last executing test programs: 22.630502311s ago: executing program 0 (id=6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 22.481329931s ago: executing program 0 (id=7): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) open$dir(&(0x7f0000000100)='./file1\x00', 0x40802, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) openat$nullb(0xffffff9c, 0x0, 0x80680, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0x0, 0x1}, &(0x7f0000000440)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_clone(0x4000200, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) 22.343989612s ago: executing program 3 (id=4): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c00330080f700000802110000010802110000003250505050500000000000020000000000000000000001000406ff0f0000000000000000002a01005bbc8b16db29f7e9084c6918d3793ee8222617f2afeaad4d5b31e75f278a1489aae7f9d3dc6602ce57b0dec2c1ac7f9b359db7d9a664fad2c344a1111c18be9868b8c432f4638ca36bbf725901227e86ea44bd6fb010bf4260487562a016027bc094d6239ecaeb05cbaa33d657d5fa3d6ecc45d6d5c90111dcc7c66429de2b58a21fc5a3"], 0x58}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 21.987858243s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x4f) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) dup3(r6, r7, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x11, "0900e9ffffff00"}) ioctl$TIOCGPTPEER(r6, 0x5441, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 21.798299424s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={0x0, 0x68}, 0x1, 0x7}, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0xa000032a) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) 21.736954585s ago: executing program 4 (id=5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7fff, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x300, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x68a}}]}}]}, 0x48}}, 0x44080) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001200)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}}, {{&(0x7f0000000b00)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001080)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000010c0)="9fdbcae47be6adf2628d2dcfc8a1944889cffbca052fd70e342bb698f453f964b41a3297a43b8a2a08235b263c8ccacb6f323b3cf64abc1a88f770d098f762f5049e33e8d324439b6cb8d376f81efd626eed2eac8f7d423988b0d3083da13c9298e734f98463015b4c688344449476aea947ced8f74e17e1242b5b8f7e99281bb4b3e7431fd8516130d657dc5be23a239f1644d9cbec403feae66d177598e4829aeb4cb9f9d781d3bf4e07981a6d49bb53e10951715dc6927142e86b5bd75f76948f982d5d2285b6e23ff1", 0xcb}], 0x1}}], 0x3, 0x24000091) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) 21.092380427s ago: executing program 4 (id=8): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x7c41, &(0x7f0000000300)={0x0, 0x0, 0x40}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000022a25eda0000000000feff800c0000000000000054000000a000020095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x10) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000001780), 0x0) 20.510892049s ago: executing program 2 (id=9): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000380), &(0x7f0000000480)="c16aae5780f210425787ac0f7836f0c2ba73a676857f0ec61a1a5dca15e220c0aaa05aeea37b30eec8ec1b00e3dfd1a9b84e62fead7eb2921fd2b8fd74dbf5e529881f5b5d9569797bc922aa5ebf8d4dcabdb8771b449e0d1f58ea36b3b6ad84e2f1375782f6132ccc9d865e058b4974e9f84b9d931304408b4963db71e98651a09f78207503acf2a998f91b897e15bd66c54b1663f4980ac0c27fbb99d8450eaee8a8d5c15d3aac62b3705a68b9d52c950b6fc5adb26d3f70623e55870538ca", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}, &(0x7f0000000440)="adbbd11a13bc50c34e8e2c0ed401d2a1354c3e", 0x13}) 20.34787621s ago: executing program 4 (id=10): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f0000000480)="c16aae5780f210425787ac0f7836f0c2ba73a676857f0ec61a1a5dca15e220c0aaa05aeea37b30eec8ec1b00e3dfd1a9b84e62fead7eb2921fd2b8fd74dbf5e529881f5b5d9569797bc922aa5ebf8d4dcabdb8771b449e0d1f58ea36b3b6ad84e2f1375782f6132ccc9d865e058b4974e9f84b9d931304408b4963db71e98651a09f78207503acf2a998f91b897e15bd66c54b1663f4980ac0c27fbb99d8450eaee8a8d5c15d3aac62b3705a68b9d52c950b6fc5adb26d3f70623e55870538ca", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}, &(0x7f0000000440)="adbbd11a13bc50c34e8e2c0ed401d2a1354c3ed962de", 0x16}) 20.23186668s ago: executing program 2 (id=11): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 20.093325611s ago: executing program 4 (id=12): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x7005, 0x0) readv(r3, 0x0, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002c0002000000080004"], 0x44}}, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 19.217431425s ago: executing program 2 (id=13): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 18.970087085s ago: executing program 4 (id=14): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mount$9p_xen(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x1008, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 18.816825386s ago: executing program 2 (id=15): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18.761201316s ago: executing program 4 (id=16): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18.379576598s ago: executing program 3 (id=17): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) unshare(0x22020400) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x2}, 0x0, 0x0) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 18.124809699s ago: executing program 1 (id=18): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7fff, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x300, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x68a}}]}}]}, 0x48}}, 0x44080) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001200)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}}, {{&(0x7f0000000b00)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001080)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000010c0)="9fdbcae47be6adf2628d2dcfc8a1944889cffbca052fd70e342bb698f453f964b41a3297a43b8a2a08235b263c8ccacb6f323b3cf64abc1a88f770d098f762f5049e33e8d324439b6cb8d376f81efd626eed2eac8f7d423988b0d3083da13c9298e734f98463015b4c688344449476aea947ced8f74e17e1242b5b8f7e99281bb4b3e7431fd8516130d657dc5be23a239f1644d9cbec403feae66d177598e4829aeb4cb9f9d781d3bf4e07981a6d49bb53e10951715dc6927142e86b5bd75f76948f982d5d2285b6e23ff1", 0xcb}], 0x1}}], 0x3, 0x24000091) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) 18.036909919s ago: executing program 3 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={0x0, 0x68}, 0x1, 0x7}, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0xa000032a) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) 18.000603589s ago: executing program 0 (id=20): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 17.82881027s ago: executing program 0 (id=21): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000380), &(0x7f0000000480)="c16aae5780f210425787ac0f7836f0c2ba73a676857f0ec61a1a5dca15e220c0aaa05aeea37b30eec8ec1b00e3dfd1a9b84e62fead7eb2921fd2b8fd74dbf5e529881f5b5d9569797bc922aa5ebf8d4dcabdb8771b449e0d1f58ea36b3b6ad84e2f1375782f6132ccc9d865e058b4974e9f84b9d931304408b4963db71e98651a09f78207503acf2a998f91b897e15bd66c54b1663f4980ac0c27fbb99d8450eaee8a8d5c15d3aac62b3705a68b9d52c950b6fc5adb26d3f70623e55870538ca", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}, &(0x7f0000000440)="adbbd11a13bc50c34e8e2c0ed401d2a1354c3e", 0x13}) 16.788783775s ago: executing program 1 (id=22): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f0000000480)="c16aae5780f210425787ac0f7836f0c2ba73a676857f0ec61a1a5dca15e220c0aaa05aeea37b30eec8ec1b00e3dfd1a9b84e62fead7eb2921fd2b8fd74dbf5e529881f5b5d9569797bc922aa5ebf8d4dcabdb8771b449e0d1f58ea36b3b6ad84e2f1375782f6132ccc9d865e058b4974e9f84b9d931304408b4963db71e98651a09f78207503acf2a998f91b897e15bd66c54b1663f4980ac0c27fbb99d8450eaee8a8d5c15d3aac62b3705a68b9d52c950b6fc5adb26d3f70623e55870538ca", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}, &(0x7f0000000440)="adbbd11a13bc50c34e8e2c0ed401d2a1354c3ed962de", 0x16}) 16.773850865s ago: executing program 0 (id=23): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 16.772307974s ago: executing program 3 (id=24): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x7005, 0x0) readv(r3, 0x0, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002c0002000000080004"], 0x44}}, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 16.557213125s ago: executing program 0 (id=25): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r4, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 16.557048725s ago: executing program 1 (id=26): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mount$9p_xen(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x1008, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 15.760836339s ago: executing program 1 (id=27): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x22e, &(0x7f0000000480)="$eJzs3T9rU10cB/Bfn7aPsSDpIBRF8IqLU2gr7i1SQQwoSgadLLZF6a0FCwUd2m6+CX0LOroKDuLqGxBBquBitw5CJN6kTWrappDkiv18lvzIOd/zJ7nkkiEn988tLc4tryxsbW1GoTAQQ1MxFdsDMRr/xWBkNhoFAPBP2K5W40c1k/daAID+cP8HgOOnw/v/rT4uCQDoMd//AeD4uXP33o3pcnnmdpIUIpaer1ZWK9lj1j69EI8ijfkYj2L8jKjuyOpr18sz40nN19GoLK3X8+urlcHW/EQUY7R9fiLJtOaHY6Se/zQS8zEZxTjdPj/ZNv9/XLrYNH8pivHxQSxHGnNRy+7m1yaS5OrN8p78id/9AAAAAAAAAAAAAAAAAAAAAACgF0rJjrbn95RK+7Vn+c7PB9p7Ps9QnB3Kd+8AAAAAAAAAAAAAAAAAAADwt1h5+mxxNk3nnxxUPP7w6t1hfTosBurzLg5HRDcGnE3TiNiojdnUdLI+zQGpUxe+vNhv5MGjvT7dLd6ez2HSoxbvNx+eubwydiW3Zfx5/Qw3Lq12qe/FiB6t53Wu70Vj14d2Hns5Nftm7fO3Tkfu56cQAAAAAAAAAAAAAAAAAAAQLb9vz3slAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCf3f//725RaHom7z0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCvAAAA//+cBJVw") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x0, 0x77f, &(0x7f0000000d00)="$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") setxattr$incfs_size(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x0) lgetxattr(0x0, &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) 15.711283039s ago: executing program 3 (id=28): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x4f) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) dup3(r4, r5, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x11, "0900e9ffffff00"}) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 15.40359336s ago: executing program 3 (id=29): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="3c00330080f700000802110000010802110000003250505050500000000000020000000000000000000001000406ff0f0000000000000000002a01005bbc8b16db29f7e9084c6918d3793ee8222617f2afeaad4d5b31e75f278a1489aae7f9d3dc6602ce57b0dec2c1ac7f9b359db7d9a664fad2c344a1111c18be9868b8c432f4638ca36bbf725901227e86ea44bd6fb010bf4260487562a016027bc094d6239ecaeb05cbaa33d657d5fa3d6ecc45d6d5c90111dcc7c66429de2b58a21fc5a3"], 0x58}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 3.370324986s ago: executing program 32 (id=15): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.320827317s ago: executing program 33 (id=16): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.066964426s ago: executing program 34 (id=25): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r4, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 39.89311ms ago: executing program 35 (id=27): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x22e, &(0x7f0000000480)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x0, 0x77f, &(0x7f0000000d00)="$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") setxattr$incfs_size(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x0) lgetxattr(0x0, &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) 0s ago: executing program 36 (id=29): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="3c00330080f700000802110000010802110000003250505050500000000000020000000000000000000001000406ff0f0000000000000000002a01005bbc8b16db29f7e9084c6918d3793ee8222617f2afeaad4d5b31e75f278a1489aae7f9d3dc6602ce57b0dec2c1ac7f9b359db7d9a664fad2c344a1111c18be9868b8c432f4638ca36bbf725901227e86ea44bd6fb010bf4260487562a016027bc094d6239ecaeb05cbaa33d657d5fa3d6ecc45d6d5c90111dcc7c66429de2b58a21fc5a3"], 0x58}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. [ 50.655082][ T4233] cgroup: Unknown subsys name 'net' [ 50.787682][ T4233] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.076159][ T4233] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.346623][ T4250] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.371977][ T4261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.373847][ T4252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.380207][ T4261] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.387651][ T4252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.394200][ T4261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.402307][ T4252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.408596][ T4261] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.416209][ T4252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.422212][ T4261] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.430893][ T4252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.443842][ T4261] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.444285][ T4252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.458452][ T4262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.459600][ T4252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.466851][ T4262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.473788][ T4252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.480848][ T4262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.487697][ T4252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.494568][ T4262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.501334][ T4252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.507808][ T4262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.515101][ T4252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.522380][ T4262] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.529352][ T4252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.535656][ T4262] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.543018][ T4252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.549435][ T4262] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.556682][ T4252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.571042][ T4263] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.983712][ T4246] chnl_net:caif_netlink_parms(): no params data found [ 54.050016][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 54.061505][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 54.105834][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 54.132911][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.140995][ T4246] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.149219][ T4246] device bridge_slave_0 entered promiscuous mode [ 54.192108][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.199398][ T4246] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.207864][ T4246] device bridge_slave_1 entered promiscuous mode [ 54.217935][ T4245] chnl_net:caif_netlink_parms(): no params data found [ 54.271862][ T4246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.310315][ T4246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.344018][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.351164][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.359004][ T4251] device bridge_slave_0 entered promiscuous mode [ 54.371887][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.379218][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.387564][ T4254] device bridge_slave_0 entered promiscuous mode [ 54.397614][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.404762][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.412400][ T4253] device bridge_slave_0 entered promiscuous mode [ 54.420174][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.427469][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.435723][ T4251] device bridge_slave_1 entered promiscuous mode [ 54.450564][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.457818][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.466307][ T4254] device bridge_slave_1 entered promiscuous mode [ 54.476221][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.483539][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.491311][ T4253] device bridge_slave_1 entered promiscuous mode [ 54.514173][ T4246] team0: Port device team_slave_0 added [ 54.550941][ T4246] team0: Port device team_slave_1 added [ 54.574089][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.585243][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.603350][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.620729][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.627995][ T4245] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.636273][ T4245] device bridge_slave_0 entered promiscuous mode [ 54.644801][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.655616][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.665948][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.675967][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.683293][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.709218][ T4246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.720978][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.728246][ T4245] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.736688][ T4245] device bridge_slave_1 entered promiscuous mode [ 54.765436][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.772397][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.798384][ T4246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.844386][ T4254] team0: Port device team_slave_0 added [ 54.867811][ T4253] team0: Port device team_slave_0 added [ 54.875825][ T4251] team0: Port device team_slave_0 added [ 54.883486][ T4253] team0: Port device team_slave_1 added [ 54.890745][ T4254] team0: Port device team_slave_1 added [ 54.905777][ T4245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.916633][ T4251] team0: Port device team_slave_1 added [ 54.924291][ T4245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.948697][ T4246] device hsr_slave_0 entered promiscuous mode [ 54.955686][ T4246] device hsr_slave_1 entered promiscuous mode [ 54.998509][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.005600][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.031682][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.058203][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.065242][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.092489][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.105238][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.112200][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.138571][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.150196][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.157433][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.183398][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.197127][ T4245] team0: Port device team_slave_0 added [ 55.209067][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.216288][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.242323][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.261969][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.268980][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.294969][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.307334][ T4245] team0: Port device team_slave_1 added [ 55.384203][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.391180][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.417507][ T4245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.431381][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.438595][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.464908][ T4245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.487351][ T4253] device hsr_slave_0 entered promiscuous mode [ 55.495023][ T4253] device hsr_slave_1 entered promiscuous mode [ 55.501456][ T4253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.509532][ T4253] Cannot create hsr debugfs directory [ 55.545963][ T4254] device hsr_slave_0 entered promiscuous mode [ 55.552974][ T4254] device hsr_slave_1 entered promiscuous mode [ 55.559400][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.567331][ T4254] Cannot create hsr debugfs directory [ 55.576083][ T4251] device hsr_slave_0 entered promiscuous mode [ 55.582976][ T4251] device hsr_slave_1 entered promiscuous mode [ 55.589416][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.597153][ T4251] Cannot create hsr debugfs directory [ 55.643555][ T4252] Bluetooth: hci3: command 0x0409 tx timeout [ 55.650206][ T4247] Bluetooth: hci0: command 0x0409 tx timeout [ 55.656507][ T4250] Bluetooth: hci2: command 0x0409 tx timeout [ 55.656524][ T4255] Bluetooth: hci4: command 0x0409 tx timeout [ 55.656694][ T4255] Bluetooth: hci1: command 0x0409 tx timeout [ 55.697186][ T4245] device hsr_slave_0 entered promiscuous mode [ 55.704303][ T4245] device hsr_slave_1 entered promiscuous mode [ 55.710749][ T4245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.718371][ T4245] Cannot create hsr debugfs directory [ 55.959862][ T4246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.984906][ T4246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.005665][ T4246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.022776][ T4246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.075099][ T4253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.091214][ T4253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.103603][ T4253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.118794][ T4253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.164617][ T4251] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.184476][ T4251] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.208382][ T4251] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.217887][ T4251] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.258105][ T4246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.286340][ T4245] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.295492][ T4245] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.320820][ T4245] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.330744][ T4245] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.344197][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.354907][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.374684][ T4246] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.408978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.418554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.427737][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.435027][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.444250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.456082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.464754][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.471824][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.480460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.499412][ T4254] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.510630][ T4254] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.522231][ T4254] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.551067][ T4254] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.560595][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.600102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.609005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.618547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.628185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.637125][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.645595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.667177][ T4246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.677781][ T4246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.701156][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.709997][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.719200][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.729677][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.738722][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.779364][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.796643][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.840591][ T4245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.850577][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.865079][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.880203][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.888219][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.896684][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.919735][ T4245] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.936763][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.949553][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.959228][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.974306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.988462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.998109][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.005254][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.018694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.027401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.036529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.045514][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.052670][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.063224][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.071832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.080842][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.087960][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.113977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.122099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.132277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.140899][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.148026][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.156273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.171135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.179766][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.186864][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.196402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.206109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.214671][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.221728][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.229817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.238887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.291926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.301057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.310140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.319915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.330208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.339372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.348320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.357397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.366292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.375736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.384828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.394652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.403190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.411720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.421298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.429933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.438782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.447386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.456526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.472093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.480488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.489159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.497585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.505771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.517100][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.532062][ T4246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.546433][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.556055][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.571344][ T4245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.584614][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.604350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.615162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.624349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.635302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.644569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.653412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.661621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.669831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.686396][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.705834][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.715163][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.731308][ T4255] Bluetooth: hci1: command 0x041b tx timeout [ 57.737756][ T4258] Bluetooth: hci2: command 0x041b tx timeout [ 57.737832][ T4252] Bluetooth: hci0: command 0x041b tx timeout [ 57.743789][ T4258] Bluetooth: hci3: command 0x041b tx timeout [ 57.743826][ T4258] Bluetooth: hci4: command 0x041b tx timeout [ 57.757342][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.776725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.785689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.794170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.803943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.831031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.867621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.879425][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.886615][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.900925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.910813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.925515][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.932669][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.947263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.958040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.982559][ T4246] device veth0_vlan entered promiscuous mode [ 58.005723][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.015188][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.033426][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.051248][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.067382][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.078187][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.105762][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.116802][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.126085][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.139290][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.153603][ T4246] device veth1_vlan entered promiscuous mode [ 58.191591][ T4254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.213270][ T4254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.251547][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.261480][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.271674][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.281413][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.291410][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.299437][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.317095][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.333173][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.341044][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.350432][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.375845][ T4245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.396275][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.413315][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.431712][ T4246] device veth0_macvtap entered promiscuous mode [ 58.449245][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.457207][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.466545][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.483298][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.494357][ T4246] device veth1_macvtap entered promiscuous mode [ 58.523965][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.532094][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.549380][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.571168][ T4245] device veth0_vlan entered promiscuous mode [ 58.587809][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.611858][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.622357][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.644268][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.653760][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.663226][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.672011][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.681848][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.691547][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.715739][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.728606][ T4245] device veth1_vlan entered promiscuous mode [ 58.747321][ T4251] device veth0_vlan entered promiscuous mode [ 58.761148][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.771319][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.779982][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.788983][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.799374][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.808426][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.817224][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.827192][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.835598][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.847527][ T4246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.857566][ T4246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.866711][ T4246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.876190][ T4246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.896618][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.930146][ T4251] device veth1_vlan entered promiscuous mode [ 58.947910][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.957697][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.968140][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.977352][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.999887][ T4245] device veth0_macvtap entered promiscuous mode [ 59.011556][ T4245] device veth1_macvtap entered promiscuous mode [ 59.057122][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.066175][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.076853][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.085603][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.095804][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.104649][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.113872][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.131039][ T4254] device veth0_vlan entered promiscuous mode [ 59.158980][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.169902][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.178850][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.187629][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.211040][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.223630][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.238078][ T4253] device veth0_vlan entered promiscuous mode [ 59.254044][ T4254] device veth1_vlan entered promiscuous mode [ 59.266668][ T4251] device veth0_macvtap entered promiscuous mode [ 59.279502][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.289979][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.298341][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.317361][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.328936][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.342881][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.355287][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.366392][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.377717][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.386688][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.395017][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.403806][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.412412][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.422100][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.430915][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.459804][ T4251] device veth1_macvtap entered promiscuous mode [ 59.473415][ T4245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.482154][ T4245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.491687][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.496427][ T4245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.506772][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.509356][ T4245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.536098][ T4253] device veth1_vlan entered promiscuous mode [ 59.566728][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.576394][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.584734][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.593344][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.609021][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.618459][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.636226][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.647517][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.658037][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.669087][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.681186][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.692410][ T4254] device veth0_macvtap entered promiscuous mode [ 59.705058][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.717633][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.726783][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.739040][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.749934][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.761743][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.772475][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.784372][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.800103][ T4254] device veth1_macvtap entered promiscuous mode [ 59.807163][ T4250] Bluetooth: hci4: command 0x040f tx timeout [ 59.807194][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 59.813251][ T4250] Bluetooth: hci0: command 0x040f tx timeout [ 59.813281][ T4250] Bluetooth: hci2: command 0x040f tx timeout [ 59.813324][ T4250] Bluetooth: hci3: command 0x040f tx timeout [ 59.843018][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.852103][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.859698][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.860393][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.879685][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.893331][ T4251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.902051][ T4251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.910935][ T4251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.922266][ T4251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.943387][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.966393][ T4253] device veth0_macvtap entered promiscuous mode [ 60.003140][ T4253] device veth1_macvtap entered promiscuous mode [ 60.010948][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.023730][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.032411][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.041433][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.059934][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.071423][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.075038][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.081454][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.095813][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.100037][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.117121][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.128070][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.139834][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.153472][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.164597][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.174943][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.185504][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.195517][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.207008][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.218097][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.235996][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.288717][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.304574][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.313684][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.329937][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.345248][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.378898][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.390871][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.405218][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.417632][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.431722][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.446724][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.460961][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.474391][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.485056][ T4254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.494180][ T4254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.503179][ T4254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.511947][ T4254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.622027][ T4326] hub 6-0:1.0: USB hub found [ 60.628433][ T4326] hub 6-0:1.0: 1 port detected [ 60.964106][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.090465][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.149516][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.173982][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.206913][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.243530][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.254362][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.264992][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.275011][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.285484][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.297715][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.312173][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.320786][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.328779][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.344611][ T4330] Zero length message leads to an empty skb [ 61.352074][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.361915][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.385462][ T4253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.395393][ T4253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.405467][ T4253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.414367][ T4253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.445685][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.455391][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.522742][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.585050][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.629860][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.629991][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.667418][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.681226][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.726441][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.745669][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.755104][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.792401][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.806737][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.840118][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.855013][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.864913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.883139][ T4250] Bluetooth: hci3: command 0x0419 tx timeout [ 61.884421][ T4255] Bluetooth: hci1: command 0x0419 tx timeout [ 61.889181][ T4250] Bluetooth: hci2: command 0x0419 tx timeout [ 61.895405][ T4258] Bluetooth: hci0: command 0x0419 tx timeout [ 61.901132][ T4252] Bluetooth: hci4: command 0x0419 tx timeout [ 61.940742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.950850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.080845][ T4340] xt_TPROXY: Can be used only with -p tcp or -p udp [ 63.413216][ T4345] can0: slcan on pts0. [ 63.654736][ T4338] can0 (unregistered): slcan off pts0. [ 63.781962][ T4365] loop2: detected capacity change from 0 to 16 [ 63.868757][ T4365] erofs: (device loop2): mounted with root inode @ nid 36. [ 64.074332][ T4365] overlayfs: missing 'lowerdir' [ 65.925385][ T4387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 67.128874][ T4423] loop0: detected capacity change from 0 to 16 [ 67.151078][ T4423] erofs: (device loop0): mounted with root inode @ nid 36. [ 67.180177][ T4423] overlayfs: missing 'lowerdir' [ 68.156493][ T4444] loop1: detected capacity change from 0 to 256 [ 68.169850][ T4444] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.194841][ T4444] process 'syz.1.27' launched './file1' with NULL argv: empty string added [ 68.336934][ T4446] can0: slcan on pts0. [ 68.393122][ T4445] can0 (unregistered): slcan off pts0. [ 68.647834][ T4451] xt_TPROXY: Can be used only with -p tcp or -p udp [ 71.245300][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.251827][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.372152][ T22] cfg80211: failed to load regulatory.db [ 132.686166][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.692642][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 175.723425][ T4250] Bluetooth: hci1: command 0x0406 tx timeout [ 175.729531][ T4250] Bluetooth: hci4: command 0x0406 tx timeout [ 175.735484][ T4252] Bluetooth: hci2: command 0x0406 tx timeout [ 175.735574][ T4247] Bluetooth: hci0: command 0x0406 tx timeout [ 194.127850][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.134220][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 214.602733][ T27] INFO: task kworker/u4:1:11 blocked for more than 143 seconds. [ 214.610556][ T27] Not tainted 6.1.119-syzkaller #0 [ 214.616554][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 214.625321][ T27] task:kworker/u4:1 state:D stack:21848 pid:11 ppid:2 flags:0x00004000 [ 214.634625][ T27] Workqueue: nfc2_nci_cmd_wq nci_cmd_work [ 214.640953][ T27] Call Trace: [ 214.646258][ T27] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 214.649226][ T27] __schedule+0x143f/0x4570 [ 214.653859][ T27] ? __mutex_lock+0x6b4/0xd80 [ 214.662688][ T27] ? release_firmware_map_entry+0x186/0x186 [ 214.668629][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 214.674225][ T27] ? wq_worker_sleeping+0x5f/0x270 [ 214.679353][ T27] schedule+0xbf/0x180 [ 214.732619][ T27] schedule_preempt_disabled+0xf/0x20 [ 214.738051][ T27] __mutex_lock+0x6b9/0xd80 [ 214.747715][ T27] ? __mutex_lock+0x53c/0xd80 [ 214.752432][ T27] ? virtual_nci_send+0x1c/0xd0 [ 214.757587][ T27] ? mutex_lock_nested+0x10/0x10 [ 214.762910][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 214.768831][ T27] ? do_raw_read_unlock+0x38/0x70 [ 214.774247][ T27] ? _raw_read_unlock+0x24/0x40 [ 214.779118][ T27] ? nfc_send_to_raw_sock+0x219/0x240 [ 214.785521][ T27] ? kfree_skb_reason+0x186/0x390 [ 214.791176][ T27] virtual_nci_send+0x1c/0xd0 [ 214.796125][ T27] nci_cmd_work+0xa4/0x2a0 [ 214.800549][ T27] ? process_one_work+0x886/0x11d0 [ 214.805792][ T27] ? process_one_work+0x7a9/0x11d0 [ 214.810924][ T27] process_one_work+0x8a9/0x11d0 [ 214.816048][ T27] ? worker_detach_from_pool+0x260/0x260 [ 214.821689][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 214.827281][ T27] ? kthread_data+0x4e/0xc0 [ 214.831830][ T27] ? wq_worker_running+0x97/0x190 [ 214.836906][ T27] worker_thread+0xa47/0x1200 [ 214.841613][ T27] kthread+0x28d/0x320 [ 214.845716][ T27] ? worker_clr_flags+0x190/0x190 [ 214.850746][ T27] ? kthread_blkcg+0xd0/0xd0 [ 214.855404][ T27] ret_from_fork+0x1f/0x30 [ 214.859861][ T27] [ 214.863041][ T27] INFO: task udevd:3622 blocked for more than 143 seconds. [ 214.870248][ T27] Not tainted 6.1.119-syzkaller #0 [ 214.875911][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 214.884632][ T27] task:udevd state:D stack:24776 pid:3622 ppid:1 flags:0x00004002 [ 214.894590][ T27] Call Trace: [ 214.897878][ T27] [ 214.900794][ T27] __schedule+0x143f/0x4570 [ 214.905385][ T27] ? __mutex_lock+0x6b4/0xd80 [ 214.910077][ T27] ? release_firmware_map_entry+0x186/0x186 [ 214.916048][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 214.921967][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 214.927330][ T27] schedule+0xbf/0x180 [ 214.931423][ T27] schedule_preempt_disabled+0xf/0x20 [ 214.936833][ T27] __mutex_lock+0x6b9/0xd80 [ 214.941345][ T27] ? __mutex_lock+0x53c/0xd80 [ 214.946078][ T27] ? uevent_show+0x176/0x330 [ 214.950670][ T27] ? mutex_lock_nested+0x10/0x10 [ 214.955649][ T27] uevent_show+0x176/0x330 [ 214.960067][ T27] dev_attr_show+0x50/0xb0 [ 214.964530][ T27] ? device_get_ownership+0xa0/0xa0 [ 214.969735][ T27] sysfs_kf_seq_show+0x32d/0x4b0 [ 214.974951][ T27] seq_read_iter+0x43a/0xd10 [ 214.979572][ T27] vfs_read+0x88d/0xbf0 [ 214.983781][ T27] ? kernel_read+0x1f0/0x1f0 [ 214.988371][ T27] ? kmem_cache_free+0x292/0x510 [ 214.993979][ T27] ? __ia32_sys_newlstat+0x180/0x180 [ 214.999278][ T27] ? __fdget_pos+0x2c1/0x360 [ 215.003973][ T27] ksys_read+0x19c/0x2c0 [ 215.008222][ T27] ? print_irqtrace_events+0x210/0x210 [ 215.013726][ T27] ? vfs_write+0xbc0/0xbc0 [ 215.018146][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 215.024175][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 215.029372][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 215.035488][ T27] do_syscall_64+0x3b/0xb0 [ 215.039920][ T27] ? clear_bhb_loop+0x45/0xa0 [ 215.044803][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.050720][ T27] RIP: 0033:0x7f780a116b6a [ 215.055202][ T27] RSP: 002b:00007ffdb3ebd088 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.063654][ T27] RAX: ffffffffffffffda RBX: 0000557a8e4a3080 RCX: 00007f780a116b6a [ 215.071695][ T27] RDX: 0000000000001000 RSI: 0000557a8e49cda0 RDI: 000000000000000c [ 215.079697][ T27] RBP: 0000557a8e4a3080 R08: 000000000000000c R09: 0000000000004000 [ 215.087765][ T27] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 215.096365][ T27] R13: 0000000000003fff R14: 00007ffdb3ebd568 R15: 000000000000000a [ 215.104401][ T27] [ 215.107452][ T27] INFO: task syz.2.15:4383 blocked for more than 143 seconds. [ 215.114965][ T27] Not tainted 6.1.119-syzkaller #0 [ 215.120595][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 215.129340][ T27] task:syz.2.15 state:D stack:24792 pid:4383 ppid:4254 flags:0x00004004 [ 215.138600][ T27] Call Trace: [ 215.141866][ T27] [ 215.144931][ T27] __schedule+0x143f/0x4570 [ 215.149476][ T27] ? __mutex_lock+0x6b4/0xd80 [ 215.154233][ T27] ? release_firmware_map_entry+0x186/0x186 [ 215.160136][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 215.165685][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 215.170901][ T27] schedule+0xbf/0x180 [ 215.175062][ T27] schedule_preempt_disabled+0xf/0x20 [ 215.180449][ T27] __mutex_lock+0x6b9/0xd80 [ 215.185007][ T27] ? __mutex_lock+0x53c/0xd80 [ 215.189690][ T27] ? nfc_register_device+0x98/0x310 [ 215.194939][ T27] ? mutex_lock_nested+0x10/0x10 [ 215.200311][ T27] ? _raw_spin_unlock+0x24/0x40 [ 215.205240][ T27] ? nfc_llcp_register_device+0x7aa/0x890 [ 215.210995][ T27] nfc_register_device+0x98/0x310 [ 215.216062][ T27] nci_register_device+0x7be/0x900 [ 215.221181][ T27] ? nci_free_device+0x90/0x90 [ 215.225980][ T27] ? nci_hci_allocate+0x1dd/0x2a0 [ 215.231010][ T27] ? nci_allocate_device+0x248/0x350 [ 215.236343][ T27] virtual_ncidev_open+0x55/0xc0 [ 215.241307][ T27] ? virtual_ncidev_ioctl+0x90/0x90 [ 215.246587][ T27] misc_open+0x304/0x380 [ 215.250853][ T27] chrdev_open+0x54a/0x630 [ 215.255477][ T27] ? cd_forget+0x160/0x160 [ 215.259921][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 215.265202][ T27] ? fsnotify_perm+0x472/0x590 [ 215.269981][ T27] ? cd_forget+0x160/0x160 [ 215.274453][ T27] do_dentry_open+0x7f9/0x10f0 [ 215.279233][ T27] path_openat+0x2644/0x2e60 [ 215.283927][ T27] ? mark_lock+0x9a/0x340 [ 215.288283][ T27] ? do_filp_open+0x480/0x480 [ 215.293040][ T27] do_filp_open+0x230/0x480 [ 215.297565][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 215.302683][ T27] ? _raw_spin_unlock+0x24/0x40 [ 215.307551][ T27] ? alloc_fd+0x5a0/0x640 [ 215.311868][ T27] do_sys_openat2+0x13b/0x4f0 [ 215.316644][ T27] ? security_bpf+0x7d/0xa0 [ 215.321154][ T27] ? do_sys_open+0x220/0x220 [ 215.325808][ T27] __x64_sys_openat+0x243/0x290 [ 215.330718][ T27] ? __ia32_sys_open+0x270/0x270 [ 215.335745][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 215.341731][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 215.346976][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 215.353018][ T27] do_syscall_64+0x3b/0xb0 [ 215.357442][ T27] ? clear_bhb_loop+0x45/0xa0 [ 215.362107][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.368134][ T27] RIP: 0033:0x7f8fb4d7e819 [ 215.372619][ T27] RSP: 002b:00007f8fb5aa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 215.381044][ T27] RAX: ffffffffffffffda RBX: 00007f8fb4f35fa0 RCX: 00007f8fb4d7e819 [ 215.389053][ T27] RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 215.397073][ T27] RBP: 00007f8fb4df175e R08: 0000000000000000 R09: 0000000000000000 [ 215.405757][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.413810][ T27] R13: 0000000000000000 R14: 00007f8fb4f35fa0 R15: 00007ffe20a2cd58 [ 215.421807][ T27] [ 215.424901][ T27] INFO: task syz.2.15:4387 blocked for more than 144 seconds. [ 215.432370][ T27] Not tainted 6.1.119-syzkaller #0 [ 215.438667][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 215.447644][ T27] task:syz.2.15 state:D stack:25600 pid:4387 ppid:4254 flags:0x00004004 [ 215.456913][ T27] Call Trace: [ 215.460214][ T27] [ 215.463184][ T27] __schedule+0x143f/0x4570 [ 215.467708][ T27] ? __mutex_lock+0x6b4/0xd80 [ 215.472372][ T27] ? release_firmware_map_entry+0x186/0x186 [ 215.478397][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 215.483910][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 215.489098][ T27] schedule+0xbf/0x180 [ 215.493241][ T27] schedule_preempt_disabled+0xf/0x20 [ 215.498637][ T27] __mutex_lock+0x6b9/0xd80 [ 215.503237][ T27] ? __mutex_lock+0x53c/0xd80 [ 215.508372][ T27] ? virtual_nci_close+0x13/0x40 [ 215.513392][ T27] ? mutex_lock_nested+0x10/0x10 [ 215.518427][ T27] ? _raw_spin_unlock+0x40/0x40 [ 215.523348][ T27] ? skb_queue_purge+0x192/0x1c0 [ 215.528308][ T27] virtual_nci_close+0x13/0x40 [ 215.533223][ T27] nci_dev_up+0x954/0xd40 [ 215.537567][ T27] ? nci_core_ntf_packet+0x180/0x180 [ 215.542920][ T27] ? nfc_get_device+0x94/0xf0 [ 215.547628][ T27] ? nfc_release+0x2d0/0x2d0 [ 215.552223][ T27] nfc_dev_up+0x185/0x330 [ 215.556615][ T27] nfc_genl_dev_up+0x80/0xd0 [ 215.561217][ T27] genl_rcv_msg+0xc1a/0xf70 [ 215.565834][ T27] ? genl_bind+0x400/0x400 [ 215.570455][ T27] ? read_lock_is_recursive+0x10/0x10 [ 215.575917][ T27] ? nfc_genl_dump_devices_done+0x60/0x60 [ 215.581656][ T27] netlink_rcv_skb+0x1cd/0x410 [ 215.586574][ T27] ? genl_bind+0x400/0x400 [ 215.591032][ T27] ? netlink_ack+0x1290/0x1290 [ 215.595889][ T27] genl_rcv+0x24/0x40 [ 215.599885][ T27] netlink_unicast+0x7d8/0x970 [ 215.604756][ T27] ? netlink_detachskb+0x90/0x90 [ 215.610166][ T27] ? __virt_addr_valid+0x45b/0x530 [ 215.615365][ T27] ? __phys_addr_symbol+0x2b/0x70 [ 215.620410][ T27] ? __check_object_size+0x4dd/0xa30 [ 215.625830][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 215.630957][ T27] netlink_sendmsg+0xa26/0xd60 [ 215.635872][ T27] ? netlink_getsockopt+0x580/0x580 [ 215.641078][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 215.646228][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 215.651520][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 215.657190][ T27] ? netlink_getsockopt+0x580/0x580 [ 215.662406][ T27] ____sys_sendmsg+0x5a5/0x8f0 [ 215.667257][ T27] ? __sys_sendmsg_sock+0x30/0x30 [ 215.672315][ T27] __sys_sendmsg+0x2a9/0x390 [ 215.676970][ T27] ? ____sys_sendmsg+0x8f0/0x8f0 [ 215.681923][ T27] ? __sys_recvfrom+0x417/0x4d0 [ 215.686867][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 215.693021][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 215.699013][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 215.704267][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 215.710694][ T27] do_syscall_64+0x3b/0xb0 [ 215.715198][ T27] ? clear_bhb_loop+0x45/0xa0 [ 215.719883][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.726006][ T27] RIP: 0033:0x7f8fb4d7e819 [ 215.730428][ T27] RSP: 002b:00007f8fb4bff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.738893][ T27] RAX: ffffffffffffffda RBX: 00007f8fb4f36080 RCX: 00007f8fb4d7e819 [ 215.746915][ T27] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006 [ 215.755020][ T27] RBP: 00007f8fb4df175e R08: 0000000000000000 R09: 0000000000000000 [ 215.763073][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.771047][ T27] R13: 0000000000000000 R14: 00007f8fb4f36080 R15: 00007ffe20a2cd58 [ 215.779072][ T27] [ 215.782115][ T27] INFO: task syz.4.16:4390 blocked for more than 144 seconds. [ 215.789655][ T27] Not tainted 6.1.119-syzkaller #0 [ 215.795401][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 215.804224][ T27] task:syz.4.16 state:D stack:27560 pid:4390 ppid:4253 flags:0x00004004 [ 215.814416][ T27] Call Trace: [ 215.817807][ T27] [ 215.820751][ T27] __schedule+0x143f/0x4570 [ 215.825480][ T27] ? __mutex_lock+0x6b4/0xd80 [ 215.830182][ T27] ? release_firmware_map_entry+0x186/0x186 [ 215.836127][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 215.841602][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 215.846845][ T27] schedule+0xbf/0x180 [ 215.850926][ T27] schedule_preempt_disabled+0xf/0x20 [ 215.856341][ T27] __mutex_lock+0x6b9/0xd80 [ 215.860850][ T27] ? __mutex_lock+0x53c/0xd80 [ 215.865574][ T27] ? misc_open+0x58/0x380 [ 215.869903][ T27] ? mutex_lock_nested+0x10/0x10 [ 215.874891][ T27] ? kobject_get_unless_zero+0x229/0x320 [ 215.880535][ T27] misc_open+0x58/0x380 [ 215.884774][ T27] chrdev_open+0x54a/0x630 [ 215.889205][ T27] ? cd_forget+0x160/0x160 [ 215.893674][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 215.898891][ T27] ? fsnotify_perm+0x472/0x590 [ 215.903730][ T27] ? cd_forget+0x160/0x160 [ 215.908170][ T27] do_dentry_open+0x7f9/0x10f0 [ 215.913096][ T27] path_openat+0x2644/0x2e60 [ 215.918115][ T27] ? mark_lock+0x9a/0x340 [ 215.922473][ T27] ? do_filp_open+0x480/0x480 [ 215.927225][ T27] do_filp_open+0x230/0x480 [ 215.931734][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 215.936402][ T27] ? _raw_spin_unlock+0x24/0x40 [ 215.941262][ T27] ? alloc_fd+0x5a0/0x640 [ 215.945653][ T27] do_sys_openat2+0x13b/0x4f0 [ 215.950347][ T27] ? security_bpf+0x7d/0xa0 [ 215.954941][ T27] ? do_sys_open+0x220/0x220 [ 215.959553][ T27] ? do_seccomp+0xd81/0xf70 [ 215.964145][ T27] __x64_sys_openat+0x243/0x290 [ 215.969006][ T27] ? __ia32_sys_open+0x270/0x270 [ 215.974025][ T27] ? syscall_enter_from_user_mode+0xcf/0x230 [ 215.980013][ T27] do_syscall_64+0x3b/0xb0 [ 215.984484][ T27] ? clear_bhb_loop+0x45/0xa0 [ 215.989351][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.995304][ T27] RIP: 0033:0x7f156a17e819 [ 215.999721][ T27] RSP: 002b:00007f156af44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 216.008177][ T27] RAX: ffffffffffffffda RBX: 00007f156a335fa0 RCX: 00007f156a17e819 [ 216.016798][ T27] RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 216.024972][ T27] RBP: 00007f156a1f175e R08: 0000000000000000 R09: 0000000000000000 [ 216.033005][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.041153][ T27] R13: 0000000000000000 R14: 00007f156a335fa0 R15: 00007ffcf143db88 [ 216.049204][ T27] [ 216.052275][ T27] INFO: task syz.4.16:4393 blocked for more than 144 seconds. [ 216.059885][ T27] Not tainted 6.1.119-syzkaller #0 [ 216.065563][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 216.074310][ T27] task:syz.4.16 state:D stack:26456 pid:4393 ppid:4253 flags:0x00004004 [ 216.083584][ T27] Call Trace: [ 216.086871][ T27] [ 216.089815][ T27] __schedule+0x143f/0x4570 [ 216.094412][ T27] ? __mutex_lock+0x6b4/0xd80 [ 216.099096][ T27] ? release_firmware_map_entry+0x186/0x186 [ 216.105033][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 216.110530][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 216.115786][ T27] schedule+0xbf/0x180 [ 216.120349][ T27] schedule_preempt_disabled+0xf/0x20 [ 216.125839][ T27] __mutex_lock+0x6b9/0xd80 [ 216.130362][ T27] ? __mutex_lock+0x53c/0xd80 [ 216.135241][ T27] ? genl_rcv_msg+0x125/0xf70 [ 216.139949][ T27] ? mutex_lock_nested+0x10/0x10 [ 216.145084][ T27] ? reacquire_held_locks+0x660/0x660 [ 216.150472][ T27] ? radix_tree_lookup+0x234/0x280 [ 216.155638][ T27] genl_rcv_msg+0x125/0xf70 [ 216.160184][ T27] ? __lock_acquire+0x125b/0x1f80 [ 216.165289][ T27] ? genl_bind+0x400/0x400 [ 216.169726][ T27] ? read_lock_is_recursive+0x10/0x10 [ 216.175177][ T27] ? __might_sleep+0xb0/0xb0 [ 216.179781][ T27] netlink_rcv_skb+0x1cd/0x410 [ 216.184596][ T27] ? genl_bind+0x400/0x400 [ 216.189049][ T27] ? netlink_ack+0x1290/0x1290 [ 216.193895][ T27] genl_rcv+0x24/0x40 [ 216.197976][ T27] netlink_unicast+0x7d8/0x970 [ 216.202831][ T27] ? netlink_detachskb+0x90/0x90 [ 216.207789][ T27] ? __virt_addr_valid+0x45b/0x530 [ 216.212975][ T27] ? __phys_addr_symbol+0x2b/0x70 [ 216.218009][ T27] ? __check_object_size+0x4dd/0xa30 [ 216.223984][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 216.229115][ T27] netlink_sendmsg+0xa26/0xd60 [ 216.233947][ T27] ? netlink_getsockopt+0x580/0x580 [ 216.239151][ T27] ? __might_fault+0xa1/0x110 [ 216.243950][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 216.248918][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 216.254272][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 216.259735][ T27] ? netlink_getsockopt+0x580/0x580 [ 216.265023][ T27] __sys_sendto+0x480/0x600 [ 216.269538][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 216.274985][ T27] ? fpregs_activate+0xc0/0x260 [ 216.279846][ T27] __x64_sys_sendto+0xda/0xf0 [ 216.284579][ T27] do_syscall_64+0x3b/0xb0 [ 216.289000][ T27] ? clear_bhb_loop+0x45/0xa0 [ 216.293744][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.299646][ T27] RIP: 0033:0x7f156a1806ac [ 216.304201][ T27] RSP: 002b:00007f156af21ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 216.312698][ T27] RAX: ffffffffffffffda RBX: 00007f156af21fc0 RCX: 00007f156a1806ac [ 216.320675][ T27] RDX: 000000000000001c RSI: 00007f156af22010 RDI: 0000000000000006 [ 216.329417][ T27] RBP: 0000000000000000 R08: 00007f156af21f14 R09: 000000000000000c [ 216.337482][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 216.345530][ T27] R13: 00007f156af21f68 R14: 00007f156af22010 R15: 0000000000000000 [ 216.353656][ T27] [ 216.356683][ T27] INFO: task syz.0.25:4435 blocked for more than 145 seconds. [ 216.364190][ T27] Not tainted 6.1.119-syzkaller #0 [ 216.369817][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 216.378571][ T27] task:syz.0.25 state:D stack:25352 pid:4435 ppid:4246 flags:0x00004004 [ 216.387817][ T27] Call Trace: [ 216.391081][ T27] [ 216.394053][ T27] __schedule+0x143f/0x4570 [ 216.398580][ T27] ? __mutex_lock+0x6b4/0xd80 [ 216.403316][ T27] ? release_firmware_map_entry+0x186/0x186 [ 216.409236][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 216.414741][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 216.419945][ T27] schedule+0xbf/0x180 [ 216.424085][ T27] schedule_preempt_disabled+0xf/0x20 [ 216.429904][ T27] __mutex_lock+0x6b9/0xd80 [ 216.434483][ T27] ? __mutex_lock+0x53c/0xd80 [ 216.439166][ T27] ? genl_rcv_msg+0x125/0xf70 [ 216.443902][ T27] ? mutex_lock_nested+0x10/0x10 [ 216.448838][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 216.454873][ T27] ? print_irqtrace_events+0x210/0x210 [ 216.460339][ T27] ? radix_tree_lookup+0x234/0x280 [ 216.465634][ T27] genl_rcv_msg+0x125/0xf70 [ 216.470177][ T27] ? __lock_acquire+0x125b/0x1f80 [ 216.475305][ T27] ? genl_bind+0x400/0x400 [ 216.479771][ T27] ? read_lock_is_recursive+0x10/0x10 [ 216.485217][ T27] ? __might_sleep+0xb0/0xb0 [ 216.489821][ T27] ? ref_tracker_free+0x638/0x7d0 [ 216.494941][ T27] ? memcpy+0x3c/0x60 [ 216.498928][ T27] ? refcount_inc+0x80/0x80 [ 216.503480][ T27] ? __copy_skb_header+0x47b/0x600 [ 216.508691][ T27] netlink_rcv_skb+0x1cd/0x410 [ 216.513509][ T27] ? genl_bind+0x400/0x400 [ 216.517935][ T27] ? netlink_ack+0x1290/0x1290 [ 216.522826][ T27] genl_rcv+0x24/0x40 [ 216.526992][ T27] netlink_unicast+0x7d8/0x970 [ 216.532188][ T27] ? netlink_detachskb+0x90/0x90 [ 216.537184][ T27] ? __virt_addr_valid+0x45b/0x530 [ 216.542341][ T27] ? __phys_addr_symbol+0x2b/0x70 [ 216.547417][ T27] ? __check_object_size+0x4dd/0xa30 [ 216.552761][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 216.557878][ T27] netlink_sendmsg+0xa26/0xd60 [ 216.562705][ T27] ? netlink_getsockopt+0x580/0x580 [ 216.567912][ T27] ? __might_fault+0xa1/0x110 [ 216.572722][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 216.577691][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 216.583042][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 216.588508][ T27] ? netlink_getsockopt+0x580/0x580 [ 216.593760][ T27] __sys_sendto+0x480/0x600 [ 216.598302][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 216.603776][ T27] __x64_sys_sendto+0xda/0xf0 [ 216.608462][ T27] do_syscall_64+0x3b/0xb0 [ 216.612925][ T27] ? clear_bhb_loop+0x45/0xa0 [ 