last executing test programs: 32.307276478s ago: executing program 4 (id=511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) inotify_init() pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffd, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000006a40)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000, 0x8e84fffef67c07}}, r7}}, 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscach']) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0xb, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008810}, 0x4008000) r9 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001400010300000000000000001d000000207ab67ead22c419da61697ba0dc3a54be14f14b9099fddb47455cc4a933b97f28477ffe287fe5e4f466781498dd341ad9656374672dcac640839e0ef308ac8124a0100ffd2aa67156ed4a0f76ec4685f1509753356978203bf53f4445bec22a360531ea012c6c7754d86330ed01f5d61076f2bc594c92bf866fef3191"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 29.057049712s ago: executing program 4 (id=519): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x10) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB='trans=f', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) r3 = socket(0x28, 0xa, 0x37) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00005df400000000b7efeb2825b7d992820573349bdd3f12d805000008000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, 0x0, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) r9 = fcntl$dupfd(r8, 0x0, r8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TCFLSH(r9, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r9, 0x5412, &(0x7f0000000000)=0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) 25.764968388s ago: executing program 4 (id=528): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000080)) mlockall(0x2) pwritev(r1, &(0x7f00000002c0)=[{0x0}], 0x1, 0xb, 0x25d5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, 0x0, 0x4001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$9p_virtio(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x44090}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24.460442426s ago: executing program 3 (id=529): syz_open_dev$sndpcmc(&(0x7f0000002440), 0x1, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x5, 0x1c040, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x8, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) 23.299060183s ago: executing program 3 (id=531): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000540)={r0, r1, r1}, &(0x7f0000000400)=""/190, 0xbe, &(0x7f00000003c0)={&(0x7f0000000240)={'sha256-generic\x00'}, &(0x7f0000000380)="708803449262ddb5bda92158536f78c390609a10de442b2c8522cbff4fd8e5ffc37e1b3aebbdae8dc970f20781e9711ab309fc77", 0x34}) 22.902831263s ago: executing program 3 (id=532): r0 = socket(0x1e, 0x4, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x11, r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000080)={0x80, 0x8, 0x4}) syz_io_uring_setup(0x239, &(0x7f0000000700)={0x0, 0xf91f, 0x20000, 0x0, 0x4}, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x5, 0xfffc, {0x7, 0x1}, {0xad, 0x2}, @cond=[{0x3, 0x6a, 0x19, 0x2, 0xd, 0xc6}, {0x2, 0x7f, 0x9, 0xa4ed, 0xc7, 0x7}]}) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8c2b01) ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f00000003c0)=""/149) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 22.856904227s ago: executing program 1 (id=533): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x2, &(0x7f0000000040)='source', &(0x7f0000000080)='./bus\x00', r1) mknodat$loop(r1, &(0x7f0000002600)='./bus\x00', 0x0, 0x0) 22.80706764s ago: executing program 4 (id=534): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 22.581989537s ago: executing program 2 (id=535): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getrlimit(0x4, 0x0) 22.523160612s ago: executing program 3 (id=536): syz_open_dev$sndpcmc(&(0x7f0000002440), 0x1, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x5, 0x1c040, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x8, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000102, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 22.478781715s ago: executing program 0 (id=537): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000026c0)={0xffffffffffffffff, 0xe0, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000023c0), &(0x7f0000002400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4d, &(0x7f0000002440), 0x0, 0x10, &(0x7f0000002480), 0x0, 0x0, 0xee, 0x8, 0x8, &(0x7f0000002500)}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000044010001000001b0578ac2cc0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_init_net_socket$ax25(0x3, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) 22.152214689s ago: executing program 2 (id=538): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffff57, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="1800000000000000000000000000000895"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='contention_begin\x00', r1}, 0x10) r2 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0x1c3, 0x12) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000580)='reno\x00', 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r7, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x15, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3bc40d5b}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xf}, @alu={0x7, 0x0, 0x0, 0x3, 0xb, 0x20, 0x8}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @generic={0x9, 0xe, 0x9, 0xc0, 0x100}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0xd5, &(0x7f0000000480)=""/213, 0x0, 0x14, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x4, 0x6, 0xfb}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x3, 0x5, 0xe, 0xf3c401d3172e3b11}], 0x10, 0x6, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) 21.424835174s ago: executing program 0 (id=539): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b2000"/48], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 20.964515429s ago: executing program 2 (id=540): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x40d, 0x70bd28, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x3ff}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 20.936136201s ago: executing program 1 (id=541): syz_open_dev$sndpcmc(&(0x7f0000002440), 0x1, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x5, 0x1c040, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x8, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) 20.935338321s ago: executing program 0 (id=542): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000304000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6, 0x80, 0x9c}, {0x7, 0x81, 0x0, 0x3}, {0x6, 0x1, 0x6, 0x80000000}]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000100)='-1\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 20.884027704s ago: executing program 3 (id=543): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000000000000008001e0001000000d75f0f8f801b94cd1b866db41edcd7fd34383fbb"], 0x24}}, 0x0) 20.739343545s ago: executing program 1 (id=544): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000500)=@hat={'permhat '}, 0x1b) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) eventfd(0x0) socket(0x10, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000640)=""/237, &(0x7f0000000740)=0xed) 20.67666926s ago: executing program 3 (id=545): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000080)) mlockall(0x2) pwritev(r1, &(0x7f00000002c0)=[{0x0}], 0x1, 0xb, 0x25d5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, 0x0, 0x4001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$9p_virtio(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x44090}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20.6751864s ago: executing program 2 (id=546): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x1) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 20.035988668s ago: executing program 4 (id=547): socket$igmp6(0xa, 0x3, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x11, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfd9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x100, 0xe000000, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 19.862895201s ago: executing program 0 (id=548): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getrlimit(0x4, 0x0) 19.767209608s ago: executing program 0 (id=549): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000026c0)={0xffffffffffffffff, 0xe0, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x0, 0x4d, &(0x7f0000002440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002480), 0x0, 0x0, 0xee, 0x8, 0x8, &(0x7f0000002500)}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 19.682691804s ago: executing program 2 (id=550): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5f", @ANYRES32, @ANYRES64=r0], 0x40}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x769}], 0x1}}], 0x1, 0x11) syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x800}, &(0x7f0000000280), &(0x7f0000000200)) 18.640763673s ago: executing program 0 (id=551): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="1800000000000000000000000000000895"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='contention_begin\x00', r2}, 0x10) r3 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r6) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x1c3, 0x12) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000580)='reno\x00', 0x5) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r8, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x15, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3bc40d5b}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xf}, @alu={0x7, 0x0, 0x0, 0x3, 0xb, 0x20, 0x8}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @generic={0x9, 0xe, 0x9, 0xc0, 0x100}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0xd5, &(0x7f0000000480)=""/213, 0x0, 0x14, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x4, 0x6, 0xfb}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x3, 0x5, 0xe, 0xf3c401d3172e3b11}], 0x10, 0x6, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) 17.502915148s ago: executing program 1 (id=552): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x21) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x2, &(0x7f0000000040)='source', &(0x7f0000000080)='./bus\x00', r1) mknodat$loop(r1, &(0x7f0000002600)='./bus\x00', 0x0, 0x0) 16.320131726s ago: executing program 1 (id=553): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b2000"/48], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.239377132s ago: executing program 4 (id=554): syz_open_dev$sndpcmc(&(0x7f0000002440), 0x1, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x5, 0x1c040, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x8, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000102, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16.13251282s ago: executing program 2 (id=555): syz_open_dev$sndpcmc(&(0x7f0000002440), 0x1, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x5, 0x1c040, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x8, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) 15.896905658s ago: executing program 1 (id=556): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1, 0x0, 0x0) 5.588877081s ago: executing program 32 (id=545): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000080)) mlockall(0x2) pwritev(r1, &(0x7f00000002c0)=[{0x0}], 0x1, 0xb, 0x25d5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, 0x0, 0x4001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$9p_virtio(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x44090}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.525647885s ago: executing program 33 (id=551): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="1800000000000000000000000000000895"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='contention_begin\x00', r2}, 0x10) r3 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r6) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x1c3, 0x12) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000580)='reno\x00', 0x5) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r8, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x15, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3bc40d5b}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xf}, @alu={0x7, 0x0, 0x0, 0x3, 0xb, 0x20, 0x8}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @generic={0x9, 0xe, 0x9, 0xc0, 0x100}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0xd5, &(0x7f0000000480)=""/213, 0x0, 0x14, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x4, 0x6, 0xfb}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x3, 0x5, 0xe, 0xf3c401d3172e3b11}], 0x10, 0x6, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) 1.085929778s ago: executing program 34 (id=555): syz_open_dev$sndpcmc(&(0x7f0000002440), 0x1, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x5, 0x1c040, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x8, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) 1.032579692s ago: executing program 35 (id=554): syz_open_dev$sndpcmc(&(0x7f0000002440), 0x1, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x5, 0x1c040, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x8, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000102, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 0s ago: executing program 36 (id=556): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. [ 67.838590][ T4240] cgroup: Unknown subsys name 'net' [ 67.946354][ T4240] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.448757][ T4240] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.872708][ T4251] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.894936][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.903697][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.912008][ T4266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.920566][ T4266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.928451][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.930308][ T4264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.936678][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.943927][ T4264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.952130][ T4266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.957887][ T4264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.964556][ T4266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.972579][ T4264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.978150][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.991782][ T4264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.991983][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.006595][ T4266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.006942][ T4264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.021356][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.021904][ T4264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.029395][ T4267] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.035836][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.042825][ T4267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.050317][ T4264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.059177][ T4267] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.071423][ T4267] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.099885][ T4264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.146552][ T4267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.170267][ T4267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.178397][ T4267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.484175][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.490772][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.608853][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 71.627064][ T4255] chnl_net:caif_netlink_parms(): no params data found [ 71.702774][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 71.764885][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 71.781724][ T4257] chnl_net:caif_netlink_parms(): no params data found [ 71.848923][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.856981][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.865434][ T4255] device bridge_slave_0 entered promiscuous mode [ 71.886369][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.893690][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.902118][ T4253] device bridge_slave_0 entered promiscuous mode [ 71.921035][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.928172][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.936420][ T4255] device bridge_slave_1 entered