last executing test programs: 1m1.526530588s ago: executing program 3 (id=1344): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0xac9}, 0x8) 1m0.27833103s ago: executing program 3 (id=1348): prlimit64(0x0, 0xe, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x33, 0x40009, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0b0630bd7000000000003000000005003600000000"], 0x30}, 0x1, 0x0, 0x0, 0x52}, 0x4040040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r4, 0x325, 0x70bf27}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) 58.387647286s ago: executing program 4 (id=1356): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019580)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r2, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)='o', 0x1}], 0x1}}], 0x1, 0x44810) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 57.3319021s ago: executing program 1 (id=1363): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001400)=[{{&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000300)}, {&(0x7f0000000380)="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", 0x1000}], 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="11000000000000000000000001000000000000000000000020000000000000000000000007000000890d22f95c18be491e06dad809000000110000000000000000000000010000001000000000000000690721c5e88968a755ccfb45ac16e059dd62947bf9df70d20eab2f293e2d8de79fff5f061283988340a07252ff6eb96202d4b35f6f94c29f9bdf276850113f44cd3734057b25641a74a7acad1513d2d50f547da67673ea2590e6486d96b3e3736c7ad530fc9301e156fdd5d71eadd7c4d5c99f6d5e1babb75b"], 0x50}}], 0x1, 0x4000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$inet(0x2, 0x800, 0xffffffff) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r6, 0x0) bind$inet(r5, 0x0, 0x0) 55.644490715s ago: executing program 1 (id=1364): syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@quota}, {@nogrpid}, {@bh}]}, 0xff, 0x523, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181642, 0x148) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0xc, 0xffffffffffffffff, 0x20, 0x0, 0xdac2, 0xfffefffffe000000}) 55.539502066s ago: executing program 4 (id=1366): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ed6c4", 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xb) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key(&(0x7f0000000340)='ceph\x00', 0x0, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 55.379288621s ago: executing program 1 (id=1367): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={0x0, 0x1, 0x0, 0x3}) 54.613308146s ago: executing program 4 (id=1371): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) unshare(0x22020600) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2008a1f, &(0x7f0000000000), 0x1, 0x4d8, &(0x7f0000000540)="$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") r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) 54.526151086s ago: executing program 4 (id=1372): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0x0, r2, {0x7, 0x2b, 0x6, 0x0, 0x7, 0x0, 0x3, 0x4}}, 0x50) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00', &(0x7f00000000c0)='@){\x00', 0x4, 0x3) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 53.96195934s ago: executing program 1 (id=1375): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="3b1c1b2098f0bc154c9778a9229a7d3bd98f8b22f6", 0x15) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0xf0f007, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r7 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xfffffffffffffffa, 0x18000) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', &(0x7f0000000d80)="fb", 0x1) 51.819616401s ago: executing program 1 (id=1378): prlimit64(0x0, 0xe, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x33, 0x40009, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0b0630bd7000000000003000000005003600000000"], 0x30}, 0x1, 0x0, 0x0, 0x52}, 0x4040040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r4, 0x325, 0x70bf27}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) 51.384925574s ago: executing program 3 (id=1380): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt(r2, 0x0, 0x5, 0x0, &(0x7f00000000c0)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'ip_vti0\x00', {0x2, 0x4e23, @empty}}) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) fchmod(r3, 0x162) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="f0f0f3efa1f7ab58f37cf538d29c1dc1fcbc7aea8ce72fda471ae80e211ff618"}) 51.251324387s ago: executing program 3 (id=1382): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) unshare(0x22020600) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2008a1f, &(0x7f0000000000), 0x1, 0x4d8, &(0x7f0000000540)="$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") r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) 51.127481809s ago: executing program 3 (id=1384): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x33, 0x40009, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0b0630bd7000000000003000000005003600000000"], 0x30}, 0x1, 0x0, 0x0, 0x52}, 0x4040040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r4, 0x325, 0x70bf27}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) 35.725922811s ago: executing program 34 (id=1384): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400000000000000000570ad2539b8fa82771257779c7cf4eef65194b4ff0700000000000029cf51eb1dc5df27ffdb5b6e5a076897d3e785c46ec86b9ed61c0c9cbe5a5787db51f2ce5177aa3db7213eb76bf60301932332751cab7e7d0dd851fe73fc07b33abdcb750775361af00f89040d4023f37d7f00d3fd3f0d1f1722a1065d376689893ccc511d902ef7f7830e2168"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4040044) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r6, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000040)={0x4, 0x7, 0x3}) 30.232569961s ago: executing program 0 (id=1441): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) 29.898073514s ago: executing program 0 (id=1443): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) io_uring_setup(0x57eb, &(0x7f0000000140)={0x0, 0x0, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r3, &(0x7f00000001c0), &(0x7f0000000340)=@udp6=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r4, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) 29.206730462s ago: executing program 0 (id=1444): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') r1 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000440)=@fd={0x7, 0x1, 0x4, 0x8, 0x1540, {}, {0x2, 0xc, 0xc, 0x65, 0xa, 0x4, "342a900e"}, 0x3, 0x4, {}, 0x100}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(0xffffffffffffffff, 0x409, 0x9) writev(r2, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file5\x00', &(0x7f00000002c0), 0x802414, &(0x7f0000000200)=ANY=[]) renameat2(0xffffffffffffff9c, 0x0, r1, 0x0, 0x3) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1e3003, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB="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"], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x3, 0x900900, 0x2}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) preadv(r0, 0x0, 0x0, 0x29d3, 0x6) setrlimit(0x7, &(0x7f00000001c0)={0x3, 0x4}) 28.134982667s ago: executing program 0 (id=1451): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) io_uring_setup(0x57eb, &(0x7f0000000140)={0x0, 0x0, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r3, &(0x7f00000001c0), &(0x7f0000000340)=@udp6=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r4, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) 27.412856858s ago: executing program 0 (id=1453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006"], 0x84}}, 0x20000000) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 17.51510924s ago: executing program 2 (id=1471): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019580)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r2, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)='o', 0x1}], 0x1}}], 0x1, 0x44810) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 17.31532592s ago: executing program 2 (id=1472): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001400)=[{{&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000300)}, {&(0x7f0000000380)="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", 0x1000}], 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="11000000000000000000000001000000000000000000000020000000000000000000000007000000890d22f95c18be491e06dad809000000110000000000000000000000010000001000000000000000690721c5e88968a755ccfb45ac16e059dd62947bf9df70d20eab2f293e2d8de79fff5f061283988340a07252ff6eb96202d4b35f6f94c29f9bdf276850113f44cd3734057b25641a74a7acad1513d2d50f547da67673ea2590e6486d96b3e3736c7ad530fc9301e156fdd5d71eadd7c4d5c99f6d5e1babb75b"], 0x50}}], 0x1, 0x4000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$inet(0x2, 0x800, 0xffffffff) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r5, 0x0) 16.258099623s ago: executing program 2 (id=1473): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getrlimit(0x6, &(0x7f00000001c0)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x109000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032300)=""/102400, 0x19000) r2 = syz_io_uring_setup(0x5f8f, 0x0, &(0x7f00000003c0), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x120) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) 16.172462791s ago: executing program 2 (id=1474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno', 0x31) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x2, 0x10200, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 16.066364542s ago: executing program 2 (id=1475): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') r1 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000440)=@fd={0x7, 0x1, 0x4, 0x8, 0x1540, {}, {0x2, 0xc, 0xc, 0x65, 0xa, 0x4, "342a900e"}, 0x3, 0x4, {}, 0x100}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(0xffffffffffffffff, 0x409, 0x9) writev(r2, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file5\x00', &(0x7f00000002c0), 0x802414, &(0x7f0000000200)=ANY=[]) renameat2(0xffffffffffffff9c, 0x0, r1, &(0x7f0000000180)='./file5\x00', 0x3) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1e3003, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x3, 0x900900, 0x2}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) preadv(r0, 0x0, 0x0, 0x29d3, 0x6) setrlimit(0x7, &(0x7f00000001c0)={0x3, 0x4}) 15.384578609s ago: executing program 2 (id=1476): socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0, 0x1000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x40, 0x7800, 0xffff0001, 0x9, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000300)=0x1, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, &(0x7f0000000240)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x8) 12.031533588s ago: executing program 35 (id=1453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006"], 0x84}}, 0x20000000) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 0s ago: executing program 36 (id=1476): socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0, 0x1000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x40, 0x7800, 0xffff0001, 0x9, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000300)=0x1, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, &(0x7f0000000240)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x8) kernel console output (not intermixed with test programs): port 1(bridge_slave_0) entered blocking state [ 81.268001][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.276934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.294424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.303114][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.310322][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.318763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.327999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.337584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.352984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.367567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.377700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.407636][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.423186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.431512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.440708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.449688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.461396][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.471571][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.534632][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.559872][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.570797][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.581071][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.596923][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.624253][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.633083][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.670133][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.690832][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.746321][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.764761][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.789355][ T4265] device veth0_vlan entered promiscuous mode [ 81.825578][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.835134][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.846261][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.855645][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.877599][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.886646][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.908271][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.918642][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.934118][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.948324][ T4265] device veth1_vlan entered promiscuous mode [ 82.003970][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.059864][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.078525][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.104683][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.116341][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.136888][ T4265] device veth0_macvtap entered promiscuous mode [ 82.155857][ T4268] device veth0_vlan entered promiscuous mode [ 82.180986][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.199504][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.224463][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.263716][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.284020][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.314489][ T4265] device veth1_macvtap entered promiscuous mode [ 82.337367][ T4268] device veth1_vlan entered promiscuous mode [ 82.375086][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.382654][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.441920][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.480725][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.498904][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.529796][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.566713][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.611947][ T4265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.644153][ T4265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.652970][ T4265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.673812][ T4265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.704968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.723822][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 82.723839][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 82.723873][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 82.735300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.779272][ T4268] device veth0_macvtap entered promiscuous mode [ 82.803400][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 82.809485][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 82.838065][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.847914][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.857191][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.866308][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.881292][ T4268] device veth1_macvtap entered promiscuous mode [ 