216.617638][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.624127][ T27] RIP: 0033:0x7fefa11806ac [ 216.628545][ T27] RSP: 002b:00007fefa1fa6ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 216.637619][ T27] RAX: ffffffffffffffda RBX: 00007fefa1fa6fc0 RCX: 00007fefa11806ac [ 216.645674][ T27] RDX: 0000000000000024 RSI: 00007fefa1fa7010 RDI: 0000000000000006 [ 216.653706][ T27] RBP: 0000000000000000 R08: 00007fefa1fa6f14 R09: 000000000000000c [ 216.661677][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 216.669715][ T27] R13: 00007fefa1fa6f68 R14: 00007fefa1fa7010 R15: 0000000000000000 [ 216.677745][ T27] [ 216.680762][ T27] INFO: task syz.0.25:4437 blocked for more than 145 seconds. [ 216.688516][ T27] Not tainted 6.1.119-syzkaller #0 [ 216.694206][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 216.702938][ T27] task:syz.0.25 state:D stack:26616 pid:4437 ppid:4246 flags:0x00004004 [ 216.712160][ T27] Call Trace: [ 216.715510][ T27] [ 216.718461][ T27] __schedule+0x143f/0x4570 [ 216.723044][ T27] ? __mutex_lock+0x6b4/0xd80 [ 216.727748][ T27] ? release_firmware_map_entry+0x186/0x186 [ 216.734352][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 216.739834][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 216.745100][ T27] schedule+0xbf/0x180 [ 216.749178][ T27] schedule_preempt_disabled+0xf/0x20 [ 216.754587][ T27] __mutex_lock+0x6b9/0xd80 [ 216.759110][ T27] ? __mutex_lock+0x53c/0xd80 [ 216.764026][ T27] ? genl_rcv_msg+0x125/0xf70 [ 216.768727][ T27] ? mutex_lock_nested+0x10/0x10 [ 216.773708][ T27] ? rcu_preempt_deferred_qs_irqrestore+0x873/0xc50 [ 216.780303][ T27] ? radix_tree_lookup+0x234/0x280 [ 216.785496][ T27] genl_rcv_msg+0x125/0xf70 [ 216.790018][ T27] ? genl_bind+0x400/0x400 [ 216.794579][ T27] ? print_irqtrace_events+0x210/0x210 [ 216.800060][ T27] ? mark_lock+0x9a/0x340 [ 216.804460][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 216.810449][ T27] ? print_irqtrace_events+0x210/0x210 [ 216.815965][ T27] ? rcu_is_watching+0x11/0xb0 [ 216.820733][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 216.826422][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 216.831623][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 216.837821][ T27] ? netlink_rcv_skb+0x178/0x410 [ 216.842834][ T27] netlink_rcv_skb+0x1cd/0x410 [ 216.847636][ T27] ? genl_bind+0x400/0x400 [ 216.852151][ T27] ? netlink_ack+0x1290/0x1290 [ 216.857087][ T27] ? __rcu_read_unlock+0x92/0x100 [ 216.862303][ T27] genl_rcv+0x24/0x40 [ 216.866366][ T27] netlink_unicast+0x7d8/0x970 [ 216.871142][ T27] ? netlink_detachskb+0x90/0x90 [ 216.876138][ T27] ? __virt_addr_valid+0x45b/0x530 [ 216.881261][ T27] ? __phys_addr_symbol+0x2b/0x70 [ 216.886317][ T27] ? __check_object_size+0x4dd/0xa30 [ 216.891611][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 216.896796][ T27] netlink_sendmsg+0xa26/0xd60 [ 216.901580][ T27] ? netlink_getsockopt+0x580/0x580 [ 216.906930][ T27] ? __might_fault+0xa1/0x110 [ 216.911614][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 216.916689][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 216.921978][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 216.927566][ T27] ? netlink_getsockopt+0x580/0x580 [ 216.932842][ T27] __sys_sendto+0x480/0x600 [ 216.937369][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 216.943453][ T27] ? preempt_schedule+0xd9/0xe0 [ 216.948323][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 216.953745][ T27] ? print_irqtrace_events+0x210/0x210 [ 216.959216][ T27] __x64_sys_sendto+0xda/0xf0 [ 216.963943][ T27] do_syscall_64+0x3b/0xb0 [ 216.968378][ T27] ? clear_bhb_loop+0x45/0xa0 [ 216.973155][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.979067][ T27] RIP: 0033:0x7fefa11806ac [ 216.983533][ T27] RSP: 002b:00007fefa1f85ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 216.991951][ T27] RAX: ffffffffffffffda RBX: 00007fefa1f85fc0 RCX: 00007fefa11806ac [ 216.999963][ T27] RDX: 0000000000000024 RSI: 00007fefa1f86010 RDI: 0000000000000009 [ 217.008016][ T27] RBP: 0000000000000000 R08: 00007fefa1f85f14 R09: 000000000000000c [ 217.016159][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 217.024187][ T27] R13: 00007fefa1f85f68 R14: 00007fefa1f86010 R15: 0000000000000000 [ 217.032166][ T27] [ 217.035241][ T27] INFO: task syz.1.27:4444 blocked for more than 145 seconds. [ 217.043955][ T27] Not tainted 6.1.119-syzkaller #0 [ 217.049591][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 217.058293][ T27] task:syz.1.27 state:D stack:25352 pid:4444 ppid:4251 flags:0x00004004 [ 217.067548][ T27] Call Trace: [ 217.070824][ T27] [ 217.073799][ T27] __schedule+0x143f/0x4570 [ 217.078322][ T27] ? __mutex_lock+0x6b4/0xd80 [ 217.083061][ T27] ? release_firmware_map_entry+0x186/0x186 [ 217.088970][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 217.094520][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 217.099736][ T27] schedule+0xbf/0x180 [ 217.103882][ T27] schedule_preempt_disabled+0xf/0x20 [ 217.109254][ T27] __mutex_lock+0x6b9/0xd80 [ 217.113804][ T27] ? __mutex_lock+0x53c/0xd80 [ 217.118477][ T27] ? misc_open+0x58/0x380 [ 217.122960][ T27] ? mutex_lock_nested+0x10/0x10 [ 217.127911][ T27] misc_open+0x58/0x380 [ 217.132055][ T27] chrdev_open+0x54a/0x630 [ 217.136541][ T27] ? cd_forget+0x160/0x160 [ 217.140965][ T27] ? fsnotify_perm+0x472/0x590 [ 217.146290][ T27] ? cd_forget+0x160/0x160 [ 217.150717][ T27] do_dentry_open+0x7f9/0x10f0 [ 217.155564][ T27] path_openat+0x2644/0x2e60 [ 217.160159][ T27] ? mark_lock+0x9a/0x340 [ 217.164810][ T27] ? do_filp_open+0x480/0x480 [ 217.169627][ T27] do_filp_open+0x230/0x480 [ 217.174361][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 217.178992][ T27] ? _raw_spin_unlock+0x24/0x40 [ 217.183906][ T27] ? alloc_fd+0x5a0/0x640 [ 217.188330][ T27] do_sys_openat2+0x13b/0x4f0 [ 217.193053][ T27] ? do_sys_open+0x220/0x220 [ 217.197644][ T27] ? blkcg_maybe_throttle_current+0x1ac/0xa30 [ 217.203785][ T27] __x64_sys_openat+0x243/0x290 [ 217.208648][ T27] ? __ia32_sys_open+0x270/0x270 [ 217.213638][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 217.219626][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 217.224896][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 217.230886][ T27] do_syscall_64+0x3b/0xb0 [ 217.235443][ T27] ? clear_bhb_loop+0x45/0xa0 [ 217.240129][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.246666][ T27] RIP: 0033:0x7f1ebef7e819 [ 217.251093][ T27] RSP: 002b:00007f1ebfced038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 217.259533][ T27] RAX: ffffffffffffffda RBX: 00007f1ebf135fa0 RCX: 00007f1ebef7e819 [ 217.267539][ T27] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 217.275557][ T27] RBP: 00007f1ebeff175e R08: 0000000000000000 R09: 0000000000000000 [ 217.283595][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.291564][ T27] R13: 0000000000000000 R14: 00007f1ebf135fa0 R15: 00007ffee954caf8 [ 217.299585][ T27] [ 217.302644][ T27] INFO: task syz.3.29:4450 blocked for more than 146 seconds. [ 217.310091][ T27] Not tainted 6.1.119-syzkaller #0 [ 217.315756][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 217.324597][ T27] task:syz.3.29 state:D stack:24512 pid:4450 ppid:4245 flags:0x00004004 [ 217.334075][ T27] Call Trace: [ 217.337364][ T27] [ 217.340298][ T27] __schedule+0x143f/0x4570 [ 217.345766][ T27] ? __mutex_lock+0x6b4/0xd80 [ 217.350878][ T27] ? release_firmware_map_entry+0x186/0x186 [ 217.356841][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 217.362313][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 217.367540][ T27] schedule+0xbf/0x180 [ 217.371613][ T27] schedule_preempt_disabled+0xf/0x20 [ 217.377015][ T27] __mutex_lock+0x6b9/0xd80 [ 217.381523][ T27] ? __mutex_lock+0x53c/0xd80 [ 217.386238][ T27] ? genl_rcv_msg+0x125/0xf70 [ 217.390925][ T27] ? mutex_lock_nested+0x10/0x10 [ 217.395900][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 217.401888][ T27] ? print_irqtrace_events+0x210/0x210 [ 217.407444][ T27] ? radix_tree_lookup+0x234/0x280 [ 217.412848][ T27] genl_rcv_msg+0x125/0xf70 [ 217.417368][ T27] ? __lock_acquire+0x125b/0x1f80 [ 217.422382][ T27] ? genl_bind+0x400/0x400 [ 217.427133][ T27] ? read_lock_is_recursive+0x10/0x10 [ 217.432561][ T27] ? __might_sleep+0xb0/0xb0 [ 217.437157][ T27] ? ref_tracker_free+0x638/0x7d0 [ 217.442202][ T27] ? memcpy+0x3c/0x60 [ 217.446226][ T27] ? refcount_inc+0x80/0x80 [ 217.451216][ T27] ? __copy_skb_header+0x47b/0x600 [ 217.456529][ T27] netlink_rcv_skb+0x1cd/0x410 [ 217.461325][ T27] ? genl_bind+0x400/0x400 [ 217.465831][ T27] ? netlink_ack+0x1290/0x1290 [ 217.470626][ T27] genl_rcv+0x24/0x40 [ 217.474700][ T27] netlink_unicast+0x7d8/0x970 [ 217.479489][ T27] ? netlink_detachskb+0x90/0x90 [ 217.484485][ T27] ? __virt_addr_valid+0x45b/0x530 [ 217.489634][ T27] ? __phys_addr_symbol+0x2b/0x70 [ 217.494763][ T27] ? __check_object_size+0x4dd/0xa30 [ 217.500063][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 217.505257][ T27] netlink_sendmsg+0xa26/0xd60 [ 217.510040][ T27] ? netlink_getsockopt+0x580/0x580 [ 217.515274][ T27] ? __might_fault+0xa1/0x110 [ 217.520052][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 217.525048][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 217.530342][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 217.535865][ T27] ? netlink_getsockopt+0x580/0x580 [ 217.541077][ T27] __sys_sendto+0x480/0x600 [ 217.545636][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 217.551049][ T27] __x64_sys_sendto+0xda/0xf0 [ 217.556286][ T27] do_syscall_64+0x3b/0xb0 [ 217.560724][ T27] ? clear_bhb_loop+0x45/0xa0 [ 217.565535][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.571439][ T27] RIP: 0033:0x7ff1de9806ac [ 217.575930][ T27] RSP: 002b:00007ff1df73eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 217.584418][ T27] RAX: ffffffffffffffda RBX: 00007ff1df73efc0 RCX: 00007ff1de9806ac [ 217.592395][ T27] RDX: 0000000000000020 RSI: 00007ff1df73f010 RDI: 0000000000000007 [ 217.600428][ T27] RBP: 0000000000000000 R08: 00007ff1df73ef14 R09: 000000000000000c [ 217.608447][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 217.616475][ T27] R13: 00007ff1df73ef68 R14: 00007ff1df73f010 R15: 0000000000000000 [ 217.624520][ T27] [ 217.627559][ T27] [ 217.627559][ T27] Showing all locks held in the system: [ 217.635303][ T27] 3 locks held by kworker/u4:1/11: [ 217.640418][ T27] #0: ffff8880253ff138 ((wq_completion)nfc2_nci_cmd_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 217.651612][ T27] #1: ffffc90000107d20 ((work_completion)(&ndev->cmd_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 217.663834][ T27] #2: ffffffff8dbec9a8 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_send+0x1c/0xd0 [ 217.673058][ T27] 1 lock held by rcu_tasks_kthre/12: [ 217.678344][ T27] #0: ffffffff8d32b110 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 217.688856][ T27] 1 lock held by rcu_tasks_trace/13: [ 217.694155][ T27] #0: ffffffff8d32b910 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 217.705178][ T27] 1 lock held by khungtaskd/27: [ 217.710022][ T27] #0: ffffffff8d32af40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 217.719936][ T27] 4 locks held by udevd/3622: [ 217.724738][ T27] #0: ffff88802ffc1418 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10 [ 217.733600][ T27] #1: ffff88802a436c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x4f/0x3a0 [ 217.742900][ T27] #2: ffff88807e72b490 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x6e/0x3a0 [ 217.752344][ T27] #3: ffff88801f2c5100 (&dev->mutex){....