promiscuous mode [ 71.965225][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.973220][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.982219][ T4253] device bridge_slave_1 entered promiscuous mode [ 72.028368][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.037929][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.045878][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.054087][ T4250] device bridge_slave_0 entered promiscuous mode [ 72.079060][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.088465][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.095791][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.104313][ T4250] device bridge_slave_1 entered promiscuous mode [ 72.119751][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.169716][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.217041][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.224309][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.232537][ T4257] device bridge_slave_0 entered promiscuous mode [ 72.240141][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.247243][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.258922][ T4256] device bridge_slave_0 entered promiscuous mode [ 72.268604][ T4255] team0: Port device team_slave_0 added [ 72.280643][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.292439][ T4253] team0: Port device team_slave_0 added [ 72.299939][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.312993][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.321186][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.329349][ T4257] device bridge_slave_1 entered promiscuous mode [ 72.337135][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.344480][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.356041][ T4256] device bridge_slave_1 entered promiscuous mode [ 72.364149][ T4255] team0: Port device team_slave_1 added [ 72.371752][ T4253] team0: Port device team_slave_1 added [ 72.428988][ T4250] team0: Port device team_slave_0 added [ 72.471855][ T4250] team0: Port device team_slave_1 added [ 72.478373][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.485450][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.511531][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.525774][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.537960][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.547982][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.555245][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.581299][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.610304][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.617304][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.643714][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.657218][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.668344][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.678102][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.685479][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.711741][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.769271][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.776405][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.802947][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.827623][ T4257] team0: Port device team_slave_0 added [ 72.836066][ T4257] team0: Port device team_slave_1 added [ 72.852124][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.859118][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.885293][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.904833][ T4256] team0: Port device team_slave_0 added [ 72.938436][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.945565][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.971862][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.994448][ T4256] team0: Port device team_slave_1 added [ 73.003487][ T4253] device hsr_slave_0 entered promiscuous mode [ 73.010571][ T4253] device hsr_slave_1 entered promiscuous mode [ 73.019825][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.026962][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.053122][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.076410][ T4255] device hsr_slave_0 entered promiscuous mode [ 73.083489][ T4255] device hsr_slave_1 entered promiscuous mode [ 73.090341][ T4255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.098202][ T4255] Cannot create hsr debugfs directory [ 73.171136][ T4267] Bluetooth: hci4: command 0x0409 tx timeout [ 73.177993][ T4254] Bluetooth: hci2: command 0x0409 tx timeout [ 73.180124][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 73.184333][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 73.197672][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.205484][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.231718][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.242526][ T4267] Bluetooth: hci3: command 0x0409 tx timeout [ 73.253471][ T4250] device hsr_slave_0 entered promiscuous mode [ 73.260612][ T4250] device hsr_slave_1 entered promiscuous mode [ 73.267216][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.275389][ T4250] Cannot create hsr debugfs directory [ 73.300840][ T4257] device hsr_slave_0 entered promiscuous mode [ 73.307607][ T4257] device hsr_slave_1 entered promiscuous mode [ 73.314638][ T4257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.322573][ T4257] Cannot create hsr debugfs directory [ 73.328652][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.335844][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.362584][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.488897][ T4256] device hsr_slave_0 entered promiscuous mode [ 73.496829][ T4256] device hsr_slave_1 entered promiscuous mode [ 73.503495][ T4256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.511145][ T4256] Cannot create hsr debugfs directory [ 73.768382][ T4255] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.783873][ T4255] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.795546][ T4255] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.821155][ T4255] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.874937][ T4257] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.885887][ T4257] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.897430][ T4257] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.914492][ T4257] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.971855][ T4253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.981222][ T4253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.018107][ T4253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.027911][ T4253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.093112][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.112116][ T4250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.133855][ T4250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.144078][ T4250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.153766][ T4250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.171435][ T4255] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.184398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.195556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.232288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.244547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.254697][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.262027][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.271765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.282562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.291365][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.298470][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.307558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.371710][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.382426][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.403249][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.436861][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.448834][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.459024][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.467368][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.475743][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.496090][ T4257] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.504106][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.513304][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.523156][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.533593][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.554693][ T4256] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.586930][ T4256] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.596248][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.606642][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.618956][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.628599][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.637791][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.644985][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.653563][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.669934][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.685807][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.695326][ T4256] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.705137][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.714262][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.723163][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.730312][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.748224][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.768229][ T4256] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.796874][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.808590][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.823161][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.835855][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.858089][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.870713][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.879349][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.904108][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.917053][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.928541][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.938135][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.945324][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.958174][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.967374][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.982806][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.013418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.022631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.034231][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.041440][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.055055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.064098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.072097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.079840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.088894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.100284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.114855][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.128337][ T4257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.141738][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.157707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.167356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.211149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.222989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.234300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.242645][ T4254] Bluetooth: hci1: command 0x041b tx timeout [ 75.242684][ T4254] Bluetooth: hci4: command 0x041b tx timeout [ 75.243108][ T4254] Bluetooth: hci0: command 0x041b tx timeout [ 75.249243][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 75.276338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.286212][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.293461][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.302052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.311201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.320970][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 75.328015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.338026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.347633][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.354833][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.363334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.373806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.382934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.391022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.405312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.414487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.422948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.437661][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.464728][ T4250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.476140][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.503064][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.513212][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.526314][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.535819][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.545800][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.555009][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.564681][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.574921][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.583916][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.603059][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.637853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.647956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.658494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.668470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.696896][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.716897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.728113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.741794][ T4255] device veth0_vlan entered promiscuous mode [ 75.782869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.792406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.809254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.818606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.838301][ T4255] device veth1_vlan entered promiscuous mode [ 75.857424][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.878779][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.926343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.942279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.977852][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.994409][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.034565][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.072923][ T4255] device veth0_macvtap entered promiscuous mode [ 76.101441][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.112618][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.132534][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.152864][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.160075][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.203151][ T4255] device veth1_macvtap entered promiscuous mode [ 76.214876][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.225984][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.235235][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.247922][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.264212][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.271420][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.285924][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.320833][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.351935][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.362929][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.385365][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.393919][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.404605][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.413525][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.421297][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.428761][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.436492][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.444515][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.453856][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.463243][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.472725][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.481607][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.490713][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.499109][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.517036][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.563542][ T4256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.579149][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.589134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.605639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.614955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.625286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.634907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.651040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.662683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.671681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.685871][ T4255] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.695204][ T4255] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.705130][ T4255] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.714593][ T4255] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.805785][ T4253] device veth0_vlan entered promiscuous mode [ 76.825482][ T4250] device veth0_vlan entered promiscuous mode [ 76.860507][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.885508][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.894810][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.904588][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.913646][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.923845][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.938461][ T4253] device veth1_vlan entered promiscuous mode [ 76.974560][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.983290][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.999436][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.009765][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.025862][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.061836][ T4250] device veth1_vlan entered promiscuous mode [ 77.111260][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.136702][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.146136][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.155536][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.164883][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.174146][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.183175][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.191842][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.199322][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.208104][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.223923][ T4257] device veth0_vlan entered promiscuous mode [ 77.251053][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.266041][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.291806][ T4257] device veth1_vlan entered promiscuous mode [ 77.298625][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.311669][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.319570][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.328686][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 77.329514][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.334933][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 77.334977][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 77.335008][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 77.362957][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.372545][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.387304][ T4250] device veth0_macvtap entered promiscuous mode [ 77.400648][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 77.415729][ T4253] device veth0_macvtap entered promiscuous mode [ 77.442884][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.451278][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.459381][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.470465][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.479529][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.491306][ T4250] device veth1_macvtap entered promiscuous mode [ 77.514533][ T4253] device veth1_macvtap entered promiscuous mode [ 77.521237][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.529243][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.536841][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.552629][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.564779][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.588798][ T4257] device veth0_macvtap entered promiscuous mode [ 77.597468][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.608646][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.617709][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.625968][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.635170][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.645016][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.653935][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.662738][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.695174][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.706471][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.721510][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.729610][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.745966][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.764424][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.775677][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.784825][ T4256] device veth0_vlan entered promiscuous mode [ 77.793898][ T4257] device veth1_macvtap entered promiscuous mode [ 77.808513][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.827153][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.870759][ T4331] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 77.872531][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.892383][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.903324][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.912545][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.921876][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.947764][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.959060][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.979978][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.996905][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.009156][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.027951][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.042192][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.052944][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.064069][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.076444][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.098662][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.109634][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.120512][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.131279][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.141545][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.152706][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.166102][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.175147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.184432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.193857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.202958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.212400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.221853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.233185][ T4256] device veth1_vlan entered promiscuous mode [ 78.256246][ T4253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.265514][ T4253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.274973][ T4253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.285265][ T4253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.305230][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.316507][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.345542][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.356362][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.368092][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.379107][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.396357][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.426597][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.436578][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.459779][ T4257] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.469509][ T4257] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.478989][ T4257] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.488254][ T4257] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.546879][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.563072][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.656923][ T4256] device veth0_macvtap entered promiscuous mode [ 78.689657][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.728394][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.758110][ T4256] device veth1_macvtap entered promiscuous mode [ 78.780374][ T3583] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.799591][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.808027][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.832261][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.854569][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.867591][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.877936][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.918473][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.937418][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.945040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.981803][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.991172][ T3583] usb 2-1: Using ep0 maxpacket: 8 [ 78.996762][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.019609][ T3583] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 79.036164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.039240][ T3583] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 79.059931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.068213][ T3583] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 79.081039][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.092155][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.093963][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.110402][ T3583] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.124166][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.131971][ T3583] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.156876][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.159270][ T3583] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.168539][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.183991][ T3583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.187523][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.211703][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.223141][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.234148][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.246294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.257558][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.289909][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.301798][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.314768][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.352507][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.379545][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.400478][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 79.402783][ T4254] Bluetooth: hci1: command 0x0419 tx timeout [ 79.406523][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 79.406552][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 79.435529][ T3583] usb 2-1: usb_control_msg returned -32 [ 79.442255][ T3583] usbtmc 2-1:16.0: can't read capabilities [ 79.451916][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.468282][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.480993][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 79.492656][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.507430][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.528291][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.675786][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.712631][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.879785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.065503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.090011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 80.098546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 80.108379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.117847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.126494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.134978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.143544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.507200][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.542156][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.553181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.584375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.620764][ T4256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.633034][ T4256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.642447][ T4256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.657238][ T4256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.860062][ T4338] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.888410][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 80.924139][ T4346] netlink: 'syz.4.5': attribute type 30 has an invalid length. [ 81.081996][ T4338] usb 1-1: Using ep0 maxpacket: 8 [ 81.107091][ T4338] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 81.120804][ T4338] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 81.147730][ T4338] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 81.164324][ T4338] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.198134][ T4338] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.222241][ T4338] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 81.248421][ T4338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.465520][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.479486][ T4338] usb 1-1: usb_control_msg returned -32 [ 81.491621][ T4338] usbtmc 1-1:16.0: can't read capabilities [ 81.506830][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.534798][ T4338] usb 1-1: USB disconnect, device number 2 [ 81.568144][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.592807][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.632739][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.646135][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.753708][ T4357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9'. [ 82.644229][ T4361] netlink: del zone limit has 8 unknown bytes [ 82.908333][ T4294] usb 2-1: USB disconnect, device number 2 [ 85.459897][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 85.477332][ T4395] process 'syz.1.16' launched './file0' with NULL argv: empty string added [ 85.507804][ T4396] netlink: 'syz.2.18': attribute type 30 has an invalid length. [ 86.237132][ T4299] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.180221][ T7] cfg80211: failed to load regulatory.db [ 87.360201][ T4299] usb 3-1: Using ep0 maxpacket: 8 [ 87.396014][ T4299] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 87.409610][ T4299] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 87.441960][ T4299] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 87.490081][ T3583] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.497738][ T4299] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.535648][ T4299] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.581660][ T4299] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.594619][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.690330][ T3583] usb 4-1: Using ep0 maxpacket: 8 [ 87.701552][ T3583] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 87.756108][ T3583] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 87.790200][ T3583] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 87.828280][ T3583] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.842681][ T4299] usb 3-1: usb_control_msg returned -32 [ 87.852059][ T4299] usbtmc 3-1:16.0: can't read capabilities [ 87.886432][ T3583] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.902095][ T4299] usb 3-1: USB disconnect, device number 2 [ 87.969508][ T3583] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.999510][ T3583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.239025][ T3583] usb 4-1: usb_control_msg returned -32 [ 88.245084][ T3583] usbtmc 4-1:16.0: can't read capabilities [ 88.567508][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 88.594836][ T4414] usbtmc 4-1:16.0: Unable to send data, error -71 [ 88.900961][ T4446] netlink: 32 bytes leftover after parsing attributes in process `syz.4.30'. [ 89.085991][ T4294] usb 4-1: USB disconnect, device number 2 [ 89.307481][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 89.348022][ T4451] netlink: 'syz.2.34': attribute type 30 has an invalid length. [ 91.353786][ T4480] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.515935][ T4496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.44'. [ 92.545553][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 92.625343][ T4496] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.634896][ T4496] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.643680][ T4496] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.652453][ T4496] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.914067][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'. [ 92.956082][ T4498] netlink: 'syz.4.47': attribute type 30 has an invalid length. [ 94.314233][ T4299] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.503490][ T4299] usb 4-1: Using ep0 maxpacket: 8 [ 94.515700][ T4299] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 94.716049][ T4299] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 94.777681][ T4299] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 94.876600][ T4299] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.979025][ T4299] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.979531][ T4533] netlink: 32 bytes leftover after parsing attributes in process `syz.2.54'. [ 95.005756][ T4299] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.062775][ T4534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.56'. [ 95.097070][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.409642][ T4299] usb 4-1: usb_control_msg returned -32 [ 95.422373][ T4299] usbtmc 4-1:16.0: can't read capabilities [ 95.483401][ T4299] usb 4-1: USB disconnect, device number 3 [ 96.744265][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 96.772044][ T4555] netlink: 'syz.3.61': attribute type 30 has an invalid length. [ 98.863948][ T4596] block device autoloading is deprecated and will be removed. [ 99.354842][ T4299] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.880486][ T4299] usb 1-1: Using ep0 maxpacket: 8 [ 99.891478][ T4299] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 99.921696][ T4299] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 99.987339][ T4299] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 100.050904][ T4299] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.094573][ T4299] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.170192][ T4299] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.227612][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.298532][ T4299] usb 1-1: usb_control_msg returned -32 [ 101.312310][ T4299] usbtmc 1-1:16.0: can't read capabilities [ 102.735158][ T4627] sched: RT throttling activated [ 102.775571][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 103.008847][ T4600] usbtmc 1-1:16.0: Unable to send data, error -71 [ 103.227428][ T4633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'. [ 103.295437][ T4633] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.304375][ T4633] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.313873][ T4633] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.322878][ T4633] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.558754][ T4630] device wireguard0 entered promiscuous mode [ 104.387776][ T4296] usb 1-1: USB disconnect, device number 3 [ 105.148582][ T4658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.91'. [ 106.275109][ T4667] netlink: del zone limit has 8 unknown bytes [ 108.100250][ T4667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.910126][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.120105][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 109.129223][ T7] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 109.207466][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 109.221574][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 109.234984][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.253278][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.282375][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.308890][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.589678][ T7] usb 1-1: usb_control_msg returned -32 [ 109.595723][ T7] usbtmc 1-1:16.0: can't read capabilities [ 109.860478][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 109.879864][ T4682] usbtmc 1-1:16.0: Unable to send data, error -71 [ 110.197773][ T4703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 110.222113][ T4703] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.231231][ T4703] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.240158][ T4703] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.248900][ T4703] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.150860][ T4733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 112.181444][ T4733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.188935][ T4733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.204043][ T4297] usb 1-1: USB disconnect, device number 4 [ 112.437752][ T4733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.462114][ T4733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.264206][ T4254] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11 [ 114.477967][ T4756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.112'. [ 114.867652][ T4762] netlink: del zone limit has 8 unknown bytes [ 116.984834][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 117.070089][ T4786] netlink: 'syz.4.119': attribute type 30 has an invalid length. [ 117.250036][ T4299] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.670100][ T4299] usb 4-1: Using ep0 maxpacket: 8 [ 117.678485][ T4299] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 117.807857][ T4299] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 117.899657][ T4797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 117.908752][ T4797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.909608][ T4299] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 117.965400][ T4797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.016237][ T4797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.024236][ T4797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.059098][ T4299] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.143826][ T4299] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.435488][ T4299] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.467897][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.706894][ T4299] usb 4-1: usb_control_msg returned -32 [ 118.712853][ T4299] usbtmc 4-1:16.0: can't read capabilities [ 118.830125][ T4294] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.017435][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 119.026893][ T4783] usbtmc 4-1:16.0: Unable to send data, error -71 [ 119.049914][ T4299] usb 4-1: USB disconnect, device number 4 [ 119.936229][ T4294] usb 2-1: Using ep0 maxpacket: 8 [ 119.979074][ T4294] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 120.019328][ T4294] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 120.064457][ T4294] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 120.111124][ T4294] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.130545][ T4294] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.150055][ T4294] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.170030][ T4294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.442714][ T4294] usb 2-1: usb_control_msg returned -32 [ 120.450080][ T4294] usbtmc 2-1:16.0: can't read capabilities [ 121.384122][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 121.403824][ T4809] usbtmc 2-1:16.0: Unable to send data, error -71 [ 123.136190][ T4835] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 123.697978][ T4294] usb 2-1: USB disconnect, device number 3 [ 124.887279][ T4854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.135'. [ 125.260907][ T4856] netlink: del zone limit has 8 unknown bytes [ 127.725028][ T4873] capability: warning: `syz.0.139' uses 32-bit capabilities (legacy support in use) [ 129.860112][ T4296] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.050045][ T4296] usb 3-1: Using ep0 maxpacket: 8 [ 130.057476][ T4296] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 130.078835][ T4296] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 130.090531][ T4296] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 130.101313][ T4296] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.111582][ T4296] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.125370][ T4296] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.135008][ T4296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.377411][ T4296] usb 3-1: usb_control_msg returned -32 [ 130.383182][ T4296] usbtmc 3-1:16.0: can't read capabilities [ 130.648766][ T4266] Bluetooth: hci5: sending frame failed (-49) [ 130.657274][ T4254] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 130.755337][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 130.765584][ T4893] usbtmc 3-1:16.0: Unable to send data, error -71 [ 130.795282][ T4907] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 131.742273][ T4338] usb 3-1: USB disconnect, device number 3 [ 132.922371][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.928763][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.089852][ T4918] netlink: 'syz.1.151': attribute type 1 has an invalid length. [ 135.558447][ T4918] device bond1 entered promiscuous mode [ 135.643819][ T4918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.881220][ T4927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.936930][ T4927] bond1: (slave bond2): making interface the new active one [ 135.975250][ T4927] device bond2 entered promiscuous mode [ 135.995925][ T4927] bond1: (slave bond2): Enslaving as an active interface with an up link [ 136.035377][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 136.118718][ T4943] capability: warning: `syz.2.156' uses deprecated v2 capabilities in a way that may be insecure [ 136.452181][ T4958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.158'. [ 136.584249][ T4962] netlink: del zone limit has 8 unknown bytes [ 136.592908][ T4963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.160'. [ 141.508267][ T4996] Zero length message leads to an empty skb [ 141.579249][ T4997] netlink: 'syz.2.163': attribute type 10 has an invalid length. [ 141.669682][ T4997] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 142.434549][ T5013] netlink: 'syz.0.171': attribute type 1 has an invalid length. [ 142.641159][ T5013] device bond1 entered promiscuous mode [ 142.688150][ T5013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.833140][ T5019] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.870160][ T4266] Bluetooth: hci5: sending frame failed (-49) [ 142.877550][ T4254] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 143.022597][ T5019] bond1: (slave bond2): making interface the new active one [ 143.035460][ T5019] device bond2 entered promiscuous mode [ 143.046606][ T5019] bond1: (slave bond2): Enslaving as an active interface with an up link [ 143.831838][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 145.112036][ T5034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.175'. [ 146.305199][ T5052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.179'. [ 146.351869][ T5054] Bluetooth: hci5: Frame reassembly failed (-84) [ 146.455727][ T5052] netlink: del zone limit has 8 unknown bytes [ 146.514448][ T4304] Bluetooth: hci5: Frame reassembly failed (-84) [ 148.265890][ T5078] tap0: tun_chr_ioctl cmd 1074025675 [ 148.271524][ T5078] tap0: persist enabled [ 148.289276][ T5078] tap0: tun_chr_ioctl cmd 1074025675 [ 148.356118][ T5078] tap0: persist disabled [ 148.366738][ T4266] Bluetooth: hci5: command 0xfc11 tx timeout [ 148.374180][ T4254] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 150.371511][ T5092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.187'. [ 150.492596][ T5098] netlink: del zone limit has 8 unknown bytes [ 150.634429][ T5101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.189'. [ 151.618267][ T5110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.201'. [ 151.667745][ T5109] netlink: 'syz.4.191': attribute type 1 has an invalid length. [ 151.759194][ T5109] device bond1 entered promiscuous mode [ 151.793734][ T5109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.080130][ T5112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.102111][ T5112] bond1: (slave bond2): making interface the new active one [ 152.109800][ T5112] device bond2 entered promiscuous mode [ 152.128702][ T5112] bond1: (slave bond2): Enslaving as an active interface with an up link [ 152.142592][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 158.001370][ T5163] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 158.075758][ T5163] device bond1 entered promiscuous mode [ 158.126070][ T5163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.140711][ T5164] Bluetooth: hci5: Frame reassembly failed (-84) [ 158.184834][ T4550] Bluetooth: hci5: Frame reassembly failed (-84) [ 158.272645][ T5168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.321486][ T5168] bond1: (slave bond2): making interface the new active one [ 158.340148][ T5168] device bond2 entered promiscuous mode [ 158.360223][ T5168] bond1: (slave bond2): Enslaving as an active interface with an up link [ 158.381131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 158.527755][ T5172] tap0: tun_chr_ioctl cmd 1074025675 [ 158.562738][ T5172] tap0: persist enabled [ 158.597220][ T5175] tap0: tun_chr_ioctl cmd 1074025675 [ 158.665157][ T5175] tap0: persist disabled [ 158.930103][ T4338] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 159.160422][ T4338] usb 4-1: Using ep0 maxpacket: 8 [ 159.170831][ T4338] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 159.237764][ T4338] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 159.377545][ T4338] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 159.479103][ T4338] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.503103][ T4338] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.557286][ T4338] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.628968][ T4338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.916566][ T4338] usb 4-1: usb_control_msg returned -32 [ 159.932470][ T4338] usbtmc 4-1:16.0: can't read capabilities [ 160.176924][ T4297] usb 4-1: USB disconnect, device number 5 [ 160.210226][ T4254] Bluetooth: hci5: command 0xfc11 tx timeout [ 160.217742][ T4267] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 161.654939][ T5194] input: syz1 as /devices/virtual/input/input6 [ 164.820832][ T5230] Bluetooth: hci5: Frame reassembly failed (-84) [ 164.850391][ T4304] Bluetooth: hci5: Frame reassembly failed (-84) [ 166.325339][ T5238] Bluetooth: MGMT ver 1.22 [ 166.700154][ T4338] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 166.840545][ T4267] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 166.890109][ T4338] usb 5-1: Using ep0 maxpacket: 8 [ 166.940992][ T4338] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 166.973953][ T4338] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 167.011363][ T4338] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 168.482923][ T4254] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 168.493898][ T4254] Bluetooth: hci0: command 0x0c1a tx timeout [ 168.524965][ T4338] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.578882][ T4338] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.787604][ T4338] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.837726][ T4338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.951072][ T5247] tap0: tun_chr_ioctl cmd 1074025675 [ 169.010244][ T5247] tap0: persist enabled [ 169.015054][ T5248] tap0: tun_chr_ioctl cmd 1074025675 [ 169.026375][ T5248] tap0: persist disabled [ 169.153102][ T4338] usb 5-1: usb_control_msg returned -32 [ 169.165000][ T4338] usbtmc 5-1:16.0: can't read capabilities [ 171.089585][ T4296] usb 5-1: USB disconnect, device number 2 [ 171.250305][ T5270] netlink: 'syz.4.237': attribute type 1 has an invalid length. [ 171.440688][ T5270] device bond3 entered promiscuous mode [ 171.474049][ T5270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.536464][ T5274] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.551463][ T5274] bond3: (slave bond4): making interface the new active one [ 171.558963][ T5274] device bond4 entered promiscuous mode [ 171.570497][ T5274] bond3: (slave bond4): Enslaving as an active interface with an up link [ 171.579166][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 172.679696][ T5287] netlink: 'syz.0.235': attribute type 10 has an invalid length. [ 172.935911][ T5287] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 173.790463][ T5297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.240'. [ 175.486600][ T5308] vxcan1: tx drop: invalid sa for name 0x0000010000000001 [ 176.984826][ T5328] tap0: tun_chr_ioctl cmd 1074025675 [ 177.010027][ T5328] tap0: persist enabled [ 177.023695][ T5328] tap0: tun_chr_ioctl cmd 1074025675 [ 177.087265][ T5328] tap0: persist disabled [ 177.126919][ T5331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.252'. [ 180.104167][ T5367] netlink: 'syz.1.258': attribute type 1 has an invalid length. [ 180.272267][ T5367] device bond3 entered promiscuous mode [ 180.331302][ T5367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.002006][ T5387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.262'. [ 181.720149][ T5399] tap0: tun_chr_ioctl cmd 1074025675 [ 181.725515][ T5399] tap0: persist enabled [ 181.755271][ T5399] tap0: tun_chr_ioctl cmd 1074025675 [ 181.769870][ T5399] tap0: persist disabled [ 181.800141][ T4266] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.806382][ T4254] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 181.821220][ T4254] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 182.496892][ T5407] ======================================================= [ 182.496892][ T5407] WARNING: The mand mount option has been deprecated and [ 182.496892][ T5407] and is ignored by this kernel. Remove the mand [ 182.496892][ T5407] option from the mount to silence this warning. [ 182.496892][ T5407] ======================================================= [ 182.560343][ T5407] 9pnet_virtio: no channels available for device syz [ 183.880032][ T4254] Bluetooth: hci0: command 0x0401 tx timeout [ 189.311548][ T5455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.281'. [ 189.975522][ T5469] vxcan1: tx drop: invalid sa for name 0x0000010000000001 [ 190.795161][ T5482] tap0: tun_chr_ioctl cmd 1074025675 [ 190.818546][ T5482] tap0: persist enabled [ 190.833882][ T5482] tap0: tun_chr_ioctl cmd 1074025675 [ 190.872869][ T5482] tap0: persist disabled [ 191.359775][ T5488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 194.364284][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.386607][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.411486][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 194.476929][ T5514] device erspan0 entered promiscuous mode [ 194.537642][ T5514] device macvtap1 entered promiscuous mode [ 194.861916][ T5509] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.868410][ T5509] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 194.890382][ T5509] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.897114][ T5509] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 194.904937][ T5509] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.920838][ T5509] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 194.930462][ T5509] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 194.950208][ T5509] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 195.060354][ T5509] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 195.238753][ T5509] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 195.280208][ T5509] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 195.286989][ T5509] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 195.359252][ T5509] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 195.462114][ T5509] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.496606][ T5533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.301'. [ 195.505961][ T5509] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 195.512780][ T5509] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 195.532891][ T5536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 195.907057][ T5545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.303'. [ 196.540183][ T4266] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.961080][ T4254] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.000081][ T4254] Bluetooth: hci3: command 0x0c1a tx timeout [ 197.320200][ T4254] Bluetooth: hci4: command 0x0c1a tx timeout [ 197.490035][ T4254] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.833503][ T5556] Bluetooth: hci5: Frame reassembly failed (-84) [ 198.612995][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 199.000016][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 199.082409][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 199.470295][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 199.572907][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 199.880148][ T4266] Bluetooth: hci5: command 0xfc11 tx timeout [ 199.889355][ T4254] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 200.680926][ T4266] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.687007][ T4254] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 202.547615][ T5585] device wireguard0 entered promiscuous mode [ 202.770306][ T4266] Bluetooth: hci0: command 0x0401 tx timeout [ 202.942172][ T4254] Bluetooth: hci5: sending frame failed (-49) [ 202.951867][ T4266] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 204.664567][ T5609] netlink: 'syz.3.318': attribute type 1 has an invalid length. [ 204.856851][ T5609] device bond3 entered promiscuous mode [ 204.886126][ T5609] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.252932][ T5605] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 205.362733][ T5605] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 205.369419][ T5605] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 205.378655][ T5605] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 205.389054][ T5605] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.396212][ T5605] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 205.442174][ T5605] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 205.452686][ T5605] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.459152][ T5605] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 205.585321][ T5605] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 205.748597][ T5605] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 205.865149][ T5605] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 206.040090][ T5605] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 206.068374][ T5605] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 206.088648][ T5605] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 206.130202][ T5605] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 206.594108][ T5629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.321'. [ 206.809185][ T5632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.322'. [ 208.677199][ T4254] Bluetooth: hci2: command 0x0c1a tx timeout [ 208.677624][ T4266] Bluetooth: hci0: command 0x0c1a tx timeout [ 208.683287][ T4254] Bluetooth: hci3: command 0x0c1a tx timeout [ 208.706864][ T4254] Bluetooth: hci4: command 0x0c1a tx timeout [ 208.713264][ T4254] Bluetooth: hci1: command 0x0c1a tx timeout [ 210.760174][ T4267] Bluetooth: hci0: command 0x0406 tx timeout [ 210.760731][ T4254] Bluetooth: hci2: command 0x0406 tx timeout [ 210.766221][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 210.772279][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 210.778334][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 212.841587][ T4258] Bluetooth: hci0: command 0x0c1a tx timeout [ 213.535748][ T5672] device wireguard0 entered promiscuous mode [ 214.167609][ T5691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 214.259789][ T5691] device erspan0 entered promiscuous mode [ 214.293576][ T5691] device macvtap1 entered promiscuous mode [ 215.871346][ T5704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.338'. [ 216.410369][ T4258] Bluetooth: hci5: sending frame failed (-49) [ 216.418077][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 219.146121][ T5746] device vlan2 entered promiscuous mode [ 219.382018][ T5751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.347'. [ 219.542390][ T5752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 220.250215][ T4338] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 220.481353][ T4338] usb 3-1: Using ep0 maxpacket: 8 [ 220.489119][ T4338] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 220.528671][ T4338] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 220.564815][ T4338] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 220.593215][ T4338] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.704794][ T4338] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.809292][ T4338] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.856736][ T4338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.378860][ T4338] usb 3-1: usb_control_msg returned -71 [ 221.384669][ T4338] usbtmc 3-1:16.0: can't read capabilities [ 221.405377][ T5752] device hsr_slave_1 left promiscuous mode [ 221.488058][ T4338] usb 3-1: USB disconnect, device number 4 [ 222.314321][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 222.696533][ T5785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.359'. [ 223.281069][ T4338] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 223.473120][ T4338] usb 1-1: Using ep0 maxpacket: 8 [ 223.498238][ T4338] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 223.525512][ T4338] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 223.546147][ T5798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 223.558379][ T4338] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 223.599027][ T4338] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.632333][ T4338] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.650019][ T4338] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.673962][ T4338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.965566][ T4338] usb 1-1: usb_control_msg returned -32 [ 223.971571][ T4338] usbtmc 1-1:16.0: can't read capabilities [ 224.185311][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 224.198703][ T5791] usbtmc 1-1:16.0: Unable to send data, error -71 [ 224.360100][ T4258] Bluetooth: hci5: command 0x1003 tx timeout [ 224.360135][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 224.653309][ T5809] device vlan2 entered promiscuous mode [ 224.665639][ T4296] usb 1-1: USB disconnect, device number 5 [ 224.864141][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 225.377871][ T5813] device hsr_slave_1 left promiscuous mode [ 225.394170][ T5815] netlink: 32 bytes leftover after parsing attributes in process `syz.4.367'. [ 225.799766][ T27] audit: type=1326 audit(1739250138.836:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.1.371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d1098cde9 code=0x0 [ 225.860051][ T4338] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 226.150517][ T4338] usb 1-1: Using ep0 maxpacket: 8 [ 226.160830][ T4338] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 226.247643][ T4338] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 226.310185][ T4338] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 226.441418][ T4338] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.515603][ T4338] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.597777][ T4338] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.647954][ T4338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.899384][ T4338] usb 1-1: usb_control_msg returned -32 [ 226.905586][ T4338] usbtmc 1-1:16.0: can't read capabilities [ 226.966848][ T5834] device wireguard0 entered promiscuous mode [ 227.410711][ T4296] usb 1-1: USB disconnect, device number 6 [ 228.692606][ T4296] libceph: connect (1)[c::]:6789 error -101 [ 228.700286][ T4296] libceph: mon0 (1)[c::]:6789 connect error [ 228.876802][ T5860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.377'. [ 228.971872][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 228.989540][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 229.363218][ T5848] ceph: No mds server is up or the cluster is laggy [ 230.490138][ T4296] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 230.690116][ T4296] usb 2-1: Using ep0 maxpacket: 8 [ 230.698740][ T4296] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 230.734228][ T4296] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 230.767477][ T4296] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 230.796117][ T4296] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.859668][ T4296] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.903538][ T4296] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.916233][ T4296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.163705][ T4296] usb 2-1: usb_control_msg returned -32 [ 231.169380][ T4296] usbtmc 2-1:16.0: can't read capabilities [ 231.407520][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 231.418905][ T5880] usbtmc 2-1:16.0: Unable to send data, error -71 [ 231.503456][ T5895] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 231.624511][ T4299] usb 2-1: USB disconnect, device number 4 [ 231.668580][ T5895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.725001][ T5895] bond0: (slave rose0): Enslaving as an active interface with an up link [ 231.782766][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 232.903934][ T5927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.388'. [ 234.090850][ T5946] device wireguard0 entered promiscuous mode [ 234.670190][ T5955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.395'. [ 236.467479][ T4254] Bluetooth: hci5: sending frame failed (-49) [ 236.475984][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 237.230677][ T6008] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 237.427746][ T3583] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 237.810348][ T3583] usb 4-1: Using ep0 maxpacket: 8 [ 237.829209][ T3583] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 237.844073][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 237.860118][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.887607][ T3583] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 237.918696][ T3583] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 237.935491][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.962412][ T3583] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.975460][ T3583] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.990431][ T3583] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.003975][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.013857][ T3583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.042187][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.315615][ T3583] usb 4-1: usb_control_msg returned -32 [ 238.322083][ T3583] usbtmc 4-1:16.0: can't read capabilities [ 238.340131][ T4338] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 238.570055][ T4338] usb 1-1: Using ep0 maxpacket: 8 [ 238.578527][ T4338] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 238.615513][ T4338] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 238.666189][ T4338] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 238.706024][ T4338] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.751881][ T4338] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.806860][ T4338] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.860955][ T4338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.194868][ T4338] usb 1-1: usb_control_msg returned -32 [ 239.204475][ T4338] usbtmc 1-1:16.0: can't read capabilities [ 239.768208][ T4338] usb 4-1: USB disconnect, device number 6 [ 239.993803][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.411'. [ 240.565010][ T4338] usb 1-1: USB disconnect, device number 7 [ 240.735709][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.412'. [ 241.787238][ T47] Bluetooth: hci5: Frame reassembly failed (-84) [ 242.786748][ T6089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.421'. [ 242.821622][ T6088] tap0: tun_chr_ioctl cmd 1074025675 [ 242.841384][ T6088] tap0: persist enabled [ 242.855944][ T6088] tap0: tun_chr_ioctl cmd 1074025675 [ 242.862103][ T6088] tap0: persist disabled [ 243.309986][ T4299] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 243.481664][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 243.660257][ T4299] usb 2-1: device descriptor read/64, error -32 [ 243.870944][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 243.878913][ T4254] Bluetooth: hci5: command 0x1003 tx timeout [ 244.091399][ T4299] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 244.852511][ T6107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.426'. [ 244.940018][ T4299] usb 2-1: Using ep0 maxpacket: 8 [ 244.948270][ T4299] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 245.036281][ T4299] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 245.070796][ T4299] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 245.101397][ T4299] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.120080][ T4299] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.190359][ T4299] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.228774][ T4299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.304640][ T6118] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 245.471983][ T4299] usb 2-1: usb_control_msg returned -32 [ 245.478030][ T4299] usbtmc 2-1:16.0: can't read capabilities [ 245.713417][ T4299] usb 2-1: USB disconnect, device number 6 [ 246.934388][ T3583] libceph: connect (1)[c::]:6789 error -101 [ 246.942294][ T3583] libceph: mon0 (1)[c::]:6789 connect error [ 246.992890][ T6149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.434'. [ 247.214699][ T3583] libceph: connect (1)[c::]:6789 error -101 [ 247.223208][ T3583] libceph: mon0 (1)[c::]:6789 connect error [ 247.738180][ T6144] ceph: No mds server is up or the cluster is laggy [ 247.750461][ T3583] libceph: connect (1)[c::]:6789 error -101 [ 247.756486][ T3583] libceph: mon0 (1)[c::]:6789 connect error [ 248.932436][ T6155] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 249.019019][ T6155] device bond5 entered promiscuous mode [ 249.039539][ T6155] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.446351][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 249.870300][ T4296] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 250.071037][ T4296] usb 4-1: Using ep0 maxpacket: 8 [ 250.080607][ T4296] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 250.113462][ T4296] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 250.168401][ T4296] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 250.196659][ T4296] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 250.233786][ T4296] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.261935][ T4296] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 250.272809][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.516873][ T4296] usb 4-1: usb_control_msg returned -32 [ 250.522870][ T4296] usbtmc 4-1:16.0: can't read capabilities [ 250.531989][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.446'. [ 251.035252][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 251.494837][ T7] usb 4-1: USB disconnect, device number 7 [ 252.733909][ T4296] libceph: connect (1)[c::]:6789 error -101 [ 252.745083][ T4296] libceph: mon0 (1)[c::]:6789 connect error [ 253.022123][ T4296] libceph: connect (1)[c::]:6789 error -101 [ 253.028206][ T4296] libceph: mon0 (1)[c::]:6789 connect error [ 253.546250][ T6206] ceph: No mds server is up or the cluster is laggy [ 253.600833][ T4296] libceph: connect (1)[c::]:6789 error -101 [ 253.639282][ T4296] libceph: mon0 (1)[c::]:6789 connect error [ 254.096649][ T6192] Can't find ip_set type hash:ma [ 254.446178][ T4267] Bluetooth: hci5: sending frame failed (-49) [ 254.455925][ T4254] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 254.499199][ T6120] Set syz1 is full, maxelem 65536 reached [ 254.859202][ T6237] 9p: Unknown Cache mode fscach [ 254.968599][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'. [ 255.054636][ T6241] netlink: 32 bytes leftover after parsing attributes in process `syz.4.456'. [ 256.137709][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.144172][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.230380][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 256.887956][ T6260] device wireguard0 entered promiscuous mode [ 257.653564][ T6268] Bluetooth: hci5: Frame reassembly failed (-84) [ 257.665010][ T56] Bluetooth: hci5: Frame reassembly failed (-84) [ 257.684556][ T6267] netlink: 'syz.3.464': attribute type 1 has an invalid length. [ 257.695703][ T56] Bluetooth: hci5: Frame reassembly failed (-84) [ 257.792959][ T6267] device bond4 entered promiscuous mode [ 257.810481][ T6267] 8021q: adding VLAN 0 to HW filter on device bond4 [ 258.641276][ T6279] netlink: 36 bytes leftover after parsing attributes in process `syz.2.467'. [ 259.721328][ T4267] Bluetooth: hci5: command 0xfc11 tx timeout [ 259.721379][ T4254] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 260.082927][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 261.389139][ T6323] netlink: 32 bytes leftover after parsing attributes in process `syz.0.480'. [ 262.340041][ T4299] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 262.540732][ T4299] usb 5-1: Using ep0 maxpacket: 8 [ 262.551987][ T4299] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 262.603627][ T4299] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 262.713555][ T4299] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 262.806866][ T4299] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.861063][ T4299] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.928294][ T4299] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 262.946766][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.962558][ T6333] device wireguard0 entered promiscuous mode [ 263.183718][ T4299] usb 5-1: usb_control_msg returned -32 [ 264.023128][ T4299] usbtmc 5-1:16.0: can't read capabilities [ 265.289449][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 265.713963][ T4296] usb 5-1: USB disconnect, device number 3 [ 266.402400][ T6372] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 266.520038][ T4267] Bluetooth: hci5: command 0x1003 tx timeout [ 266.520074][ T4258] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 267.218206][ T7] libceph: connect (1)[c::]:6789 error -101 [ 267.245383][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 267.533943][ T3583] libceph: connect (1)[c::]:6789 error -101 [ 267.566955][ T3583] libceph: mon0 (1)[c::]:6789 connect error [ 267.942889][ T6375] ceph: No mds server is up or the cluster is laggy [ 269.787601][ T6401] netlink: 32 bytes leftover after parsing attributes in process `syz.4.498'. [ 274.040094][ T4267] Bluetooth: hci5: command 0x1003 tx timeout [ 274.048282][ T4258] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 274.330017][ T4299] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 275.050119][ T4299] usb 3-1: Using ep0 maxpacket: 8 [ 275.611542][ T4299] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 275.670684][ T4299] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 275.673470][ T6451] 9p: Unknown Cache mode fscach [ 275.706213][ T4299] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 275.722437][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'. [ 275.737179][ T4299] usb 3-1: config 250 has no interface number 0 [ 275.756373][ T4299] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 275.789005][ T4299] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 275.817050][ T4299] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 275.860568][ T4299] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 275.904151][ T4299] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 275.987095][ T4299] usb 3-1: config 250 interface 228 has no altsetting 0 [ 276.046482][ T4299] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 276.127085][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 276.195749][ T4299] usb 3-1: Product: syz [ 276.215075][ T4299] usb 3-1: SerialNumber: syz [ 276.272574][ T4299] hub 3-1:250.228: bad descriptor, ignoring hub [ 276.299744][ T4299] hub: probe of 3-1:250.228 failed with error -5 [ 276.476560][ T4299] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 276.971495][ T3583] usb 3-1: USB disconnect, device number 5 [ 276.991764][ T3583] usblp0: removed [ 277.237088][ T26] libceph: connect (1)[c::]:6789 error -101 [ 277.257550][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 277.624508][ T26] libceph: connect (1)[c::]:6789 error -101 [ 278.052151][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 278.338008][ T6485] Bluetooth: hci5: Frame reassembly failed (-84) [ 278.537259][ T6468] ceph: No mds server is up or the cluster is laggy [ 278.879711][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 278.958690][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 279.566956][ T6493] netlink: 32 bytes leftover after parsing attributes in process `syz.2.521'. [ 279.815862][ T4254] Bluetooth: hci6: sending frame failed (-49) [ 279.823080][ T4267] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 280.440261][ T4267] Bluetooth: hci5: command 0xfc11 tx timeout [ 280.446729][ T4258] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 283.546880][ T6541] netlink: 'syz.3.532': attribute type 1 has an invalid length. [ 283.572724][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 283.582759][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 283.654429][ T6541] device bond5 entered promiscuous mode [ 283.688522][ T6541] 8021q: adding VLAN 0 to HW filter on device bond5 [ 283.701443][ T6450] Bluetooth: hci5: Frame reassembly failed (-84) [ 283.852756][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 283.865906][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 284.879583][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 284.885884][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 284.917731][ T6543] ceph: No mds server is up or the cluster is laggy [ 285.540817][ T27] audit: type=1326 audit(1739250198.586:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.0.542" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ca7b8cde9 code=0x0 [ 285.726758][ T4258] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 285.726852][ T4267] Bluetooth: hci5: command 0x1003 tx timeout [ 286.612621][ T6592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.588324][ T6612] device wireguard0 entered promiscuous mode [ 288.959443][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 288.967837][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 289.241618][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 289.248960][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 289.748699][ T6624] ceph: No mds server is up or the cluster is laggy [ 289.786424][ T3583] libceph: connect (1)[c::]:6789 error -101 [ 289.806300][ T3583] libceph: mon0 (1)[c::]:6789 connect error [ 317.245283][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.251743][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.681850][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.688191][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 437.560184][ T28] INFO: task udevd:3623 blocked for more than 143 seconds. [ 437.567785][ T28] Not tainted 6.1.128-syzkaller #0 [ 437.573554][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.589359][ T28] task:udevd state:D stack:22600 pid:3623 ppid:1 flags:0x00004002 [ 437.598866][ T28] Call Trace: [ 437.603165][ T28] [ 437.606164][ T28] __schedule+0x143f/0x4570 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 437.610808][ T28] ? release_firmware_map_entry+0x186/0x186 [ 437.616743][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 437.622676][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 437.627933][ T28] schedule+0xbf/0x180 [ 437.632239][ T28] schedule_preempt_disabled+0xf/0x20 [ 437.679975][ T28] __mutex_lock+0x6b9/0xd80 [ 437.684569][ T28] ? __mutex_lock+0x53c/0xd80 [ 437.689279][ T28] ? uevent_show+0x176/0x330 [ 437.719017][ T28] ? mutex_lock_nested+0x10/0x10 [ 437.726706][ T28] uevent_show+0x176/0x330 [ 437.731592][ T28] dev_attr_show+0x50/0xb0 [ 437.736045][ T28] ? device_get_ownership+0xa0/0xa0 [ 437.741328][ T28] sysfs_kf_seq_show+0x32d/0x4b0 [ 437.746287][ T28] seq_read_iter+0x43a/0xd10 [ 437.751831][ T28] vfs_read+0x88d/0xbf0 [ 437.756037][ T28] ? kernel_read+0x1f0/0x1f0 [ 437.760821][ T28] ? kmem_cache_free+0x292/0x510 [ 437.765801][ T28] ? __ia32_sys_newlstat+0x180/0x180 [ 437.771149][ T28] ? __fdget_pos+0x2c1/0x360 [ 437.775774][ T28] ksys_read+0x19c/0x2c0 [ 437.780103][ T28] ? print_irqtrace_events+0x210/0x210 [ 437.785593][ T28] ? vfs_write+0xbc0/0xbc0 [ 437.790124][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 437.796138][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 437.801455][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 437.807492][ T28] do_syscall_64+0x3b/0xb0 [ 437.811965][ T28] ? clear_bhb_loop+0x45/0xa0 [ 437.816665][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.822611][ T28] RIP: 0033:0x7f2fc4116b6a [ 437.827050][ T28] RSP: 002b:00007ffc00f63dc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 437.835509][ T28] RAX: ffffffffffffffda RBX: 00005628e7fa1330 RCX: 00007f2fc4116b6a [ 437.843564][ T28] RDX: 0000000000001000 RSI: 00005628e7f9f720 RDI: 000000000000000c [ 437.852577][ T28] RBP: 00005628e7fa1330 R08: 000000000000000c R09: 0000000000000000 [ 437.860667][ T28] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 437.868695][ T28] R13: 0000000000003fff R14: 00007ffc00f642a8 R15: 000000000000000a [ 437.876875][ T28] [ 437.880097][ T28] INFO: task kworker/u4:10:4550 blocked for more than 143 seconds. [ 437.888018][ T28] Not tainted 6.1.128-syzkaller #0 [ 437.893781][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.902523][ T28] task:kworker/u4:10 state:D stack:22328 pid:4550 ppid:2 flags:0x00004000 [ 437.911847][ T28] Workqueue: nfc2_nci_cmd_wq nci_cmd_work [ 437.917615][ T28] Call Trace: [ 437.921060][ T28] [ 437.924038][ T28] __schedule+0x143f/0x4570 [ 437.928573][ T28] ? release_firmware_map_entry+0x186/0x186 [ 437.934543][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 437.940084][ T28] ? wq_worker_sleeping+0x5f/0x270 [ 437.945220][ T28] schedule+0xbf/0x180 [ 437.949286][ T28] schedule_preempt_disabled+0xf/0x20 [ 437.955452][ T28] __mutex_lock+0x6b9/0xd80 [ 437.960300][ T28] ? __mutex_lock+0x53c/0xd80 [ 437.965013][ T28] ? virtual_nci_send+0x1c/0xd0 [ 437.969969][ T28] ? mutex_lock_nested+0x10/0x10 [ 437.974948][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 437.981049][ T28] ? do_raw_read_unlock+0x38/0x70 [ 437.986198][ T28] ? _raw_read_unlock+0x24/0x40 [ 437.991189][ T28] ? nfc_send_to_raw_sock+0x219/0x240 [ 437.996590][ T28] ? kfree_skb_reason+0x186/0x390 [ 438.001689][ T28] virtual_nci_send+0x1c/0xd0 [ 438.006769][ T28] nci_cmd_work+0xa4/0x2a0 [ 438.011254][ T28] ? process_one_work+0x886/0x11d0 [ 438.016392][ T28] ? process_one_work+0x7a9/0x11d0 [ 438.021588][ T28] process_one_work+0x8a9/0x11d0 [ 438.026580][ T28] ? worker_detach_from_pool+0x260/0x260 [ 438.032293][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 438.037885][ T28] ? kthread_data+0x4e/0xc0 [ 438.042489][ T28] ? wq_worker_running+0x97/0x190 [ 438.047531][ T28] worker_thread+0xa47/0x1200 [ 438.052310][ T28] ? release_firmware_map_entry+0x186/0x186 [ 438.058818][ T28] kthread+0x28d/0x320 [ 438.062956][ T28] ? worker_clr_flags+0x190/0x190 [ 438.068034][ T28] ? kthread_blkcg+0xd0/0xd0 [ 438.072692][ T28] ret_from_fork+0x1f/0x30 [ 438.077150][ T28] [ 438.080250][ T28] INFO: task syz.3.545:6585 blocked for more than 143 seconds. [ 438.087834][ T28] Not tainted 6.1.128-syzkaller #0 [ 438.093651][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.102382][ T28] task:syz.3.545 state:D stack:24152 pid:6585 ppid:4253 flags:0x00004004 [ 438.111654][ T28] Call Trace: [ 438.114961][ T28] [ 438.117895][ T28] __schedule+0x143f/0x4570 [ 438.122557][ T28] ? release_firmware_map_entry+0x186/0x186 [ 438.128494][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 438.134079][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 438.139333][ T28] schedule+0xbf/0x180 [ 438.143509][ T28] schedule_preempt_disabled+0xf/0x20 [ 438.148914][ T28] __mutex_lock+0x6b9/0xd80 [ 438.153519][ T28] ? __mutex_lock+0x53c/0xd80 [ 438.159016][ T28] ? nfc_register_device+0x98/0x310 [ 438.164322][ T28] ? mutex_lock_nested+0x10/0x10 [ 438.169303][ T28] ? _raw_spin_unlock+0x24/0x40 [ 438.174257][ T28] ? nfc_llcp_register_device+0x7aa/0x890 [ 438.180051][ T28] nfc_register_device+0x98/0x310 [ 