last executing test programs: 7.842226369s ago: executing program 3 (id=538): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x14, 0x2, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x3) r3 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close(r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) 4.650365621s ago: executing program 3 (id=563): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x4}, 0x38) 4.621971041s ago: executing program 3 (id=568): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x10, 0x1, 0x1, [r0]}}], 0x20, 0xc0}}], 0x1, 0x0) 4.521712033s ago: executing program 3 (id=570): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000008c0)=0x1, 0x0, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_io_uring_setup(0x2b2f, &(0x7f00000003c0)={0x0, 0xe63b, 0x4, 0x0, 0x27f}, &(0x7f0000000280), 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) 3.983702703s ago: executing program 0 (id=572): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r3, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r3, 0x30, 0x1, @ib={0x1b, 0x2, 0xfff, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0x5}}}, 0xa0) 3.691542869s ago: executing program 0 (id=573): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r0, 0x5412, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r6 = socket(0x22, 0x2, 0x24) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000f40)=""/4083, 0x0, 0xff32, 0x1, 0x1}, 0x28) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x34}, 0x10) close(r6) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) 3.284001357s ago: executing program 3 (id=577): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x7, 0x0, 0x0, 0x3}}, 0x1c}}, 0x40000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x6, "00000400"}]}}, 0x0}, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a8000000000000000004950400"/32], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_pwait2(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f00000003c0), 0x0, 0xff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f00000001c0)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) 2.820161826s ago: executing program 0 (id=580): syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x1, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.677955178s ago: executing program 2 (id=582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00'], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, 0x0, 0x0}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) 2.298274036s ago: executing program 2 (id=585): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.266660256s ago: executing program 2 (id=586): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) 2.167318498s ago: executing program 2 (id=587): openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2e34, &(0x7f00000001c0)={0x0, 0xd004, 0x10000, 0x0, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000003c0007010000000000000000017c00000400fc800c00018006000600800a000008000280040800050009000000"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) 1.830371775s ago: executing program 0 (id=588): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) read(r0, &(0x7f0000000240)=""/211, 0xd3) write$UHID_DESTROY(r0, 0x0, 0x0) 1.517921781s ago: executing program 0 (id=592): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2084) writev(r2, &(0x7f00000036c0)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f00000034c0)="03", 0x1}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f0000000240)={{0x6, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) write$cgroup_int(r0, &(0x7f00000000c0)=0x10001, 0x12) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000005c0)={'wpan0\x00'}) r7 = socket(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00', @ANYRES64=r7], 0x40}}, 0x0) 1.452756082s ago: executing program 1 (id=594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x9c, r7, 0x2, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24004880}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x505, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1.086967459s ago: executing program 1 (id=596): r0 = socket(0x2b, 0x80801, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x30, r2, 0x1, 0xffffffff, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) 1.06112306s ago: executing program 2 (id=597): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x9}, {0x2, 0x3}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x97}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x400c0d0) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.005740431s ago: executing program 1 (id=598): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1.005430971s ago: executing program 2 (id=599): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600"], 0x48) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000001000000400000002000", @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r4}, 0x38) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04022901ffffffffffff8b315123896dc5a5"], 0x12) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4080) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034"], 0x8c}}, 0x0) 991.248391ms ago: executing program 1 (id=600): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 869.007223ms ago: executing program 1 (id=601): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) 762.150645ms ago: executing program 1 (id=602): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x13fffc, 0x0, 0x3, 0x40000021, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600", [0x1, 0xfffffffffffffffc]}}) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r9 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0) syz_usb_disconnect(r9) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r9, 0x0, 0x0) 626.605148ms ago: executing program 0 (id=604): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRES8=0x0, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b900000047d071608dbbb1475e946cd56f4fde04244122203ba7672e4a5acdc0f75a739cc4c0a0b768da3f99addae461ce3f3cf7dac29b7969330445b88692e539afc918c2770b814b0ae078ad0bc3a64ffef063cc2a16e01748c9ca8067dda865c4f1558bf0dce453c1363ea390", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x24040050) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x8) listen(r8, 0x80000001) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 438.369001ms ago: executing program 4 (id=606): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getpeername(0xffffffffffffffff, 0x0, 0x0) 166.307137ms ago: executing program 3 (id=607): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x5a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0xb1, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x94, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x4}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xa771}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x3}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0xe}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0xbdbf}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x10}}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44854}, 0x8000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x9c, r10, 0x2, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24004880}, 0x4000000) recvmmsg(r12, &(0x7f0000007780)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000500)=""/55, 0x37}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/190, 0xbe}, {&(0x7f0000000640)=""/140, 0x8c}, {&(0x7f00000007c0)=""/88, 0x58}, {&(0x7f0000000840)=""/252, 0xfc}, {&(0x7f0000000940)=""/119, 0x77}], 0x8, &(0x7f0000000a00)=""/231, 0xe7}, 0x6}, {{&(0x7f0000000b00)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000b80)=""/245, 0xf5}, {&(0x7f0000000cc0)=""/223, 0xdf}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/63, 0x3f}, {&(0x7f0000000e00)=""/83, 0x53}, {&(0x7f0000000e80)=""/165, 0xa5}, {&(0x7f0000000f40)=""/207, 0xcf}, {&(0x7f0000001040)=""/211, 0xd3}], 0x8, &(0x7f00000042c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000001180)=@un=@abs, 0x80, &(0x7f0000006480)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/171, 0xab}, {&(0x7f0000006380)=""/224, 0xe0}, {&(0x7f0000002240)=""/13, 0xd}], 0x4, &(0x7f00000064c0)=""/44, 0x2c}}, {{&(0x7f0000006500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000006740)=[{&(0x7f0000006580)=""/63, 0x3f}, {&(0x7f00000065c0)=""/31, 0x1f}, {&(0x7f0000006600)=""/29, 0x1d}, {&(0x7f0000006640)=""/229, 0xe5}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x2}], 0x4, 0x10, &(0x7f0000007800)={0x0, 0x989680}) close(r9) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x505, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 152.500777ms ago: executing program 4 (id=608): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) 66.220929ms ago: executing program 4 (id=609): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5) syz_io_uring_complete(r0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 64.896199ms ago: executing program 4 (id=610): madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c9008b7632278c6526a053c7dcf85e407a06a401882c091dc3a30f835279375c06"], 0x8f) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 36.151019ms ago: executing program 4 (id=611): syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x4}, {0xfff7, 0x1000}}}}, 0x11) 0s ago: executing program 4 (id=612): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x3, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_x_sa2={0x2, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_x_sec_ctx={0x1, 0x18, 0x4, 0x0, 0x80ff}]}, 0x88}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.238' (ED25519) to the list of known hosts. [ 29.707977][ T4311] cgroup: Unknown subsys name 'net' [ 29.969487][ T4311] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.237630][ T4311] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.546351][ T4329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.548159][ T4329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.548363][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.549658][ T4329] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.551213][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.551750][ T4329] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.552750][ T4336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.554431][ T4337] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.555291][ T4336] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.556248][ T4337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.557883][ T4336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.558693][ T4338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.559672][ T4329] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.560982][ T4338] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.562089][ T4329] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.562785][ T4338] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 31.563736][ T4329] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 31.564826][ T4338] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.565950][ T4329] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.567805][ T4336] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.568136][ T4337] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.570827][ T4337] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.572146][ T4338] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.573621][ T4338] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 31.574891][ T4338] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.577297][ T4338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.578714][ T4329] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 31.578751][ T4338] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.581124][ T4338] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.582418][ T4338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.705593][ T4324] chnl_net:caif_netlink_parms(): no params data found [ 31.730953][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 31.750371][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.751584][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.753114][ T4324] device bridge_slave_0 entered promiscuous mode [ 31.755436][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.756543][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.758279][ T4324] device bridge_slave_1 entered promiscuous mode [ 31.762037][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 31.791859][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.793442][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.794709][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.796200][ T4321] device bridge_slave_0 entered promiscuous mode [ 31.798819][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 31.805594][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.812903][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.814038][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.815546][ T4321] device bridge_slave_1 entered promiscuous mode [ 31.833349][ T4324] team0: Port device team_slave_0 added [ 31.836605][ T4324] team0: Port device team_slave_1 added [ 31.842415][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 31.856022][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.858258][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.859711][ T4326] device bridge_slave_0 entered promiscuous mode [ 31.862015][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.868780][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.869990][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.871382][ T4330] device bridge_slave_0 entered promiscuous mode [ 31.874040][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.875122][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.876498][ T4326] device bridge_slave_1 entered promiscuous mode [ 