82.916686][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.926032][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.940188][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.949475][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.973266][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.991401][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.004064][ T4277] device veth0_vlan entered promiscuous mode [ 83.022160][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.033859][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.052545][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.098526][ T4277] device veth1_vlan entered promiscuous mode [ 83.111240][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.119880][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.129713][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.140503][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.148117][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.157625][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.169391][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.180884][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.229676][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.231378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.243068][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.247983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.266176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.275377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.285282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.302034][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.310428][ T4268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.319541][ T4268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.328549][ T4268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.337488][ T4268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.407254][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.417264][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.425629][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.435519][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.460527][ T4264] device veth0_vlan entered promiscuous mode [ 83.468020][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.476264][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.485809][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.494131][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.506280][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.519889][ T4277] device veth0_macvtap entered promiscuous mode [ 83.531325][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.540597][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.556747][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.578847][ T4264] device veth1_vlan entered promiscuous mode [ 83.596522][ T4277] device veth1_macvtap entered promiscuous mode [ 83.693813][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.699204][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.701833][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.742783][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.745421][ T4384] loop2: detected capacity change from 0 to 512 [ 83.770712][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.777122][ T4384] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.790341][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.806689][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.839009][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.859771][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.884453][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.892957][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.901707][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.912292][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.922293][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.932371][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.943158][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.952036][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.969671][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.980353][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.990307][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.001447][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.018608][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.031876][ T4264] device veth0_macvtap entered promiscuous mode [ 84.051011][ T4273] device veth0_vlan entered promiscuous mode [ 84.061560][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.085702][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.094237][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.102245][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.112487][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.127427][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.138574][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.147985][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.156952][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.176151][ T4264] device veth1_macvtap entered promiscuous mode [ 84.225589][ T4273] device veth1_vlan entered promiscuous mode [ 84.235413][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.249579][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.291342][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.313665][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.323767][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.340986][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.351383][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.367613][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.378098][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.396320][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.438146][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.465555][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.480842][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.491344][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.504612][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.514132][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.524974][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.537153][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.547587][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.558977][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.569270][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.579926][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.591620][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.608333][ T4273] device veth0_macvtap entered promiscuous mode [ 84.625431][ T4391] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8'. [ 84.637153][ T4392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'. [ 84.661085][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.671854][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.684426][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.709778][ T4264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.720011][ T4264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.737876][ T4264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.757324][ T4264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.775293][ T4273] device veth1_macvtap entered promiscuous mode [ 84.803595][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 84.809675][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 84.810622][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.815864][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 84.883764][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 84.883859][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 84.900566][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.906493][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.922170][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.931040][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.961778][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.971909][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.000028][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.017321][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.029424][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.053879][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.076169][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.087546][ T4398] loop2: detected capacity change from 0 to 1024 [ 85.095884][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.105773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.119945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.130018][ T4398] ======================================================= [ 85.130018][ T4398] WARNING: The mand mount option has been deprecated and [ 85.130018][ T4398] and is ignored by this kernel. Remove the mand [ 85.130018][ T4398] option from the mount to silence this warning. [ 85.130018][ T4398] ======================================================= [ 85.164912][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.183102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.199910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.220203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.246245][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.255510][ T4398] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.266732][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.277587][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.288832][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.299736][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.312281][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.322328][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.333023][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.344831][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.407673][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.433959][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.454685][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.464789][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.475342][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.489685][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.511200][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 85.700881][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.713622][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.742167][ T27] audit: type=1326 audit(1760598244.424:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f38eec9 code=0x7ffc0000 [ 85.744208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.780376][ T4409] loop2: detected capacity change from 0 to 128 [ 85.845606][ T27] audit: type=1326 audit(1760598244.454:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f38eec9 code=0x7ffc0000 [ 85.913788][ T27] audit: type=1326 audit(1760598244.454:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f0f38eec9 code=0x7ffc0000 [ 85.935841][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.952954][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.961654][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.990276][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.993671][ T4410] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 86.023331][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.040186][ T27] audit: type=1326 audit(1760598244.454:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f38eec9 code=0x7ffc0000 [ 86.064171][ T27] audit: type=1326 audit(1760598244.454:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f38eec9 code=0x7ffc0000 [ 86.101388][ T27] audit: type=1326 audit(1760598244.474:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f0f38eec9 code=0x7ffc0000 [ 86.128945][ T27] audit: type=1326 audit(1760598244.474:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f38eec9 code=0x7ffc0000 [ 86.154523][ T4410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.158699][ T27] audit: type=1326 audit(1760598244.484:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f38eec9 code=0x7ffc0000 [ 86.192714][ T27] audit: type=1326 audit(1760598244.514:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f38eec9 code=0x7ffc0000 [ 86.206926][ T4410] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 86.271594][ T27] audit: type=1326 audit(1760598244.514:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f38eec9 code=0x7ffc0000 [ 86.320009][ T4410] syz.0.1 (4410) used greatest stack depth: 20512 bytes left [ 86.322693][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.364662][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.386598][ T4413] loop2: detected capacity change from 0 to 2048 [ 86.425272][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.435284][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.459023][ T4413] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 86.515587][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.547566][ T4413] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.619675][ T4417] loop0: detected capacity change from 0 to 64 [ 86.641142][ T4405] loop3: detected capacity change from 0 to 32768 [ 86.675108][ T4419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 86.718165][ T4419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 86.729067][ T951] cfg80211: failed to load regulatory.db [ 86.737148][ T4417] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 86.789632][ T4419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 86.949650][ T4419] tipc: Started in network mode [ 86.987511][ T4419] tipc: Node identity 7f000001, cluster identity 4711 [ 87.066704][ T4419] tipc: Enabled bearer , priority 10 [ 87.171312][ T4430] Bluetooth: MGMT ver 1.22 [ 87.192549][ T4434] loop0: detected capacity change from 0 to 128 [ 87.335069][ T4435] syz.0.17: attempt to access beyond end of device [ 87.335069][ T4435] loop0: rw=2049, sector=145, nr_sectors = 192 limit=128 [ 87.482856][ T4443] fuse: Bad value for 'fd' [ 87.490311][ T4435] syz.0.17: attempt to access beyond end of device [ 87.490311][ T4435] loop0: rw=524288, sector=145, nr_sectors = 192 limit=128 [ 87.600725][ T4435] syz.0.17: attempt to access beyond end of device [ 87.600725][ T4435] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 87.739644][ T4435] syz.0.17: attempt to access beyond end of device [ 87.739644][ T4435] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 87.753023][ T4435] syz.0.17: attempt to access beyond end of device [ 87.753023][ T4435] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 87.790302][ T4435] syz.0.17: attempt to access beyond end of device [ 87.790302][ T4435] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 87.830620][ T4447] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.863541][ T4435] syz.0.17: attempt to access beyond end of device [ 87.863541][ T4435] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 87.904835][ T4435] syz.0.17: attempt to access beyond end of device [ 87.904835][ T4435] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 87.940324][ T4435] syz.0.17: attempt to access beyond end of device [ 87.940324][ T4435] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 87.954564][ T4435] syz.0.17: attempt to access beyond end of device [ 87.954564][ T4435] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 88.012801][ T4450] loop1: detected capacity change from 0 to 128 [ 88.049834][ T4450] EXT4-fs: Ignoring removed nobh option [ 88.094567][ T951] tipc: Node number set to 2130706433 [ 88.102477][ T4450] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 88.262961][ T4450] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.345911][ T4457] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 88.358259][ T4450] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x0e) [ 88.533084][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 88.575022][ T4463] process 'syz.0.26' launched '/dev/fd/-1/./file0/file0' with NULL argv: empty string added [ 88.792227][ T4468] loop2: detected capacity change from 0 to 256 [ 88.817998][ T4468] exfat: Bad value for 'uid' [ 88.842566][ T4472] loop3: detected capacity change from 0 to 64 [ 88.902985][ T4472] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 89.756903][ T4483] fuse: Bad value for 'fd' [ 89.786369][ T4474] device syzkaller0 entered promiscuous mode [ 89.866650][ T4486] fuse: Unknown parameter '0x0000000000000003' [ 89.942679][ T4490] loop1: detected capacity change from 0 to 128 [ 