last executing test programs: 4.747484289s ago: executing program 3 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='md0', 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x81ff, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='active\x00', 0x6) 4.108452985s ago: executing program 1 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000007001000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d") 3.961055489s ago: executing program 3 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)="1528b8616b642e302e202e31", 0xc) 3.800312233s ago: executing program 1 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a3120313238203000", 0x36) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f") 2.76361297s ago: executing program 3 (id=163): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xd}, 0x1c, 0x0}}], 0x1, 0x24000000) 2.74430994s ago: executing program 1 (id=164): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x46, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2.506234006s ago: executing program 3 (id=166): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc7, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x4, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x9, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xaa, 0x2, 0x809, 0x40, 0x9, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0x7ffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x9cce, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x2000011, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa775, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x56, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x9, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x98c, 0x4, 0x5, 0x0, 0x3e0, 0x3, 0x1, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x1cd78784, 0x1000, 0x80000001, 0x5, 0x100}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.481613217s ago: executing program 1 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 2.255707413s ago: executing program 1 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='md0\x00', 0x3) mknodat(0xffffffffffffff9c, 0x0, 0x81ff, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='active\x00', 0x6) 1.892310202s ago: executing program 3 (id=170): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.605082589s ago: executing program 3 (id=173): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x6) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 1.532177371s ago: executing program 0 (id=175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x46, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.454671143s ago: executing program 1 (id=176): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, &(0x7f0000000400), 0x0, 0x3ff, 0x2) syz_usb_disconnect(r0) 1.329809276s ago: executing program 0 (id=178): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc7, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x4, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x9, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xaa, 0x2, 0x809, 0x40, 0x9, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0x7ffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x9cce, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x2000011, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa775, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x56, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x9, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x98c, 0x4, 0x5, 0x0, 0x3e0, 0x3, 0x1, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x1cd78784, 0x1000, 0x80000001, 0x5, 0x100}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 984.360025ms ago: executing program 2 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='config\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) openat(r1, &(0x7f00000004f3)='functions/uac2.usb0/c_ssize\x00', 0x2, 0x0) 943.735236ms ago: executing program 2 (id=181): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}]}}}}}}}}, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) close(r0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 854.711938ms ago: executing program 0 (id=182): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 611.878965ms ago: executing program 0 (id=183): msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000380)=""/157) 564.718906ms ago: executing program 2 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a3120313238203000", 0x36) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f") 536.212576ms ago: executing program 0 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='md0\x00', 0x3) mknodat(0xffffffffffffff9c, 0x0, 0x81ff, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='active\x00', 0x6) 328.669452ms ago: executing program 2 (id=186): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x46, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 211.537925ms ago: executing program 2 (id=187): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r1, &(0x7f0000000140)="00008847", 0x4) 81.919798ms ago: executing program 2 (id=188): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 0s ago: executing program 0 (id=189): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @remote}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r1, &(0x7f00000001c0)="9b7a21", 0x3) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 58.699278][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.722677][ T5435] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. syzkaller login: [ 82.633658][ T5761] cgroup: Unknown subsys name 'net' [ 