------[ cut here ]------------ [ 217.847837][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 217.850610][ T4355] Modules linked in: [ 217.851490][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 217.854104][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.856800][ T4355] Workqueue: events disconnect_work [ 217.858110][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.860089][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 217.861854][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 217.863402][ T4355] sp : ffff800021bd7a90 [ 217.864548][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.866704][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000db75c048 [ 217.868782][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 217.870902][ T4355] x20: 0000000000000000 x19: ffff0000db75c000 x18: ffff800021bd7280 [ 217.873012][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.875266][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 217.877322][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 217.879398][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.881457][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 217.883477][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.885596][ T4355] Call trace: [ 217.886359][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 217.887820][ T4355] disconnect_work+0x18c/0x324 [ 217.888873][ T4355] process_one_work+0x7ac/0x1404 [ 217.890143][ T4355] worker_thread+0x8e4/0xfec [ 217.891315][ T4355] kthread+0x250/0x2d8 [ 217.892269][ T4355] ret_from_fork+0x10/0x20 [ 217.893481][ T4355] irq event stamp: 261714 [ 217.894564][ T4355] hardirqs last enabled at (261713): [] exit_to_kernel_mode+0xe8/0x118 [ 217.897297][ T4355] hardirqs last disabled at (261714): [] el1_dbg+0x24/0x80 [ 217.899650][ T4355] softirqs last enabled at (261712): [] handle_softirqs+0xb84/0xd58 [ 217.902182][ T4355] softirqs last disabled at (261437): [] __do_softirq+0x14/0x20 [ 217.904564][ T4355] ---[ end trace 0000000000000000 ]--- [ 217.906706][ T4355] ------------[ cut here ]------------ [ 217.908056][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 217.910430][ T4355] Modules linked in: [ 217.911313][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 217.913695][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.916365][ T4355] Workqueue: events disconnect_work [ 217.917671][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.919518][ T4355] pc : disconnect_work+0x270/0x324 [ 217.920618][ T4355] lr : disconnect_work+0x270/0x324 [ 217.922060][ T4355] sp : ffff800021bd7af0 [ 217.923327][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.925419][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000db75c048 [ 217.927509][ T4355] x23: 0000000000000000 x22: ffff0000db75c010 x21: ffff0000d10fcde8 [ 217.929718][ T4355] x20: 1fffe0001b6eb800 x19: 0000000000000000 x18: ffff800021bd7280 [ 217.931683][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.933843][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 217.935932][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 217.938164][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.940027][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 217.942182][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 217.944315][ T4355] Call trace: [ 217.945102][ T4355] disconnect_work+0x270/0x324 [ 217.946249][ T4355] process_one_work+0x7ac/0x1404 [ 217.947485][ T4355] worker_thread+0x8e4/0xfec [ 217.948713][ T4355] kthread+0x250/0x2d8 [ 217.949665][ T4355] ret_from_fork+0x10/0x20 [ 217.950770][ T4355] irq event stamp: 261810 [ 217.951954][ T4355] hardirqs last enabled at (261809): [] exit_to_kernel_mode+0xe8/0x118 [ 217.954569][ T4355] hardirqs last disabled at (261810): [] el1_dbg+0x24/0x80 [ 217.956670][ T4355] softirqs last enabled at (261804): [] handle_softirqs+0xb84/0xd58 [ 217.959074][ T4355] softirqs last disabled at (261717): [] __do_softirq+0x14/0x20 [ 217.961631][ T4355] ---[ end trace 0000000000000000 ]--- [ 217.965654][ T4355] ------------[ cut here ]------------ [ 217.967227][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 217.969637][ T4355] Modules linked in: [ 217.970540][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 217.972555][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.975205][ T4355] Workqueue: events disconnect_work [ 217.976592][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.978579][ T4355] pc : disconnect_work+0x264/0x324 [ 217.980085][ T4355] lr : disconnect_work+0x264/0x324 [ 217.981443][ T4355] sp : ffff800021bd7af0 [ 217.982423][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 217.984370][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 217.986440][ T4355] x23: ffff0000d0fc8c90 x22: ffff0000d0fc8ca0 x21: ffff0000d1048de8 [ 217.988754][ T4355] x20: 1fffe0001a1f9192 x19: 0000000000000000 x18: ffff800021bd7280 [ 217.990882][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 217.992996][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000000001 [ 217.995224][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 217.997418][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 217.999619][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 218.001958][ T4355] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 218.004231][ T4355] Call trace: [ 218.005124][ T4355] disconnect_work+0x264/0x324 [ 218.006457][ T4355] process_one_work+0x7ac/0x1404 [ 218.007967][ T4355] worker_thread+0x8e4/0xfec [ 218.009309][ T4355] kthread+0x250/0x2d8 [ 218.010426][ T4355] ret_from_fork+0x10/0x20 [ 218.011717][ T4355] irq event stamp: 262184 [ 218.012860][ T4355] hardirqs last enabled at (262183): [] exit_to_kernel_mode+0xe8/0x118 [ 218.015623][ T4355] hardirqs last disabled at (262184): [] el1_dbg+0x24/0x80 [ 218.018106][ T4355] softirqs last enabled at (262178): [] handle_softirqs+0xb84/0xd58 [ 218.020634][ T4355] softirqs last disabled at (261813): [] __do_softirq+0x14/0x20 [ 218.023110][ T4355] ---[ end trace 0000000000000000 ]--- [ 218.025440][ T4355] ------------[ cut here ]------------ [ 218.026935][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 218.029831][ T4355] Modules linked in: [ 218.030812][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 218.033432][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 218.036270][ T4355] Workqueue: events disconnect_work [ 218.037681][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 218.039851][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 218.041563][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 218.043386][ T4355] sp : ffff800021bd7a90 [ 218.044528][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 218.046794][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000d0fc8cd8 [ 218.049025][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 218.051169][ T4355] x20: 0000000000000000 x19: ffff0000d0fc8c90 x18: ffff800021bd7280 [ 218.053552][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 218.055817][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 218.058038][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 218.060129][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 218.062224][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 218.064332][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 218.066512][ T4355] Call trace: [ 218.067381][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 218.069030][ T4355] disconnect_work+0x18c/0x324 [ 218.070309][ T4355] process_one_work+0x7ac/0x1404 [ 218.071643][ T4355] worker_thread+0x8e4/0xfec [ 218.072914][ T4355] kthread+0x250/0x2d8 [ 218.074031][ T4355] ret_from_fork+0x10/0x20 [ 218.075227][ T4355] irq event stamp: 262328 [ 218.076311][ T4355] hardirqs last enabled at (262327): [] exit_to_kernel_mode+0xe8/0x118 [ 218.079095][ T4355] hardirqs last disabled at (262328): [] el1_dbg+0x24/0x80 [ 218.081373][ T4355] softirqs last enabled at (262326): [] handle_softirqs+0xb84/0xd58 [ 218.083968][ T4355] softirqs last disabled at (262187): [] __do_softirq+0x14/0x20 [ 218.086432][ T4355] ---[ end trace 0000000000000000 ]--- [ 218.089094][ T4355] ------------[ cut here ]------------ [ 218.090629][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 218.093209][ T4355] Modules linked in: [ 218.094202][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 218.096897][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 218.099670][ T4355] Workqueue: events disconnect_work [ 218.100978][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 218.103132][ T4355] pc : disconnect_work+0x270/0x324 [ 218.104586][ T4355] lr : disconnect_work+0x270/0x324 [ 218.105813][ T4355] sp : ffff800021bd7af0 [ 218.106827][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 218.109030][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000d0fc8cd8 [ 218.111097][ T4355] x23: 0000000000000000 x22: ffff0000d0fc8ca0 x21: ffff0000d1048de8 [ 218.113228][ T4355] x20: 1fffe0001a1f9192 x19: 0000000000000000 x18: ffff800021bd7280 [ 218.115420][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 218.117554][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 