31.878751][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.880485][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.881590][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.885536][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.888311][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.889415][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.893099][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.897307][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.898501][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.899919][ T4330] device bridge_slave_1 entered promiscuous mode [ 31.926270][ T4321] team0: Port device team_slave_0 added [ 31.957827][ T4324] device hsr_slave_0 entered promiscuous mode [ 31.996978][ T4324] device hsr_slave_1 entered promiscuous mode [ 32.038117][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.040395][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.046279][ T4321] team0: Port device team_slave_1 added [ 32.050527][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.052858][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.056805][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.058056][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.059484][ T4331] device bridge_slave_0 entered promiscuous mode [ 32.071373][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.072551][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.074024][ T4331] device bridge_slave_1 entered promiscuous mode [ 32.075759][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.076815][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.079861][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.092602][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.093786][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.098028][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.100856][ T4330] team0: Port device team_slave_0 added [ 32.102774][ T4326] team0: Port device team_slave_0 added [ 32.108397][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.111662][ T4330] team0: Port device team_slave_1 added [ 32.113363][ T4326] team0: Port device team_slave_1 added [ 32.116232][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.138095][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.139215][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.143013][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.147766][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.148747][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.152796][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.157485][ T4331] team0: Port device team_slave_0 added [ 32.158725][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.159777][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.163261][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.207718][ T4321] device hsr_slave_0 entered promiscuous mode [ 32.246832][ T4321] device hsr_slave_1 entered promiscuous mode [ 32.286694][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.287891][ T4321] Cannot create hsr debugfs directory [ 32.289034][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.290101][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.293715][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.298758][ T4331] team0: Port device team_slave_1 added [ 32.316530][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.317766][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.321591][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.333161][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.334247][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.338179][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.377649][ T4330] device hsr_slave_0 entered promiscuous mode [ 32.416897][ T4330] device hsr_slave_1 entered promiscuous mode [ 32.456797][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.458122][ T4330] Cannot create hsr debugfs directory [ 32.517709][ T4326] device hsr_slave_0 entered promiscuous mode [ 32.556831][ T4326] device hsr_slave_1 entered promiscuous mode [ 32.596712][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.597846][ T4326] Cannot create hsr debugfs directory [ 32.659830][ T4331] device hsr_slave_0 entered promiscuous mode [ 32.716863][ T4331] device hsr_slave_1 entered promiscuous mode [ 32.756713][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.758016][ T4331] Cannot create hsr debugfs directory [ 32.824286][ T4324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.855448][ T4324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.915880][ T4324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.963263][ T4324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.015861][ T4321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.068451][ T4321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.120138][ T4321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.157881][ T4321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.209440][ T4326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.257960][ T4326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.297748][ T4326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.349116][ T4326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.416269][ T4331] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.455287][ T4331] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.489778][ T4331] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.538108][ T4331] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.586371][ T4330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.606992][ T4338] Bluetooth: hci3: command 0x0409 tx timeout [ 33.607204][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 33.607967][ T4338] Bluetooth: hci4: command 0x0409 tx timeout [ 33.608979][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 33.609958][ T4338] Bluetooth: hci1: command 0x0409 tx timeout [ 33.630958][ T4330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.672845][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.674690][ T4330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.701897][ T4330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.747453][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.750288][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.752327][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.773611][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.775199][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.777811][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.780144][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.782222][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.791287][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.792911][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.794351][ T1856] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.795450][ T1856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.798364][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.811424][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.812962][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.814853][ T1856] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.815941][ T1856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.818111][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.819684][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.821267][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.823245][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.824834][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.826345][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.828525][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.829955][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.831404][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.832832][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.834218][ T1856] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.835305][ T1856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.838303][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.840058][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.846287][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.853581][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.854770][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.856230][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.857777][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.859332][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.860533][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.861912][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.863237][ T1856] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.864394][ T1856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.871733][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.882535][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.884242][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.885840][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.887848][ T1856] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.888947][ T1856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.890408][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.891876][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.910386][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.911865][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.913355][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.914816][ T1856] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.916058][ T1856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.919097][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.920843][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.923077][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.925172][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.927899][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.929522][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.931173][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.932692][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.934205][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.935637][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.938405][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.943882][ T4331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.945575][ T4331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.952542][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.954074][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.955484][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.958166][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.959735][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.961172][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.963103][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.964718][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.966201][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.969567][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.972085][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.979485][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.982256][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.983677][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.985111][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.987312][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.988692][ T1856] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.989758][ T1856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.991378][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.992925][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.994917][ T1856] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.995937][ T1856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.006393][ T4326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.009264][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.013040][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.014572][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.016115][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.018204][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.019931][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.021533][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.023085][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.024541][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.025982][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.027643][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.029244][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.030798][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.032519][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.039107][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.040663][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.042773][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.053134][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.054408][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.058749][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.060290][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.061682][ T1831] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.062714][ T1831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.064104][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.078088][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.081053][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.082846][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.084252][ T1831] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.085512][ T1831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.094975][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.098190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.099916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.101311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.105484][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.117632][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.119653][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.121546][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.126002][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.127763][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.133514][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.135048][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.145160][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.148583][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.150520][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.151981][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.165142][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.169501][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.170847][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.174575][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.191685][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.194916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.196141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.204376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.205919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.208903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.210475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.212435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.214565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.223315][ T4321] device veth0_vlan entered promiscuous mode [ 34.232706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.234399][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.242267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.243772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.245307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.248567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.250705][ T4321] device veth1_vlan entered promiscuous mode [ 34.262950][ T4324] device veth0_vlan entered promiscuous mode [ 34.270524][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.272018][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.273305][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.275472][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.278179][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.279544][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.283941][ T4326] device veth0_vlan entered promiscuous mode [ 34.289382][ T4324] device veth1_vlan entered promiscuous mode [ 34.292103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.293562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.294749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.302489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.304115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.309723][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.311204][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.312675][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.315974][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.320554][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.321958][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.323527][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.325893][ T4326] device veth1_vlan entered promiscuous mode [ 34.328602][ T4321] device veth0_macvtap entered promiscuous mode [ 34.330945][ T4321] device veth1_macvtap entered promiscuous mode [ 34.333603][ T4331] device veth0_vlan entered promiscuous mode [ 34.343544][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.349393][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.352272][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.353772][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.355129][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.356440][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.358979][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.360500][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.364295][ T4331] device veth1_vlan entered promiscuous mode [ 34.366124][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.368584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.370011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.371547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.373024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.374825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.382791][ T4324] device veth0_macvtap entered promiscuous mode [ 34.388097][ T4321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.389555][ T4321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.390945][ T4321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.392187][ T4321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.396170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.398117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.399630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.401166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.404075][ T4324] device veth1_macvtap entered promiscuous mode [ 34.408131][ T4326] device veth0_macvtap entered promiscuous mode [ 34.413940][ T4326] device veth1_macvtap entered promiscuous mode [ 34.415639][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.417141][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.419330][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.420834][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.422356][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.431868][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.433398][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.435592][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.443121][ T4331] device veth0_macvtap entered promiscuous mode [ 34.445443][ T4331] device veth1_macvtap entered promiscuous mode [ 34.448117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.449696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.451166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.452623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.454028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.455294][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.470087][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.471665][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.473094][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.474552][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.476529][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.482572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.484275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.485882][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.488690][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.490994][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.494444][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.496058][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.500226][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.501956][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.503515][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.505299][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.508125][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.509821][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.511556][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.513065][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.514504][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.528173][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.529881][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.531446][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.533014][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.535452][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.540775][ T4324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.542218][ T4324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.543643][ T4324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.545098][ T4324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.548362][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.549881][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.551348][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.552881][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.554383][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.555666][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.558037][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.559656][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.561153][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.562758][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.564205][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.565864][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.568893][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.571666][ T4326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.573098][ T4326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.574505][ T4326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.575976][ T4326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.579100][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.580485][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.585050][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.586506][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.588412][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.590558][ T4331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.591983][ T4331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.593312][ T4331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.594559][ T4331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.602418][ T4330] device veth0_vlan entered promiscuous mode [ 34.617026][ T4330] device veth1_vlan entered promiscuous mode [ 34.652905][ T1856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.654375][ T1856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.662153][ T1831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.663526][ T1831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.665315][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.666444][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.672300][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.673777][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.675248][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.677392][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.678844][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.685595][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.687653][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.690129][ T4330] device veth0_macvtap entered promiscuous mode [ 34.694176][ T4330] device veth1_macvtap entered promiscuous mode [ 34.712990][ T1831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.714215][ T1831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.716220][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.718567][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.720161][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.721814][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.723350][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.725001][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.726436][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.728880][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.731524][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.732779][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.734129][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.735551][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.738202][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.739779][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.754320][ T1856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.755588][ T1856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.760166][ T1856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.772375][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.773644][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.776509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.801674][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.804055][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.805525][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.809041][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.810571][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.812089][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.813524][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.815017][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.818138][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.825403][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.836003][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.840511][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.845027][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.848375][ T4436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.850038][ T4436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.860754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.862500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.869019][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.870399][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.872087][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.884187][ T4438] loop3: detected capacity change from 0 to 1024 [ 34.893240][ T4438] ======================================================= [ 34.893240][ T4438] WARNING: The mand mount option has been deprecated and [ 34.893240][ T4438] and is ignored by this kernel. Remove the mand [ 34.893240][ T4438] option from the mount to silence this warning. [ 34.893240][ T4438] ======================================================= [ 34.903697][ T4438] EXT4-fs: Ignoring removed bh option [ 34.913959][ T4438] EXT4-fs: Ignoring removed nobh option [ 34.914969][ T4438] EXT4-fs: Ignoring removed bh option [ 34.917901][ T4438] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.919673][ T22] kernel read not supported for file /rfkill (pid: 22 comm: kworker/1:0) [ 34.939023][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.940250][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.949300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.975735][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.978634][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.980383][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.980581][ T4445] loop4: detected capacity change from 0 to 16 [ 34.987476][ T4438] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 34.998368][ T4445] erofs: (device loop4): mounted with root inode @ nid 36. [ 35.018899][ T4442] loop0: detected capacity change from 0 to 512 [ 35.054173][ T4442] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 35.079356][ T4442] block device autoloading is deprecated and will be removed. [ 35.080936][ T4442] I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 35.107320][ T4442] EXT4-fs (loop0): couldn't read superblock of external journal [ 35.297507][ T4454] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.6: Allocating blocks 497-513 which overlap fs metadata [ 35.335431][ T4454] EXT4-fs (loop3): pa 0000000078447396: logic 256, phys. 385, len 8 [ 35.336890][ T4454] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 35.468053][ T4315] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.687099][ T4338] Bluetooth: hci0: command 0x041b tx timeout [ 35.688624][ T4338] Bluetooth: hci1: command 0x041b tx timeout [ 35.690149][ T4338] Bluetooth: hci4: command 0x041b tx timeout [ 35.691794][ T4338] Bluetooth: hci2: command 0x041b tx timeout [ 35.693504][ T4338] Bluetooth: hci3: command 0x041b tx timeout [ 36.358699][ T4461] loop0: detected capacity change from 0 to 1024 [ 36.367310][ T4461] EXT4-fs: Ignoring removed nobh option [ 36.372676][ T4461] EXT4-fs: inline encryption not supported [ 36.373799][ T4324] EXT4-fs (loop3): unmounting filesystem. [ 36.389191][ T4461] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.395812][ T4472] loop1: detected capacity change from 0 to 64 [ 36.429131][ T4461] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.479259][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 36.565344][ T4476] loop3: detected capacity change from 0 to 4096 [ 36.859557][ T4476] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.007084][ T4476] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 37.049396][ T4505] loop4: detected capacity change from 0 to 512 [ 37.051688][ T4505] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 37.054128][ T4505] I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.055617][ T4505] EXT4-fs (loop4): couldn't read superblock of external journal [ 37.218025][ T4324] EXT4-fs (loop3): unmounting filesystem. [ 37.397357][ T4512] netlink: 62 bytes leftover after parsing attributes in process `syz.0.22'. [ 37.621266][ T4519] loop3: detected capacity change from 0 to 64 [ 37.776715][ T4322] Bluetooth: hci3: command 0x040f tx timeout [ 37.777753][ T4322] Bluetooth: hci2: command 0x040f tx timeout [ 37.778695][ T4322] Bluetooth: hci4: command 0x040f tx timeout [ 37.779652][ T4322] Bluetooth: hci1: command 0x040f tx timeout [ 37.780600][ T4322] Bluetooth: hci0: command 0x040f tx timeout [ 38.411593][ T4540] team0: No ports can be present during mode change [ 38.446874][ T4542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 38.524214][ T4545] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 38.634493][ T4549] netlink: 256 bytes leftover after parsing attributes in process `syz.3.34'. [ 38.671745][ T4548] netlink: 2800 bytes leftover after parsing attributes in process `syz.3.34'. [ 38.935467][ T4563] loop4: detected capacity change from 0 to 64 [ 38.963636][ T11] hfs: request for non-existent node 1280 in B*Tree [ 38.965055][ T11] hfs: request for non-existent node 1280 in B*Tree [ 39.275653][ T4572] random: crng reseeded on system resumption [ 39.308407][ T4572] netlink: 52 bytes leftover after parsing attributes in process `syz.1.40'. [ 39.847495][ T4338] Bluetooth: hci0: command 0x0419 tx timeout [ 39.847517][ T4322] Bluetooth: hci1: command 0x0419 tx timeout [ 39.848463][ T4338] Bluetooth: hci4: command 0x0419 tx timeout [ 39.849457][ T4322] Bluetooth: hci2: command 0x0419 tx timeout [ 39.850651][ T4338] Bluetooth: hci3: command 0x0419 tx timeout [ 40.094648][ T4587] tipc: Started in network mode [ 40.095505][ T4587] tipc: Node identity e68b7acfc8e8, cluster identity 4711 [ 40.096884][ T4587] tipc: Enabled bearer , priority 0 [ 40.098076][ T4588] device syzkaller0 entered promiscuous mode [ 40.112824][ T4585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.114344][ T4599] netlink: 'syz.4.47': attribute type 12 has an invalid length. [ 40.114454][ T4585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.116705][ T4599] netlink: 132 bytes leftover after parsing attributes in process `syz.4.47'. [ 40.142016][ T4585] tipc: Resetting bearer [ 40.151882][ T4584] tipc: Resetting bearer [ 40.187975][ T4584] tipc: Disabling bearer [ 40.394545][ T4609] Zero length message leads to an empty skb [ 40.508438][ T4613] loop3: detected capacity change from 0 to 64 [ 40.528724][ T1610] hfs: request for non-existent node 1280 in B*Tree [ 40.529834][ T1610] hfs: request for non-existent node 1280 in B*Tree [ 40.760802][ T4627] netlink: 32 bytes leftover after parsing attributes in process `syz.3.54'. [ 40.890839][ T4375] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.893535][ T4375] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 41.101978][ T4635] netlink: 'syz.2.55': attribute type 5 has an invalid length. [ 41.737609][ T4655] loop0: detected capacity change from 0 to 64 [ 41.813436][ T1831] hfs: request for non-existent node 1280 in B*Tree [ 41.814573][ T1831] hfs: request for non-existent node 1280 in B*Tree [ 41.888590][ T4665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 41.953210][ T4670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.66'. [ 42.068494][ T4674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.68'. [ 42.136253][ T4677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.139260][ T4677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.212551][ T4677] IPVS: persistence engine module ip_vs_pe_  not found [ 42.225907][ T4681] netlink: 'syz.0.70': attribute type 21 has an invalid length. [ 42.229445][ T4681] netlink: 'syz.0.70': attribute type 1 has an invalid length. [ 42.600050][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 42.602255][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.603476][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.087753][ T4687] loop2: detected capacity change from 0 to 32768 [ 43.097314][ T4687] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.72 (4687) [ 43.108820][ T4687] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 43.110467][ T4687] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 43.112240][ T4687] BTRFS info (device loop2): metadata ratio 4 [ 43.113294][ T4687] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 43.114828][ T4687] BTRFS info (device loop2): force lzo compression, level 0 [ 43.115982][ T4687] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 43.122336][ T4687] BTRFS info (device loop2): trying to use backup root at mount time [ 43.123613][ T4687] BTRFS info (device loop2): doing ref verification [ 43.124631][ T4687] BTRFS info (device loop2): disabling tree log [ 43.125517][ T4687] BTRFS info (device loop2): using free space tree [ 43.305871][ T249] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 43.312577][ T4687] BTRFS warning (device loop2): couldn't read tree root [ 43.313779][ T4687] BTRFS warning (device loop2): try to load backup roots slot 1 [ 43.315221][ T249] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 43.318199][ T4687] BTRFS warning (device loop2): couldn't read tree root [ 43.319290][ T4687] BTRFS warning (device loop2): try to load backup roots slot 2 [ 43.321321][ T4687] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 43.323316][ T4687] BTRFS warning (device loop2): couldn't read tree root [ 43.324449][ T4687] BTRFS warning (device loop2): try to load backup roots slot 3 [ 43.379143][ T4687] BTRFS info (device loop2): enabling ssd optimizations [ 43.381273][ T4687] BTRFS info (device loop2): rebuilding free space tree [ 43.413394][ T4687] BTRFS info (device loop2): checking UUID tree [ 43.520108][ T4330] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 43.624643][ T4753] binder: 4752:4753 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 43.653027][ T4449] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (4449) [ 43.709476][ T4757] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 44.517286][ T4779] loop3: detected capacity change from 0 to 32768 [ 44.525993][ T4779] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 44.584634][ T4780] fuse: Unknown parameter '00000000000000000000' [ 44.591271][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 44.593511][ T4786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 45.142393][ T4774] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 45.143888][ T4774] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 45.159472][ T4774] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 45.167085][ T4774] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 45.186746][ T4774] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 45.203482][ T4774] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 45.204790][ T4774] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 45.206140][ T4774] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 45.210556][ T4774] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 45.212492][ T4774] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 45.219079][ T4774] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 45.223680][ T4774] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 45.231480][ T4774] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 45.234407][ T4774] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 45.247491][ T4774] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 45.256897][ T4315] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 46.308385][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 46.310492][ T112] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.486702][ T47] Bluetooth: hci0: command 0x0c1a tx timeout [ 47.209452][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 47.210511][ T4322] Bluetooth: hci1: command 0x0c1a tx timeout [ 47.286704][ T47] Bluetooth: hci4: command 0x0c1a tx timeout [ 47.287704][ T47] Bluetooth: hci3: command 0x0c1a tx timeout [ 47.885585][ T4821] kAFS: No cell specified [ 47.908110][ T4817] fido_id[4817]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 48.068576][ T4843] syz.4.118 uses obsolete (PF_INET,SOCK_PACKET) [ 48.111635][ T4850] 9pnet_virtio: no channels available for device syz [ 48.206821][ T3900] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 48.460921][ T4863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.470159][ T4863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.566739][ T4322] Bluetooth: hci0: command 0x0406 tx timeout [ 49.286670][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 49.287705][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 49.366699][ T4322] Bluetooth: hci3: command 0x0406 tx timeout [ 49.367571][ T4322] Bluetooth: hci4: command 0x0406 tx timeout [ 49.690762][ T3900] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 49.692423][ T3900] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 49.694261][ T3900] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 49.696307][ T3900] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 49.957708][ T3900] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 49.980167][ T3900] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 49.982137][ T3900] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 49.983313][ T3900] usb 1-1: Product: syz [ 49.984035][ T3900] usb 1-1: Manufacturer: syz [ 49.996259][ T3900] cdc_wdm 1-1:1.0: skipping garbage [ 49.998601][ T3900] cdc_wdm 1-1:1.0: skipping garbage [ 50.003946][ T3900] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 50.004926][ T3900] cdc_wdm 1-1:1.0: Unknown control protocol [ 50.161338][ T4896] raw_sendmsg: syz.1.138 forgot to set AF_INET. Fix it! [ 50.806398][ T3900] usb 1-1: USB disconnect, device number 2 [ 51.216677][ T3900] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 51.412135][ T3900] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 51.413416][ T3900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 51.414715][ T3900] usb 1-1: Product: syz [ 51.415374][ T3900] usb 1-1: Manufacturer: syz [ 51.416042][ T3900] usb 1-1: SerialNumber: syz [ 51.421859][ T3900] usb 1-1: config 0 descriptor?? [ 51.425068][ T3900] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 51.426445][ T3900] dvb-usb: bulk message failed: -22 (2/0) [ 51.430819][ T3900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 51.432839][ T3900] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 51.434015][ T3900] usb 1-1: media controller created [ 51.438126][ T3900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 51.629913][ T3900] cxusb: set interface failed [ 51.630785][ T3900] dvb-usb: bulk message failed: -22 (1/0) [ 51.642314][ T3900] DVB: Unable to find symbol mt352_attach() [ 51.643529][ T3900] dvb-usb: bulk message failed: -22 (5/0) [ 51.644456][ T3900] zl10353_read_register: readreg error (reg=127, ret==-121) [ 51.645501][ T3900] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 51.648339][ T3900] Registered IR keymap rc-dvico-mce [ 51.649615][ T3900] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 51.651509][ T3900] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input3 [ 