90.134973][ T4491] loop3: detected capacity change from 0 to 8192 [ 90.885333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.925271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 91.260314][ T4509] loop2: detected capacity change from 0 to 2048 [ 91.400117][ T4509] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.598375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.713254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.147290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.163221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 92.172536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 92.182467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 92.193228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 92.201791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 92.293988][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 92.438859][ T4527] loop2: detected capacity change from 0 to 64 [ 92.489901][ T4527] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 92.725397][ T4284] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 92.734294][ T4284] Bluetooth: hci4: Injecting HCI hardware error event [ 92.810117][ T4283] Bluetooth: hci4: hardware error 0x00 [ 93.348397][ T4532] fuse: Unknown parameter '0x0000000000000003' [ 93.535814][ T4534] binder: 4533:4534 unknown command 0 [ 93.541309][ T4534] binder: 4533:4534 ioctl c0306201 200000000080 returned -22 [ 95.132361][ T4283] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 95.624242][ T4501] lo speed is unknown, defaulting to 1000 [ 95.631097][ T4544] tipc: Started in network mode [ 95.653741][ T4544] tipc: Node identity 1a8b55cda93a, cluster identity 4711 [ 95.665950][ T4544] tipc: Enabled bearer , priority 0 [ 95.673465][ T4545] device syzkaller0 entered promiscuous mode [ 95.689759][ T4557] device syzkaller0 entered promiscuous mode [ 95.724218][ T4501] lo speed is unknown, defaulting to 1000 [ 95.817786][ T4501] lo speed is unknown, defaulting to 1000 [ 95.833041][ T4501] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.859131][ T4545] tipc: Resetting bearer [ 95.888741][ T4501] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 95.994579][ T4545] tipc: Disabling bearer [ 96.073471][ T4501] lo speed is unknown, defaulting to 1000 [ 96.093525][ T4501] lo speed is unknown, defaulting to 1000 [ 96.100001][ T4501] lo speed is unknown, defaulting to 1000 [ 96.132406][ T4501] lo speed is unknown, defaulting to 1000 [ 96.157644][ T4568] loop2: detected capacity change from 0 to 512 [ 96.179540][ T4501] lo speed is unknown, defaulting to 1000 [ 96.190460][ T4568] EXT4-fs: Ignoring removed oldalloc option [ 96.208220][ T4501] lo speed is unknown, defaulting to 1000 [ 96.232643][ T4568] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.333386][ T4568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.357126][ T4511] Set syz1 is full, maxelem 65536 reached [ 96.406770][ T4568] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 96.442811][ T4576] fuse: Bad value for 'group_id' [ 96.450355][ T4568] EXT4-fs (loop2): 1 truncate cleaned up [ 96.456707][ T4568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 96.616662][ T4578] loop0: detected capacity change from 0 to 64 [ 96.706492][ T4578] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 96.715110][ T4568] loop2: detected capacity change from 512 to 64 [ 96.728956][ T4581] EXT4-fs error (device loop2): mb_free_blocks:1810: group 0, inode 19: block 77:freeing already freed block (bit 76); block bitmap corrupt. [ 96.745288][ T4581] EXT4-fs (loop2): pa ffff88807473a460: logic 0, phys. 65, len 64 [ 96.753233][ T4581] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 64, pa_free 12 [ 97.539902][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 97.578707][ T4566] loop4: detected capacity change from 0 to 40427 [ 97.624393][ T4566] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 97.634821][ T4566] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 97.720410][ T4566] F2FS-fs (loop4): invalid crc value [ 97.790144][ T4566] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.820619][ T4596] loop1: detected capacity change from 0 to 512 [ 97.858011][ T4596] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.866207][ T4596] __quota_error: 22 callbacks suppressed [ 97.866223][ T4596] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (2048 > 1024). [ 97.884925][ T4596] EXT4-fs warning (device loop1): ext4_enable_quotas:7068: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 97.900037][ T4596] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 97.912393][ T4596] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.60: bg 0: block 67: padding at end of block bitmap is not set [ 97.930697][ T4596] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 97.946453][ T4596] EXT4-fs (loop1): 1 truncate cleaned up [ 97.952869][ T4596] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 98.129081][ T4566] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 98.186909][ T4566] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 98.225184][ T4607] device syzkaller0 entered promiscuous mode [ 98.694873][ T4596] EXT4-fs (loop1): unmounting filesystem. [ 98.803138][ T4617] fuse: Invalid rootmode [ 98.828823][ T4618] siw: device registration error -23 [ 100.042965][ T4623] tty tty3: ldisc open failed (-12), clearing slot 2 [ 100.318803][ T4635] loop0: detected capacity change from 0 to 64 [ 100.358403][ T4635] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 101.182206][ T4648] loop3: detected capacity change from 0 to 64 [ 101.249460][ T4650] device syzkaller0 entered promiscuous mode [ 102.341242][ T4656] vivid-007: kernel_thread() failed [ 102.662230][ T4669] loop4: detected capacity change from 0 to 256 [ 102.892043][ T4677] loop0: detected capacity change from 0 to 64 [ 102.962830][ T4677] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 103.007922][ T4683] binder: 4682:4683 unknown command 0 [ 103.019196][ T27] audit: type=1326 audit(1760598261.704:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.1.86" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff6a6b8eec9 code=0x0 [ 103.041191][ T4683] binder: 4682:4683 ioctl c0306201 200000000080 returned -22 [ 104.336230][ T4694] device syzkaller0 entered promiscuous mode [ 105.408692][ T4716] loop3: detected capacity change from 0 to 256 [ 109.993590][ T4332] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.913277][ T4332] usb 4-1: Using ep0 maxpacket: 16 [ 110.930315][ T4332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 110.960749][ T4332] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.997338][ T4332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.015774][ T4332] usb 4-1: Product: syz [ 111.025480][ T4332] usb 4-1: Manufacturer: syz [ 111.035833][ T4332] usb 4-1: SerialNumber: syz [ 111.074705][ T4332] usb 4-1: config 0 descriptor?? [ 111.340824][ T4332] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 111.350727][ T4332] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 112.934690][ T4332] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 113.050782][ T4332] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 113.145949][ T4332] em28xx 4-1:0.0: board has no eeprom [ 113.255171][ T4332] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 113.269103][ T4332] em28xx 4-1:0.0: dvb set to bulk mode. [ 113.330851][ T4332] usb 4-1: USB disconnect, device number 2 [ 113.349425][ T4332] em28xx 4-1:0.0: Disconnecting em28xx [ 113.361261][ T4279] em28xx 4-1:0.0: Binding DVB extension [ 113.920100][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 114.029600][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 114.200638][ T4811] ceph: No mds server is up or the cluster is laggy [ 114.631137][ T4279] em28xx 4-1:0.0: Registering input extension [ 114.649468][ T4332] em28xx 4-1:0.0: Closing input extension [ 114.706145][ T4332] em28xx 4-1:0.0: Freeing device [ 114.925749][ T4836] fuse: Bad value for 'fd' [ 115.631881][ T4840] loop4: detected capacity change from 0 to 128 [ 115.641900][ T4840] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 115.703522][ T4840] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.806802][ T4840] overlayfs: missing 'lowerdir' [ 115.853433][ T4332] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.994171][ T4332] usb 4-1: Using ep0 maxpacket: 32 [ 117.002555][ T4332] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 117.030989][ T4332] usb 4-1: config 0 has no interface number 0 [ 117.048363][ T4332] usb 4-1: config 0 interface 12 has no altsetting 0 [ 117.059196][ T4332] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 117.071811][ T4332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.080198][ T4332] usb 4-1: Product: syz [ 117.099570][ T4332] usb 4-1: Manufacturer: syz [ 117.105728][ T4332] usb 4-1: SerialNumber: syz [ 117.115434][ T4332] usb 4-1: config 0 descriptor?? [ 117.675282][ T4871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.147'. [ 117.839354][ T4877] overlayfs: failed to clone upperpath [ 118.953680][ T4332] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 119.072384][ T4332] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 119.097120][ T4332] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 119.125859][ T4332] f81534: probe of 4-1:0.12 failed with error -71 [ 119.173526][ T4332] usb 4-1: USB disconnect, device number 3 [ 119.260255][ T4893] fuse: Bad value for 'group_id' [ 120.999859][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 121.009971][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 121.019161][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 121.028511][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 121.037545][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 122.146622][ T4934] fuse: Bad value for 'group_id' [ 122.172851][ T4915] loop3: detected capacity change from 0 to 32768 [ 122.219972][ T4915] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.165 (4915) [ 122.313652][ T4915] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.326453][ T4915] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 122.333753][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.368580][ T4915] BTRFS info (device loop3): setting nodatacow, compression disabled [ 122.409220][ T4915] BTRFS info (device loop3): force clearing of disk cache [ 122.437940][ T4915] BTRFS info (device loop3): max_inline at 83 [ 122.453371][ T4915] BTRFS info (device loop3): using free space tree [ 122.543543][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 122.559974][ T22] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 122.577617][ T22] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.599045][ T22] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.632075][ T22] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.659489][ T22] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.719755][ T22] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 122.741883][ T4915] BTRFS info (device loop3): rebuilding free space tree [ 122.772476][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.101567][ T22] usb 5-1: usb_control_msg returned -32 [ 123.118841][ T22] usbtmc 5-1:16.0: can't read capabilities [ 124.121498][ T4977] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.178'. [ 124.567126][ T4983] fuse: Bad value for 'group_id' [ 124.721595][ T4268] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.088218][ T4310] usb 5-1: USB disconnect, device number 2 [ 125.322008][ T5010] binder: 5008:5010 unknown command 0 [ 125.327755][ T5010] binder: 5008:5010 ioctl c0306201 200000000080 returned -22 [ 125.339307][ T5010] binder_alloc: 5008: binder_alloc_buf, no vma [ 125.755883][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 125.789989][ T5019] capability: warning: `syz.0.191' uses deprecated v2 capabilities in a way that may be insecure [ 129.723974][ T5115] overlayfs: overlapping lowerdir path [ 130.196112][ T4310] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.423289][ T4310] usb 4-1: Using ep0 maxpacket: 8 [ 130.435027][ T4310] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 130.463308][ T4310] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.496498][ T4310] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.507598][ T4310] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.519147][ T4310] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.532571][ T4310] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.555876][ T4310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.768417][ T5136] fuse: Unknown parameter 'user_i00000000000000000000' [ 130.786126][ T4310] usb 4-1: usb_control_msg returned -32 [ 130.791768][ T4310] usbtmc 4-1:16.0: can't read capabilities [ 131.457923][ T4310] libceph: connect (1)[c::]:6789 error -101 [ 131.541541][ T4310] libceph: mon0 (1)[c::]:6789 connect error [ 131.763899][ T5146] ceph: No mds server is up or the cluster is laggy [ 131.936790][ T4340] libceph: connect (1)[c::]:6789 error -101 [ 131.948887][ T4340] libceph: mon0 (1)[c::]:6789 connect error [ 134.149035][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.156035][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.215249][ T4340] usb 4-1: USB disconnect, device number 4 [ 135.244086][ T5183] fuse: Unknown parameter 'user_i00000000000000000000' [ 135.363735][ T4310] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.553388][ T4310] usb 2-1: Using ep0 maxpacket: 8 [ 135.560747][ T4310] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 135.583021][ T4310] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 135.610102][ T4310] usb 2-1: config 0 has no interface number 0 [ 135.619197][ T4310] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 135.632839][ T4318] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.647967][ T4310] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 135.664838][ T4310] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.684901][ T4310] usb 2-1: config 0 interface 52 has no altsetting 0 [ 135.697472][ T4310] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 135.708369][ T4310] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 135.721771][ T4310] usb 2-1: Product: syz [ 135.729075][ T4310] usb 2-1: SerialNumber: syz [ 135.744760][ T4310] usb 2-1: config 0 descriptor?? [ 135.840135][ T4318] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 135.892562][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.903914][ T4318] usb 4-1: Product: syz [ 135.908233][ T4318] usb 4-1: Manufacturer: syz [ 135.913914][ T4318] usb 4-1: SerialNumber: syz [ 135.961159][ T4310] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input9 [ 136.159250][ T4310] usb 2-1: USB disconnect, device number 2 [ 136.165253][ C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 136.689537][ T4318] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 137.377176][ T4318] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 137.574125][ T4318] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 138.369125][ T5203] fuse: Unknown parameter '0x0000000000000003' [ 138.813195][ C0] sched: RT throttling activated [ 138.816456][ T4318] lan78xx: probe of 4-1:1.0 failed with error -32 [ 138.884390][ T4283] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 138.893069][ T4283] Bluetooth: hci2: Injecting HCI hardware error event [ 138.907837][ T4284] Bluetooth: hci2: hardware error 0x00 [ 139.364291][ T4318] usb 4-1: USB disconnect, device number 5 [ 139.450380][ T5210] loop4: detected capacity change from 0 to 512 [ 139.469251][ T5210] EXT4-fs (loop4): orphan cleanup on readonly fs [ 139.476494][ T5210] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (2048 > 1024). [ 139.488268][ T5210] EXT4-fs warning (device loop4): ext4_enable_quotas:7068: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 139.502937][ T5210] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 139.511862][ T5210] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.230: bg 0: block 67: padding at end of block bitmap is not set [ 139.527720][ T5210] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 139.537467][ T5210] EXT4-fs (loop4): 1 truncate cleaned up [ 139.543143][ T5210] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.624287][ T4279] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.318681][ T5210] EXT4-fs (loop4): unmounting filesystem. [ 140.513510][ T4279] usb 1-1: Using ep0 