82.770515][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.475552][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.087945][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.096835][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.104899][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.122325][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.142429][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.150613][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.158446][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.190006][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.198027][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.209021][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.217062][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.226580][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.235013][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.242530][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.250372][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.260485][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.274033][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.281559][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.339909][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.349429][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.357431][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.366324][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.374325][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.382339][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.781097][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 86.820539][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 86.935118][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 87.021328][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 87.095523][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.103618][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.111283][ T5772] bridge_slave_0: entered allmulticast mode [ 87.119545][ T5772] bridge_slave_0: entered promiscuous mode [ 87.129821][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.137192][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.144508][ T5772] bridge_slave_1: entered allmulticast mode [ 87.152406][ T5772] bridge_slave_1: entered promiscuous mode [ 87.241919][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.249115][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.257035][ T5775] bridge_slave_0: entered allmulticast mode [ 87.265045][ T5775] bridge_slave_0: entered promiscuous mode [ 87.307213][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.315792][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.323699][ T5775] bridge_slave_1: entered allmulticast mode [ 87.331166][ T5775] bridge_slave_1: entered promiscuous mode [ 87.372825][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.408501][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.416964][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.424832][ T5780] bridge_slave_0: entered allmulticast mode [ 87.432598][ T5780] bridge_slave_0: entered promiscuous mode [ 87.457446][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.469815][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.479749][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.487566][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.496197][ T5780] bridge_slave_1: entered allmulticast mode [ 87.504119][ T5780] bridge_slave_1: entered promiscuous mode [ 87.550411][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.590264][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.597622][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.605608][ T5778] bridge_slave_0: entered allmulticast mode [ 87.613471][ T5778] bridge_slave_0: entered promiscuous mode [ 87.651007][ T5772] team0: Port device team_slave_0 added [ 87.661037][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.675113][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.687387][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.697686][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.707997][ T5778] bridge_slave_1: entered allmulticast mode [ 87.718167][ T5778] bridge_slave_1: entered promiscuous mode [ 87.745459][ T5772] team0: Port device team_slave_1 added [ 87.792894][ T5775] team0: Port device team_slave_0 added [ 87.830415][ T5775] team0: Port device team_slave_1 added [ 87.859420][ T5780] team0: Port device team_slave_0 added [ 87.869456][ T5780] team0: Port device team_slave_1 added [ 87.878104][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.891312][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.913682][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.920688][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.947102][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.997101][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.004482][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.030962][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.044020][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.051010][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.078946][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.091429][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.100112][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.126673][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.149740][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.156898][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.183464][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.214652][ T5778] team0: Port device team_slave_0 added [ 88.231957][ T5774] Bluetooth: hci0: command tx timeout [ 88.240490][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.247762][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.274210][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.298474][ T5778] team0: Port device team_slave_1 added [ 88.312123][ T5774] Bluetooth: hci1: command tx timeout [ 88.370909][ T5772] hsr_slave_0: entered promiscuous mode [ 88.378447][ T5772] hsr_slave_1: entered promiscuous mode [ 88.382187][ T5774] Bluetooth: hci2: command tx timeout [ 88.411121][ T5775] hsr_slave_0: entered promiscuous mode [ 88.419123][ T5775] hsr_slave_1: entered promiscuous mode [ 88.425681][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.434021][ T5775] Cannot create hsr debugfs directory [ 88.441249][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.448841][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.462286][ T5774] Bluetooth: hci3: command tx timeout [ 88.476713][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.530566][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.537927][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.564123][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.598014][ T5780] hsr_slave_0: entered promiscuous mode [ 88.607665][ T5780] hsr_slave_1: entered promiscuous mode [ 88.614112][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.621957][ T5780] Cannot create hsr debugfs directory [ 88.775614][ T5778] hsr_slave_0: entered promiscuous mode [ 88.782935][ T5778] hsr_slave_1: entered promiscuous mode [ 88.789562][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.797483][ T5778] Cannot create hsr debugfs directory [ 89.119816][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.133615][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.154225][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.168859][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.254249][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.281327][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.312758][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.336469][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.399709][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.411073][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.423446][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.445110][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.549502][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.563325][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.574635][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.588693][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.628667][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.697730][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.744590][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.752006][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.763466][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.770767][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.810399][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.826283][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.898639][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.910275][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.937163][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.944397][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.960926][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.968257][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.982036][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.010614][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.017816][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.051069][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.058296][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.139885][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.228190][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.258458][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.265740][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.302324][ T5774] Bluetooth: hci0: command tx timeout [ 90.316833][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.324103][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.381915][ T5774] Bluetooth: hci1: command tx timeout [ 90.462298][ T5774] Bluetooth: hci2: command tx timeout [ 90.542690][ T5774] Bluetooth: hci3: command tx timeout [ 90.553922][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.722536][ T5780] veth0_vlan: entered promiscuous mode [ 90.769813][ T5780] veth1_vlan: entered promiscuous mode [ 90.821436][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.924975][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.951164][ T5780] veth0_macvtap: entered promiscuous mode [ 90.993388][ T5780] veth1_macvtap: entered promiscuous mode [ 91.023761][ T5775] veth0_vlan: entered promiscuous mode [ 91.045947][ T5775] veth1_vlan: entered promiscuous mode [ 91.075895][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.095070][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.110721][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.138660][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.148415][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.157763][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.166844][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.194843][ T5772] veth0_vlan: entered promiscuous mode [ 91.217054][ T5772] veth1_vlan: entered promiscuous mode [ 91.276522][ T5775] veth0_macvtap: entered promiscuous mode [ 91.302942][ T5775] veth1_macvtap: entered promiscuous mode [ 91.373002][ T5772] veth0_macvtap: entered promiscuous mode [ 91.389275][ T5772] veth1_macvtap: entered promiscuous mode [ 91.418808][ T5778] veth0_vlan: entered promiscuous mode [ 91.441220][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.454366][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.456302][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.476473][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.489288][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.510139][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.526499][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.539136][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.553905][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.563037][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.572366][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.581116][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.596689][ T5778] veth1_vlan: entered promiscuous mode [ 