51.654237][ T3900] dvb-usb: schedule remote query interval to 100 msecs. [ 51.655318][ T3900] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 51.660555][ T3900] usb 1-1: USB disconnect, device number 3 [ 51.728618][ T3900] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 52.157048][ T4927] Bluetooth: MGMT ver 1.22 [ 60.505443][ T4923] __nla_validate_parse: 1 callbacks suppressed [ 60.505459][ T4923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 60.508199][ T4923] 8021q: VLANs not supported on hsr0 [ 60.605049][ T4945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.614853][ T4945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.065777][ T4973] 9pnet_virtio: no channels available for device syz [ 62.134979][ T5005] ubi0: attaching mtd0 [ 62.168284][ T5005] ubi0: scanning is finished [ 62.169128][ T5005] ubi0: empty MTD device detected [ 62.349500][ T5005] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 62.350916][ T5005] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 62.351933][ T5005] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 62.371705][ T5005] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 62.373015][ T5005] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 62.374163][ T5005] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 62.397895][ T5005] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 531476334 [ 62.399543][ T5005] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 62.401876][ T5022] ubi0: background thread "ubi_bgt0d" started, PID 5022 [ 62.538157][ T5033] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(16) [ 62.539537][ T5033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.543168][ T5033] vhci_hcd vhci_hcd.0: Device attached [ 62.806746][ T3900] usb 6-1: new low-speed USB device number 2 using vhci_hcd [ 63.919320][ T5034] vhci_hcd: connection reset by peer [ 63.921472][ T1856] vhci_hcd: stop threads [ 63.922361][ T1856] vhci_hcd: release socket [ 63.923402][ T1856] vhci_hcd: disconnect device [ 64.044667][ T5060] binder: 5059:5060 unknown command 0 [ 64.045533][ T5060] binder: 5059:5060 ioctl c0306201 20000080 returned -22 [ 64.056745][ T5060] binder: 5059:5060 tried to acquire reference to desc 0, got 1 instead [ 64.071152][ T5060] binder: 5059:5060 got transaction with out-of-order buffer fixup [ 64.072540][ T5060] binder: 5060:5059 failed to fixup parent [ 64.073462][ T5060] binder: 5059:5060 transaction call to 5059:0 failed 5/29201/-22, size 120-3976 line 3549 [ 64.090494][ T4403] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.121160][ T5066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 64.488659][ T3777] cfg80211: failed to load regulatory.db [ 64.494439][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495619][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.942407][ T5092] ubi: mtd0 is already attached to ubi0 [ 65.149007][ T5124] ptrace attach of "./syz-executor exec"[4331] was attempted by "./syz-executor exec"[5124] [ 65.158537][ T5125] input: syz1 as /devices/virtual/input/input4 [ 66.337673][ T5226] block device autoloading is deprecated and will be removed. [ 67.926813][ T3900] vhci_hcd: vhci_device speed not set [ 68.040632][ T5251] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 68.041778][ T5251] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.043109][ T5251] vhci_hcd vhci_hcd.0: Device attached [ 68.306691][ T4469] usb 2-1: new low-speed USB device number 2 using vhci_hcd [ 68.813062][ T5252] vhci_hcd: connection reset by peer [ 68.814777][ T5284] vhci_hcd: stop threads [ 68.816474][ T5284] vhci_hcd: release socket [ 68.817655][ T5284] vhci_hcd: disconnect device [ 69.303223][ T5305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.227'. [ 69.799883][ T47] Bluetooth: hci3: unexpected event for opcode 0x9103 [ 69.984010][ T5337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'. [ 70.001098][ T5339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 70.260003][ T5353] netlink: 'syz.1.241': attribute type 10 has an invalid length. [ 70.410548][ T5353] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 70.427485][ T5313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.449162][ T5360] netlink: 133 bytes leftover after parsing attributes in process `syz.1.241'. [ 70.489229][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 70.551548][ T5352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.113421][ T47] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 71.348021][ T5399] mmap: syz.1.253 (5399) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.385280][ T5393] capability: warning: `syz.1.253' uses deprecated v2 capabilities in a way that may be insecure [ 71.863348][ T5429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.870221][ T5429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.064947][ T5432] input: syz1 as /devices/virtual/input/input5 [ 72.253709][ T27] audit: type=1400 audit(72.230:2): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=5434 comm="syz.2.268" [ 72.456535][ T5435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'. [ 72.727150][ T5454] lo speed is unknown, defaulting to 1000 [ 72.728350][ T5454] lo speed is unknown, defaulting to 1000 [ 72.732979][ T5454] lo speed is unknown, defaulting to 1000 [ 72.740066][ T5454] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 72.747317][ T5454] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 72.968204][ T5454] lo speed is unknown, defaulting to 1000 [ 72.970044][ T5454] lo speed is unknown, defaulting to 1000 [ 72.971457][ T5454] lo speed is unknown, defaulting to 1000 [ 72.972520][ T5454] lo speed is unknown, defaulting to 1000 [ 72.974125][ T5454] lo speed is unknown, defaulting to 1000 [ 73.004140][ T47] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 73.457163][ T4469] vhci_hcd: vhci_device speed not set [ 73.780799][ T5493] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 73.781988][ T5493] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.790956][ T5493] vhci_hcd vhci_hcd.0: Device attached [ 74.066795][ T112] usb 6-1: new low-speed USB device number 3 using vhci_hcd [ 74.325320][ T5494] vhci_hcd: connection reset by peer [ 74.326464][ T11] vhci_hcd: stop threads [ 74.327183][ T11] vhci_hcd: release socket [ 74.327914][ T11] vhci_hcd: disconnect device [ 74.730202][ T47] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 76.313662][ T5526] delete_channel: no stack [ 76.782177][ T5547] random: crng reseeded on system resumption [ 78.879425][ T5571] netlink: 'syz.4.316': attribute type 21 has an invalid length. [ 78.880783][ T5571] netlink: 'syz.4.316': attribute type 1 has an invalid length. [ 78.881885][ T5571] netlink: 144 bytes leftover after parsing attributes in process `syz.4.316'. [ 79.025477][ T5568] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.026598][ T5568] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.030083][ T5568] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 79.031386][ T5568] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.032302][ T5568] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.035400][ T5578] netlink: 56 bytes leftover after parsing attributes in process `syz.0.318'. [ 79.097965][ T5568] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 79.100136][ T5568] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.101182][ T5568] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.103461][ T5568] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 79.104720][ T5568] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.105617][ T5568] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.118573][ T5568] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 79.120915][ T5568] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 79.121917][ T5568] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 79.128335][ T5568] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 79.218993][ T112] vhci_hcd: vhci_device speed not set [ 80.436462][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.498245][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.499692][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.850546][ T5604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 80.966739][ T47] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.046728][ T47] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.126903][ T4322] Bluetooth: hci4: command 0x0c1a tx timeout [ 81.127881][ T4322] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.128774][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.553407][ T27] audit: type=1326 audit(81.500:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155c068 code=0x7ffc0000 [ 81.626293][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.336'. [ 81.628053][ T5632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.336'. [ 81.712813][ T27] audit: type=1326 audit(81.510:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155c068 code=0x7ffc0000 [ 81.772513][ T27] audit: type=1326 audit(81.510:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=191 compat=0 ip=0xffff9155c068 code=0x7ffc0000 [ 81.775898][ T27] audit: type=1326 audit(81.510:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155c068 code=0x7ffc0000 [ 81.798808][ T27] audit: type=1326 audit(81.510:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155c068 code=0x7ffc0000 [ 81.805118][ T27] audit: type=1326 audit(81.510:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9155a594 code=0x7ffc0000 [ 81.814967][ T27] audit: type=1326 audit(81.520:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff9155dbcc code=0x7ffc0000 [ 81.815321][ T5637] ptrace attach of "./syz-executor exec"[4321] was attempted by "./syz-executor exec"[5637] [ 81.822334][ T27] audit: type=1326 audit(81.520:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9155c068 code=0x7ffc0000 [ 81.834133][ T27] audit: type=1326 audit(81.520:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff9155dbcc code=0x7ffc0000 [ 81.841357][ T27] audit: type=1326 audit(81.520:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff9155a96c code=0x7ffc0000 [ 83.046683][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 83.126675][ T4322] Bluetooth: hci1: command 0x0406 tx timeout [ 83.159564][ T5641] befs: (nbd0): No write support. Marking filesystem read-only [ 83.162199][ T51] block nbd0: Attempted send on invalid socket [ 83.163305][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.190293][ T5641] befs: (nbd0): unable to read superblock [ 83.206722][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 83.207717][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 83.208653][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 83.547288][ T4322] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 84.743038][ T5673] kernel profiling enabled (shift: 34) [ 84.744146][ T5673] profiling shift: 34 too large [ 84.909109][ T4322] Bluetooth: hci0: unexpected event for opcode 0x200c [ 85.033689][ T5686] lo speed is unknown, defaulting to 1000 [ 85.172619][ T5702] netlink: 10 bytes leftover after parsing attributes in process `syz.4.358'. [ 86.228791][ T5722] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 86.229782][ T5722] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.233258][ T5722] vhci_hcd vhci_hcd.0: Device attached [ 86.499794][ T3900] usb 2-1: new low-speed USB device number 3 using vhci_hcd [ 86.501983][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.572719][ T5731] netlink: 224 bytes leftover after parsing attributes in process `syz.4.368'. [ 86.672950][ T5733] netlink: 168 bytes leftover after parsing attributes in process `syz.3.367'. [ 86.679245][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 86.681540][ T7] usb 1-1: config 0 has no interfaces? [ 86.682440][ T7] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 86.684193][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.689687][ T7] usb 1-1: config 0 descriptor?? [ 86.894652][ T5745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.370'. [ 87.050035][ T5723] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 87.051364][ T1856] vhci_hcd: stop threads [ 87.052036][ T1856] vhci_hcd: release socket [ 87.052773][ T1856] vhci_hcd: disconnect device [ 87.054811][ T4368] usb 1-1: USB disconnect, device number 4 [ 88.289840][ T5767] binder: 5766:5767 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 88.669560][ T5784] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.386'. [ 89.818105][ T5808] usb usb8: usbfs: process 5808 (syz.0.391) did not claim interface 0 before use [ 90.367320][ T5817] 9pnet_virtio: no channels available for device syz [ 90.408944][ T5820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 90.669874][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 90.669885][ T27] audit: type=1326 audit(90.650:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.1.399" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895c068 code=0x0 [ 91.126668][ T47] Bluetooth: hci4: command 0x0405 tx timeout [ 91.607028][ T3900] vhci_hcd: vhci_device speed not set [ 92.564319][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'. [ 92.659151][ T5879] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 92.660271][ T5879] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 92.662270][ T5879] vhci_hcd vhci_hcd.0: Device attached [ 92.746700][ T5882] 9pnet_virtio: no channels available for device syz [ 93.099542][ T3900] vhci_hcd: vhci_device speed not set [ 93.171691][ T3900] usb 6-1: new full-speed USB device number 4 using vhci_hcd [ 93.174647][ T5880] vhci_hcd: connection closed [ 93.175538][ T1856] vhci_hcd: stop threads [ 93.177310][ T1856] vhci_hcd: release socket [ 93.178059][ T1856] vhci_hcd: disconnect device [ 94.131982][ T5927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.134417][ T5927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.209625][ T5929] device syzkaller0 entered promiscuous mode [ 94.440437][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.434'. [ 