maxpacket: 16 [ 140.525940][ T4279] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 140.638138][ T4279] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 140.743366][ T4279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.790622][ T4279] usb 1-1: Product: syz [ 140.814390][ T5216] Process accounting resumed [ 140.843815][ T4279] usb 1-1: Manufacturer: syz [ 140.864066][ T4279] usb 1-1: SerialNumber: syz [ 140.892936][ T4279] usb 1-1: config 0 descriptor?? [ 141.363386][ T4284] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 141.794269][ T5242] fuse: Unknown parameter '0x0000000000000003' [ 141.849635][ T5244] loop4: detected capacity change from 0 to 512 [ 141.920067][ T5244] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 141.947953][ T5249] loop1: detected capacity change from 0 to 128 [ 141.980999][ T5244] EXT4-fs (loop4): orphan cleanup on readonly fs [ 142.014776][ T5251] loop3: detected capacity change from 0 to 256 [ 142.028712][ T5244] EXT4-fs warning (device loop4): ext4_enable_quotas:7068: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 142.041828][ T5251] FAT-fs (loop3): bogus number of FAT sectors [ 142.045920][ T5249] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 142.052550][ T5251] FAT-fs (loop3): Can't find a valid FAT filesystem [ 142.088081][ T5251] fuse: Unknown parameter 'user_i00000000000000000000' [ 142.115822][ T5244] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 142.143462][ T5244] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.242: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 142.170013][ T5249] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.237223][ T5244] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.242: couldn't read orphan inode 13 (err -117) [ 142.249896][ T5249] overlayfs: missing 'workdir' [ 142.289204][ T5244] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 142.354615][ T5244] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 142.417117][ T5244] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 142.440756][ T14] usb 1-1: USB disconnect, device number 2 [ 142.468606][ T5244] EXT4-fs warning (device loop4): ext4_enable_quotas:7068: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 142.710053][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 143.496782][ T4284] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 143.510696][ T4284] Bluetooth: hci1: Injecting HCI hardware error event [ 143.538465][ T4276] Bluetooth: hci1: hardware error 0x00 [ 144.226695][ T5285] loop3: detected capacity change from 0 to 256 [ 144.342780][ T5285] FAT-fs (loop3): bogus number of FAT sectors [ 144.418741][ T5285] FAT-fs (loop3): Can't find a valid FAT filesystem [ 144.574610][ T5285] fuse: Unknown parameter 'user_i00000000000000000000' [ 145.323266][ T951] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 145.521205][ T5297] loop4: detected capacity change from 0 to 1024 [ 145.543315][ T951] usb 2-1: Using ep0 maxpacket: 16 [ 145.550146][ T951] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 145.586597][ T951] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 145.605277][ T4276] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 145.611216][ T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.636961][ T951] usb 2-1: Product: syz [ 145.641203][ T951] usb 2-1: Manufacturer: syz [ 145.674479][ T5297] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 145.677248][ T951] usb 2-1: SerialNumber: syz [ 145.702283][ T951] usb 2-1: config 0 descriptor?? [ 145.774854][ T4318] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.872898][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 145.973753][ T4318] usb 1-1: Using ep0 maxpacket: 8 [ 145.986219][ T4318] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 146.017105][ T4318] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.036081][ T4318] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 146.049239][ T4318] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 146.071391][ T4318] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.094744][ T4318] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 146.130549][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.165872][ T5320] lo speed is unknown, defaulting to 1000 [ 146.182188][ T5320] lo speed is unknown, defaulting to 1000 [ 146.190162][ T5319] loop4: detected capacity change from 0 to 256 [ 146.197911][ T5320] lo speed is unknown, defaulting to 1000 [ 146.211190][ T5319] FAT-fs (loop4): bogus number of FAT sectors [ 146.238355][ T5319] FAT-fs (loop4): Can't find a valid FAT filesystem [ 146.266785][ T5320] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 146.288279][ T5319] fuse: Unknown parameter 'user_id00000000000000000000' [ 146.330723][ T5320] lo speed is unknown, defaulting to 1000 [ 146.343553][ T951] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 146.357983][ T5320] lo speed is unknown, defaulting to 1000 [ 146.384147][ T4318] usb 1-1: usb_control_msg returned -32 [ 146.389991][ T4318] usbtmc 1-1:16.0: can't read capabilities [ 146.404825][ T5320] lo speed is unknown, defaulting to 1000 [ 146.419278][ T5320] lo speed is unknown, defaulting to 1000 [ 146.427960][ T5320] lo speed is unknown, defaulting to 1000 [ 146.439951][ T4318] usb 1-1: USB disconnect, device number 3 [ 146.537856][ T951] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.563506][ T951] usb 4-1: config 0 has no interface number 0 [ 146.585917][ T951] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 146.647001][ T951] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 146.687156][ T951] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 146.726955][ T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.807722][ T951] usb 4-1: config 0 descriptor?? [ 146.848726][ T5315] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 146.955512][ T951] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 147.476429][ T951] usb 4-1: USB disconnect, device number 6 [ 147.514791][ T5330] 9pnet_fd: Insufficient options for proto=fd [ 147.565674][ T5332] loop0: detected capacity change from 0 to 64 [ 147.578327][ T5332] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 147.680517][ T4364] usb 2-1: USB disconnect, device number 3 [ 149.588853][ T5349] loop4: detected capacity change from 0 to 1024 [ 150.684939][ T5349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 150.793681][ T5366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 150.877026][ T5372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 150.912382][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 151.077488][ T5375] loop0: detected capacity change from 0 to 256 [ 151.093730][ T5378] fuse: Unknown parameter '0x0000000000000003' [ 151.544662][ T5382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.552656][ T5382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.691802][ T5382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.785629][ T5394] overlayfs: './bus' not a directory [ 154.520154][ T5400] loop3: detected capacity change from 0 to 64 [ 154.603608][ T5400] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 154.852620][ T5404] loop4: detected capacity change from 0 to 512 [ 154.973755][ T5404] EXT4-fs (loop4): orphan cleanup on readonly fs [ 154.981721][ T5404] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (2048 > 1024). [ 154.993968][ T5404] EXT4-fs warning (device loop4): ext4_enable_quotas:7068: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 155.008640][ T5404] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 155.071530][ T5404] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.294: bg 0: block 67: padding at end of block bitmap is not set [ 155.113328][ T5404] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 155.249489][ T5404] EXT4-fs (loop4): 1 truncate cleaned up [ 155.255272][ T5404] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 155.595796][ T5404] EXT4-fs (loop4): unmounting filesystem. [ 156.055823][ T5415] loop0: detected capacity change from 0 to 256 [ 156.090148][ T5415] FAT-fs (loop0): bogus number of FAT sectors [ 156.160931][ T5415] FAT-fs (loop0): Can't find a valid FAT filesystem [ 156.227434][ T5415] fuse: Unknown parameter 'user_id00000000000000000000' [ 156.291313][ T5417] loop4: detected capacity change from 0 to 256 [ 156.541224][ T5426] fuse: Unknown parameter '0x0000000000000003' [ 156.780534][ T5430] loop4: detected capacity change from 0 to 4096 [ 157.213004][ T4364] libceph: connect (1)[c::]:6789 error -101 [ 157.267995][ T4364] libceph: mon0 (1)[c::]:6789 connect error [ 157.580555][ T5439] ceph: No mds server is up or the cluster is laggy [ 157.928803][ T5450] tipc: Enabled bearer , priority 10 [ 158.587587][ T5430] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 158.784528][ T5430] EXT4-fs (loop4): Test dummy encryption mode enabled [ 158.894570][ T5430] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 158.902901][ T5430] System zones: 0-5 [ 158.914952][ T5430] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 159.742670][ T4279] tipc: Node number set to 3014743501 [ 159.801032][ T5472] loop0: detected capacity change from 0 to 256 [ 159.840265][ T5474] loop3: detected capacity change from 0 to 256 [ 159.857925][ T5472] FAT-fs (loop0): bogus number of FAT sectors [ 159.866363][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 159.882531][ T5472] FAT-fs (loop0): Can't find a valid FAT filesystem [ 159.915567][ T5472] fuse: Bad value for 'fd' [ 160.173001][ T5484] fuse: Unknown parameter 'fd0x0000000000000003' [ 160.313093][ T5483] loop0: detected capacity change from 0 to 2048 [ 160.369102][ T5483] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.423443][ T5483] EXT4-fs: Ignoring removed i_version option [ 160.829164][ T951] libceph: connect (1)[c::]:6789 error -101 [ 160.855037][ T951] libceph: mon0 (1)[c::]:6789 connect error [ 161.117185][ T5497] ceph: No mds server is up or the cluster is laggy [ 161.175853][ T5483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 161.394324][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 161.461256][ T5509] overlayfs: failed to clone lowerpath [ 161.511363][ T5509] overlayfs: failed to clone upperpath [ 163.026865][ T5518] loop4: detected capacity change from 0 to 256 [ 163.046818][ T5518] FAT-fs (loop4): bogus number of FAT sectors [ 163.055631][ T5518] FAT-fs (loop4): Can't find a valid FAT filesystem [ 163.124717][ T5518] fuse: Bad value for 'fd' [ 163.607196][ T5523] IPVS: length: 27 != 24 [ 164.955637][ T5530] loop0: detected capacity change from 0 to 64 [ 164.973308][ T4310] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 164.990073][ T5530] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 165.076443][ T5534] overlayfs: failed to resolve './file1': -2 [ 165.538410][ T4310] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.582640][ T4310] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.634790][ T4310] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 165.669286][ T4310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 165.705599][ T4310] usb 5-1: SerialNumber: syz [ 165.900832][ T5541] loop1: detected capacity change from 0 to 2048 [ 165.939584][ T5541] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.010916][ T5541] EXT4-fs: Ignoring removed i_version option [ 166.022566][ T4310] usb 5-1: 0:2 : does not exist [ 166.053676][ T4310] usb 5-1: USB disconnect, device number 3 [ 166.403749][ T5541] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.045856][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 167.135951][ T5557] fuse: Unknown parameter 'fd0x0000000000000003' [ 167.317741][ T5560] loop3: detected capacity change from 0 to 256 [ 167.385684][ T5560] FAT-fs (loop3): bogus number of FAT sectors [ 167.392090][ T5560] FAT-fs (loop3): Can't find a valid FAT filesystem [ 167.672784][ T4421] udevd[4421]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.683604][ T5560] fuse: Bad value for 'fd' [ 169.249933][ T5574] overlayfs: failed to resolve './file0': -2 [ 169.577639][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.585864][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.207964][ T5580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.519199][ T5587] fuse: Unknown parameter 'group_id00000000000000000000' [ 171.603388][ T5605] fuse: Unknown parameter '0x0000000000000003' [ 172.363534][ T5608] IPVS: Scheduler module ip_vs_sip not found [ 172.406959][ T5621] overlayfs: failed to resolve './file0': -2 [ 172.505762][ T5608] IPVS: length: 141 != 8 [ 172.523115][ T5608] IPVS: fo: FWM 3 0x00000003 - no destination available [ 172.795682][ T5632] siw: device registration error -23 [ 173.068450][ T5634] loop4: detected capacity change from 0 to 512 [ 173.177186][ T5634] EXT4-fs (loop4): orphan cleanup on readonly fs [ 173.184109][ T5634] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (2048 > 1024). [ 173.195932][ T5634] EXT4-fs warning (device loop4): ext4_enable_quotas:7068: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 173.211155][ T5634] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 173.229878][ T5634] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.365: bg 0: block 67: padding at end of block bitmap is not set [ 173.244631][ T5634] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 173.254523][ T5634] EXT4-fs (loop4): 1 truncate cleaned up [ 173.260194][ T5634] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 174.057837][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 174.170931][ T5645] fuse: Unknown parameter '0x0000000000000003' [ 175.321735][ T5661] loop0: detected capacity change from 0 to 64 [ 175.356132][ T5661] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 175.444682][ T5665] Cannot find add_set index 0 as target [ 176.007338][ T5663] loop3: detected capacity change from 0 to 4096 [ 176.995224][ T5677] loop4: detected capacity change from 0 to 512 [ 177.027384][ T5677] EXT4-fs (loop4): orphan cleanup on readonly fs [ 177.034274][ T5677] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (2048 > 1024). [ 177.046069][ T5677] EXT4-fs warning (device loop4): ext4_enable_quotas:7068: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 177.060736][ T5677] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 177.069828][ T5677] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.378: bg 0: block 67: padding at end of block bitmap is not set [ 177.084425][ T5677] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 177.105495][ T5677] EXT4-fs (loop4): 1 truncate cleaned up [ 177.111172][ T5677] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 177.894226][ T5677] EXT4-fs (loop4): unmounting filesystem. [ 178.286310][ T5684] fuse: Unknown parameter 'fd0x0000000000000003' [ 180.302927][ T5697] fuse: Bad value for 'user_id' [ 183.030281][ T5715] loop4: detected capacity change from 0 to 64 [ 183.071788][ T5724] loop0: detected capacity change from 0 to 64 [ 183.146556][ T5715] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 183.404295][ T5727] fuse: Unknown parameter 'fd0x0000000000000003' [ 184.812972][ T5734] fuse: Bad value for 'user_id' [ 187.334611][ T5752] 9pnet_fd: Insufficient options for proto=fd [ 187.670115][ T5764] fuse: Unknown parameter 'fd0x0000000000000003' [ 188.735984][ T5773] loop0: detected capacity change from 0 to 1024 [ 188.995606][ T5773] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 189.895881][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 193.409192][ T5819] loop0: detected capacity change from 0 to 1024 [ 193.726391][ T5819] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 194.262607][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.269400][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.434940][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 196.527944][ T5859] fuse: Bad value for 'rootmode' [ 198.423634][ T5871] loop1: detected capacity change from 0 to 2048 [ 198.493641][ T5871] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 198.671954][ T5871] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.572150][ T5897] loop0: detected capacity change from 0 to 64 [ 200.048386][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 201.898806][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 201.904929][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 202.521084][ T5944] loop0: detected capacity change from 0 to 2048 [ 202.534264][ T5944] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.540752][ T5944] EXT4-fs: Ignoring removed i_version option [ 202.740482][ T5944] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 202.976489][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 203.112807][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 206.642347][ T6003] netlink: 'syz.0.480': attribute type 10 has an invalid length. [ 206.791609][ T6003] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 206.810843][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 209.373796][ T6026] fuse: Unknown parameter 'use00000000000000000000' [ 210.444175][ T6036] fuse: Bad value for 'fd' [ 210.555652][ T6038] loop3: detected capacity change from 0 to 2048 [ 210.563115][ T6038] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.685151][ T6038] EXT4-fs: Ignoring removed i_version option [ 211.302359][ T6038] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 211.509860][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 213.748094][ T4364] libceph: connect (1)[c::]:6789 error -101 [ 213.757559][ T4364] libceph: mon0 (1)[c::]:6789 connect error [ 213.839725][ T6061] ceph: No mds server is up or the cluster is laggy [ 214.040199][ T6068] fuse: Bad value for 'fd' [ 214.090067][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 214.180376][ T6076] fuse: Bad value for 'fd' [ 216.558814][ T6104] fuse: Bad value for 'fd' [ 216.629277][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 217.214444][ T6123] overlayfs: failed to clone upperpath [ 217.828027][ T6134] fuse: Unknown parameter 'user_i00000000000000000000' [ 217.969422][ T6142] fuse: Bad value for 'fd' [ 218.152515][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 219.432859][ T6171] fuse: Bad value for 'fd' [ 219.514594][ T6175] fuse: Bad value for 'fd' [ 219.694822][ T6180] loop3: detected capacity change from 0 to 128 [ 219.752712][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'. [ 219.756586][ T6180] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 219.778372][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.546'. [ 219.796355][ T6180] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 219.913256][ T6180] lo speed is unknown, defaulting to 1000 [ 220.967813][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 223.041799][ T6210] fuse: Bad value for 'fd' [ 223.776365][ T6219] fuse: Bad value for 'fd' [ 225.821437][ T6252] fuse: Bad value for 'fd' [ 227.856073][ T6273] fuse: Bad value for 'fd' [ 229.664295][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 229.705953][ T6289] fuse: Bad value for 'rootmode' [ 229.712104][ T6287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.581'. [ 231.788753][ T6328] fuse: Bad value for 'rootmode' [ 232.917693][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 232.998926][ T6338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.600'. [ 237.075471][ T6362] fuse: Unknown parameter 'use00000000000000000000' [ 239.584814][ T6394] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 239.714531][ T6394] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 240.376691][ T6403] fuse: Unknown parameter 'use00000000000000000000' [ 241.161108][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.477890][ T6402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.820483][ T6412] loop3: detected capacity change from 0 to 2048 [ 241.846994][ T6412] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 242.055674][ T6427] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.075031][ T6358] udevd[6358]: incorrect nilfs2 checksum on /dev/loop3 [ 242.168298][ T27] audit: type=1800 audit(2000000004.840:35): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.624" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 243.718375][ T6439] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 243.961312][ T6439] Remounting filesystem read-only [ 244.389113][ T6453] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 244.396630][ T6456] fuse: Unknown parameter 'use00000000000000000000' [ 244.554259][ T6453] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 248.227163][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 248.644724][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 248.659446][ T6500] fuse: Bad value for 'fd' [ 249.129257][ T6506] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 249.157135][ T6506] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 250.939570][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.661'. [ 250.955481][ T6545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'. [ 251.875288][ T6554] overlayfs: missing 'lowerdir' [ 254.760476][ T6588] overlayfs: missing 'lowerdir' [ 256.088795][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.095341][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.400956][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 257.407170][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 257.753409][ T6611] ceph: No mds server is up or the cluster is laggy [ 257.861314][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 257.867414][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 258.182700][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805885d000: rx timeout, send abort [ 258.257282][ T6631] overlayfs: missing 'lowerdir' [ 258.419206][ T6639] fuse: Bad value for 'fd' [ 258.692625][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805885d000: abort rx timeout. Force session deactivation [ 259.970946][ T6668] overlayfs: missing 'workdir' [ 261.432135][ T6680] fuse: Bad value for 'fd' [ 264.595736][ T6715] overlayfs: missing 'workdir' [ 264.682441][ T6717] fuse: Bad value for 'fd' [ 266.065564][ T6733] siw: device registration error -23 [ 266.132333][ T6741] fuse: Bad value for 'fd' [ 266.143617][ T6740] overlayfs: missing 'workdir' [ 266.456960][ T6747] overlayfs: failed to clone upperpath [ 267.821355][ T6762] netlink: 168 bytes leftover after parsing attributes in process `syz.3.733'. [ 268.683020][ T6781] overlayfs: failed to clone upperpath [ 271.703650][ T6794] netlink: 32 bytes leftover after parsing attributes in process `syz.3.745'. [ 272.588726][ T6802] fuse: Bad value for 'fd' [ 272.598359][ T6804] siw: device registration error -23 [ 273.150923][ T6819] overlayfs: failed to clone upperpath [ 274.221207][ T6858] overlayfs: failed to clone upperpath [ 274.380411][ T6869] siw: device registration error -23 [ 275.737450][ T6889] fuse: Bad value for 'rootmode' [ 275.877160][ T6895] overlayfs: failed to clone upperpath [ 278.786838][ T6923] fuse: Bad value for 'rootmode' [ 279.003760][ T6933] siw: device registration error -23 [ 290.066360][ T7063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.842'. [ 290.075522][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'. [ 290.409541][ T7082] siw: device registration error -23 [ 292.366225][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 293.245224][ T7096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.423074][ T7110] fuse: Bad value for 'fd' [ 302.631863][ T7225] fuse: Unknown parameter 'use00000000000000000000' [ 303.791843][ T7238] fuse: Unknown parameter '0x0000000000000003' [ 303.988493][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 304.906857][ T7277] fuse: Unknown parameter '0x0000000000000003' [ 305.159313][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 305.201593][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.919'. [ 305.691084][ T7306] fuse: Unknown parameter 'fd0x0000000000000003' [ 306.057150][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 306.097922][ T7316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.933'. [ 307.254197][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 307.263397][ T7344] Zero length message leads to an empty skb [ 307.284524][ T7343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.945'. [ 309.588909][ T7379] overlayfs: failed to clone upperpath [ 311.051472][ T7412] fuse: Unknown parameter 'fd0x0000000000000003' [ 320.199678][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.208987][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.888890][ T7550] siw: device registration error -23 [ 325.376113][ T7599] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 325.475165][ T7599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.590572][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 327.634629][ T7627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1046'. [ 327.763919][ T4364] libceph: connect (1)[c::]:6789 error -101 [ 327.770806][ T7625] ceph: No mds server is up or the cluster is laggy [ 327.777671][ T4364] libceph: mon0 (1)[c::]:6789 connect error [ 328.968700][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 329.138298][ T7649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 330.220001][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'. [ 330.709525][ T7665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1061'. [ 332.890741][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1073'. [ 332.912143][ T7694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1073'. [ 333.572627][ T7704] overlayfs: failed to clone upperpath [ 334.187199][ T7711] tmpfs: Unknown parameter 'grpquota' [ 335.117465][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1085'. [ 335.532537][ T7728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1085'. [ 339.481649][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 339.527034][ T7774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1100'. [ 348.615033][ T7] libceph: connect (1)[c::]:6789 error -101 [ 348.621111][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 348.677765][ T7865] ceph: No mds server is up or the cluster is laggy [ 348.937186][ T7874] fuse: Unknown parameter '0x0000000000000004' [ 349.379439][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 350.154499][ T7886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.439064][ T7917] fuse: Unknown parameter '0x0000000000000004' [ 352.800592][ T5004] libceph: connect (1)[c::]:6789 error -101 [ 352.949136][ T7930] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 352.957300][ T7930] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 353.374433][ T7923] ceph: No mds server is up or the cluster is laggy [ 353.389897][ T5004] libceph: mon0 (1)[c::]:6789 connect error [ 353.405901][ T7930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.668915][ T5004] libceph: connect (1)[c::]:6789 error -101 [ 353.688292][ T5004] libceph: mon0 (1)[c::]:6789 connect error [ 356.249054][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 356.274468][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 356.392631][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 356.808806][ T7966] ceph: No mds server is up or the cluster is laggy [ 357.033419][ T7973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.550248][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'. [ 357.583530][ T7986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1167'. [ 360.131992][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'. [ 360.216607][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1179'. [ 360.305620][ T5003] libceph: connect (1)[c::]:6789 error -101 [ 360.312214][ T5003] libceph: mon0 (1)[c::]:6789 connect error [ 360.747603][ T5003] libceph: connect (1)[c::]:6789 error -101 [ 360.767622][ T5003] libceph: mon0 (1)[c::]:6789 connect error [ 360.869629][ T8024] ceph: No mds server is up or the cluster is laggy [ 362.617961][ T8047] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 362.625844][ T8047] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 362.899033][ T8047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.368497][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1191'. [ 365.423485][ T8077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1191'. [ 366.568223][ T8090] ceph: No mds server is up or the cluster is laggy [ 366.619019][ T4317] libceph: connect (1)[c::]:6789 error -101 [ 366.633324][ T4317] libceph: mon0 (1)[c::]:6789 connect error [ 366.788383][ T8099] fuse: Unknown parameter 'fd0x0000000000000004' [ 368.481132][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 368.534375][ T8122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1209'. [ 369.341271][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 369.483928][ T8137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 369.963848][ T8148] fuse: Unknown parameter 'fd0x0000000000000004' [ 370.510517][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 371.178659][ T8161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.404757][ T8169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1224'. [ 372.649195][ T8189] fuse: Unknown parameter 'fd0x0000000000000004' [ 372.898002][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 372.912777][ T8197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 373.860605][ T8206] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 374.073893][ T8207] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 374.082427][ T8207] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.424349][ T8207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.016330][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 378.882059][ T8248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.781662][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 380.494202][ T8257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.594133][ T8264] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 382.546505][ T8296] siw: device registration error -23 [ 383.723910][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.737397][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.321500][ T4340] libceph: connect (1)[c::]:6789 error -101 [ 386.339325][ T4340] libceph: mon0 (1)[c::]:6789 connect error [ 386.623493][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 386.630468][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 386.998771][ T8356] ceph: No mds server is up or the cluster is laggy [ 388.298964][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1296'. [ 388.495814][ T8384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1296'. [ 390.139783][ T8404] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 390.970192][ T8404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.019830][ T5004] libceph: connect (1)[c::]:6789 error -101 [ 392.032877][ T5004] libceph: mon0 (1)[c::]:6789 connect error [ 392.320745][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 392.694716][ T5003] libceph: connect (1)[c::]:6789 error -101 [ 392.943580][ T8442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.969737][ T8433] ceph: No mds server is up or the cluster is laggy [ 392.979948][ T5003] libceph: mon0 (1)[c::]:6789 connect error [ 397.948824][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 397.963282][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 398.244318][ T4340] libceph: connect (1)[c::]:6789 error -101 [ 398.260613][ T4340] libceph: mon0 (1)[c::]:6789 connect error [ 398.293527][ T8527] ceph: No mds server is up or the cluster is laggy [ 399.292380][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 399.298562][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 400.266060][ T4318] libceph: connect (1)[c::]:6789 error -101 [ 400.272122][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 400.692297][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 400.782975][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 401.093798][ T8571] ceph: No mds server is up or the cluster is laggy [ 402.615238][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 402.624786][ T8596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.291766][ T8611] siw: device registration error -23 [ 404.302409][ T8609] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 404.783688][ T5004] libceph: connect (1)[c::]:6789 error -101 [ 404.793263][ T5004] libceph: mon0 (1)[c::]:6789 connect error [ 405.053572][ T5004] libceph: connect (1)[c::]:6789 error -101 [ 405.061654][ T5004] libceph: mon0 (1)[c::]:6789 connect error [ 405.264530][ T8615] ceph: No mds server is up or the cluster is laggy [ 406.831916][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 406.843219][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 406.917535][ T8646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 406.984078][ T8646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.017094][ T8634] ceph: No mds server is up or the cluster is laggy [ 407.844359][ T4317] libceph: connect (1)[c::]:6789 error -101 [ 407.850401][ T4317] libceph: mon0 (1)[c::]:6789 connect error [ 408.180756][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 408.190623][ T8655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.551780][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'. [ 408.585951][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 408.916332][ T5003] libceph: connect (1)[c::]:6789 error -101 [ 408.951074][ T5003] libceph: mon0 (1)[c::]:6789 connect error [ 409.270977][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1387'. [ 409.289334][ T22] libceph: connect (1)[c::]:6789 error -101 [ 409.296001][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 409.512700][ T8670] ceph: No mds server is up or the cluster is laggy [ 409.728076][ T8683] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 409.984117][ T8680] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 410.027627][ T8680] bond1 (unregistering): Released all slaves [ 411.191155][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 411.203278][ T8703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.839314][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1401'. [ 413.954265][ T8721] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 413.985165][ T8720] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 414.049831][ T8720] bond1 (unregistering): Released all slaves [ 415.357739][ T8733] siw: device registration error -23 [ 415.943982][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 415.953347][ T8742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.849713][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 420.859646][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 420.868231][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 420.877868][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 420.885811][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 420.893235][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 420.932284][ T8753] lo speed is unknown, defaulting to 1000 [ 421.141992][ T8753] chnl_net:caif_netlink_parms(): no params data found [ 421.214913][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.222403][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.231206][ T8753] device bridge_slave_0 entered promiscuous mode [ 421.240315][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.247595][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.256056][ T8753] device bridge_slave_1 entered promiscuous mode [ 421.286635][ T8753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.298965][ T8753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.349525][ T8753] team0: Port device team_slave_0 added [ 421.358785][ T8753] team0: Port device team_slave_1 added [ 421.385108][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.392118][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.418428][ T8753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.431766][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.439910][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.466258][ T8753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.553024][ T8753] device hsr_slave_0 entered promiscuous mode [ 421.566617][ T8753] device hsr_slave_1 entered promiscuous mode [ 421.580534][ T8753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.588369][ T8753] Cannot create hsr debugfs directory [ 423.026460][ T4276] Bluetooth: hci5: command 0x0409 tx timeout [ 423.735465][ T4284] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 423.751005][ T4284] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 423.761146][ T4284] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 423.770635][ T4284] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 423.780036][ T4284] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 423.788148][ T4283] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 423.851990][ T8790] lo speed is unknown, defaulting to 1000 [ 424.170810][ T8790] chnl_net:caif_netlink_parms(): no params data found [ 424.497610][ T8790] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.539115][ T8790] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.554482][ T8790] device bridge_slave_0 entered promiscuous mode [ 424.573922][ T8790] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.581126][ T8790] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.598706][ T8790] device bridge_slave_1 entered promiscuous mode [ 424.698678][ T8790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.731389][ T8790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.804220][ T4276] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 424.824076][ T4276] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 424.832563][ T4276] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 424.840667][ T4276] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 424.855365][ T4276] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 424.864478][ T4276] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 424.948186][ T8790] team0: Port device team_slave_0 added [ 424.985139][ T8790] team0: Port device team_slave_1 added [ 424.995478][ T8810] lo speed is unknown, defaulting to 1000 [ 425.151726][ T8790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.158956][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 425.173579][ T8790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.390265][ T8790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.691043][ T8790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.752298][ T8790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.920036][ T8790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.931160][ T4276] Bluetooth: hci6: command 0x0409 tx timeout [ 426.052484][ T8790] device hsr_slave_0 entered promiscuous mode [ 426.084659][ T8790] device hsr_slave_1 entered promiscuous mode [ 426.111181][ T8790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.131392][ T8790] Cannot create hsr debugfs directory [ 426.651778][ T8810] chnl_net:caif_netlink_parms(): no params data found [ 426.714607][ T8832] siw: device registration error -23 [ 426.833613][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.840844][ T8810] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.874945][ T8810] device bridge_slave_0 entered promiscuous mode [ 426.896168][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.921797][ T8810] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.947552][ T8810] device bridge_slave_1 entered promiscuous mode [ 426.963315][ T4276] Bluetooth: hci7: command 0x0409 tx timeout [ 427.019974][ T8810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.032329][ T8810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.081189][ T8810] team0: Port device team_slave_0 added [ 427.094417][ T8810] team0: Port device team_slave_1 added [ 427.121400][ T8810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.128638][ T8810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.155547][ T8810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.178447][ T8810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.191169][ T8810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.223906][ T4276] Bluetooth: hci5: command 0x040f tx timeout [ 427.250673][ T8810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.345370][ T8810] device hsr_slave_0 entered promiscuous mode [ 427.368570][ T8810] device hsr_slave_1 entered promiscuous mode [ 427.390822][ T8810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.414443][ T8810] Cannot create hsr debugfs directory [ 428.023271][ T4276] Bluetooth: hci6: command 0x041b tx timeout [ 429.423390][ T4283] Bluetooth: hci7: command 0x041b tx timeout [ 429.431133][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 430.084437][ T4276] Bluetooth: hci6: command 0x040f tx timeout [ 430.695519][ T8869] siw: device registration error -23 [ 431.443795][ T4276] Bluetooth: hci7: command 0x040f tx timeout [ 432.245991][ T4283] Bluetooth: hci6: command 0x0419 tx timeout [ 432.722226][ T8897] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 432.807769][ T8897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.523388][ T4276] Bluetooth: hci7: command 0x0419 tx timeout [ 437.143661][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 437.192358][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 437.227062][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 437.266074][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 437.296460][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 437.309186][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 437.373451][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 439.255329][ T8930] device veth1_macvtap left promiscuous mode [ 441.725931][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 441.736189][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 441.743683][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 441.751036][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 441.758697][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 441.766306][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 441.773998][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 441.783672][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 441.800722][ T8942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.126171][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.132545][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.036231][ T4276] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 448.046483][ T4276] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 448.062885][ T4276] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 448.073651][ T4276] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 448.081484][ T4276] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 448.088928][ T4276] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 448.134642][ T8971] lo speed is unknown, defaulting to 1000 [ 448.368010][ T8971] chnl_net:caif_netlink_parms(): no params data found [ 448.475019][ T8971] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.482231][ T8971] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.490598][ T8971] device bridge_slave_0 entered promiscuous mode [ 448.499265][ T8971] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.506522][ T8971] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.514985][ T8971] device bridge_slave_1 entered promiscuous mode [ 448.544407][ T8971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.556472][ T8971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.599610][ T8971] team0: Port device team_slave_0 added [ 448.608185][ T8971] team0: Port device team_slave_1 added [ 448.638649][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.645935][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.673381][ T8971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.686897][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.694352][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.720857][ T8971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.789300][ T8971] device hsr_slave_0 entered promiscuous mode [ 448.804621][ T8971] device hsr_slave_1 entered promiscuous mode [ 448.821858][ T8971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.833959][ T8971] Cannot create hsr debugfs directory [ 450.163402][ T4283] Bluetooth: hci8: command 0x0409 tx timeout [ 452.253187][ T4283] Bluetooth: hci8: command 0x041b tx timeout [ 454.323156][ T4283] Bluetooth: hci8: command 0x040f tx timeout [ 456.404188][ T4283] Bluetooth: hci8: command 0x0419 tx timeout [ 460.079594][ T4276] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 460.090579][ T4276] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 460.098853][ T4276] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 460.108037][ T4276] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 460.115776][ T4276] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 460.123139][ T4276] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 460.194464][ T8981] lo speed is unknown, defaulting to 1000 [ 460.432843][ T8981] chnl_net:caif_netlink_parms(): no params data found [ 460.551306][ T8981] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.562804][ T8981] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.581717][ T8981] device bridge_slave_0 entered promiscuous mode [ 460.592755][ T8981] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.610920][ T8981] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.632762][ T8981] device bridge_slave_1 entered promiscuous mode [ 460.695205][ T8981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.720460][ T8981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.781789][ T8981] team0: Port device team_slave_0 added [ 460.790438][ T8981] team0: Port device team_slave_1 added [ 460.824924][ T8981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.831923][ T8981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.859135][ T8981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.872050][ T8981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.880558][ T8981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.907076][ T8981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.975811][ T8981] device hsr_slave_0 entered promiscuous mode [ 460.993516][ T8981] device hsr_slave_1 entered promiscuous mode [ 461.000836][ T8981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.018768][ T8981] Cannot create hsr debugfs directory [ 462.163401][ T4276] Bluetooth: hci9: command 0x0409 tx timeout [ 464.243329][ T4276] Bluetooth: hci9: command 0x041b tx timeout [ 466.323351][ T4276] Bluetooth: hci9: command 0x040f tx timeout [ 468.403490][ T4276] Bluetooth: hci9: command 0x0419 tx timeout [ 481.054856][ T4283] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 481.064779][ T4283] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 481.072679][ T4283] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 481.093806][ T4284] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 481.101424][ T4283] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 481.112822][ T4283] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 481.158747][ T8990] lo speed is unknown, defaulting to 1000 [ 481.414423][ T8990] chnl_net:caif_netlink_parms(): no params data found [ 481.526077][ T8990] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.533553][ T8990] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.542853][ T8990] device bridge_slave_0 entered promiscuous mode [ 481.551956][ T8990] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.559455][ T8990] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.567958][ T8990] device bridge_slave_1 entered promiscuous mode [ 481.618709][ T8990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.631992][ T8990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.716353][ T8990] team0: Port device team_slave_0 added [ 481.725336][ T8990] team0: Port device team_slave_1 added [ 481.751336][ T8990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.758606][ T8990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.786021][ T8990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.811280][ T8990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.829822][ T8990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.863570][ T8990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.919143][ T8990] device hsr_slave_0 entered promiscuous mode [ 481.934084][ T8990] device hsr_slave_1 entered promiscuous mode [ 481.953145][ T8990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.960768][ T8990] Cannot create hsr debugfs directory [ 483.203260][ T4276] Bluetooth: hci10: command 0x0409 tx timeout [ 483.519331][ T4283] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 483.536835][ T4283] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 483.545500][ T4283] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 483.558404][ T4283] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 483.566220][ T4283] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 483.574673][ T4283] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 483.622120][ T8999] lo speed is unknown, defaulting to 1000 [ 483.815420][ T8999] chnl_net:caif_netlink_parms(): no params data found [ 483.931943][ T8999] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.948842][ T8999] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.969708][ T8999] device bridge_slave_0 entered promiscuous mode [ 483.985969][ T8999] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.010262][ T8999] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.030796][ T8999] device bridge_slave_1 entered promiscuous mode [ 484.087284][ T8999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.106695][ T8999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.150359][ T8999] team0: Port device team_slave_0 added [ 484.158883][ T8999] team0: Port device team_slave_1 added [ 484.214850][ T8999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.221856][ T8999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.261646][ T8999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.277828][ T8999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.293310][ T8999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.331979][ T8999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.418161][ T8999] device hsr_slave_0 entered promiscuous mode [ 484.434316][ T8999] device hsr_slave_1 entered promiscuous mode [ 484.453227][ T8999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.460831][ T8999] Cannot create hsr debugfs directory [ 484.690666][ T4283] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 484.701023][ T4283] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 484.714281][ T4283] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 484.722538][ T4283] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 484.733513][ T4283] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 484.741053][ T4283] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 484.837177][ T9007] lo speed is unknown, defaulting to 1000 [ 485.177424][ T9007] chnl_net:caif_netlink_parms(): no params data found [ 485.279131][ T9007] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.283307][ T4283] Bluetooth: hci10: command 0x041b tx timeout [ 485.286519][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.301015][ T9007] device bridge_slave_0 entered promiscuous mode [ 485.309973][ T9007] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.321260][ T9007] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.344176][ T9007] device bridge_slave_1 entered promiscuous mode [ 485.408912][ T9007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.435035][ T9007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.509056][ T9007] team0: Port device team_slave_0 added [ 485.528122][ T9007] team0: Port device team_slave_1 added [ 485.577000][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.584410][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.610419][ T4283] Bluetooth: hci11: command 0x0409 tx timeout [ 485.633402][ T9007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.652664][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.660077][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.686793][ T9007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.780173][ T9007] device hsr_slave_0 entered promiscuous mode [ 485.800407][ T9007] device hsr_slave_1 entered promiscuous mode [ 485.813952][ T9007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.821550][ T9007] Cannot create hsr debugfs directory [ 486.803312][ T4276] Bluetooth: hci12: command 0x0409 tx timeout [ 487.363388][ T4276] Bluetooth: hci10: command 0x040f tx timeout [ 487.683375][ T4276] Bluetooth: hci11: command 0x041b tx timeout [ 488.883268][ T4276] Bluetooth: hci12: command 0x041b tx timeout [ 489.443225][ T4276] Bluetooth: hci10: command 0x0419 tx timeout [ 489.763306][ T4276] Bluetooth: hci11: command 0x040f tx timeout [ 490.963220][ T4276] Bluetooth: hci12: command 0x040f tx timeout [ 491.843261][ T4276] Bluetooth: hci11: command 0x0419 tx timeout [ 493.043204][ T4276] Bluetooth: hci12: command 0x0419 tx timeout [ 506.565907][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.572258][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.213219][ T4283] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 508.234351][ T4283] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 508.242958][ T4283] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 508.264684][ T4283] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 508.274944][ T4283] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 508.282341][ T4283] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 508.328725][ T9016] lo speed is unknown, defaulting to 1000 [ 508.575005][ T9016] chnl_net:caif_netlink_parms(): no params data found [ 508.669447][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.677600][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.686529][ T9016] device bridge_slave_0 entered promiscuous mode [ 508.695567][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.702795][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.711509][ T9016] device bridge_slave_1 entered promiscuous mode [ 508.743812][ T9016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.756116][ T9016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.790520][ T9016] team0: Port device team_slave_0 added [ 508.813449][ T9016] team0: Port device team_slave_1 added [ 508.864276][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.871264][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.913117][ T9016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.932657][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.958045][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.993349][ T9016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.035027][ T9016] device hsr_slave_0 entered promiscuous mode [ 509.054812][ T9016] device hsr_slave_1 entered promiscuous mode [ 509.072412][ T9016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.093851][ T9016] Cannot create hsr debugfs directory [ 510.333265][ T4276] Bluetooth: hci13: command 0x0409 tx timeout [ 512.403195][ T4276] Bluetooth: hci13: command 0x041b tx timeout [ 514.483148][ T4276] Bluetooth: hci13: command 0x040f tx timeout [ 516.563262][ T4276] Bluetooth: hci13: command 0x0419 tx timeout [ 520.215333][ T4276] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 520.226305][ T4276] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 520.234911][ T4276] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 520.246792][ T4276] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 520.255133][ T4276] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 520.262467][ T4276] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 520.321141][ T9025] lo speed is unknown, defaulting to 1000 [ 520.650383][ T9025] chnl_net:caif_netlink_parms(): no params data found [ 520.804943][ T9025] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.812159][ T9025] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.824742][ T9025] device bridge_slave_0 entered promiscuous mode [ 520.844550][ T9025] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.853416][ T9025] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.876723][ T9025] device bridge_slave_1 entered promiscuous mode [ 520.943675][ T9025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.976493][ T9025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.056156][ T9025] team0: Port device team_slave_0 added [ 521.067372][ T9025] team0: Port device team_slave_1 added [ 521.097925][ T9025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.106437][ T9025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.134563][ T9025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.147873][ T9025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.156974][ T9025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.198249][ T9025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.288387][ T9025] device hsr_slave_0 entered promiscuous mode [ 521.304653][ T9025] device hsr_slave_1 entered promiscuous mode [ 521.323211][ T9025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.330808][ T9025] Cannot create hsr debugfs directory [ 522.323528][ T4283] Bluetooth: hci14: command 0x0409 tx timeout [ 524.413183][ T4283] Bluetooth: hci14: command 0x041b tx timeout [ 526.483151][ T4283] Bluetooth: hci14: command 0x040f tx timeout [ 528.563281][ T4283] Bluetooth: hci14: command 0x0419 tx timeout [ 541.160903][ T4276] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 541.173375][ T4276] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 541.181392][ T4276] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 541.191844][ T4276] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 541.199650][ T4276] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 541.207901][ T4276] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 541.251160][ T9034] lo speed is unknown, defaulting to 1000 [ 541.487801][ T9034] chnl_net:caif_netlink_parms(): no params data found [ 541.635953][ T9034] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.643587][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.652557][ T9034] device bridge_slave_0 entered promiscuous mode [ 541.662203][ T9034] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.669495][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.678505][ T9034] device bridge_slave_1 entered promiscuous mode [ 541.727474][ T9034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.739912][ T9034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.806626][ T9034] team0: Port device team_slave_0 added [ 541.826570][ T9034] team0: Port device team_slave_1 added [ 541.887418][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.903071][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.954008][ T9034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.991307][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.998616][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.025216][ T9034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.089681][ T9034] device hsr_slave_0 entered promiscuous mode [ 542.104751][ T9034] device hsr_slave_1 entered promiscuous mode [ 542.123133][ T9034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.130726][ T9034] Cannot create hsr debugfs directory [ 543.283643][ T4276] Bluetooth: hci15: command 0x0409 tx timeout [ 543.572925][ T4283] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 543.583591][ T4283] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 543.592165][ T4283] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 543.601620][ T4283] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 543.609867][ T4283] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 543.617265][ T4283] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 543.686761][ T9043] lo speed is unknown, defaulting to 1000 [ 543.924673][ T9043] chnl_net:caif_netlink_parms(): no params data found [ 544.034682][ T9043] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.041812][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.065360][ T9043] device bridge_slave_0 entered promiscuous mode [ 544.085492][ T9043] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.092865][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.115988][ T9043] device bridge_slave_1 entered promiscuous mode [ 544.180609][ T9043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.207883][ T9043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.268465][ T9043] team0: Port device team_slave_0 added [ 544.288047][ T9043] team0: Port device team_slave_1 added [ 544.376144][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.393082][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.440309][ T9043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.473376][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.480360][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.514647][ T4276] Bluetooth: hci5: command 0x0406 tx timeout [ 544.543172][ T9043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.658960][ T9043] device hsr_slave_0 entered promiscuous mode [ 544.675112][ T9043] device hsr_slave_1 entered promiscuous mode [ 544.693444][ T9043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.701040][ T9043] Cannot create hsr debugfs directory [ 544.761719][ T4276] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 544.771289][ T4276] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 544.780544][ T4276] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 544.793866][ T4276] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 544.802600][ T4276] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 544.811057][ T4276] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 544.982020][ T9051] lo speed is unknown, defaulting to 1000 [ 545.305725][ T9051] chnl_net:caif_netlink_parms(): no params data found [ 545.363415][ T4276] Bluetooth: hci15: command 0x041b tx timeout [ 545.537591][ T9051] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.554446][ T9051] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.571808][ T9051] device bridge_slave_0 entered promiscuous mode [ 545.608613][ T9051] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.623158][ T9051] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.631739][ T9051] device bridge_slave_1 entered promiscuous mode [ 545.683618][ T4276] Bluetooth: hci16: command 0x0409 tx timeout [ 545.708261][ T9051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.721171][ T9051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.769715][ T9051] team0: Port device team_slave_0 added [ 545.805748][ T9051] team0: Port device team_slave_1 added [ 545.843589][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.851225][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.879644][ T9051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.894273][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.901334][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.928236][ T9051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.015485][ T9051] device hsr_slave_0 entered promiscuous mode [ 546.022623][ T9051] device hsr_slave_1 entered promiscuous mode [ 546.029890][ T9051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.037792][ T9051] Cannot create hsr debugfs directory [ 546.883399][ T4276] Bluetooth: hci17: command 0x0409 tx timeout [ 547.443106][ T4276] Bluetooth: hci15: command 0x040f tx timeout [ 547.763464][ T4284] Bluetooth: hci16: command 0x041b tx timeout [ 548.963169][ T4284] Bluetooth: hci17: command 0x041b tx timeout [ 549.533155][ T4284] Bluetooth: hci15: command 0x0419 tx timeout [ 549.603163][ T4284] Bluetooth: hci7: command 0x0406 tx timeout [ 549.614107][ T4284] Bluetooth: hci6: command 0x0406 tx timeout [ 549.853162][ T4284] Bluetooth: hci16: command 0x040f tx timeout [ 551.043335][ T4284] Bluetooth: hci17: command 0x040f tx timeout [ 551.923231][ T4284] Bluetooth: hci16: command 0x0419 tx timeout [ 553.123266][ T4284] Bluetooth: hci17: command 0x0419 tx timeout [ 566.083757][ T28] INFO: task syz.1.1378:8656 blocked for more than 143 seconds. [ 566.091464][ T28] Not tainted syzkaller #0 [ 566.103973][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.112684][ T28] task:syz.1.1378 state:D stack:27648 pid:8656 ppid:4273 flags:0x00004004 [ 566.124375][ T28] Call Trace: [ 566.127698][ T28] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 566.130659][ T28] __schedule+0x10ec/0x40b0 [ 566.143332][ T28] ? __sched_text_start+0x8/0x8 [ 566.148242][ T28] ? __mutex_trylock_common+0x80/0x250 [ 566.193329][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 566.199659][ T28] schedule+0xb9/0x180 [ 566.250620][ T28] schedule_preempt_disabled+0xf/0x20 [ 566.269731][ T28] __mutex_lock+0x555/0xaf0 [ 566.278233][ T28] ? __mutex_lock+0x3a5/0xaf0 [ 566.283250][ T28] ? genl_rcv_msg+0x103/0x780 [ 566.287992][ T28] ? mutex_lock_nested+0x10/0x10 [ 566.293340][ T28] ? verify_lock_unused+0x140/0x140 [ 566.298580][ T28] ? radix_tree_lookup+0x235/0x280 [ 566.304108][ T28] genl_rcv_msg+0x103/0x780 [ 566.308654][ T28] ? netdev_core_pick_tx+0x340/0x340 [ 566.314401][ T28] ? ref_tracker_free+0x630/0x7c0 [ 566.319478][ T28] ? genl_bind+0x350/0x350 [ 566.326486][ T28] netlink_rcv_skb+0x1de/0x420 [ 566.331386][ T28] ? genl_bind+0x350/0x350 [ 566.336422][ T28] ? netlink_ack+0x1100/0x1100 [ 566.341252][ T28] ? down_read+0x1a8/0x2d0 [ 566.347556][ T28] genl_rcv+0x24/0x40 [ 566.351585][ T28] netlink_unicast+0x74d/0x8d0 [ 566.357440][ T28] netlink_sendmsg+0x89e/0xbc0 [ 