91.630316][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.645406][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.655882][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.667006][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.679613][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.719653][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.729892][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.752196][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.769327][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.779609][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.790143][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.804275][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.841784][ T5778] veth0_macvtap: entered promiscuous mode [ 91.857384][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.874524][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.886611][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.895792][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.962710][ T5778] veth1_macvtap: entered promiscuous mode [ 91.963672][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.992002][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.089608][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.119587][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.141111][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.153372][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.154171][ T9] cfg80211: failed to load regulatory.db [ 92.164438][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.186197][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.198627][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.209251][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.225450][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.269701][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.272485][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.297600][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.310846][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.327061][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.340489][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.350982][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.363370][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.375418][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.383510][ T5774] Bluetooth: hci0: command tx timeout [ 92.432904][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.461972][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.462395][ T5774] Bluetooth: hci1: command tx timeout [ 92.480108][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.490890][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.509904][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.534604][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.542513][ T5774] Bluetooth: hci2: command tx timeout [ 92.622328][ T5774] Bluetooth: hci3: command tx timeout [ 92.804125][ T5843] md/raid:md0: not clean -- starting background reconstruction [ 92.813210][ T5843] md/raid:md0: invalid chunk size 0 [ 92.818510][ T5843] md: pers->run() failed ... [ 92.858525][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.874659][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.980125][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.008754][ T5847] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.020912][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.372331][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.568916][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 93.610191][ T23] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 93.638379][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.648823][ T23] usb 2-1: Product: syz [ 93.657649][ T23] usb 2-1: Manufacturer: syz [ 93.677981][ T23] usb 2-1: SerialNumber: syz [ 93.723276][ T23] usb 2-1: config 0 descriptor?? [ 93.905669][ T5774] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 94.003628][ T23] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 002 [ 94.095958][ T5871] md: could not open device unknown-block(1,0). [ 94.106598][ T5871] md: could not open device unknown-block(1,1). [ 94.113498][ T5871] md: could not open device unknown-block(1,2). [ 94.120240][ T5871] md: could not open device unknown-block(1,3). [ 94.173279][ T5871] md/raid:md0: not clean -- starting background reconstruction [ 94.180963][ T5871] md/raid:md0: invalid chunk size 0 [ 94.187267][ T5871] md: pers->run() failed ... [ 94.221829][ T5809] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.346611][ T5874] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 94.425875][ T5809] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.452274][ T5809] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 94.462536][ T5774] Bluetooth: hci0: command tx timeout [ 94.481275][ T5809] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.490877][ T5809] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.507861][ T5101] device offline error, dev sda, sector 1049974 op 0x1:(WRITE) flags 0x9800 phys_seg 15 prio class 2 [ 94.538444][ T5809] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.544155][ T5774] Bluetooth: hci1: command tx timeout [ 94.554537][ T5101] Aborting journal on device sda1-8. [ 94.573737][ T10] device offline error, dev sda, sector 1048886 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 2 [ 94.586242][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.586811][ T10] device offline error, dev sda, sector 1048886 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 2 [ 94.605512][ T10] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 94.606654][ T5875] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.2.14: Detected aborted journal [ 94.616639][ T5101] JBD2: I/O error when updating journal superblock for sda1-8. [ 94.631791][ T5774] Bluetooth: hci2: command tx timeout [ 94.643964][ T10] device offline error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 94.654570][ T5809] usb 1-1: Product: syz [ 94.654717][ T5809] usb 1-1: Manufacturer: syz [ 94.659041][ T10] device offline error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 94.673862][ T10] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 94.685753][ T5875] EXT4-fs (sda1): I/O error while writing superblock [ 94.701872][ T5774] Bluetooth: hci3: command tx timeout [ 94.713763][ T5875] EXT4-fs (sda1): Remounting filesystem read-only [ 94.722219][ T5809] cdc_wdm 1-1:1.0: skipping garbage [ 94.728854][ T5876] device offline error, dev sda, sector 1414 op 0x1:(WRITE) flags 0x3000 phys_seg 1 prio class 2 [ 94.739791][ T5876] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 94.749030][ T5809] cdc_wdm 1-1:1.0: skipping garbage [ 94.749547][ T5876] device offline error, dev sda, sector 1470 op 0x1:(WRITE) flags 0x3000 phys_seg 1 prio class 2 [ 94.765436][ T5809] cdc_wdm 1-1:1.0: skipping garbage [ 94.769998][ T5876] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 94.779954][ T5876] device offline error, dev sda, sector 2102 op 0x1:(WRITE) flags 0x3000 phys_seg 1 prio class 2 [ 94.792451][ T5809] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 94.799700][ T5876] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 94.808625][ T5876] device offline error, dev sda, sector 2118 op 0x1:(WRITE) flags 0x3000 phys_seg 1 prio class 2 [ 94.827199][ T5876] Buffer I/O error on dev sda1, logical block 226, lost async page write [ 94.836346][ T5876] device offline error, dev sda, sector 5566 op 0x1:(WRITE) flags 0x3000 phys_seg 1 prio class 2 [ 94.854484][ T5876] Buffer I/O error on dev sda1, logical block 657, lost async page write [ 94.879923][ T5876] Buffer I/O error on dev sda1, logical block 4241, lost async page write [ 94.890390][ T5876] Buffer I/O error on dev sda1, logical block 4247, lost async page write [ 94.903321][ T5876] Buffer I/O error on dev sda1, logical block 4260, lost async page write [ 94.931089][ T5833] usb 1-1: USB disconnect, device number 2 [ 95.225027][ T5876] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 96.142756][ T5810] usb 2-1: USB disconnect, device number 2 [ 97.051902][ T1197] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.343737][ T1197] usb 3-1: Using ep0 maxpacket: 16 [ 97.365566][ T5916] syzkaller0: entered promiscuous mode [ 97.371306][ T5916] syzkaller0: entered allmulticast mode [ 97.381109][ T1197] usb 3-1: config 0 has no interfaces? [ 97.395929][ T1197] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.409689][ T1197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.420873][ T1197] usb 3-1: Product: syz [ 97.427710][ T1197] usb 3-1: Manufacturer: syz [ 97.434989][ T1197] usb 3-1: SerialNumber: syz [ 97.453520][ T1197] usb 3-1: config 0 descriptor?? [ 97.472000][ T5853] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.671398][ T5853] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.692851][ T5853] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 97.721871][ T5853] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.741156][ T5853] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 97.777465][ T5853] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.787413][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.795897][ T5853] usb 4-1: Product: syz [ 97.795903][ T5925] md/raid:md0: not clean -- starting background reconstruction [ 97.800669][ T5853] usb 4-1: Manufacturer: syz [ 97.817582][ T5925] md/raid:md0: invalid chunk size 0 [ 97.825200][ T5853] cdc_wdm 4-1:1.0: skipping garbage [ 97.825396][ T5925] md: pers->run() failed ... [ 97.830451][ T5853] cdc_wdm 4-1:1.0: skipping garbage [ 97.830480][ T5853] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 98.017222][ T5930] kAFS: bad VL server IP address [ 98.022911][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.040367][ T5810] usb 4-1: USB disconnect, device number 2 [ 98.040395][ T5930] kAFS: No cell specified [ 98.211822][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 98.224100][ T8] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 98.234077][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.242353][ T8] usb 1-1: Product: syz [ 98.247129][ T8] usb 1-1: Manufacturer: syz [ 98.252159][ T8] usb 1-1: SerialNumber: syz [ 98.264260][ T8] usb 1-1: config 0 descriptor?? [ 98.520542][ T8] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 003 [ 99.338788][ T5904] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 99.842648][ T5809] usb 3-1: USB disconnect, device number 2 [ 100.215654][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 100.316054][ T1197] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.325866][ T5959] md/raid:md0: not clean -- starting background reconstruction [ 100.338258][ T5959] md/raid:md0: invalid chunk size 0 [ 100.343974][ T5959] md: pers->run() failed ... [ 100.358342][ T5962] kAFS: bad VL server IP address [ 100.383746][ T5962] kAFS: No cell specified [ 100.521982][ T1197] usb 2-1: Using ep0 maxpacket: 8 [ 100.721974][ T5810] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.045766][ T5810] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.110077][ T5810] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 101.201957][ T5810] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.270403][ T5810] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 101.398579][ T1197] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.408949][ T1197] usb 2-1: config 0 has no interfaces? [ 101.415863][ T1197] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 101.425495][ T1197] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 101.433673][ T1197] usb 2-1: Manufacturer: syz [ 101.433675][ T5810] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.433703][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.453541][ T1197] usb 2-1: config 0 descriptor?? [ 101.485833][ T5834] usb 1-1: USB disconnect, device number 3 [ 101.551336][ T5810] usb 4-1: Product: syz [ 101.559312][ T5810] usb 4-1: Manufacturer: syz [ 101.597802][ T5810] cdc_wdm 4-1:1.0: skipping garbage [ 