218.119839][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 218.121949][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 218.124157][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 218.126337][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 218.128443][ T4355] Call trace: [ 218.129304][ T4355] disconnect_work+0x270/0x324 [ 218.130634][ T4355] process_one_work+0x7ac/0x1404 [ 218.131915][ T4355] worker_thread+0x8e4/0xfec [ 218.133175][ T4355] kthread+0x250/0x2d8 [ 218.134198][ T4355] ret_from_fork+0x10/0x20 [ 218.135337][ T4355] irq event stamp: 262544 [ 218.136488][ T4355] hardirqs last enabled at (262543): [] exit_to_kernel_mode+0xe8/0x118 [ 218.139083][ T4355] hardirqs last disabled at (262544): [] el1_dbg+0x24/0x80 [ 218.141356][ T4355] softirqs last enabled at (262538): [] handle_softirqs+0xb84/0xd58 [ 218.143849][ T4355] softirqs last disabled at (262331): [] __do_softirq+0x14/0x20 [ 218.146369][ T4355] ---[ end trace 0000000000000000 ]--- [ 218.158843][ T4355] ------------[ cut here ]------------ [ 218.160326][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:231 disconnect_work+0x264/0x324 [ 218.162793][ T4355] Modules linked in: [ 218.163857][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 218.166472][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 218.169169][ T4355] Workqueue: events disconnect_work [ 218.170424][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 218.172314][ T4355] pc : disconnect_work+0x264/0x324 [ 218.173711][ T4355] lr : disconnect_work+0x264/0x324 [ 218.175156][ T4355] sp : ffff800021bd7af0 [ 218.176355][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 218.178474][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: 0000000000000000 [ 218.180607][ T4355] x23: ffff0000d0fb4c90 x22: ffff0000d0fb4ca0 x21: ffff0000d1000de8 [ 218.182887][ T4355] x20: 1fffe0001a1f6992 x19: 0000000000000000 x18: ffff800021bd7280 [ 218.185092][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 218.187223][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000000001 [ 218.189304][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d80 [ 218.191325][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 218.193523][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000123688b0 [ 218.195666][ T4355] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 218.197687][ T4355] Call trace: [ 218.198456][ T4355] disconnect_work+0x264/0x324 [ 218.199756][ T4355] process_one_work+0x7ac/0x1404 [ 218.201105][ T4355] worker_thread+0x8e4/0xfec [ 218.202364][ T4355] kthread+0x250/0x2d8 [ 218.203456][ T4355] ret_from_fork+0x10/0x20 [ 218.204703][ T4355] irq event stamp: 262804 [ 218.205809][ T4355] hardirqs last enabled at (262803): [] exit_to_kernel_mode+0xe8/0x118 [ 218.208386][ T4355] hardirqs last disabled at (262804): [] el1_dbg+0x24/0x80 [ 218.210226][ T4296] Bluetooth: hci8: command tx timeout [ 218.210693][ T4355] softirqs last enabled at (262798): [] handle_softirqs+0xb84/0xd58 [ 218.214552][ T4355] softirqs last disabled at (262547): [] __do_softirq+0x14/0x20 [ 218.216826][ T4355] ---[ end trace 0000000000000000 ]--- [ 218.218525][ T4303] Bluetooth: hci7: command tx timeout [ 218.219089][ T4355] ------------[ cut here ]------------ [ 218.221618][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:246 cfg80211_beaconing_iface_active+0x370/0x424 [ 218.224305][ T4355] Modules linked in: [ 218.225302][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 218.227798][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 218.230253][ T4355] Workqueue: events disconnect_work [ 218.231620][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 218.233605][ T4355] pc : cfg80211_beaconing_iface_active+0x370/0x424 [ 218.235291][ T4355] lr : cfg80211_beaconing_iface_active+0x370/0x424 [ 218.236931][ T4355] sp : ffff800021bd7a90 [ 218.238088][ T4355] x29: ffff800021bd7a90 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 218.240106][ T4355] x26: ffff8000159d0000 x25: 0000000000000000 x24: ffff0000d0fb4cd8 [ 218.242151][ T4355] x23: ffff8000159d057c x22: dfff800000000000 x21: ffff8000159d0000 [ 218.244237][ T4355] x20: 0000000000000000 x19: ffff0000d0fb4c90 x18: ffff800021bd7280 [ 218.246233][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 218.248351][ T4355] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000000001 [ 218.250453][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a5e190 [ 218.252550][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 