438.185115][ T28] nci_register_device+0x7be/0x900 [ 438.190404][ T28] ? nci_free_device+0x90/0x90 [ 438.195210][ T28] ? nci_hci_allocate+0x1dd/0x2a0 [ 438.200489][ T28] ? nci_allocate_device+0x248/0x350 [ 438.205808][ T28] virtual_ncidev_open+0x55/0xc0 [ 438.210815][ T28] ? virtual_ncidev_ioctl+0x90/0x90 [ 438.216039][ T28] misc_open+0x304/0x380 [ 438.220371][ T28] chrdev_open+0x54a/0x630 [ 438.224815][ T28] ? cd_forget+0x160/0x160 [ 438.229233][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 438.234570][ T28] ? fsnotify_perm+0x472/0x590 [ 438.239458][ T28] ? cd_forget+0x160/0x160 [ 438.243970][ T28] do_dentry_open+0x7f9/0x10f0 [ 438.248779][ T28] path_openat+0x2644/0x2e60 [ 438.253467][ T28] ? mark_lock+0x9a/0x340 [ 438.257858][ T28] ? do_filp_open+0x480/0x480 [ 438.263324][ T28] do_filp_open+0x230/0x480 [ 438.267870][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 438.272612][ T28] ? _raw_spin_unlock+0x24/0x40 [ 438.277539][ T28] ? alloc_fd+0x5a0/0x640 [ 438.281971][ T28] do_sys_openat2+0x13b/0x4f0 [ 438.286728][ T28] ? security_bpf+0x7d/0xa0 [ 438.291299][ T28] ? do_sys_open+0x220/0x220 [ 438.295933][ T28] __x64_sys_openat+0x243/0x290 [ 438.300867][ T28] ? __ia32_sys_open+0x270/0x270 [ 438.305868][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 438.312044][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 438.317287][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 438.323373][ T28] do_syscall_64+0x3b/0xb0 [ 438.327838][ T28] ? clear_bhb_loop+0x45/0xa0 [ 438.332599][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.338528][ T28] RIP: 0033:0x7fefc8d8cde9 [ 438.343009][ T28] RSP: 002b:00007fefc9c40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 438.351485][ T28] RAX: ffffffffffffffda RBX: 00007fefc8fa5fa0 RCX: 00007fefc8d8cde9 [ 438.359465][ T28] RDX: 0000000000000002 RSI: 0000400000000080 RDI: ffffffffffffff9c [ 438.368386][ T28] RBP: 00007fefc8e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 438.376478][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.384535][ T28] R13: 0000000000000000 R14: 00007fefc8fa5fa0 R15: 00007ffefe1d6378 [ 438.392631][ T28] [ 438.395701][ T28] INFO: task syz.3.545:6592 blocked for more than 144 seconds. [ 438.404532][ T28] Not tainted 6.1.128-syzkaller #0 [ 438.410291][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.418982][ T28] task:syz.3.545 state:D stack:26232 pid:6592 ppid:4253 flags:0x00004004 [ 438.428376][ T28] Call Trace: [ 438.431726][ T28] [ 438.434670][ T28] __schedule+0x143f/0x4570 [ 438.439206][ T28] ? release_firmware_map_entry+0x186/0x186 [ 438.445379][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 438.450924][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 438.456137][ T28] schedule+0xbf/0x180 [ 438.460283][ T28] schedule_preempt_disabled+0xf/0x20 [ 438.466407][ T28] __mutex_lock+0x6b9/0xd80 [ 438.470998][ T28] ? __mutex_lock+0x53c/0xd80 [ 438.475700][ T28] ? virtual_nci_close+0x13/0x40 [ 438.480745][ T28] ? mutex_lock_nested+0x10/0x10 [ 438.485710][ T28] ? _raw_spin_unlock+0x40/0x40 [ 438.490690][ T28] ? skb_queue_purge+0x192/0x1c0 [ 438.495660][ T28] virtual_nci_close+0x13/0x40 [ 438.500530][ T28] nci_dev_up+0x954/0xd40 [ 438.504900][ T28] ? nci_core_ntf_packet+0x180/0x180 [ 438.510277][ T28] ? nfc_get_device+0x94/0xf0 [ 438.514999][ T28] ? nfc_release+0x2d0/0x2d0 [ 438.519626][ T28] nfc_dev_up+0x185/0x330 [ 438.524108][ T28] nfc_genl_dev_up+0x80/0xd0 [ 438.528771][ T28] genl_rcv_msg+0xc1a/0xf70 [ 438.533494][ T28] ? genl_bind+0x400/0x400 [ 438.537967][ T28] ? read_lock_is_recursive+0x10/0x10 [ 438.543439][ T28] ? nfc_genl_dump_devices_done+0x60/0x60 [ 438.549210][ T28] netlink_rcv_skb+0x1cd/0x410 [ 438.554050][ T28] ? genl_bind+0x400/0x400 [ 438.558493][ T28] ? netlink_ack+0x1290/0x1290 [ 438.563374][ T28] genl_rcv+0x24/0x40 [ 438.567383][ T28] netlink_unicast+0x7d8/0x970 [ 438.572938][ T28] ? netlink_detachskb+0x90/0x90 [ 438.577966][ T28] ? __virt_addr_valid+0x45b/0x530 [ 438.583204][ T28] ? __phys_addr_symbol+0x2b/0x70 [ 438.588261][ T28] ? __check_object_size+0x4dd/0xa30 [ 438.593659][ T28] ? bpf_lsm_netlink_send+0x5/0x10 [ 438.598800][ T28] netlink_sendmsg+0xa26/0xd60 [ 438.603769][ T28] ? netlink_getsockopt+0x580/0x580 [ 438.609015][ T28] ? aa_sock_msg_perm+0x91/0x150 [ 438.614043][ T28] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 438.619388][ T28] ? security_socket_sendmsg+0x7d/0xa0 [ 438.624930][ T28] ? netlink_getsockopt+0x580/0x580 [ 438.630238][ T28] ____sys_sendmsg+0x5a5/0x8f0 [ 438.635055][ T28] ? __sys_sendmsg_sock+0x30/0x30 [ 438.640308][ T28] __sys_sendmsg+0x2a9/0x390 [ 438.644954][ T28] ? ____sys_sendmsg+0x8f0/0x8f0 [ 438.649982][ T28] ? __sys_recvfrom+0x417/0x4d0 [ 438.654879][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 438.660946][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 438.666974][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 438.672975][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 438.678999][ T28] do_syscall_64+0x3b/0xb0 [ 438.683526][ T28] ? clear_bhb_loop+0x45/0xa0 [ 438.688224][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.694242][ T28] RIP: 0033:0x7fefc8d8cde9 [ 438.698698][ T28] RSP: 002b:00007fefc9bfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.707207][ T28] RAX: ffffffffffffffda RBX: 00007fefc8fa6160 RCX: 00007fefc8d8cde9 [ 438.715248][ T28] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000008 [ 438.723540][ T28] RBP: 00007fefc8e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 438.731907][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.739999][ T28] R13: 0000000000000000 R14: 00007fefc8fa6160 R15: 00007ffefe1d6378 [ 438.748016][ T28] [ 438.751275][ T28] INFO: task syz.0.551:6608 blocked for more than 144 seconds. [ 438.758845][ T28] Not tainted 6.1.128-syzkaller #0 [ 438.764597][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.774138][ T28] task:syz.0.551 state:D stack:24512 pid:6608 ppid:4250 flags:0x00004004 [ 438.783468][ T28] Call Trace: [ 438.786787][ T28] [ 438.789755][ T28] __schedule+0x143f/0x4570 [ 438.794416][ T28] ? release_firmware_map_entry+0x186/0x186 [ 438.800419][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 438.805651][ T28] schedule+0xbf/0x180 [ 438.809725][ T28] schedule_preempt_disabled+0xf/0x20 [ 438.815159][ T28] __mutex_lock+0x6b9/0xd80 [ 438.819697][ T28] ? __mutex_lock+0x53c/0xd80 [ 438.824471][ T28] ? genl_rcv_msg+0x125/0xf70 [ 438.829181][ T28] ? mutex_lock_nested+0x10/0x10 [ 438.834248][ T28] ? reacquire_held_locks+0x660/0x660 [ 438.839673][ T28] ? radix_tree_lookup+0x234/0x280 [ 438.844942][ T28] genl_rcv_msg+0x125/0xf70 [ 438.849481][ T28] ? __lock_acquire+0x125b/0x1f80 [ 438.854621][ T28] ? genl_bind+0x400/0x400 [ 438.859071][ T28] ? read_lock_is_recursive+0x10/0x10 [ 438.864664][ T28] ? __might_sleep+0xb0/0xb0 [ 438.869419][ T28] netlink_rcv_skb+0x1cd/0x410 [ 438.874324][ T28] ? genl_bind+0x400/0x400 [ 438.879407][ T28] ? netlink_ack+0x1290/0x1290 [ 438.884332][ T28] genl_rcv+0x24/0x40 [ 438.888336][ T28] netlink_unicast+0x7d8/0x970 [ 438.893214][ T28] ? netlink_detachskb+0x90/0x90 [ 438.898184][ T28] ? __virt_addr_valid+0x45b/0x530 [ 438.903395][ T28] ? __phys_addr_symbol+0x2b/0x70 [ 438.908474][ T28] ? __check_object_size+0x4dd/0xa30 [ 438.913908][ T28] ? bpf_lsm_netlink_send+0x5/0x10 [ 438.919092][ T28] netlink_sendmsg+0xa26/0xd60 [ 438.924048][ T28] ? netlink_getsockopt+0x580/0x580 [ 438.929275][ T28] ? aa_sock_msg_perm+0x91/0x150 [ 438.934278][ T28] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 438.939607][ T28] ? security_socket_sendmsg+0x7d/0xa0 [ 438.945201][ T28] ? netlink_getsockopt+0x580/0x580 [ 438.950470][ T28] ____sys_sendmsg+0x5a5/0x8f0 [ 438.955261][ T28] ? __sys_sendmsg_sock+0x30/0x30 [ 438.960557][ T28] __sys_sendmsg+0x2a9/0x390 [ 438.965188][ T28] ? ____sys_sendmsg+0x8f0/0x8f0 [ 438.970362][ T28] ? bpf_raw_tracepoint_open+0xcf/0x210 [ 438.975941][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 438.982678][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 438.988701][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 438.993974][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 439.000136][ T28] do_syscall_64+0x3b/0xb0 [ 439.004556][ T28] ? clear_bhb_loop+0x45/0xa0 [ 439.009227][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.015185][ T28] RIP: 0033:0x7f3ca7b8cde9 [ 439.019619][ T28] RSP: 002b:00007f3ca8ac4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.028098][ T28] RAX: ffffffffffffffda RBX: 00007f3ca7da5fa0 RCX: 00007f3ca7b8cde9 [ 439.036160][ T28] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000004 [ 439.044237][ T28] RBP: 00007f3ca7c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 439.052295][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.060349][ T28] R13: 0000000000000000 R14: 00007f3ca7da5fa0 R15: 00007ffdf7450f68 [ 439.068365][ T28] [ 439.071477][ T28] INFO: task syz.0.551:6609 blocked for more than 144 seconds. [ 439.079032][ T28] Not tainted 6.1.128-syzkaller #0 [ 439.085561][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.094338][ T28] task:syz.0.551 state:D stack:24664 pid:6609 ppid:4250 flags:0x00004004 [ 439.103616][ T28] Call Trace: [ 439.106921][ T28] [ 439.109930][ T28] __schedule+0x143f/0x4570 [ 439.114492][ T28] ? release_firmware_map_entry+0x186/0x186 [ 439.120482][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 439.125998][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 439.131286][ T28] schedule+0xbf/0x180 [ 439.135377][ T28] schedule_preempt_disabled+0xf/0x20 [ 439.140863][ T28] __mutex_lock+0x6b9/0xd80 [ 439.145480][ T28] ? __mutex_lock+0x53c/0xd80 [ 439.150261][ T28] ? genl_rcv_msg+0x125/0xf70 [ 439.154987][ T28] ? mutex_lock_nested+0x10/0x10 [ 439.160167][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 439.166200][ T28] ? print_irqtrace_events+0x210/0x210 [ 439.171748][ T28] ? radix_tree_lookup+0x234/0x280 [ 439.176904][ T28] genl_rcv_msg+0x125/0xf70 [ 439.181541][ T28] ? __lock_acquire+0x125b/0x1f80 [ 439.187227][ T28] ? genl_bind+0x400/0x400 [ 439.191861][ T28] ? read_lock_is_recursive+0x10/0x10 [ 439.197282][ T28] ? __might_sleep+0xb0/0xb0 [ 439.202007][ T28] ? ref_tracker_free+0x638/0x7d0 [ 439.207058][ T28] ? memcpy+0x3c/0x60 [ 439.211132][ T28] ? refcount_inc+0x80/0x80 [ 439.215652][ T28] ? __copy_skb_header+0x47b/0x600 [ 439.220873][ T28] netlink_rcv_skb+0x1cd/0x410 [ 439.225691][ T28] ? genl_bind+0x400/0x400 [ 439.230201][ T28] ? netlink_ack+0x1290/0x1290 [ 439.235029][ T28] genl_rcv+0x24/0x40 [ 439.239029][ T28] netlink_unicast+0x7d8/0x970 [ 439.243885][ T28] ? netlink_detachskb+0x90/0x90 [ 439.248875][ T28] ? __virt_addr_valid+0x45b/0x530 [ 439.254054][ T28] ? __phys_addr_symbol+0x2b/0x70 [ 439.259123][ T28] ? __check_object_size+0x4dd/0xa30 [ 439.264515][ T28] ? bpf_lsm_netlink_send+0x5/0x10 [ 439.269689][ T28] netlink_sendmsg+0xa26/0xd60 [ 439.274552][ T28] ? netlink_getsockopt+0x580/0x580 [ 439.279779][ T28] ? __might_fault+0xa1/0x110 [ 439.285383][ T28] ? aa_sock_msg_perm+0x91/0x150 [ 439.290430][ T28] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 439.295769][ T28] ? security_socket_sendmsg+0x7d/0xa0 [ 439.301489][ T28] ? netlink_getsockopt+0x580/0x580 [ 439.306752][ T28] __sys_sendto+0x480/0x600 [ 439.311393][ T28] ? __ia32_sys_getpeername+0x80/0x80 [ 439.316818][ T28] ? alloc_fd+0x5a0/0x640 [ 439.321270][ T28] ? print_irqtrace_events+0x210/0x210 [ 439.326782][ T28] __x64_sys_sendto+0xda/0xf0 [ 439.331551][ T28] do_syscall_64+0x3b/0xb0 [ 439.335986][ T28] ? clear_bhb_loop+0x45/0xa0 [ 439.340795][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.346755][ T28] RIP: 0033:0x7f3ca7b8ec7c [ 439.351307][ T28] RSP: 002b:00007f3ca8aa1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 439.359774][ T28] RAX: ffffffffffffffda RBX: 00007f3ca8aa1fc0 RCX: 00007f3ca7b8ec7c [ 439.368041][ T28] RDX: 0000000000000020 RSI: 00007f3ca8aa2010 RDI: 000000000000000c [ 439.376094][ T28] RBP: 0000000000000000 R08: 00007f3ca8aa1f14 R09: 000000000000000c [ 439.384137][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 439.392900][ T28] R13: 00007f3ca8aa1f68 R14: 00007f3ca8aa2010 R15: 0000000000000000 [ 439.401001][ T28] [ 439.404064][ T28] INFO: task syz.4.554:6632 blocked for more than 145 seconds. [ 439.413266][ T28] Not tainted 6.1.128-syzkaller #0 [ 439.418920][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.427651][ T28] task:syz.4.554 state:D stack:26792 pid:6632 ppid:4257 flags:0x00004004 [ 439.437098][ T28] Call Trace: [ 439.440463][ T28] [ 439.443416][ T28] __schedule+0x143f/0x4570 [ 439.447936][ T28] ? release_firmware_map_entry+0x186/0x186 [ 439.453903][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 439.459405][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 439.464661][ T28] schedule+0xbf/0x180 [ 439.468749][ T28] schedule_preempt_disabled+0xf/0x20 [ 439.474175][ T28] __mutex_lock+0x6b9/0xd80 [ 439.478726][ T28] ? __mutex_lock+0x53c/0xd80 [ 439.483826][ T28] ? misc_open+0x58/0x380 [ 439.488209][ T28] ? mutex_lock_nested+0x10/0x10 [ 439.494087][ T28] ? kobject_get_unless_zero+0x229/0x320 [ 439.499765][ T28] misc_open+0x58/0x380 [ 439.504011][ T28] chrdev_open+0x54a/0x630 [ 439.508466][ T28] ? cd_forget+0x160/0x160 [ 439.512944][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 439.518171][ T28] ? fsnotify_perm+0x472/0x590 [ 439.523126][ T28] ? cd_forget+0x160/0x160 [ 439.527589][ T28] do_dentry_open+0x7f9/0x10f0 [ 439.532461][ T28] path_openat+0x2644/0x2e60 [ 439.537109][ T28] ? mark_lock+0x9a/0x340 [ 439.541557][ T28] ? do_filp_open+0x480/0x480 [ 439.546290][ T28] do_filp_open+0x230/0x480 [ 439.550904][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 439.555552][ T28] ? _raw_spin_unlock+0x24/0x40 [ 439.560501][ T28] ? alloc_fd+0x5a0/0x640 [ 439.564889][ T28] do_sys_openat2+0x13b/0x4f0 [ 439.569599][ T28] ? fd_install+0x57/0x540 [ 439.574073][ T28] ? do_sys_open+0x220/0x220 [ 439.578693][ T28] ? fd_install+0x57/0x540 [ 439.583300][ T28] __x64_sys_openat+0x243/0x290 [ 439.588233][ T28] ? __ia32_sys_open+0x270/0x270 [ 439.594067][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 439.600180][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 439.605407][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 439.611438][ T28] do_syscall_64+0x3b/0xb0 [ 439.615868][ T28] ? clear_bhb_loop+0x45/0xa0 [ 439.620637][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.626562][ T28] RIP: 0033:0x7f53bdf8cde9 [ 439.631131][ T28] RSP: 002b:00007f53beec4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 439.639581][ T28] RAX: ffffffffffffffda RBX: 00007f53be1a5fa0 RCX: 00007f53bdf8cde9 [ 439.647662][ T28] RDX: 0000000000000000 RSI: 0000400000000140 RDI: ffffffffffffff9c [ 439.655698][ T28] RBP: 00007f53be00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 439.663765][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.671815][ T28] R13: 0000000000000000 R14: 00007f53be1a5fa0 R15: 00007ffda7cf8638 [ 439.679950][ T28] [ 439.683017][ T28] INFO: task syz.2.555:6634 blocked for more than 145 seconds. [ 439.690622][ T28] Not tainted 6.1.128-syzkaller #0 [ 439.696854][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.705619][ T28] task:syz.2.555 state:D stack:25816 pid:6634 ppid:4256 flags:0x00004004 [ 439.714903][ T28] Call Trace: [ 439.718184][ T28] [ 439.721230][ T28] __schedule+0x143f/0x4570 [ 439.725807][ T28] ? release_firmware_map_entry+0x186/0x186 [ 439.731860][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 439.737357][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 439.742720][ T28] schedule+0xbf/0x180 [ 439.746802][ T28] schedule_preempt_disabled+0xf/0x20 [ 439.752295][ T28] __mutex_lock+0x6b9/0xd80 [ 439.756832][ T28] ? __mutex_lock+0x53c/0xd80 [ 439.761675][ T28] ? misc_open+0x58/0x380 [ 439.766023][ T28] ? mutex_lock_nested+0x10/0x10 [ 439.771043][ T28] ? kobject_get_unless_zero+0x229/0x320 [ 439.776712][ T28] misc_open+0x58/0x380 [ 439.780959][ T28] chrdev_open+0x54a/0x630 [ 439.785418][ T28] ? cd_forget+0x160/0x160 [ 439.790142][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 439.795414][ T28] ? fsnotify_perm+0x472/0x590 [ 439.801580][ T28] ? cd_forget+0x160/0x160 [ 439.806054][ T28] do_dentry_open+0x7f9/0x10f0 [ 439.810943][ T28] path_openat+0x2644/0x2e60 [ 439.815589][ T28] ? mark_lock+0x9a/0x340 [ 439.820035][ T28] ? do_filp_open+0x480/0x480 [ 439.824765][ T28] do_filp_open+0x230/0x480 [ 439.829271][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 439.833941][ T28] ? _raw_spin_unlock+0x24/0x40 [ 439.838830][ T28] ? alloc_fd+0x5a0/0x640 [ 439.843235][ T28] do_sys_openat2+0x13b/0x4f0 [ 439.847943][ T28] ? fd_install+0x57/0x540 [ 439.852568][ T28] ? do_sys_open+0x220/0x220 [ 439.857195][ T28] ? fd_install+0x57/0x540 [ 439.861682][ T28] __x64_sys_openat+0x243/0x290 [ 439.866571][ T28] ? __ia32_sys_open+0x270/0x270 [ 439.871603][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 439.877613][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 439.882919][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 439.888943][ T28] do_syscall_64+0x3b/0xb0 [ 439.893420][ T28] ? clear_bhb_loop+0x45/0xa0 [ 439.898140][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.904790][ T28] RIP: 0033:0x7f71bbd8cde9 [ 439.909245][ T28] RSP: 002b:00007f71bccd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 439.917775][ T28] RAX: ffffffffffffffda RBX: 00007f71bbfa5fa0 RCX: 00007f71bbd8cde9 [ 439.925875][ T28] RDX: 0000000000000000 RSI: 0000400000000140 RDI: ffffffffffffff9c [ 439.933955][ T28] RBP: 00007f71bbe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 439.941990][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.950048][ T28] R13: 0000000000000000 R14: 00007f71bbfa5fa0 R15: 00007ffde9d480c8 [ 439.958223][ T28] [ 439.961502][ T28] INFO: task syz.1.556:6642 blocked for more than 145 seconds. [ 439.969066][ T28] Not tainted 6.1.128-syzkaller #0 [ 439.974816][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.983535][ T28] task:syz.1.556 state:D stack:27560 pid:6642 ppid:4255 flags:0x00004004 [ 439.992813][ T28] Call Trace: [ 439.996105][ T28] [ 439.999035][ T28] __schedule+0x143f/0x4570 [ 440.004388][ T28] ? release_firmware_map_entry+0x186/0x186 [ 440.010425][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 440.015932][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 440.021233][ T28] schedule+0xbf/0x180 [ 440.025327][ T28] schedule_preempt_disabled+0xf/0x20 [ 440.030817][ T28] __mutex_lock+0x6b9/0xd80 [ 440.035360][ T28] ? __mutex_lock+0x53c/0xd80 [ 440.040144][ T28] ? misc_open+0x58/0x380 [ 440.044501][ T28] ? mutex_lock_nested+0x10/0x10 [ 440.049479][ T28] ? kobject_get_unless_zero+0x229/0x320 [ 440.055217][ T28] misc_open+0x58/0x380 [ 440.059397][ T28] chrdev_open+0x54a/0x630 [ 440.063911][ T28] ? cd_forget+0x160/0x160 [ 440.068364][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 440.073790][ T28] ? fsnotify_perm+0x472/0x590 [ 440.078598][ T28] ? cd_forget+0x160/0x160 [ 440.083122][ T28] do_dentry_open+0x7f9/0x10f0 [ 440.088028][ T28] path_openat+0x2644/0x2e60 [ 440.092714][ T28] ? mark_lock+0x9a/0x340 [ 440.097088][ T28] ? do_filp_open+0x480/0x480 [ 440.101861][ T28] do_filp_open+0x230/0x480 [ 440.107025][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 440.111726][ T28] ? _raw_spin_unlock+0x24/0x40 [ 440.116616][ T28] ? alloc_fd+0x5a0/0x640 [ 440.121121][ T28] do_sys_openat2+0x13b/0x4f0 [ 440.125839][ T28] ? do_sys_open+0x220/0x220 [ 440.130522][ T28] __x64_sys_openat+0x243/0x290 [ 440.135754][ T28] ? __ia32_sys_open+0x270/0x270 [ 440.135931][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.142129][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 440.147144][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.153412][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 440.166195][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 440.172286][ T28] do_syscall_64+0x3b/0xb0 [ 440.176722][ T28] ? clear_bhb_loop+0x45/0xa0 [ 440.181665][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.187650][ T28] RIP: 0033:0x7f9d1098cde9 [ 440.192741][ T28] RSP: 002b:00007f9d11815038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 440.201304][ T28] RAX: ffffffffffffffda RBX: 00007f9d10ba5fa0 RCX: 00007f9d1098cde9 [ 440.210033][ T28] RDX: 0000000000000002 RSI: 00004000000000c0 RDI: ffffffffffffff9c [ 440.218054][ T28] RBP: 00007f9d10a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 440.226113][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.234133][ T28] R13: 0000000000000001 R14: 00007f9d10ba5fa0 R15: 00007ffe59a6d0d8 [ 440.242254][ T28] [ 440.245314][ T28] [ 440.245314][ T28] Showing all locks held in the system: [ 440.253083][ T28] 1 lock held by rcu_tasks_kthre/12: [ 440.258381][ T28] #0: ffffffff8d32b290 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 440.268992][ T28] 1 lock held by rcu_tasks_trace/13: [ 440.274329][ T28] #0: ffffffff8d32ba90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 440.285376][ T28] 1 lock held by khungtaskd/28: [ 440.290284][ T28] #0: ffffffff8d32b0c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 440.300415][ T28] 4 locks held by udevd/3623: [ 440.305211][ T28] #0: ffff88807558de80 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10 [ 440.314967][ T28] #1: ffff888054db5088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x4f/0x3a0 [ 440.324432][ T28] #2: ffff88801d34ca00 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x6e/0x3a0 [ 440.333936][ T28] #3: ffff88807d578100 (&dev->mutex){....}-{3:3}, at: uevent_show+0x176/0x330 [ 440.343006][ T28] 2 locks held by getty/4008: [ 440.347676][ T28] #0: ffff888030eea098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 440.357504][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 440.367668][ T28] 3 locks held by kworker/u4:10/4550: [ 440.373143][ T28] #0: ffff88807a21d138 ((wq_completion)nfc2_nci_cmd_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 440.384398][ T28] #1: ffffc90004aafd20 ((work_completion)(&ndev->cmd_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 440.395997][ T28] #2: ffffffff8dbed1a8 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_send+0x1c/0xd0 [ 440.405240][ T28] 3 locks held by syz.3.545/6585: [ 440.410458][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.419653][ T28] #1: ffffffff8dbed1a8 (nci_mutex){+.+.}-{3:3}, at: virtual_ncidev_open+0x15/0xc0 [ 440.429111][ T28] #2: ffff88807d578100 (&dev->mutex){....}-{3:3}, at: nfc_register_device+0x98/0x310 [ 440.438837][ T28] 5 locks held by syz.3.545/6592: [ 440.443982][ T28] #0: ffffffff8e56b190 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 440.452303][ T28] #1: ffffffff8e56b048 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x125/0xf70 [ 440.461388][ T28] #2: ffff88807d578100 (&dev->mutex){....}-{3:3}, at: nfc_dev_up+0x3b/0x330 [ 440.470273][ T28] #3: ffff88807d57f350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_dev_up+0xa0/0xd40 [ 440.479464][ T28] #4: ffffffff8dbed1a8 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x13/0x40 [ 440.488750][ T28] 2 locks held by syz.0.551/6608: [ 440.493855][ T28] #0: ffffffff8e56b190 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 440.502162][ T28] #1: ffffffff8e56b048 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x125/0xf70 [ 440.511180][ T28] 2 locks held by syz.0.551/6609: [ 440.516801][ T28] #0: ffffffff8e56b190 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 440.525387][ T28] #1: ffffffff8e56b048 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x125/0xf70 [ 440.534513][ T28] 1 lock held by syz.4.554/6632: [ 440.539484][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.547999][ T28] 1 lock held by syz.2.555/6634: [ 440.553037][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.561578][ T28] 1 lock held by syz.1.556/6642: [ 440.566543][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.575135][ T28] 1 lock held by syz-executor/6647: [ 440.580405][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.588902][ T28] 1 lock held by syz-executor/6649: [ 440.594206][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.602774][ T28] 1 lock held by syz-executor/6652: [ 440.607995][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.617274][ T28] 1 lock held by syz-executor/6653: [ 440.622530][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.631135][ T28] 1 lock held by syz-executor/6655: [ 440.636371][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.644904][ T28] 1 lock held by syz-executor/6657: [ 440.650167][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.658686][ T28] 1 lock held by syz-executor/6659: [ 440.663987][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.672519][ T28] 1 lock held by syz-executor/6662: [ 440.677733][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.686341][ T28] 1 lock held by syz-executor/6663: [ 440.691585][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.700126][ T28] 1 lock held by syz-executor/6666: [ 440.705368][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.713900][ T28] 1 lock held by syz-executor/6672: [ 440.719930][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.728497][ T28] 1 lock held by syz-executor/6674: [ 440.733793][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.742418][ T28] 1 lock held by syz-executor/6677: [ 440.747612][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.756133][ T28] 1 lock held by syz-executor/6678: [ 440.761574][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.770170][ T28] 1 lock held by syz-executor/6680: [ 440.775409][ T28] #0: ffffffff8da90968 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.784026][ T28] [ 440.786358][ T28] ============================================= [ 440.786358][ T28] [ 440.794861][ T28] NMI backtrace for cpu 0 [ 440.799230][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.128-syzkaller #0 [ 440.807125][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 440.817200][ T28] Call Trace: [ 440.820489][ T28] [ 440.823432][ T28] dump_stack_lvl+0x1e3/0x2cb [ 440.828115][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 440.833588][ T28] ? panic+0x764/0x764 [ 440.837662][ T28] ? vprintk_emit+0x622/0x740 [ 440.842346][ T28] ? printk_sprint+0x490/0x490 [ 440.847116][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 440.852245][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 440.857235][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 440.863421][ T28] ? _printk+0xd1/0x111 [ 440.867606][ T28] ? panic+0x764/0x764 [ 440.871688][ T28] ? __wake_up_klogd+0xcc/0x100 [ 440.876546][ T28] ? panic+0x764/0x764 [ 440.880620][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 440.886696][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 440.892782][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 440.898805][ T28] watchdog+0xf88/0xfd0 [ 440.903009][ T28] ? watchdog+0x1f8/0xfd0 [ 440.907389][ T28] kthread+0x28d/0x320 [ 440.911474][ T28] ? hungtask_pm_notify+0x50/0x50 [ 440.916509][ T28] ? kthread_blkcg+0xd0/0xd0 [ 440.921101][ T28] ret_from_fork+0x1f/0x30 [ 440.925539][ T28] [ 440.929463][ T28] Sending NMI from CPU 0 to CPUs 1: [ 440.935011][ C1] NMI backtrace for cpu 1 [ 440.935031][ C1] CPU: 1 PID: 4551 Comm: kworker/u4:11 Not tainted 6.1.128-syzkaller #0 [ 440.935047][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 440.935057][ C1] Workqueue: phy3 ieee80211_iface_work [ 440.935081][ C1] RIP: 0010:unwind_next_frame+0x0/0x2220 [ 440.935101][ C1] Code: eb 02 31 c0 5b 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 95 4c 89 f7 e8 6b 5a a5 00 eb 8b 66 0f 1f 84 00 00 00 00 00 <55> 41 57 41 56 41 55 41 54 53 48 81 ec a8 00 00 00 48 89 fb 49 be [ 440.935118][ C1] RSP: 0018:ffffc900047bf278 EFLAGS: 00000202 [ 440.935130][ C1] RAX: 0000000000000001 RBX: ffffc900047bf280 RCX: ffffffff8fdd5000 [ 440.935142][ C1] RDX: dffffc0000000000 RSI: ffffffff815c5d3d RDI: ffffc900047bf280 [ 440.935153][ C1] RBP: ffffc900047bf310 R08: 0000000000000009 R09: ffffc900047bf370 [ 440.935164][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888027b8bb80 [ 440.935175][ C1] R13: ffffffff81785820 R14: ffffc900047bf360 R15: 0000000000000000 [ 440.935186][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 440.935199][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.935210][ C1] CR2: 0000562166071138 CR3: 000000000d08e000 CR4: 00000000003506e0 [ 440.935224][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 440.935232][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 440.935241][ C1] Call Trace: [ 440.935245][ C1] [ 440.935251][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 440.935266][ C1] ? read_lock_is_recursive+0x10/0x10 [ 440.935291][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 440.935306][ C1] ? nmi_handle+0x25/0x440 [ 440.935336][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 440.935350][ C1] ? nmi_handle+0x12e/0x440 [ 440.935391][ C1] ? nmi_handle+0x25/0x440 [ 440.935415][ C1] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 440.935434][ C1] ? default_do_nmi+0x62/0x150 [ 440.935451][ C1] ? exc_nmi+0xa8/0x100 [ 440.935467][ C1] ? end_repeat_nmi+0x16/0x31 [ 440.935483][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 440.935508][ C1] ? __init_begin+0x3d000/0x3d000 [ 440.935532][ C1] ? kthread+0x28d/0x320 [ 440.935546][ C1] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 440.935566][ C1] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 440.935586][ C1] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 440.935605][ C1] [ 440.935609][ C1] [ 440.935613][ C1] arch_stack_walk+0x10d/0x140 [ 440.935635][ C1] ? kthread+0x28d/0x320 [ 440.935651][ C1] stack_trace_save+0x113/0x1c0 [ 440.935675][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 440.935703][ C1] ? ieee80211_bss_info_update+0xa54/0xf00 [ 440.935728][ C1] kasan_set_track+0x4b/0x70 [ 440.935743][ C1] ? kasan_set_track+0x4b/0x70 [ 440.935768][ C1] ? kasan_save_free_info+0x27/0x40 [ 440.935785][ C1] ? ____kasan_slab_free+0xd6/0x120 [ 440.935798][ C1] ? __kmem_cache_free+0x25c/0x3c0 [ 440.935817][ C1] ? ieee80211_bss_info_update+0xa54/0xf00 [ 440.935839][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1962/0x2dd0 [ 440.935858][ C1] ? ieee80211_iface_work+0x7aa/0xce0 [ 440.935875][ C1] ? process_one_work+0x8a9/0x11d0 [ 440.935916][ C1] ? worker_thread+0xa47/0x1200 [ 440.935933][ C1] ? kthread+0x28d/0x320 [ 440.935969][ C1] kasan_save_free_info+0x27/0x40 [ 440.936007][ C1] ____kasan_slab_free+0xd6/0x120 [ 440.936024][ C1] __kmem_cache_free+0x25c/0x3c0 [ 440.936043][ C1] ? ieee80211_bss_info_update+0xa54/0xf00 [ 440.936067][ C1] ieee80211_bss_info_update+0xa54/0xf00 [ 440.936094][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 440.936117][ C1] ? ieee80211_rx_bss_put+0x60/0x60 [ 440.936146][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 440.936167][ C1] ? ieee80211_sta_get_rates+0x65c/0x720 [ 440.936191][ C1] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2dd0 [ 440.936217][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xeba/0x2dd0 [ 440.936237][ C1] ? ieee80211_ibss_rx_no_sta+0x740/0x740 [ 440.936259][ C1] ? mark_lock+0x9a/0x340 [ 440.936282][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 440.936306][ C1] ? print_irqtrace_events+0x210/0x210 [ 440.936329][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 440.936347][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 440.936366][ C1] ? skb_dequeue+0x10f/0x140 [ 440.936382][ C1] ieee80211_iface_work+0x7aa/0xce0 [ 440.936405][ C1] ? process_one_work+0x7a9/0x11d0 [ 440.936421][ C1] process_one_work+0x8a9/0x11d0 [ 440.936446][ C1] ? worker_detach_from_pool+0x260/0x260 [ 440.936484][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 440.936506][ C1] ? kthread_data+0x4e/0xc0 [ 440.936532][ C1] ? wq_worker_running+0x97/0x190 [ 440.936549][ C1] worker_thread+0xa47/0x1200 [ 440.936579][ C1] ? _raw_spin_unlock+0x40/0x40 [ 440.936599][ C1] ? release_firmware_map_entry+0x186/0x186 [ 440.936619][ C1] ? _raw_spin_unlock+0x40/0x40 [ 440.936644][ C1] kthread+0x28d/0x320 [ 440.936657][ C1] ? worker_clr_flags+0x190/0x190 [ 440.936692][ C1] ? kthread_blkcg+0xd0/0xd0 [ 440.936708][ C1] ret_from_fork+0x1f/0x30 [ 440.936756][ C1] [ 440.937449][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 441.437889][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.128-syzkaller #0 [ 441.445959][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 441.456025][ T28] Call Trace: [ 441.459321][ T28] [ 441.462261][ T28] dump_stack_lvl+0x1e3/0x2cb [ 441.466939][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 441.472402][ T28] ? panic+0x764/0x764 [ 441.476490][ T28] ? vscnprintf+0x59/0x80 [ 441.480821][ T28] panic+0x318/0x764 [ 441.484811][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 441.490984][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 441.496422][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 441.503107][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 441.509282][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 441.515449][ T28] watchdog+0xfc7/0xfd0 [ 441.519617][ T28] ? watchdog+0x1f8/0xfd0 [ 441.523986][ T28] kthread+0x28d/0x320 [ 441.528071][ T28] ? hungtask_pm_notify+0x50/0x50 [ 441.533124][ T28] ? kthread_blkcg+0xd0/0xd0 [ 441.537735][ T28] ret_from_fork+0x1f/0x30 [ 441.542190][ T28] [ 441.545570][ T28] Kernel Offset: disabled [ 441.549910][ T28] Rebooting in 86400 seconds..