101.620969][ T5971] md: could not open device unknown-block(1,0). [ 101.628394][ T5971] md: could not open device unknown-block(1,1). [ 101.632014][ T5810] cdc_wdm 4-1:1.0: skipping garbage [ 101.636541][ T5971] md: could not open device unknown-block(1,2). [ 101.660614][ T5810] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 101.674073][ T5810] usb 2-1: USB disconnect, device number 3 [ 101.682298][ T5971] md: could not open device unknown-block(1,3). [ 101.708764][ T5971] md/raid:md0: not clean -- starting background reconstruction [ 101.719815][ T5971] md/raid:md0: invalid chunk size 0 [ 101.725207][ T5971] md: pers->run() failed ... [ 101.826852][ T5809] usb 4-1: USB disconnect, device number 3 [ 101.933125][ T5978] random: crng reseeded on system resumption [ 102.001779][ T5834] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.192028][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 102.203151][ T5834] usb 1-1: config 0 has no interfaces? [ 102.216603][ T5834] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.233770][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.268927][ T5834] usb 1-1: Product: syz [ 102.273764][ T5834] usb 1-1: Manufacturer: syz [ 102.278438][ T5834] usb 1-1: SerialNumber: syz [ 102.315241][ T5834] usb 1-1: config 0 descriptor?? [ 102.353496][ T5774] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 102.461358][ T5988] md/raid:md0: not clean -- starting background reconstruction [ 102.463664][ T5986] kAFS: bad VL server IP address [ 102.476682][ T5988] md/raid:md0: invalid chunk size 0 [ 102.483329][ T5988] md: pers->run() failed ... [ 102.489162][ T5986] kAFS: No cell specified [ 102.653819][ T5993] md: could not open device unknown-block(1,0). [ 102.661091][ T5993] md: could not open device unknown-block(1,1). [ 102.668414][ T5993] md: could not open device unknown-block(1,2). [ 102.682800][ T5993] md: could not open device unknown-block(1,3). [ 102.715780][ T5993] md/raid:md0: not clean -- starting background reconstruction [ 102.745408][ T5993] md/raid:md0: device ram2 operational as raid disk 2 [ 102.798800][ T5993] md/raid:md0: device ram1 operational as raid disk 1 [ 102.849509][ T5993] md/raid:md0: device ram0 operational as raid disk 0 [ 103.635974][ T6003] jffs2: notice: (6003) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 103.674862][ T5993] md/raid:md0: cannot start dirty degraded array. [ 103.872282][ T5993] md/raid:md0: failed to run raid set. [ 103.878250][ T5993] md: pers->run() failed ... [ 104.072596][ T6016] kAFS: bad VL server IP address [ 104.103024][ T6016] kAFS: No cell specified [ 104.213751][ T5774] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 104.223093][ T6021] md/raid:md0: not clean -- starting background reconstruction [ 104.270392][ T6021] md/raid:md0: device ram2 operational as raid disk 2 [ 104.299102][ T6021] md/raid:md0: device ram1 operational as raid disk 1 [ 104.353639][ T6021] md/raid:md0: device ram0 operational as raid disk 0 [ 104.440326][ T5834] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.561553][ T5973] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 104.690657][ T5834] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.779960][ T5834] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 104.890683][ T5834] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.003269][ T5834] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 105.200256][ T5834] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.319387][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.365641][ T5834] usb 2-1: Product: syz [ 105.381810][ T5833] usb 1-1: USB disconnect, device number 4 [ 105.409635][ T5834] usb 2-1: Manufacturer: syz [ 105.428142][ T6021] md/raid:md0: cannot start dirty degraded array. [ 105.456826][ T6031] jffs2: notice: (6031) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 105.465216][ T5834] cdc_wdm 2-1:1.0: skipping garbage [ 105.518440][ T5834] cdc_wdm 2-1:1.0: skipping garbage [ 105.539165][ T5834] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 105.666054][ T5833] usb 2-1: USB disconnect, device number 4 [ 105.674467][ T6021] md/raid:md0: failed to run raid set. [ 105.680103][ T6021] md: pers->run() failed ... [ 105.907333][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 105.940490][ T6038] jffs2: notice: (6038) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 106.039303][ T6047] kAFS: bad VL server IP address [ 106.050082][ T6047] kAFS: No cell specified [ 106.172912][ T6051] ======================================================= [ 106.172912][ T6051] WARNING: The mand mount option has been deprecated and [ 106.172912][ T6051] and is ignored by this kernel. Remove the mand [ 106.172912][ T6051] option from the mount to silence this warning. [ 106.172912][ T6051] ======================================================= [ 106.213558][ T6051] 9pnet_virtio: no channels available for device syz [ 106.249536][ T5774] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 107.289493][ T3450] nci: nci_rx_work: unknown MT 0x1 [ 107.476993][ T6071] md/raid:md0: not clean -- starting background reconstruction [ 107.608052][ T6071] md/raid:md0: device ram2 operational as raid disk 2 [ 107.708138][ T6071] md/raid:md0: device ram1 operational as raid disk 1 [ 107.764129][ T6071] md/raid:md0: device ram0 operational as raid disk 0 [ 107.941930][ T5810] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.975889][ T6062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.182992][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 108.210962][ T5810] usb 4-1: config 0 has no interfaces? [ 108.224564][ T6071] md/raid:md0: couldn't allocate thread. [ 108.254058][ T5810] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.330623][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.348606][ T6071] md: pers->run() failed ... [ 108.363720][ T5810] usb 4-1: Product: syz [ 108.367959][ T5810] usb 4-1: Manufacturer: syz [ 108.421191][ T5810] usb 4-1: SerialNumber: syz [ 108.437581][ T5810] usb 4-1: config 0 descriptor?? [ 108.664108][ T5774] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 108.752783][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 109.759891][ T6098] md: could not open device unknown-block(1,0). [ 109.770728][ T6098] md: could not open device unknown-block(1,1). [ 109.779036][ T6098] md: could not open device unknown-block(1,2). [ 109.789243][ T6098] md: could not open device unknown-block(1,3). [ 109.808463][ T6098] md/raid:md0: not clean -- starting background reconstruction [ 109.818827][ T6098] md/raid:md0: device ram2 operational as raid disk 2 [ 109.830880][ T6098] md/raid:md0: device ram1 operational as raid disk 1 [ 109.841441][ T6098] md/raid:md0: device ram0 operational as raid disk 0 [ 109.892572][ T5809] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.911039][ T6098] md/raid:md0: cannot start dirty degraded array. [ 110.010243][ T6098] md/raid:md0: failed to run raid set. [ 110.016061][ T6098] md: pers->run() failed ... [ 110.093937][ T5809] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.109532][ T5809] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 110.123704][ T5809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.158871][ T5809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 110.182427][ T5809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 110.204295][ T5809] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.221774][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.233337][ T5809] usb 2-1: Product: syz [ 110.237587][ T5809] usb 2-1: Manufacturer: syz [ 110.264194][ T5809] cdc_wdm 2-1:1.0: skipping garbage [ 110.269588][ T5809] cdc_wdm 2-1:1.0: skipping garbage [ 110.275356][ T6065] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 110.317655][ T5809] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 110.324778][ T6108] md/raid:md0: not clean -- starting background reconstruction [ 110.331797][ T5809] cdc_wdm 2-1:1.0: Unknown control protocol [ 110.351386][ T6108] md/raid:md0: device ram2 operational as raid disk 2 [ 110.375156][ T9] usb 4-1: USB disconnect, device number 4 [ 110.393869][ T6108] md/raid:md0: device ram1 operational as raid disk 1 [ 110.400734][ T6108] md/raid:md0: device ram0 operational as raid disk 0 [ 110.510450][ T6108] md/raid:md0: cannot start dirty degraded array. [ 110.522869][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.529775][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.536256][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.542940][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.549383][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.556035][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.564483][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.571126][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.571866][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.584024][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.590425][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.597071][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.603559][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.610207][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.616601][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.623254][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.629594][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.636237][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.642599][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.649247][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.656762][ T5809] usb 2-1: USB disconnect, device number 5 [ 110.662686][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 110.842351][ T5774] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 110.867427][ T6108] md/raid:md0: failed to run raid set. [ 110.892453][ T6108] md: pers->run() failed ... [ 111.880785][ T6130] md: could not open device unknown-block(1,0). [ 111.891148][ T6130] md: could not open device unknown-block(1,1). [ 111.897973][ T6130] md: could not open device unknown-block(1,2). [ 111.907391][ T6130] md: could not open device unknown-block(1,3). [ 111.928177][ T6130] md/raid:md0: not clean -- starting background reconstruction [ 111.964680][ T6130] md/raid:md0: device ram2 operational as raid disk 2 [ 111.971557][ T6130] md/raid:md0: device ram1 operational as raid disk 1 [ 111.986398][ T6130] md/raid:md0: device ram0 operational as raid disk 0 [ 112.073954][ T6130] md/raid:md0: cannot start dirty degraded array. [ 112.233787][ T6130] md/raid:md0: failed to run raid set. [ 112.242143][ T6130] md: pers->run() failed ... [ 112.601816][ T5833] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.705718][ T6148] md/raid:md0: not clean -- starting background reconstruction [ 112.717615][ T6148] md/raid:md0: device ram2 operational as raid disk 2 [ 112.725142][ T6148] md/raid:md0: device ram1 operational as raid disk 1 [ 112.736252][ T6148] md/raid:md0: device ram0 operational as raid disk 0 [ 112.761873][ T5774] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 112.782672][ T5809] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.807875][ T6148] md/raid:md0: cannot start dirty degraded array. [ 112.814530][ T5833] usb 2-1: Using ep0 maxpacket: 16 [ 112.822378][ T5833] usb 2-1: config 0 has no interfaces? [ 112.830787][ T5833] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.842894][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.852349][ T5833] usb 2-1: Product: syz [ 112.856572][ T5833] usb 2-1: Manufacturer: syz [ 112.861462][ T5833] usb 2-1: SerialNumber: syz [ 112.883077][ T5833] usb 2-1: config 0 descriptor?? [ 112.966346][ T6148] md/raid:md0: failed to run raid set. [ 112.975322][ T6148] md: pers->run() failed ... [ 112.987399][ T5809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.010099][ T5809] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 113.023838][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.050059][ T5809] usb 