218.254945][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 218.257070][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 218.259267][ T4355] Call trace: [ 218.260128][ T4355] cfg80211_beaconing_iface_active+0x370/0x424 [ 218.261852][ T4355] disconnect_work+0x18c/0x324 [ 218.263073][ T4355] process_one_work+0x7ac/0x1404 [ 218.264211][ T4355] worker_thread+0x8e4/0xfec [ 218.265388][ T4355] kthread+0x250/0x2d8 [ 218.266457][ T4355] ret_from_fork+0x10/0x20 [ 218.267445][ T4355] irq event stamp: 262860 [ 218.268708][ T4355] hardirqs last enabled at (262859): [] exit_to_kernel_mode+0xe8/0x118 [ 218.271182][ T4355] hardirqs last disabled at (262860): [] el1_dbg+0x24/0x80 [ 218.273471][ T4355] softirqs last enabled at (262858): [] handle_softirqs+0xb84/0xd58 [ 218.276039][ T4355] softirqs last disabled at (262807): [] __do_softirq+0x14/0x20 [ 218.278391][ T4355] ---[ end trace 0000000000000000 ]--- [ 218.281003][ T4355] ------------[ cut here ]------------ [ 218.282236][ T4355] WARNING: CPU: 0 PID: 4355 at net/wireless/core.h:239 disconnect_work+0x270/0x324 [ 218.284648][ T4355] Modules linked in: [ 218.285685][ T4355] CPU: 0 PID: 4355 Comm: kworker/0:7 Tainted: G W 6.1.111-syzkaller #0 [ 218.287973][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 218.290779][ T4355] Workqueue: events disconnect_work [ 218.292098][ T4355] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 218.294063][ T4355] pc : disconnect_work+0x270/0x324 [ 218.295394][ T4355] lr : disconnect_work+0x270/0x324 [ 218.296800][ T4355] sp : ffff800021bd7af0 [ 218.297797][ T4355] x29: ffff800021bd7b00 x28: 1ffff00002b3a0af x27: dfff800000000000 [ 218.299776][ T4355] x26: ffff8000159d0000 x25: 0000000000000001 x24: ffff0000d0fb4cd8 [ 218.301936][ T4355] x23: 0000000000000000 x22: ffff0000d0fb4ca0 x21: ffff0000d1000de8 [ 218.304048][ T4355] x20: 1fffe0001a1f6992 x19: 0000000000000000 x18: ffff800021bd7280 [ 218.306249][ T4355] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: 0000000000000000 [ 218.308489][ T4355] x14: 000000000000000d x13: ffff0000d32b5340 x12: 0000000000ff0100 [ 218.310775][ T4355] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011a51d8c [ 218.313055][ T4355] x8 : ffff0000d32b5340 x7 : ffff800011a51c54 x6 : 0000000000000000 [ 218.315100][ T4355] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082fbc8c [ 218.317295][ T4355] x2 : ffff0000d32b5340 x1 : 0000000000000000 x0 : 0000000000000000 [ 218.319468][ T4355] Call trace: [ 218.320536][ T4355] disconnect_work+0x270/0x324 [ 218.321882][ T4355] process_one_work+0x7ac/0x1404 [ 218.323145][ T4355] worker_thread+0x8e4/0xfec [ 218.324397][ T4355] kthread+0x250/0x2d8 [ 218.325524][ T4355] ret_from_fork+0x10/0x20 [ 218.326785][ T4355] irq event stamp: 263164 [ 218.328120][ T4355] hardirqs last enabled at (263163): [] exit_to_kernel_mode+0xe8/0x118 [ 218.330902][ T4355] hardirqs last disabled at (263164): [] el1_dbg+0x24/0x80 [ 218.333467][ T4355] softirqs last enabled at (263162): [] handle_softirqs+0xb84/0xd58 [ 218.336312][ T4355] softirqs last disabled at (262863): [] __do_softirq+0x14/0x20 [ 218.338800][ T4355] ---[ end trace 0000000000000000 ]--- [ 218.422519][ T7338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.571389][ T7338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.582243][ T5076] device hsr_slave_0 left promiscuous mode [ 218.620043][ T5076] device hsr_slave_1 left promiscuous mode [ 218.719632][ T5076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.721704][ T5076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.724977][ T5076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.726963][ T5076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.790023][ T5076] device veth1_macvtap left promiscuous mode [ 218.792043][ T5076] device veth0_macvtap left promiscuous mode [ 218.793666][ T5076] device veth1_vlan left promiscuous mode [ 218.795276][ T5076] device veth0_vlan left promiscuous mode [ 220.733988][ T5076] team0 (unregistering): Port device team_slave_1 removed [ 220.942951][ T5076] team0 (unregistering): Port device team_slave_0 removed [ 221.120929][ T5076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.340931][ T5076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.584371][ T5076] bond0 (unregistering): Released all slaves [ 224.093635][ T7331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.202072][ T7331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.299945][ T7331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.431191][ T7331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0