}-{3:3}, at: uevent_show+0x176/0x330 [ 217.761928][ T27] 2 locks held by getty/4002: [ 217.766735][ T27] #0: ffff88814ca4c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 217.776526][ T27] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 217.786765][ T27] 2 locks held by kworker/u4:9/4351: [ 217.792052][ T27] #0: ffff8880b8f3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 217.802018][ T27] #1: ffff8880b8f27788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x383/0x790 [ 217.813633][ T27] 3 locks held by syz.2.15/4383: [ 217.818569][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 217.827037][ T27] #1: ffffffff8dbec9a8 (nci_mutex){+.+.}-{3:3}, at: virtual_ncidev_open+0x15/0xc0 [ 217.836388][ T27] #2: ffff88801f2c5100 (&dev->mutex){....}-{3:3}, at: nfc_register_device+0x98/0x310 [ 217.846018][ T27] 5 locks held by syz.2.15/4387: [ 217.850949][ T27] #0: ffffffff8e569790 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 217.859767][ T27] #1: ffffffff8e569648 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x125/0xf70 [ 217.868827][ T27] #2: ffff88801f2c5100 (&dev->mutex){....}-{3:3}, at: nfc_dev_up+0x3b/0x330 [ 217.877708][ T27] #3: ffff88801f2c4350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_dev_up+0xa0/0xd40 [ 217.887141][ T27] #4: ffffffff8dbec9a8 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x13/0x40 [ 217.896526][ T27] 1 lock held by syz.4.16/4390: [ 217.901446][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 217.909932][ T27] 2 locks held by syz.4.16/4393: [ 217.914911][ T27] #0: ffffffff8e569790 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 217.923189][ T27] #1: ffffffff8e569648 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x125/0xf70 [ 217.932194][ T27] 2 locks held by syz.0.25/4435: [ 217.937186][ T27] #0: ffffffff8e569790 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 217.945442][ T27] #1: ffffffff8e569648 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x125/0xf70 [ 217.954470][ T27] 2 locks held by syz.0.25/4437: [ 217.959408][ T27] #0: ffffffff8e569790 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 217.968313][ T27] #1: ffffffff8e569648 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x125/0xf70 [ 217.977382][ T27] 1 lock held by syz.1.27/4444: [ 217.982230][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 217.990722][ T27] 2 locks held by syz.3.29/4450: [ 217.995687][ T27] #0: ffffffff8e569790 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 218.004043][ T27] #1: ffffffff8e569648 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x125/0xf70 [ 218.013096][ T27] 1 lock held by syz-executor/4454: [ 218.018301][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 218.026806][ T27] 1 lock held by syz-executor/4455: [ 218.031998][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 218.040497][ T27] 1 lock held by syz-executor/4457: [ 218.045840][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 218.054336][ T27] 1 lock held by syz-executor/4460: [ 218.059522][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 218.068501][ T27] 1 lock held by syz-executor/4461: [ 218.073759][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 218.082219][ T27] 1 lock held by syz-executor/4470: [ 218.087444][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 218.095960][ T27] 1 lock held by syz-executor/4471: [ 218.101159][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 218.109635][ T27] 1 lock held by syz-executor/4473: [ 218.114958][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 218.123492][ T27] 1 lock held by syz-executor/4476: [ 218.128689][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 218.137214][ T27] 1 lock held by syz-executor/4477: [ 218.142409][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 218.150937][ T27] 1 lock held by syz-executor/4480: [ 218.156192][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 218.164707][ T27] 1 lock held by syz-executor/4481: [ 218.170394][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 218.179006][ T27] 1 lock held by syz-executor/4483: [ 218.184229][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 218.192697][ T27] 1 lock held by syz-executor/4486: [ 218.197898][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 218.206448][ T27] 1 lock held by syz-executor/4487: [ 218.211645][ T27] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 218.220146][ T27] [ 218.222467][ T27] ============================================= [ 218.222467][ T27] [ 218.231105][ T27] NMI backtrace for cpu 0 [ 218.235450][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.119-syzkaller #0 [ 218.243333][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 218.253383][ T27] Call Trace: [ 218.256650][ T27] [ 218.259571][ T27] dump_stack_lvl+0x1e3/0x2cb [ 218.264243][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 218.269614][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 218.275070][ T27] ? panic+0x764/0x764 [ 218.279127][ T27] ? vprintk_emit+0x622/0x740 [ 218.283799][ T27] ? printk_sprint+0x490/0x490 [ 218.288558][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 218.293664][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 218.298596][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 218.304739][ T27] ? _printk+0xd1/0x111 [ 218.308882][ T27] ? panic+0x764/0x764 [ 218.312938][ T27] ? __wake_up_klogd+0xcc/0x100 [ 218.317783][ T27] ? panic+0x764/0x764 [ 218.321841][ T27] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 218.327901][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 218.334000][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 218.339977][ T27] watchdog+0xf88/0xfd0 [ 218.344126][ T27] ? watchdog+0x1f8/0xfd0 [ 218.348447][ T27] kthread+0x28d/0x320 [ 218.352501][ T27] ? hungtask_pm_notify+0x50/0x50 [ 218.357519][ T27] ? kthread_blkcg+0xd0/0xd0 [ 218.362095][ T27] ret_from_fork+0x1f/0x30 [ 218.366524][ T27] [ 218.370216][ T27] Sending NMI from CPU 0 to CPUs 1: [ 218.376127][ C1] NMI backtrace for cpu 1 [ 218.376142][ C1] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 6.1.119-syzkaller #0 [ 218.376156][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 218.376164][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.376186][ C1] RIP: 0010:chacha_permute+0x461/0x1050 [ 218.376209][ C1] Code: 01 c8 41 31 c7 41 c1 c7 0c 45 01 f4 44 31 e3 c1 c3 0c 8b 74 24 20 01 fe 41 31 f3 41 c1 c3 0c 41 01 ca 44 89 54 24 04 45 31 d5 <41> c1 c5 08 45 01 f8 44 89 04 24 45 31 c1 41 c1 c1 08 8b 6c 24 14 [ 218.376223][ C1] RSP: 0018:ffffc900000e75e8 EFLAGS: 00000006 [ 218.376234][ C1] RAX: 000000005a7b46c2 RBX: 00000000f49669a5 RCX: 000000004cf6506d [ 218.376244][ C1] RDX: 0000000039334c6a RSI: 00000000537fdb84 RDI: 000000006ec33d4d [ 218.376253][ C1] RBP: 00000000afb22c20 R08: 00000000cae51a87 R09: 00000000af0faddf [ 218.376262][ C1] R10: 00000000d8c3899e R11: 000000003da28cbd R12: 000000009bafed4f [ 218.376271][ C1] R13: 000000003f892599 R14: 00000000593208c0 R15: 00000000e2b3f003 [ 218.376280][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 218.376292][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.376302][ C1] CR2: 00007fffb08cecec CR3: 000000007de0c000 CR4: 00000000003506e0 [ 218.376314][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 218.376322][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 218.376330][ C1] Call Trace: [ 218.376335][ C1] [ 218.376340][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 218.376359][ C1] ? read_lock_is_recursive+0x10/0x10 [ 218.376379][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 218.376396][ C1] ? nmi_handle+0x25/0x440 [ 218.376421][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 218.376433][ C1] ? nmi_handle+0x12e/0x440 [ 218.376451][ C1] ? nmi_handle+0x25/0x440 [ 218.376468][ C1] ? chacha_permute+0x461/0x1050 [ 218.376481][ C1] ? default_do_nmi+0x62/0x150 [ 218.376499][ C1] ? exc_nmi+0xa8/0x100 [ 218.376515][ C1] ? end_repeat_nmi+0x16/0x31 [ 218.376537][ C1] ? chacha_permute+0x461/0x1050 [ 218.376551][ C1] ? chacha_permute+0x461/0x1050 [ 218.376566][ C1] ? chacha_permute+0x461/0x1050 [ 218.376579][ C1] [ 218.376583][ C1] [ 218.376602][ C1] chacha_block_generic+0x9b/0x1340 [ 218.376617][ C1] ? __crypto_xor+0x1a50/0x1a50 [ 218.376629][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 218.376650][ C1] ? crng_make_state+0x3cd/0xb50 [ 218.376670][ C1] crng_make_state+0x3f2/0xb50 [ 218.376688][ C1] ? crng_make_state+0x209/0xb50 [ 218.376706][ C1] ? urandom_read_iter+0x140/0x140 [ 218.376722][ C1] ? process_one_work+0x8a9/0x11d0 [ 218.376749][ C1] _get_random_bytes+0xd3/0x2b0 [ 218.376767][ C1] ? get_random_bytes+0x20/0x20 [ 218.376791][ C1] ? in_aton+0x39b/0x430 [ 218.376807][ C1] ? skb_put+0x110/0x1f0 [ 218.376826][ C1] nsim_dev_trap_report_work+0x61a/0xab0 [ 218.376849][ C1] ? process_one_work+0x7a9/0x11d0 [ 218.376862][ C1] process_one_work+0x8a9/0x11d0 [ 218.376883][ C1] ? worker_detach_from_pool+0x260/0x260 [ 218.376899][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 218.376914][ C1] ? kthread_data+0x4e/0xc0 [ 218.376933][ C1] ? wq_worker_running+0x97/0x190 [ 218.376946][ C1] worker_thread+0xa47/0x1200 [ 218.376971][ C1] kthread+0x28d/0x320 [ 218.376982][ C1] ? worker_clr_flags+0x190/0x190 [ 218.376996][ C1] ? kthread_blkcg+0xd0/0xd0 [ 218.377009][ C1] ret_from_fork+0x1f/0x30 [ 218.377032][ C1] [ 218.377874][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 218.724805][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.119-syzkaller #0 [ 218.732690][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 218.742728][ T27] Call Trace: [ 218.746011][ T27] [ 218.748934][ T27] dump_stack_lvl+0x1e3/0x2cb [ 218.753597][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 218.759049][ T27] ? panic+0x764/0x764 [ 218.763116][ T27] ? vscnprintf+0x59/0x80 [ 218.767451][ T27] panic+0x318/0x764 [ 218.771367][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 218.777593][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 218.783071][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 218.789212][ T27] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 218.795351][ T27] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 218.801485][ T27] watchdog+0xfc7/0xfd0 [ 218.805625][ T27] ? watchdog+0x1f8/0xfd0 [ 218.809940][ T27] kthread+0x28d/0x320 [ 218.814003][ T27] ? hungtask_pm_notify+0x50/0x50 [ 218.819027][ T27] ? kthread_blkcg+0xd0/0xd0 [ 218.823596][ T27] ret_from_fork+0x1f/0x30 [ 218.827999][ T27] [ 218.831277][ T27] Kernel Offset: disabled [ 218.835593][ T27] Rebooting in 86400 seconds..