94.452185][ T5939] loop4: detected capacity change from 0 to 4 [ 98.327717][ T3900] vhci_hcd: vhci_device speed not set [ 105.158719][ T5927] lo speed is unknown, defaulting to 1000 [ 105.260535][ T5948] netlink: 'syz.3.437': attribute type 10 has an invalid length. [ 105.265237][ T5948] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 105.297684][ T5960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.441'. [ 105.695127][ T5992] fuse: Unknown parameter '00000000000000000000' [ 106.001636][ T6013] 9pnet_virtio: no channels available for device syz [ 106.107569][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.111784][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.360055][ T4322] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 108.711716][ T6057] tipc: Enabling of bearer rejected, failed to enable media [ 109.204466][ T6066] block device autoloading is deprecated and will be removed. [ 109.259018][ T6071] process 'syz.4.481' launched './file0' with NULL argv: empty string added [ 110.179074][ T6088] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.488'. [ 110.448241][ T6094] device macvtap0 entered promiscuous mode [ 110.454341][ T6094] device macvtap0 left promiscuous mode [ 110.560550][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.562779][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.564101][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.570898][ T6099] device bridge_slave_0 left promiscuous mode [ 110.572995][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.661728][ T6099] device bridge_slave_1 left promiscuous mode [ 110.662840][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.704344][ T6099] bond0: (slave bond_slave_0): Releasing backup interface [ 110.710493][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.496'. [ 110.795760][ T6099] bond0: (slave bond_slave_1): Releasing backup interface [ 111.131018][ T6099] team0: Port device team_slave_0 removed [ 111.140887][ T6099] team0: Port device team_slave_1 removed [ 111.142168][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.167038][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.173641][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.174890][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.197996][ T6107] device vlan0 entered promiscuous mode [ 111.222510][ T6107] team0: Port device vlan0 added [ 111.224075][ T6104] tipc: Enabled bearer , priority 0 [ 111.249557][ T6116] netlink: 84 bytes leftover after parsing attributes in process `syz.4.492'. [ 111.331370][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.333259][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.550684][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.552153][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.983255][ T6131] lo speed is unknown, defaulting to 1000 [ 112.237648][ T3900] tipc: Node number set to 778271439 [ 112.581259][ T6141] netlink: 80 bytes leftover after parsing attributes in process `syz.2.505'. [ 114.232760][ T6153] netlink: 'syz.0.510': attribute type 10 has an invalid length. [ 114.406628][ C0] sched: RT throttling activated [ 114.468280][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 114.505440][ T6153] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 114.521311][ T6156] netlink: 133 bytes leftover after parsing attributes in process `syz.0.510'. [ 115.038292][ T6152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.323097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 115.324919][ T6176] tipc: Started in network mode [ 115.325749][ T6176] tipc: Node identity 2656bd63d361, cluster identity 4711 [ 115.329022][ T6176] tipc: Enabled bearer , priority 0 [ 115.330195][ T6177] device syzkaller0 entered promiscuous mode [ 115.364141][ T6174] tipc: Resetting bearer [ 115.394655][ T6173] tipc: Resetting bearer [ 115.457766][ T6173] tipc: Disabling bearer [ 116.462889][ T6211] serio: Serial port ptm1 [ 116.509182][ T6212] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 116.510368][ T6212] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 116.513449][ T6212] vhci_hcd vhci_hcd.0: Device attached [ 116.568372][ T6216] vhci_hcd: connection closed [ 116.572922][ T4574] vhci_hcd: stop threads [ 116.575724][ T4574] vhci_hcd: release socket [ 116.576448][ T4574] vhci_hcd: disconnect device [ 116.956554][ T6233] netlink: 'syz.1.532': attribute type 10 has an invalid length. [ 117.021853][ T6233] netlink: 133 bytes leftover after parsing attributes in process `syz.1.532'. [ 117.203984][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'. [ 117.777844][ T6232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.326816][ T4322] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 118.332424][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 119.132134][ T6279] netlink: 'syz.4.550': attribute type 10 has an invalid length. [ 119.227458][ T6279] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 119.266891][ T6279] netlink: 133 bytes leftover after parsing attributes in process `syz.4.550'. [ 119.436349][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 119.761966][ T6296] netlink: 68 bytes leftover after parsing attributes in process `syz.0.553'. [ 119.939925][ T6278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.285009][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 120.533354][ T6321] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 120.542235][ T6321] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 120.551821][ T6321] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 120.555744][ T6321] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 120.562800][ T6321] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.566432][ T6321] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.575960][ T6321] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.581521][ T6321] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.617225][ T6321] device geneve2 entered promiscuous mode [ 120.777233][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.561'. [ 122.038253][ T6391] delete_channel: no stack [ 122.204638][ T6393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.213147][ T6393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.178070][ T6420] Bluetooth: hci0: unsupported parameter 255 [ 123.180423][ T6420] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 123.840172][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 123.841296][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.842851][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.843927][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.845034][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.846065][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.847463][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.848539][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.849675][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.850809][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.851866][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.852911][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.853952][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.855944][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.857124][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.858353][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.859410][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.860453][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.861603][ T3900] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 123.864620][ T3900] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 123.866535][ T6425] netlink: set zone limit has 8 unknown bytes [ 124.016111][ T6430] fido_id[6430]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 124.423266][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 124.424933][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 124.431474][ T6453] netlink: 'syz.2.597': attribute type 14 has an invalid length. [ 124.435199][ T6453] netlink: 'syz.2.597': attribute type 12 has an invalid length. [ 124.504605][ T6454] netlink: 68 bytes leftover after parsing attributes in process `syz.4.595'. [ 124.520570][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 124.924302][ T6477] device batadv_slave_1 entered promiscuous mode [ 124.929638][ T6476] device batadv_slave_1 left promiscuous mode [ 125.340493][ T6485] netlink: 'syz.3.607': attribute type 10 has an invalid length. [ 125.364323][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.381840][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.400407][ T6471] block device autoloading is deprecated and will be removed. [ 125.400745][ T6485] netlink: 133 bytes leftover after parsing attributes in process `syz.3.607'. [ 125.419262][ T4322] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 125.421443][ T4322] Bluetooth: hci3: Dropping invalid advertising data [ 125.422671][ T4322] Bluetooth: hci3: Malformed LE Event: 0x02 [ 125.446095][ T4322] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 125.501667][ T6494] ------------[ cut here ]------------ [ 125.502707][ T6494] WARNING: CPU: 0 PID: 6494 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x16c/0x19c [ 125.504385][ T6494] Modules linked in: [ 125.504966][ T6494] CPU: 0 PID: 6494 Comm: syz.3.607 Not tainted syzkaller #0 [ 125.506052][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 125.507584][ T6494] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 125.508728][ T6494] pc : ieee80211_link_release_channel+0x16c/0x19c [ 125.509719][ T6494] lr : ieee80211_link_release_channel+0x16c/0x19c [ 125.510685][ T6494] sp : ffff800022537100 [ 125.511370][ T6494] x29: ffff800022537100 x28: ffff0000f6615c80 x27: dfff800000000000 [ 125.512641][ T6494] x26: 1fffe0001ecc2d6e x25: 1fffe000195d3000 x24: ffff0000f6616b72 [ 125.513806][ T6494] x23: 1fffe0001ecc2ab5 x22: dfff800000000000 x21: 0000000000000000 [ 125.514913][ T6494] x20: ffff0000f6616258 x19: ffff0000f66155a8 x18: 0000000053d23a70 [ 125.516136][ T6494] x17: ffff8000181fa000 x16: ffff8000082d0e30 x15: ffff80000fcb95f0 [ 125.517390][ T6494] x14: ffff80000fcb94ac x13: 1ffff00002a180b1 x12: 0000000000080000 [ 125.518509][ T6494] x11: 00000000000345a3 x10: ffff80002a7eb000 x9 : ffff800011293dc4 [ 125.519687][ T6494] x8 : 00000000000345a4 x7 : ffff800011293cc4 x6 : 0000000000000000 [ 125.520881][ T6494] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c95d4 [ 125.521978][ T6494] x2 : ffff0000cbfcb780 x1 : 0000000000000000 x0 : 0000000000000000 [ 125.523271][ T6494] Call trace: [ 125.523745][ T6494] ieee80211_link_release_channel+0x16c/0x19c [ 125.524615][ T6494] ieee80211_link_stop+0x9c/0xc4 [ 125.525325][ T6494] ieee80211_if_change_type+0x1d8/0xc6c [ 125.526133][ T6494] ieee80211_change_iface+0x68/0x400 [ 125.526912][ T6494] cfg80211_change_iface+0x718/0xf2c [ 125.527748][ T6494] nl80211_set_interface+0x41c/0x6e8 [ 125.528658][ T6494] genl_family_rcv_msg_doit+0x1f8/0x2f4 [ 125.529591][ T6494] genl_rcv_msg+0x444/0x62c [ 125.530295][ T6494] netlink_rcv_skb+0x208/0x3c4 [ 125.531078][ T6494] genl_rcv+0x38/0x50 [ 125.531725][ T6494] netlink_unicast+0x60c/0x824 [ 125.532472][ T6494] netlink_sendmsg+0x6e8/0x9b0 [ 125.533262][ T6494] ____sys_sendmsg+0x5b8/0x918 [ 125.533997][ T6494] __sys_sendmsg+0x25c/0x320 [ 125.534679][ T6494] __arm64_sys_sendmsg+0x80/0x94 [ 125.535416][ T6494] invoke_syscall+0x98/0x2bc [ 125.536158][ T6494] el0_svc_common+0x138/0x258 [ 125.536826][ T6494] do_el0_svc+0x58/0x13c [ 125.537482][ T6494] el0_svc+0x58/0x138 [ 125.538061][ T6494] el0t_64_sync_handler+0x84/0xf0 [ 125.538835][ T6494] el0t_64_sync+0x18c/0x190 [ 125.539500][ T6494] irq event stamp: 1586 [ 125.540108][ T6494] hardirqs last enabled at (1585): [] __cancel_work_timer+0x2b0/0x448 [ 125.541581][ T6494] hardirqs last disabled at (1586): [] el1_dbg+0x24/0x80 [ 125.542808][ T6494] softirqs last enabled at (204): [] cfg80211_mgmt_registrations_update+0x440/0x838 [ 125.544312][ T6494] softirqs last disabled at (202): [] cfg80211_mgmt_registrations_update+0x10c/0x838 [ 125.545891][ T6494] ---[ end trace 0000000000000000 ]--- [ 125.587695][ T6494] ------------[ cut here ]------------ [ 125.588665][ T6494] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 125.590239][ T6494] WARNING: CPU: 0 PID: 6494 at net/mac80211/driver-ops.c:315 drv_unassign_vif_chanctx+0x358/0x63c [ 125.591855][ T6494] Modules linked in: [ 125.592533][ T6494] CPU: 0 PID: 6494 Comm: syz.3.607 Tainted: G W syzkaller #0 [ 125.593845][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 125.595385][ T6494] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 125.596663][ T6494] pc : drv_unassign_vif_chanctx+0x358/0x63c [ 125.597541][ T6494] lr : drv_unassign_vif_chanctx+0x358/0x63c [ 125.598411][ T6494] sp : ffff800022536fb0 [ 125.598994][ T6494] x29: ffff800022536fb0 x28: 0000000000000000 x27: ffff0000f6614c80 [ 125.600135][ T6494] x26: ffff0000f6616698 x25: dfff800000000000 x24: ffff0000f66167e8 [ 125.601402][ T6494] x23: 0000000000000000 x22: ffff0000d18cfa00 x21: ffff0000f66167e8 [ 125.602522][ T6494] x20: ffff800017a8b000 x19: ffff0000f6614c80 x18: ffff800011abbcc0 [ 125.603712][ T6494] x17: 1fffe00033ed797e x16: ffff8000082d22e0 x15: 0000000040000000 [ 125.604852][ T6494] x14: 0000000000000002 x13: 1ffff00002a180b1 x12: 0000000000ff0100 [ 125.605976][ T6494] x11: ff0080000a893b14 x10: 0000000000000003 x9 : b47fb5b9e6745900 [ 125.607367][ T6494] x8 : b47fb5b9e6745900 x7 : ffff800008251e10 x6 : 0000000000000000 [ 125.608477][ T6494] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 125.609670][ T6494] x2 : 0000000000000006 x1 : ffff800011abd7c0 x0 : ffff80018a6a7000 [ 125.610826][ T6494] Call trace: [ 125.611289][ T6494] drv_unassign_vif_chanctx+0x358/0x63c [ 125.612082][ T6494] ieee80211_assign_link_chanctx+0x140/0x82c [ 125.613048][ T6494] __ieee80211_link_release_channel+0x29c/0x55c [ 125.613960][ T6494] ieee80211_link_release_channel+0x130/0x19c [ 125.614901][ T6494] ieee80211_link_stop+0x9c/0xc4 [ 125.615643][ T6494] ieee80211_if_change_type+0x1d8/0xc6c [ 125.616529][ T6494] ieee80211_change_iface+0x68/0x400 [ 125.617369][ T6494] cfg80211_change_iface+0x718/0xf2c [ 125.618185][ T6494] nl80211_set_interface+0x41c/0x6e8 [ 125.618942][ T6494] genl_family_rcv_msg_doit+0x1f8/0x2f4 [ 125.619772][ T6494] genl_rcv_msg+0x444/0x62c [ 125.620434][ T6494] netlink_rcv_skb+0x208/0x3c4 [ 125.621273][ T6494] genl_rcv+0x38/0x50 [ 125.621918][ T6494] netlink_unicast+0x60c/0x824 [ 125.622693][ T6494] netlink_sendmsg+0x6e8/0x9b0 [ 125.623387][ T6494] ____sys_sendmsg+0x5b8/0x918 [ 125.624053][ T6494] __sys_sendmsg+0x25c/0x320 [ 125.624738][ T6494] __arm64_sys_sendmsg+0x80/0x94 [ 125.625457][ T6494] invoke_syscall+0x98/0x2bc [ 125.626133][ T6494] el0_svc_common+0x138/0x258 [ 125.626774][ T6494] do_el0_svc+0x58/0x13c [ 125.627414][ T6494] el0_svc+0x58/0x138 [ 125.628030][ T6494] el0t_64_sync_handler+0x84/0xf0 [ 125.628802][ T6494] el0t_64_sync+0x18c/0x190 [ 125.629414][ T6494] irq event stamp: 1662 [ 125.630033][ T6494] hardirqs last enabled at (1661): [] finish_lock_switch+0xb0/0x1c4 [ 125.631471][ T6494] hardirqs last disabled at (1662): [] el1_dbg+0x24/0x80 [ 125.632651][ T6494] softirqs last enabled at (1630): [] handle_softirqs+0xaf8/0xc6c [ 125.634029][ T6494] softirqs last disabled at (1589): [] __do_softirq+0x14/0x20 [ 125.635375][ T6494] ---[ end trace 0000000000000000 ]--- [ 125.666816][ T6494] ------------[ cut here ]------------ [ 125.667790][ T6494] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 125.669263][ T6494] WARNING: CPU: 0 PID: 6494 at net/mac80211/driver-ops.h:156 ieee80211_vif_cfg_change_notify+0x21c/0x25c [ 125.671018][ T6494] Modules linked in: [ 125.671577][ T6494] CPU: 0 PID: 6494 Comm: syz.3.607 Tainted: G W syzkaller #0 [ 125.672871][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 125.674391][ T6494] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 125.675550][ T6494] pc : ieee80211_vif_cfg_change_notify+0x21c/0x25c [ 125.676585][ T6494] lr : ieee80211_vif_cfg_change_notify+0x21c/0x25c [ 125.677555][ T6494] sp : ffff800022536fb0 [ 125.678188][ T6494] x29: ffff800022536fb0 x28: ffff8000150c0000 x27: ffff8000150c0584 [ 125.679457][ T6494] x26: ffff0000d18cfa20 x25: 0000000000000000 x24: dfff800000000000 [ 125.680644][ T6494] x23: 0000000000000000 x22: ffff0000f6616790 x21: ffff0000cae98ea0 [ 125.682045][ T6494] x20: ffff800017a8b000 x19: ffff0000f6614c80 x18: ffff800011abbcc0 [ 125.683424][ T6494] x17: 1fffe00033ed797e x16: ffff8000082d22e0 x15: 0000000040000000 [ 125.684648][ T6494] x14: 0000000000000002 x13: 1ffff00002a180b1 x12: 0000000000ff0100 [ 125.685877][ T6494] x11: ff0080000a893b14 x10: 0000000000000003 x9 : b47fb5b9e6745900 [ 125.687139][ T6494] x8 : b47fb5b9e6745900 x7 : ffff800008251e10 x6 : 0000000000000000 [ 125.688325][ T6494] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 125.689530][ T6494] x2 : 0000000000000006 x1 : ffff800011abd7c0 x0 : ffff80018a6a7000 [ 125.690768][ T6494] Call trace: [ 125.691338][ T6494] ieee80211_vif_cfg_change_notify+0x21c/0x25c [ 125.692307][ T6494] ieee80211_assign_link_chanctx+0x6e8/0x82c [ 125.693302][ T6494] __ieee80211_link_release_channel+0x29c/0x55c [ 125.694235][ T6494] ieee80211_link_release_channel+0x130/0x19c [ 125.695074][ T6494] ieee80211_link_stop+0x9c/0xc4 [ 125.695788][ T6494] ieee80211_if_change_type+0x1d8/0xc6c [ 125.696684][ T6494] ieee80211_change_iface+0x68/0x400 [ 125.697519][ T6494] cfg80211_change_iface+0x718/0xf2c [ 125.698384][ T6494] nl80211_set_interface+0x41c/0x6e8 [ 125.699143][ T6494] genl_family_rcv_msg_doit+0x1f8/0x2f4 [ 125.700015][ T6494] genl_rcv_msg+0x444/0x62c [ 125.700670][ T6494] netlink_rcv_skb+0x208/0x3c4 [ 125.701331][ T6494] genl_rcv+0x38/0x50 [ 125.701927][ T6494] netlink_unicast+0x60c/0x824 [ 125.702625][ T6494] netlink_sendmsg+0x6e8/0x9b0 [ 125.703416][ T6494] ____sys_sendmsg+0x5b8/0x918 [ 125.704188][ T6494] __sys_sendmsg+0x25c/0x320 [ 125.704952][ T6494] __arm64_sys_sendmsg+0x80/0x94 [ 125.705707][ T6494] invoke_syscall+0x98/0x2bc [ 125.706422][ T6494] el0_svc_common+0x138/0x258 [ 125.707098][ T6494] do_el0_svc+0x58/0x13c [ 125.707690][ T6494] el0_svc+0x58/0x138 [ 125.708356][ T6494] el0t_64_sync_handler+0x84/0xf0 [ 125.709081][ T6494] el0t_64_sync+0x18c/0x190 [ 125.709788][ T6494] irq event stamp: 1778 [ 125.710407][ T6494] hardirqs last enabled at (1777): [] finish_lock_switch+0xb0/0x1c4 [ 125.711803][ T6494] hardirqs last disabled at (1778): [] el1_dbg+0x24/0x80 [ 125.713154][ T6494] softirqs last enabled at (1746): [] handle_softirqs+0xaf8/0xc6c [ 125.714460][ T6494] softirqs last disabled at (1665): [] __do_softirq+0x14/0x20 [ 125.715725][ T6494] ---[ end trace 0000000000000000 ]--- [ 125.748886][ T6494] ------------[ cut here ]------------ [ 125.749783][ T6494] WARNING: CPU: 0 PID: 6494 at net/mac80211/iface.c:113 ieee80211_recalc_idle+0x298/0x338 [ 125.751268][ T6494] Modules linked in: [ 125.751800][ T6494] CPU: 0 PID: 6494 Comm: syz.3.607 Tainted: G W syzkaller #0 [ 125.752954][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 125.754472][ T6494] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 125.755575][ T6494] pc : ieee80211_recalc_idle+0x298/0x338 [ 125.756503][ T6494] lr : ieee80211_recalc_idle+0x298/0x338 [ 125.757350][ T6494] sp : ffff800022536fa0 [ 125.757970][ T6494] x29: ffff800022536fa0 x28: 0000000000000000 x27: ffff8000150c0000 [ 125.759174][ T6494] x26: ffff0000d18cfa20 x25: 0000000000000000 x24: dfff800000000000 [ 125.760516][ T6494] x23: 000000000000096c x22: 1fffe000195d31db x21: dfff800000000000 [ 125.761660][ T6494] x20: 0000000000000000 x19: ffff0000cae98ea0 x18: ffff800011abbcc0 [ 125.762941][ T6494] x17: 1fffe00033ed797e x16: ffff8000082d0e30 x15: 0000000000000002 [ 125.764231][ T6494] x14: 0000000000000007 x13: 1ffff00002a180b1 x12: 0000000000080000 [ 125.765441][ T6494] x11: 000000000007ffff x10: ffff80002a7eb000 x9 : ffff8000111ce074 [ 125.766730][ T6494] x8 : 0000000000080000 x7 : ffff80001116e2d4 x6 : 0000000000000000 [ 125.767873][ T6494] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 125.769119][ T6494] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 125.770355][ T6494] Call trace: [ 125.770875][ T6494] ieee80211_recalc_idle+0x298/0x338 [ 125.771791][ T6494] ieee80211_del_chanctx+0x35c/0x710 [ 125.772577][ T6494] ieee80211_free_chanctx+0x250/0x334 [ 125.773273][ T6494] __ieee80211_link_release_channel+0x3d4/0x55c [ 125.774104][ T6494] ieee80211_link_release_channel+0x130/0x19c [ 125.775081][ T6494] ieee80211_link_stop+0x9c/0xc4 [ 125.775866][ T6494] ieee80211_if_change_type+0x1d8/0xc6c [ 125.776731][ T6494] ieee80211_change_iface+0x68/0x400 [ 125.777513][ T6494] cfg80211_change_iface+0x718/0xf2c [ 125.778310][ T6494] nl80211_set_interface+0x41c/0x6e8 [ 125.779195][ T6494] genl_family_rcv_msg_doit+0x1f8/0x2f4 [ 125.780076][ T6494] genl_rcv_msg+0x444/0x62c [ 125.780805][ T6494] netlink_rcv_skb+0x208/0x3c4 [ 125.781519][ T6494] genl_rcv+0x38/0x50 [ 125.782145][ T6494] netlink_unicast+0x60c/0x824 [ 125.782917][ T6494] netlink_sendmsg+0x6e8/0x9b0 [ 125.783598][ T6494] ____sys_sendmsg+0x5b8/0x918 [ 125.784349][ T6494] __sys_sendmsg+0x25c/0x320 [ 125.785010][ T6494] __arm64_sys_sendmsg+0x80/0x94 [ 125.785692][ T6494] invoke_syscall+0x98/0x2bc [ 125.786353][ T6494] el0_svc_common+0x138/0x258 [ 125.787015][ T6494] do_el0_svc+0x58/0x13c [ 125.787715][ T6494] el0_svc+0x58/0x138 [ 125.788356][ T6494] el0t_64_sync_handler+0x84/0xf0 [ 125.789125][ T6494] el0t_64_sync+0x18c/0x190 [ 125.789915][ T6494] irq event stamp: 1814 [ 125.790535][ T6494] hardirqs last enabled at (1813): [] exit_to_kernel_mode+0xcc/0xfc [ 125.791922][ T6494] hardirqs last disabled at (1814): [] el1_dbg+0x24/0x80 [ 125.793162][ T6494] softirqs last enabled at (1808): [] handle_softirqs+0xaf8/0xc6c [ 125.794624][ T6494] softirqs last disabled at (1781): [] __do_softirq+0x14/0x20 [ 125.795899][ T6494] ---[ end trace 0000000000000000 ]--- [ 125.800968][ T6494] ------------[ cut here ]------------ [ 125.801937][ T6494] ODEBUG: init active (active state 0) object type: timer_list hint: 0x0 [ 125.803377][ T6494] WARNING: CPU: 0 PID: 6494 at lib/debugobjects.c:518 __debug_object_init+0x2bc/0x408 [ 125.804878][ T6494] Modules linked in: [ 125.805539][ T6494] CPU: 0 PID: 6494 Comm: syz.3.607 Tainted: G W syzkaller #0 [ 125.806795][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 125.808262][ T6494] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 125.809483][ T6494] pc : __debug_object_init+0x2bc/0x408 [ 125.810334][ T6494] lr : __debug_object_init+0x2bc/0x408 [ 125.811173][ T6494] sp : ffff800022536fd0 [ 125.811858][ T6494] x29: ffff800022536fd0 x28: dfff800000000000 x27: ffff0000f6592058 [ 125.813133][ T6494] x26: ffff0000f6615a28 x25: 0000000000000000 x24: 0000000000000003 [ 125.814402][ T6494] x23: ffff800011adace0 x22: ffff800011faae00 x21: 0000000000000000 [ 125.815558][ T6494] x20: ffff800011adace0 x19: ffff0000f6615a28 x18: ffff800011abbcc0 [ 125.816718][ T6494] x17: 6e6968207473696c x16: ffff8000082d22e0 x15: 0000000000000002 [ 125.817994][ T6494] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 [ 125.819206][ T6494] x11: 000000000007ffff x10: ffff80002a7eb000 x9 : b47fb5b9e6745900 [ 125.820434][ T6494] x8 : b47fb5b9e6745900 x7 : 0000000000000001 x6 : 0000000000000001 [ 125.821707][ T6494] x5 : ffff800022536a58 x4 : ffff8000151a4820 x3 : ffff80000852e404 [ 125.822890][ T6494] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 125.823974][ T6494] Call trace: [ 125.824464][ T6494] __debug_object_init+0x2bc/0x408 [ 125.825189][ T6494] debug_object_init+0x20/0x2c [ 125.825861][ T6494] init_timer_key+0x54/0x4a0 [ 125.826499][ T6494] ieee80211_sta_setup_sdata+0x330/0x62c [ 125.827279][ T6494] ieee80211_setup_sdata+0x830/0xaa8 [ 125.828101][ T6494] ieee80211_if_change_type+0x1e4/0xc6c [ 125.829014][ T6494] ieee80211_change_iface+0x68/0x400 [ 125.829872][ T6494] cfg80211_change_iface+0x718/0xf2c [ 125.830722][ T6494] nl80211_set_interface+0x41c/0x6e8 [ 125.831571][ T6494] genl_family_rcv_msg_doit+0x1f8/0x2f4 [ 125.832434][ T6494] genl_rcv_msg+0x444/0x62c [ 125.833165][ T6494] netlink_rcv_skb+0x208/0x3c4 [ 125.833939][ T6494] genl_rcv+0x38/0x50 [ 125.834611][ T6494] netlink_unicast+0x60c/0x824 [ 125.835420][ T6494] netlink_sendmsg+0x6e8/0x9b0 [ 125.836191][ T6494] ____sys_sendmsg+0x5b8/0x918 [ 125.836911][ T6494] __sys_sendmsg+0x25c/0x320 [ 125.837558][ T6494] __arm64_sys_sendmsg+0x80/0x94 [ 125.838269][ T6494] invoke_syscall+0x98/0x2bc [ 125.838932][ T6494] el0_svc_common+0x138/0x258 [ 125.839683][ T6494] do_el0_svc+0x58/0x13c [ 125.840348][ T6494] el0_svc+0x58/0x138 [ 125.840927][ T6494] el0t_64_sync_handler+0x84/0xf0 [ 125.841654][ T6494] el0t_64_sync+0x18c/0x190 [ 125.842374][ T6494] irq event stamp: 1986 [ 125.842931][ T6494] hardirqs last enabled at (1985): [] __up_console_sem+0xb4/0x100 [ 125.844287][ T6494] hardirqs last disabled at (1986): [] el1_dbg+0x24/0x80 [ 125.845505][ T6494] softirqs last enabled at (1928): [] handle_softirqs+0xaf8/0xc6c [ 125.846940][ T6494] softirqs last disabled at (1817): [] __do_softirq+0x14/0x20 [ 125.848327][ T6494] ---[ end trace 0000000000000000 ]--- [ 125.852562][ T6494] INFO: trying to register non-static key. [ 125.853506][ T6494] The code is fine but needs lockdep annotation, or maybe [ 125.854501][ T6494] you didn't initialize this object before use? [ 125.855385][ T6494] turning off the locking correctness validator. [ 125.856314][ T6494] CPU: 0 PID: 6494 Comm: syz.3.607 Tainted: G W syzkaller #0 [ 125.857577][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 125.859132][ T6494] Call trace: [ 125.859652][ T6494] dump_backtrace+0x1c8/0x1f4 [ 125.860359][ T6494] show_stack+0x2c/0x3c [ 125.861065][ T6494] __dump_stack+0x30/0x40 [ 125.861750][ T6494] dump_stack_lvl+0xf8/0x160 [ 125.862442][ T6494] dump_stack+0x1c/0x5c [ 125.863128][ T6494] assign_lock_key+0x224/0x258 [ 125.863923][ T6494] register_lock_class+0x1ac/0x694 [ 125.864712][ T6494] __lock_acquire+0x150/0x6544 [ 125.865389][ T6494] lock_acquire+0x20c/0x644 [ 125.866093][ T6494] timer_delete_sync+0x98/0x20c [ 125.866823][ T6494] timer_fixup_init+0x3c/0x6c [ 125.867488][ T6494] __debug_object_init+0x304/0x408 [ 125.868222][ T6494] debug_object_init+0x20/0x2c [ 125.868841][ T6494] init_timer_key+0x54/0x4a0 [ 125.869472][ T6494] ieee80211_sta_setup_sdata+0x330/0x62c [ 125.870324][ T6494] ieee80211_setup_sdata+0x830/0xaa8 [ 125.871182][ T6494] ieee80211_if_change_type+0x1e4/0xc6c [ 125.872026][ T6494] ieee80211_change_iface+0x68/0x400 [ 125.872903][ T6494] cfg80211_change_iface+0x718/0xf2c [ 125.873674][ T6494] nl80211_set_interface+0x41c/0x6e8 [ 125.874556][ T6494] genl_family_rcv_msg_doit+0x1f8/0x2f4 [ 125.875473][ T6494] genl_rcv_msg+0x444/0x62c [ 125.876219][ T6494] netlink_rcv_skb+0x208/0x3c4 [ 125.876906][ T6494] genl_rcv+0x38/0x50 [ 125.877520][ T6494] netlink_unicast+0x60c/0x824 [ 125.878239][ T6494] netlink_sendmsg+0x6e8/0x9b0 [ 125.878985][ T6494] ____sys_sendmsg+0x5b8/0x918 [ 125.879724][ T6494] __sys_sendmsg+0x25c/0x320 [ 125.880409][ T6494] __arm64_sys_sendmsg+0x80/0x94 [ 125.881226][ T6494] invoke_syscall+0x98/0x2bc [ 125.881912][ T6494] el0_svc_common+0x138/0x258 [ 125.882649][ T6494] do_el0_svc+0x58/0x13c [ 125.883333][ T6494] el0_svc+0x58/0x138 [ 125.883957][ T6494] el0t_64_sync_handler+0x84/0xf0 [ 125.884771][ T6494] el0t_64_sync+0x18c/0x190 [ 125.887798][ T6494] ------------[ cut here ]------------ [ 125.888688][ T6494] ODEBUG: init active (active state 0) object type: timer_list hint: 0x0 [ 125.890071][ T6494] WARNING: CPU: 0 PID: 6494 at lib/debugobjects.c:518 __debug_object_init+0x2bc/0x408 [ 125.891490][ T6494] Modules linked in: [ 125.892053][ T6494] CPU: 0 PID: 6494 Comm: syz.3.607 Tainted: G W syzkaller #0 [ 125.893287][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 125.894676][ T6494] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 125.895861][ T6494] pc : __debug_object_init+0x2bc/0x408 [ 125.896612][ T6494] lr : __debug_object_init+0x2bc/0x408 [ 125.897485][ T6494] sp : ffff800022536f40 [ 125.898129][ T6494] x29: ffff800022536f40 x28: dfff800000000000 x27: ffff0000f6592058 [ 125.899288][ T6494] x26: ffff0000f6615a28 x25: 0000000000000000 x24: 0000000000000003 [ 125.900563][ T6494] x23: ffff800011adace0 x22: ffff800011faae00 x21: 0000000000000000 [ 125.901921][ T6494] x20: ffff800011adace0 x19: ffff0000f6615a28 x18: ffff800011abbcc0 [ 125.903111][ T6494] x17: 6e6968207473696c x16: ffff800008042c8c x15: 0000000000000002 [ 125.904349][ T6494] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 [ 125.905497][ T6494] x11: 000000000007ffff x10: ffff80002a7eb000 x9 : b47fb5b9e6745900 [ 125.906644][ T6494] x8 : b47fb5b9e6745900 x7 : 0000000000000001 x6 : 0000000000000001 [ 125.907839][ T6494] x5 : ffff8000225369d8 x4 : ffff8000151a4820 x3 : ffff80000852e404 [ 125.908998][ T6494] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 125.910175][ T6494] Call trace: [ 125.910676][ T6494] __debug_object_init+0x2bc/0x408 [ 125.911530][ T6494] debug_object_init+0x20/0x2c [ 125.912255][ T6494] timer_fixup_init+0x4c/0x6c [ 125.912974][ T6494] __debug_object_init+0x304/0x408 [ 125.913805][ T6494] debug_object_init+0x20/0x2c [ 125.914565][ T6494] init_timer_key+0x54/0x4a0 [ 125.915244][ T6494] ieee80211_sta_setup_sdata+0x330/0x62c [ 125.916036][ T6494] ieee80211_setup_sdata+0x830/0xaa8 [ 125.916844][ T6494] ieee80211_if_change_type+0x1e4/0xc6c [ 125.917664][ T6494] ieee80211_change_iface+0x68/0x400 [ 125.918446][ T6494] cfg80211_change_iface+0x718/0xf2c [ 125.919212][ T6494] nl80211_set_interface+0x41c/0x6e8 [ 125.919944][ T6494] genl_family_rcv_msg_doit+0x1f8/0x2f4 [ 125.920839][ T6494] genl_rcv_msg+0x444/0x62c [ 125.921544][ T6494] netlink_rcv_skb+0x208/0x3c4 [ 125.922343][ T6494] genl_rcv+0x38/0x50 [ 125.922950][ T6494] netlink_unicast+0x60c/0x824 [ 125.923676][ T6494] netlink_sendmsg+0x6e8/0x9b0 [ 125.924364][ T6494] ____sys_sendmsg+0x5b8/0x918 [ 125.924982][ T6494] __sys_sendmsg+0x25c/0x320 [ 125.925636][ T6494] __arm64_sys_sendmsg+0x80/0x94 [ 125.926298][ T6494] invoke_syscall+0x98/0x2bc [ 125.927071][ T6494] el0_svc_common+0x138/0x258 [ 125.927768][ T6494] do_el0_svc+0x58/0x13c [ 125.928439][ T6494] el0_svc+0x58/0x138 [ 125.929108][ T6494] el0t_64_sync_handler+0x84/0xf0 [ 125.929882][ T6494] el0t_64_sync+0x18c/0x190 [ 125.930548][ T6494] irq event stamp: 2044 [ 125.931201][ T6494] hardirqs last enabled at (2043): [] exit_to_kernel_mode+0xcc/0xfc [ 125.932774][ T6494] hardirqs last disabled at (2044): [] timer_delete_sync+0x70/0x20c [ 125.934361][ T6494] softirqs last enabled at (2038): [] handle_softirqs+0xaf8/0xc6c [ 125.935886][ T6494] softirqs last disabled at (1989): [] __do_softirq+0x14/0x20 [ 125.937238][ T6494] ---[ end trace 0000000000000000 ]--- [ 125.938416][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.939403][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.942430][ T6494] ------------[ cut here ]------------ [ 125.943334][ T6494] ODEBUG: init active (active state 0) object type: timer_list hint: 0x0 [ 125.944751][ T6494] WARNING: CPU: 0 PID: 6494 at lib/debugobjects.c:518 __debug_object_init+0x2bc/0x408 [ 125.946055][ T6494] Modules linked in: [ 125.946589][ T6494] CPU: 0 PID: 6494 Comm: syz.3.607 Tainted: G W syzkaller #0 [ 125.947883][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 125.949370][ T6494] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 125.950438][ T6494] pc : __debug_object_init+0x2bc/0x408 [ 125.951245][ T6494] lr : __debug_object_init+0x2bc/0x408 [ 125.952122][ T6494] sp : ffff800022536eb0 [ 125.952743][ T6494] x29: ffff800022536eb0 x28: dfff800000000000 x27: ffff0000f6592058 [ 125.953991][ T6494] x26: ffff0000f6615a28 x25: 0000000000000000 x24: 0000000000000003 [ 125.955172][ T6494] x23: ffff800011adace0 x22: ffff800011faae00 x21: 0000000000000000 [ 125.956297][ T6494] x20: ffff800011adace0 x19: ffff0000f6615a28 x18: ffff800011abbcc0 [ 125.957377][ T6494] x17: 6e6968207473696c x16: ffff800008042c8c x15: 0000000000000002 [ 125.958471][ T6494] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 [ 125.959631][ T6494] x11: 000000000007ffff x10: ffff80002a7eb000 x9 : b47fb5b9e6745900 [ 125.960753][ T6494] x8 : b47fb5b9e6745900 x7 : 0000000000000001 x6 : 0000000000000001 [ 125.962076][ T6494] x5 : ffff800022536938 x4 : ffff8000151a4820 x3 : ffff80000852e404 [ 125.963340][ T6494] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 125.964661][ T6494] Call trace: [ 125.965187][ T6494] __debug_object_init+0x2bc/0x408 [ 125.965975][ T6494] debug_object_init+0x20/0x2c [ 125.966624][ T6494] timer_fixup_init+0x4c/0x6c [ 125.967310][ T6494] __debug_object_init+0x304/0x408 [ 125.968100][ T6494] debug_object_init+0x20/0x2c [ 125.968734][ T6494] timer_fixup_init+0x4c/0x6c [ 125.969433][ T6494] __debug_object_init+0x304/0x408 [ 125.970198][ T6494] debug_object_init+0x20/0x2c [ 125.970946][ T6494] init_timer_key+0x54/0x4a0 [ 125.971706][ T6494] ieee80211_sta_setup_sdata+0x330/0x62c [ 125.972543][ T6494] ieee80211_setup_sdata+0x830/0xaa8 [ 125.973354][ T6494] ieee80211_if_change_type+0x1e4/0xc6c [ 125.974273][ T6494] ieee80211_change_iface+0x68/0x400 [ 125.975037][ T6494] cfg80211_change_iface+0x718/0xf2c [ 125.975808][ T6494] nl80211_set_interface+0x41c/0x6e8 [ 125.976697][ T6494] genl_family_rcv_msg_doit+0x1f8/0x2f4 [ 125.977521][ T6494] genl_rcv_msg+0x444/0x62c [ 125.978186][ T6494] netlink_rcv_skb+0x208/0x3c4 [ 125.978947][ T6494] genl_rcv+0x38/0x50 [ 125.979538][ T6494] netlink_unicast+0x60c/0x824 [ 125.980279][ T6494] netlink_sendmsg+0x6e8/0x9b0 [ 125.981059][ T6494] ____sys_sendmsg+0x5b8/0x918 [ 125.981739][ T6494] __sys_sendmsg+0x25c/0x320 [ 125.982485][ T6494] __arm64_sys_sendmsg+0x80/0x94 [ 125.983302][ T6494] invoke_syscall+0x98/0x2bc [ 125.984076][ T6494] el0_svc_common+0x138/0x258 [ 125.984823][ T6494] do_el0_svc+0x58/0x13c [ 125.985518][ T6494] el0_svc+0x58/0x138 [ 125.986083][ T6494] el0t_64_sync_handler+0x84/0xf0 [ 125.986812][ T6494] el0t_64_sync+0x18c/0x190 [ 125.987442][ T6494] irq event stamp: 2044 [ 125.988107][ T6494] hardirqs last enabled at (2043): [] exit_to_kernel_mode+0xcc/0xfc [ 125.989550][ T6494] hardirqs last disabled at (2044): [] timer_delete_sync+0x70/0x20c [ 125.990926][ T6494] softirqs last enabled at (2038): [] handle_softirqs+0xaf8/0xc6c [ 125.992360][ T6494] softirqs last disabled at (1989): [] __do_softirq+0x14/0x20 [ 125.993707][ T6494] ---[ end trace 0000000000000000 ]--- [ 125.995020][ T6494] ------------[ cut here ]------------ [ 125.995876][ T6494] ODEBUG: init active (active state 0) object type: timer_list hint: 0x0 [ 125.997407][ T6494] WARNING: CPU: 0 PID: 6494 at lib/debugobjects.c:518 __debug_object_init+0x2bc/0x408 [ 125.998756][ T6494] Modules linked in: [ 125.999293][ T6494] CPU: 0 PID: 6494 Comm: syz.3.607 Tainted: G W syzkaller #0 [ 126.000487][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 126.001854][ T6494] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 126.002944][ T6494] pc : __debug_object_init+0x2bc/0x408 [ 126.003799][ T6494] lr : __debug_object_init+0x2bc/0x408 [ 126.004612][ T6494] sp : ffff800022536e20 [ 126.005213][ T6494] x29: ffff800022536e20 x28: dfff800000000000 x27: ffff0000f6592058 [ 126.006337][ T6494] x26: ffff0000f6615a28 x25: 0000000000000000 x24: 0000000000000003 [ 126.007514][ T6494] x23: ffff800011adace0 x22: ffff800011faae00 x21: 0000000000000000 [ 126.008790][ T6494] x20: ffff800011adace0 x19: ffff0000f6615a28 x18: ffff800011abbcc0 [ 126.010116][ T6494] x17: 1fffe00033ed797e x16: ffff800008042c8c x15: 0000000040000000 [ 126.011384][ T6494] x14: 0000000000000002 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 126.012644][ T6494] x11: ff00800008047f18 x10: 0000000040000002 x9 : b47fb5b9e6745900 [ 126.013796][ T6494] x8 : b47fb5b9e6745900 x7 : 0000000000000004 x6 : ffff800008251e10 [ 126.014960][ T6494] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 126.016216][ T6494] x2 : ffff8000225369c0 x1 : 0000000000000000 x0 : ffff800008251ea4 [ 126.017352][ T6494] Call trace: [ 126.017810][ T6494] __debug_object_init+0x2bc/0x408 [ 126.018528][ T6494] debug_object_init+0x20/0x2c [ 126.019208][ T6494] timer_fixup_init+0x4c/0x6c [ 126.019910][ T6494] __debug_object_init+0x304/0x408 [ 126.020659][ T6494] debug_object_init+0x20/0x2c [ 126.021433][ T6494] timer_fixup_init+0x4c/0x6c [ 126.022223][ T6494] __debug_object_init+0x304/0x408 [ 126.022961][ T6494] debug_object_init+0x20/0x2c [ 126.023622][ T6494] timer_fixup_init+0x4c/0x6c [ 126.024365][ T6494] __debug_object_init+0x304/0x408 [ 126.025129][ T6494] debug_object_init+0x20/0x2c [ 126.025849][ T6494] init_timer_key+0x54/0x4a0 [ 126.026649][ T6494] ieee80211_sta_setup_sdata+0x330/0x62c [ 126.027553][ T6494] ieee80211_setup_sdata+0x830/0xaa8 [ 126.028352][ T6494] ieee80211_if_change_type+0x1e4/0xc6c [ 126.029159][ T6494] ieee80211_change_iface+0x68/0x400 [ 126.029904][ T6494] cfg80211_change_iface+0x718/0xf2c [ 126.030682][ T6494] nl80211_set_interface+0x41c/0x6e8 [ 126.031513][ T6494] genl_family_rcv_msg_doit+0x1f8/0x2f4 [ 126.032360][ T6494] genl_rcv_msg+0x444/0x62c [ 126.033043][ T6494] netlink_rcv_skb+0x208/0x3c4 [ 126.033723][ T6494] genl_rcv+0x38/0x50 [ 126.034306][ T6494] netlink_unicast+0x60c/0x824 [ 126.035089][ T6494] netlink_sendmsg+0x6e8/0x9b0 [ 126.035891][ T6494] ____sys_sendmsg+0x5b8/0x918 [ 126.036631][ T6494] __sys_sendmsg+0x25c/0x320 [ 126.037414][ T6494] __arm64_sys_sendmsg+0x80/0x94 [ 126.038198][ T6494] invoke_syscall+0x98/0x2bc [ 126.038922][ T6494] el0_svc_common+0x138/0x258 [ 126.039768][ T6494] do_el0_svc+0x58/0x13c [ 126.040423][ T6494] el0_svc+0x58/0x138 [ 126.041084][ T6494] el0t_64_sync_handler+0x84/0xf0 [ 126.041867][ T6494] el0t_64_sync+0x18c/0x190 [ 126.042556][ T6494] irq event stamp: 2044 [ 126.043160][ T6494] hardirqs last enabled at (2043): [] exit_to_kernel_mode+0xcc/0xfc [ 126.044601][ T6494] hardirqs last disabled at (2044): [] timer_delete_sync+0x70/0x20c [ 126.045995][ T6494] softirqs last enabled at (2038): [] handle_softirqs+0xaf8/0xc6c [ 126.047387][ T6494] softirqs last disabled at (1989): [] __do_softirq+0x14/0x20 [ 126.048690][ T6494] ---[ end trace 0000000000000000 ]--- [ 126.049639][ T6494] ------------[ cut here ]------------ [ 126.050474][ T6494] ODEBUG: init active (active state 0) object type: timer_list hint: 0x0 [ 126.051815][ T6494] WARNING: CPU: 0 PID: 6494 at lib/debugobjects.c:518 __debug_object_init+0x2bc/0x408 [ 126.053170][ T6494] Modules linked in: [ 126.053761][ T6494] CPU: 0 PID: 6494 Comm: syz.3.607 Tainted: G W syzkaller #0 [ 126.054993][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 126.056507][ T6494] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 126.057736][ T6494] pc : __debug_object_init+0x2bc/0x408 [ 126.058616][ T6494] lr : __debug_object_init+0x2bc/0x408 [ 126.059416][ T6494] sp : ffff800022536d90 [ 126.060033][ T6494] x29: ffff800022536d90 x28: dfff800000000000 x27: ffff0000f6592058 [ 126.061300][ T6494] x26: ffff0000f6615a28 x25: 0000000000000000 x24: 0000000000000003 [ 126.062523][ T6494] x23: ffff800011adace0 x22: ffff800011faae00 x21: 0000000000000000 [ 126.063730][ T6494] x20: ffff800011adace0 x19: ffff0000f6615a28 x18: ffff800011abbcc0 [ 126.065022][ T6494] x17: 6e6968207473696c x16: ffff800008042c8c x15: 0000000000000002 [ 126.066269][ T6494] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 [ 126.067485][ T6494] x11: 000000000007ffff x10: ffff80002a7eb000 x9 : b47fb5b9e6745900 [ 126.068735][ T6494] x8 : b47fb5b9e6745900 x7 : 0000000000000001 x6 : 0000000000000001 [ 126.070004][ T6494] x5 : ffff800022536818 x4 : ffff8000151a4820 x3 : ffff800008311d00 [ 126.071351][ T6494] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 126.072605][ T6494] Call trace: [ 126.073118][ T6494] __debug_object_init+0x2bc/0x408 [ 126.073994][ T6494] debug_object_init+0x20/0x2c [ 126.074775][ T6494] timer_fixup_init+0x4c/0x6c [ 126.075560][ T6494] __debug_object_init+0x304/0x408 [ 126.076436][ T6494] debug_object_init+0x20/0x2c [ 126.077168][ T6494] timer_fixup_init+0x4c/0x6c [ 126.077842][ T6494] __debug_object_init+0x304/0x408 [ 126.078646][ T6494] debug_object_init+0x20/0x2c [ 126.079410][ T6494] timer_fixup_init+0x4c/0x6c [ 126.080219][ T6494] __debug_object_init+0x304/0x408 [ 126.080969][ T6494] debug_object_init+0x20/0x2c [ 126.081713][ T6494] timer_fixup_init+0x4c/0x6c [ 126.082485][ T6494] __debug_object_init+0x304/0x408 [ 126.083194][ T6494] debug_object_init+0x20/0x2c [ 126.083814][ T6494] init_timer_key+0x54/0x4a0 [ 126.084540][ T6494] ieee80211_sta_setup_sdata+0x330/0x62c [ 126.085441][ T6494] ieee80211_setup_sdata+0x830/0xaa8 [ 126.086148][ T6494] ieee80211_if_change_type+0x1e4/0xc6c [ 126.087027][ T6494] ieee80211_change_iface+0x68/0x400 [ 126.087781][ T6494] cfg80211_change_iface+0x718/0xf2c [ 126.088555][ T6494] nl80211_set_interface+0x41c/0x6e8 [ 126.089330][ T6494] genl_family_rcv_msg_doit+0x1f8/0x2f4 [ 126.090175][ T6494] genl_rcv_msg+0x444/0x62c [ 126.090886][ T6494] netlink_rcv_skb+0x208/0x3c4 [ 126.091560][ T6494] genl_rcv+0x38/0x50 [ 126.092106][ T6494] netlink_unicast+0x60c/0x824 [ 126.092821][ T6494] netlink_sendmsg+0x6e8/0x9b0 [ 126.093566][ T6494] ____sys_sendmsg+0x5b8/0x918 [ 126.094329][ T6494] __sys_sendmsg+0x25c/0x320 [ 126.095075][ T6494] __arm64_sys_sendmsg+0x80/0x94 [ 126.095867][ T6494] invoke_syscall+0x98/0x2bc [ 126.096591][ T6494] el0_svc_common+0x138/0x258 [ 126.097265][ T6494] do_el0_svc+0x58/0x13c [ 126.097939][ T6494] el0_svc+0x58/0x138 [ 126.098602][ T6494] el0t_64_sync_handler+0x84/0xf0 [ 126.099465][ T6494] el0t_64_sync+0x18c/0x190 [ 126.100222][ T6494] irq event stamp: 2044 [ 126.100886][ T6494] hardirqs last enabled at (2043): [] exit_to_kernel_mode+0xcc/0xfc [ 126.102391][ T6494] hardirqs last disabled at (2044): [] timer_delete_sync+0x70/0x20c [ 126.103732][ T6494] softirqs last enabled at (2038): [] handle_softirqs+0xaf8/0xc6c [ 126.104976][ T6494] softirqs last disabled at (1989): [] __do_softirq+0x14/0x20 [ 126.106287][ T6494] ---[ end trace 0000000000000000 ]---