566.362256][ T28] ? netlink_getsockopt+0x540/0x540 [ 566.367807][ T28] ? aa_sock_msg_perm+0x94/0x150 [ 566.372793][ T28] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 566.378620][ T28] ? security_socket_sendmsg+0x7c/0xa0 [ 566.393215][ T28] __sys_sendto+0x44f/0x5c0 [ 566.397791][ T28] ? __ia32_sys_getpeername+0x80/0x80 [ 566.413121][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 566.419178][ T28] ? lock_chain_count+0x20/0x20 [ 566.429460][ T28] __x64_sys_sendto+0xda/0xf0 [ 566.443163][ T28] do_syscall_64+0x4c/0xa0 [ 566.447629][ T28] ? clear_bhb_loop+0x60/0xb0 [ 566.452329][ T28] ? clear_bhb_loop+0x60/0xb0 [ 566.473167][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.479203][ T28] RIP: 0033:0x7ff6a6b90d5c [ 566.493052][ T28] RSP: 002b:00007ff6a7946ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 566.501548][ T28] RAX: ffffffffffffffda RBX: 00007ff6a7946fc0 RCX: 00007ff6a6b90d5c [ 566.510795][ T28] RDX: 0000000000000028 RSI: 00007ff6a7947010 RDI: 0000000000000007 [ 566.518878][ T28] RBP: 0000000000000000 R08: 00007ff6a7946f14 R09: 000000000000000c [ 566.527051][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 566.535840][ T28] R13: 00007ff6a7946f68 R14: 00007ff6a7947010 R15: 0000000000000000 [ 566.553134][ T28] [ 566.556273][ T28] INFO: task syz.3.1384:8673 blocked for more than 143 seconds. [ 566.573720][ T28] Not tainted syzkaller #0 [ 566.578696][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.603155][ T28] task:syz.3.1384 state:D stack:28128 pid:8673 ppid:4268 flags:0x00004004 [ 566.612438][ T28] Call Trace: [ 566.633180][ T28] [ 566.636177][ T28] __schedule+0x10ec/0x40b0 [ 566.640758][ T28] ? __sched_text_start+0x8/0x8 [ 566.653020][ T28] ? __mutex_trylock_common+0x80/0x250 [ 566.658555][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 566.665012][ T28] schedule+0xb9/0x180 [ 566.669133][ T28] schedule_preempt_disabled+0xf/0x20 [ 566.674828][ T28] __mutex_lock+0x555/0xaf0 [ 566.679382][ T28] ? __mutex_lock+0x3a5/0xaf0 [ 566.684214][ T28] ? genl_rcv_msg+0x103/0x780 [ 566.688943][ T28] ? mutex_lock_nested+0x10/0x10 [ 566.693980][ T28] ? verify_lock_unused+0x140/0x140 [ 566.699221][ T28] ? radix_tree_lookup+0x235/0x280 [ 566.704440][ T28] genl_rcv_msg+0x103/0x780 [ 566.709001][ T28] ? netdev_core_pick_tx+0x340/0x340 [ 566.714409][ T28] ? ref_tracker_free+0x630/0x7c0 [ 566.719482][ T28] ? genl_bind+0x350/0x350 [ 566.724112][ T28] netlink_rcv_skb+0x1de/0x420 [ 566.728943][ T28] ? genl_bind+0x350/0x350 [ 566.735287][ T28] ? netlink_ack+0x1100/0x1100 [ 566.740119][ T28] ? down_read+0x1a8/0x2d0 [ 566.744973][ T28] genl_rcv+0x24/0x40 [ 566.748999][ T28] netlink_unicast+0x74d/0x8d0 [ 566.754298][ T28] netlink_sendmsg+0x89e/0xbc0 [ 566.759116][ T28] ? netlink_getsockopt+0x540/0x540 [ 566.764712][ T28] ? aa_sock_msg_perm+0x94/0x150 [ 566.769706][ T28] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 566.776194][ T28] ? security_socket_sendmsg+0x7c/0xa0 [ 566.781704][ T28] __sys_sendto+0x44f/0x5c0 [ 566.786709][ T28] ? __ia32_sys_getpeername+0x80/0x80 [ 566.792149][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 566.799203][ T28] ? lock_chain_count+0x20/0x20 [ 566.804639][ T28] __x64_sys_sendto+0xda/0xf0 [ 566.809376][ T28] do_syscall_64+0x4c/0xa0 [ 566.814200][ T28] ? clear_bhb_loop+0x60/0xb0 [ 566.818919][ T28] ? clear_bhb_loop+0x60/0xb0 [ 566.833173][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.839519][ T28] RIP: 0033:0x7f1696990d5c [ 566.853125][ T28] RSP: 002b:00007f1694bb2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 566.861596][ T28] RAX: ffffffffffffffda RBX: 00007f1694bb2fc0 RCX: 00007f1696990d5c [ 566.872533][ T28] RDX: 0000000000000020 RSI: 00007f1694bb3010 RDI: 000000000000000a [ 566.893791][ T28] RBP: 0000000000000000 R08: 00007f1694bb2f14 R09: 000000000000000c [ 566.901816][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 566.923135][ T28] R13: 00007f1694bb2f68 R14: 00007f1694bb3010 R15: 0000000000000000 [ 566.931180][ T28] [ 566.954063][ T28] INFO: task syz-executor:8753 blocked for more than 144 seconds. [ 566.961920][ T28] Not tainted syzkaller #0 [ 566.983843][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.992568][ T28] task:syz-executor state:D stack:22688 pid:8753 ppid:1 flags:0x00004004 [ 567.013036][ T28] Call Trace: [ 567.016400][ T28] [ 567.019355][ T28] __schedule+0x10ec/0x40b0 [ 567.032756][ T28] ? __sched_text_start+0x8/0x8 [ 567.053217][ T28] ? __mutex_trylock_common+0x80/0x250 [ 567.058763][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 567.073180][ T28] schedule+0xb9/0x180 [ 567.077325][ T28] schedule_preempt_disabled+0xf/0x20 [ 567.082723][ T28] __mutex_lock+0x555/0xaf0 [ 567.103871][ T28] ? __mutex_lock+0x3a5/0xaf0 [ 567.108636][ T28] ? genl_rcv_msg+0x103/0x780 [ 567.123286][ T28] ? mutex_lock_nested+0x10/0x10 [ 567.128295][ T28] ? verify_lock_unused+0x140/0x140 [ 567.153142][ T28] ? radix_tree_lookup+0x235/0x280 [ 567.158341][ T28] genl_rcv_msg+0x103/0x780 [ 567.162906][ T28] ? genl_bind+0x350/0x350 [ 567.171710][ T28] netlink_rcv_skb+0x1de/0x420 [ 567.193067][ T28] ? genl_bind+0x350/0x350 [ 567.197574][ T28] ? netlink_ack+0x1100/0x1100 [ 567.202413][ T28] ? down_read+0x1a8/0x2d0 [ 567.207366][ T28] genl_rcv+0x24/0x40 [ 567.211385][ T28] netlink_unicast+0x74d/0x8d0 [ 567.223134][ T28] netlink_sendmsg+0x89e/0xbc0 [ 567.227968][ T28] ? netlink_getsockopt+0x540/0x540 [ 567.253132][ T28] ? aa_sock_msg_perm+0x94/0x150 [ 567.258153][ T28] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 567.272882][ T28] ? security_socket_sendmsg+0x7c/0xa0 [ 567.293393][ T28] __sys_sendto+0x44f/0x5c0 [ 567.297962][ T28] ? percpu_counter_add_batch+0x13b/0x160 [ 567.313190][ T28] ? __ia32_sys_getpeername+0x80/0x80 [ 567.318638][ T28] ? __lock_acquire+0x7c50/0x7c50 [ 567.333892][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 567.339936][ T28] ? lock_chain_count+0x20/0x20 [ 567.363463][ T28] __x64_sys_sendto+0xda/0xf0 [ 567.368374][ T28] do_syscall_64+0x4c/0xa0 [ 567.372824][ T28] ? clear_bhb_loop+0x60/0xb0 [ 567.393132][ T28] ? clear_bhb_loop+0x60/0xb0 [ 567.397880][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.404106][ T28] RIP: 0033:0x7f5ee5390d5c [ 567.408551][ T28] RSP: 002b:00007ffe13f639c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 567.433846][ T28] RAX: ffffffffffffffda RBX: 00007f5ee6114620 RCX: 00007f5ee5390d5c [ 567.451099][ T28] RDX: 0000000000000020 RSI: 00007f5ee6114670 RDI: 0000000000000005 [ 567.463851][ T28] RBP: 0000000000000000 R08: 00007ffe13f63a14 R09: 000000000000000c [ 567.471901][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 567.501754][ T28] R13: 00007ffe13f63a68 R14: 00007f5ee6114670 R15: 0000000000000000 [ 567.523244][ T28] [ 567.526386][ T28] [ 567.526386][ T28] Showing all locks held in the system: [ 567.543104][ T28] 1 lock held by rcu_tasks_kthre/12: [ 567.548529][ T28] #0: ffffffff8cb2b570 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 567.573042][ T28] 1 lock held by rcu_tasks_trace/13: [ 567.578468][ T28] #0: ffffffff8cb2bd90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 567.613223][ T28] 1 lock held by khungtaskd/28: [ 567.618146][ T28] #0: ffffffff8cb2abe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 567.643049][ T28] 2 locks held by getty/4031: [ 567.647784][ T28] #0: ffff88814cc85098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 567.658475][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 567.684006][ T28] 3 locks held by kworker/u4:13/4525: [ 567.689451][ T28] 2 locks held by syz.4.1372/8640: [ 567.713162][ T28] 2 locks held by syz.1.1378/8656: [ 567.718408][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 567.733202][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 567.742348][ T28] 2 locks held by syz.3.1384/8673: [ 567.763222][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 567.771532][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 567.781914][ T28] 2 locks held by syz-executor/8753: [ 567.787465][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 567.796885][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 567.806169][ T28] 2 locks held by syz-executor/8790: [ 567.811478][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 567.820078][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 567.829343][ T28] 2 locks held by syz-executor/8810: [ 567.834956][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 567.843917][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 567.852950][ T28] 2 locks held by syz.0.1453/8890: [ 567.859002][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 567.868124][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 567.877429][ T28] 2 locks held by syz.0.1453/8891: [ 567.882560][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 567.911579][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 567.933059][ T28] 2 locks held by syz.0.1453/8895: [ 567.938222][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 567.946528][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 567.955724][ T28] 2 locks held by syz.2.1476/8967: [ 567.960851][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 567.969638][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 567.978780][ T28] 2 locks held by syz-executor/8971: [ 567.984154][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 567.992388][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 568.001663][ T28] 2 locks held by syz-executor/8981: [ 568.008352][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 568.017055][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.023439][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.031605][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 568.040880][ T28] 2 locks held by syz-executor/8990: [ 568.046406][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 568.054896][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 568.064185][ T28] 2 locks held by syz-executor/8999: [ 568.070003][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 568.078484][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 568.088290][ T28] 2 locks held by syz-executor/9007: [ 568.093823][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 568.102068][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 568.111441][ T28] 2 locks held by syz-executor/9016: [ 568.117633][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 568.126156][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 568.135482][ T28] 2 locks held by syz-executor/9025: [ 568.140794][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 568.149331][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 568.158587][ T28] 2 locks held by syz-executor/9034: [ 568.173110][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 568.181353][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 568.190756][ T28] 2 locks held by syz-executor/9043: [ 568.196289][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 568.204793][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 568.214167][ T28] 2 locks held by syz-executor/9051: [ 568.219470][ T28] #0: ffffffff8dda1270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 568.229159][ T28] #1: ffffffff8dda1088 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 568.253200][ T28] [ 568.255630][ T28] ============================================= [ 568.255630][ T28] [ 568.273064][ T28] NMI backtrace for cpu 0 [ 568.277443][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 568.284655][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 568.294728][ T28] Call Trace: [ 568.298014][ T28] [ 568.300954][ T28] dump_stack_lvl+0x168/0x22e [ 568.305644][ T28] ? irq_work_queue+0xb8/0x140 [ 568.310423][ T28] ? show_regs_print_info+0x12/0x12 [ 568.315637][ T28] ? load_image+0x3b0/0x3b0 [ 568.320155][ T28] ? vprintk_emit+0x571/0x680 [ 568.324847][ T28] ? printk_sprint+0x460/0x460 [ 568.329718][ T28] nmi_cpu_backtrace+0x3f4/0x470 [ 568.334676][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 568.340837][ T28] ? _printk+0xcc/0x110 [ 568.345001][ T28] ? load_image+0x3b0/0x3b0 [ 568.349521][ T28] ? load_image+0x3b0/0x3b0 [ 568.354037][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 568.360109][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 568.366093][ T28] watchdog+0xeee/0xf30 [ 568.370338][ T28] ? watchdog+0x1ed/0xf30 [ 568.374689][ T28] kthread+0x29d/0x330 [ 568.378774][ T28] ? hungtask_pm_notify+0x40/0x40 [ 568.383803][ T28] ? kthread_blkcg+0xd0/0xd0 [ 568.388400][ T28] ret_from_fork+0x1f/0x30 [ 568.392834][ T28] [ 568.396761][ T28] Sending NMI from CPU 0 to CPUs 1: [ 568.402165][ C1] NMI backtrace for cpu 1 [ 568.402174][ C1] CPU: 1 PID: 5087 Comm: kworker/u4:27 Not tainted syzkaller #0 [ 568.402190][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 568.402201][ C1] Workqueue: phy12 ieee80211_iface_work [ 568.402225][ C1] RIP: 0010:kasan_check_range+0x62/0x290 [ 568.402250][ C1] Code: ff df 49 89 fb 49 c1 eb 03 49 b8 00 00 00 00 00 fc ff df 4f 8d 0c 03 48 8d 5c 37 ff 48 c1 eb 03 4e 8d 14 3b 4d 89 d6 4d 29 ce <49> 83 fe 10 7f 26 4d 85 f6 0f 84 39 01 00 00 48 f7 d3 4c 01 db 41 [ 568.402264][ C1] RSP: 0018:ffffc9000da07880 EFLAGS: 00000002 [ 568.402276][ C1] RAX: 0000000000000001 RBX: 1ffffffff215c466 RCX: ffffffff816304e6 [ 568.402288][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90ae2330 [ 568.402299][ C1] RBP: ffffc9000da07af0 R08: dffffc0000000000 R09: fffffbfff215c466 [ 568.402311][ C1] R10: fffffbfff215c467 R11: 1ffffffff215c466 R12: ffff8880739dd940 [ 568.402322][ C1] R13: 00000000000000f0 R14: 0000000000000001 R15: dffffc0000000001 [ 568.402333][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 568.402346][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.402357][ C1] CR2: 0000555d7cc35fb0 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 568.402371][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 568.402380][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 568.402390][ C1] Call Trace: [ 568.402395][ C1] [ 568.402401][ C1] __lock_acquire+0xdc6/0x7c50 [ 568.402424][ C1] ? verify_lock_unused+0x140/0x140 [ 568.402452][ C1] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 568.402473][ C1] ? verify_lock_unused+0x140/0x140 [ 568.402497][ C1] ? try_to_wake_up+0x54d/0x1080 [ 568.402517][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 568.402538][ C1] ? __rwlock_init+0x140/0x140 [ 568.402564][ C1] lock_acquire+0x1b4/0x490 [ 568.402583][ C1] ? process_one_work+0x7a1/0x1160 [ 568.402602][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 568.402625][ C1] ? read_lock_is_recursive+0x10/0x10 [ 568.402648][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 568.402680][ C1] ? process_one_work+0x7a1/0x1160 [ 568.402696][ C1] process_one_work+0x7d9/0x1160 [ 568.402712][ C1] ? process_one_work+0x7a1/0x1160 [ 568.402734][ C1] ? worker_detach_from_pool+0x240/0x240 [ 568.402753][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 568.402776][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 568.402800][ C1] ? kthread_data+0x4b/0xc0 [ 568.402823][ C1] worker_thread+0xaa2/0x1250 [ 568.402850][ C1] kthread+0x29d/0x330 [ 568.402881][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 568.402896][ C1] ? kthread_blkcg+0xd0/0xd0 [ 568.402918][ C1] ret_from_fork+0x1f/0x30 [ 568.402944][ C1] [ 568.707041][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 568.713937][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 568.721158][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 568.731241][ T28] Call Trace: [ 568.734534][ T28] [ 568.737479][ T28] dump_stack_lvl+0x168/0x22e [ 568.742179][ T28] ? memcpy+0x3c/0x60 [ 568.746187][ T28] ? show_regs_print_info+0x12/0x12 [ 568.751409][ T28] ? load_image+0x3b0/0x3b0 [ 568.756036][ T28] panic+0x2c9/0x710 [ 568.759976][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 568.765657][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 568.770191][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 568.775771][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 568.781955][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 568.788145][ T28] watchdog+0xf2d/0xf30 [ 568.792321][ T28] ? watchdog+0x1ed/0xf30 [ 568.796678][ T28] kthread+0x29d/0x330 [ 568.800775][ T28] ? hungtask_pm_notify+0x40/0x40 [ 568.805816][ T28] ? kthread_blkcg+0xd0/0xd0 [ 568.810441][ T28] ret_from_fork+0x1f/0x30 [ 568.814901][ T28] [ 568.818290][ T28] Kernel Offset: disabled [ 568.822640][ T28] Rebooting in 86400 seconds..