1-1: config 0 descriptor?? [ 113.175604][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 113.275197][ T5809] usbhid 1-1:0.0: can't add hid device: -71 [ 113.283691][ T5809] usbhid: probe of 1-1:0.0 failed with error -71 [ 113.302781][ T5809] usb 1-1: USB disconnect, device number 5 [ 113.336593][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.109'. [ 113.354368][ T6157] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.363615][ T6157] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.372426][ T6157] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.381161][ T6157] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.393234][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.109'. [ 113.404201][ T6157] Zero length message leads to an empty skb [ 113.911841][ T5809] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.115984][ T5809] usb 1-1: Using ep0 maxpacket: 32 [ 114.138209][ T5809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.161770][ T5809] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 114.170891][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.173933][ T6154] syz.2.108 (6154): drop_caches: 2 [ 114.186974][ T6161] md: could not open device unknown-block(1,0). [ 114.197543][ T6161] md: could not open device unknown-block(1,1). [ 114.207836][ T6161] md: could not open device unknown-block(1,2). [ 114.208928][ T5809] usb 1-1: config 0 descriptor?? [ 114.226609][ T6161] md: could not open device unknown-block(1,3). [ 114.231204][ T5809] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 114.254508][ T5809] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 114.274253][ T6161] md/raid:md0: not clean -- starting background reconstruction [ 114.292835][ T6161] md/raid:md0: device ram2 operational as raid disk 2 [ 114.299684][ T6161] md/raid:md0: device ram1 operational as raid disk 1 [ 114.310920][ T6161] md/raid:md0: device ram0 operational as raid disk 0 [ 114.366965][ T6161] md/raid:md0: cannot start dirty degraded array. [ 114.489200][ T6161] md/raid:md0: failed to run raid set. [ 114.499287][ T6161] md: pers->run() failed ... [ 114.698284][ T5809] usb 1-1: USB disconnect, device number 6 [ 114.709817][ T5809] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 115.099658][ T5774] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 115.185921][ T6140] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 115.208491][ T5810] usb 2-1: USB disconnect, device number 6 [ 115.316112][ T6180] md/raid:md0: not clean -- starting background reconstruction [ 115.324998][ T6180] md/raid:md0: device ram2 operational as raid disk 2 [ 115.333068][ T6180] md/raid:md0: device ram1 operational as raid disk 1 [ 115.345183][ T6180] md/raid:md0: device ram0 operational as raid disk 0 [ 115.409403][ T6180] md/raid:md0: cannot start dirty degraded array. [ 115.505606][ T6180] md/raid:md0: failed to run raid set. [ 115.513182][ T6180] md: pers->run() failed ... [ 115.693337][ T6191] syz.3.120 uses obsolete (PF_INET,SOCK_PACKET) [ 115.849791][ T6195] md: could not open device unknown-block(1,0). [ 115.861343][ T6195] md: could not open device unknown-block(1,1). [ 115.868515][ T6195] md: could not open device unknown-block(1,2). [ 115.877556][ T6195] md: could not open device unknown-block(1,3). [ 115.893709][ T6195] md/raid:md0: not clean -- starting background reconstruction [ 115.906623][ T6195] md/raid:md0: device ram2 operational as raid disk 2 [ 115.917864][ T6195] md/raid:md0: device ram1 operational as raid disk 1 [ 115.926549][ T6195] md/raid:md0: device ram0 operational as raid disk 0 [ 115.986814][ T6195] md/raid:md0: cannot start dirty degraded array. [ 116.075585][ T6195] md/raid:md0: failed to run raid set. [ 116.092524][ T6195] md: pers->run() failed ... [ 116.257588][ T5774] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 116.433117][ T6212] md/raid:md0: not clean -- starting background reconstruction [ 116.441216][ T6212] md/raid:md0: device ram2 operational as raid disk 2 [ 116.455140][ T6212] md/raid:md0: device ram1 operational as raid disk 1 [ 116.467761][ T6212] md/raid:md0: device ram0 operational as raid disk 0 [ 116.549054][ T6212] md/raid:md0: cannot start dirty degraded array. [ 116.636091][ T6212] md/raid:md0: failed to run raid set. [ 116.642312][ T6212] md: pers->run() failed ... [ 117.081779][ T5774] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 117.402525][ T6244] md/raid:md0: not clean -- starting background reconstruction [ 117.410771][ T6244] md/raid:md0: device ram2 operational as raid disk 2 [ 117.419806][ T6244] md/raid:md0: device ram1 operational as raid disk 1 [ 117.427383][ T6244] md/raid:md0: device ram0 operational as raid disk 0 [ 117.552020][ T6244] md/raid:md0: cannot start dirty degraded array. [ 117.693843][ T6244] md/raid:md0: failed to run raid set. [ 117.699416][ T6244] md: pers->run() failed ... [ 117.901042][ T5774] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 118.275188][ T27] audit: type=1800 audit(1785925914.351:2): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.150" name="zoned" dev="configfs" ino=9663 res=0 errno=0 [ 118.315723][ T27] audit: type=1800 audit(1785925914.381:3): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.150" name="memory_backed" dev="configfs" ino=9665 res=0 errno=0 [ 118.337526][ T27] audit: type=1800 audit(1785925914.381:4): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.150" name="zone_nr_conv" dev="configfs" ino=9666 res=0 errno=0 [ 118.358728][ T27] audit: type=1800 audit(1785925914.391:5): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.150" name="power" dev="configfs" ino=9667 res=0 errno=0 [ 118.379796][ T6183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.509107][ T6268] null_blk: disk nullb1 created [ 118.600284][ T6281] md/raid:md0: not clean -- starting background reconstruction [ 118.615301][ T6281] md/raid:md0: device ram2 operational as raid disk 2 [ 118.641767][ T6281] md/raid:md0: device ram1 operational as raid disk 1 [ 118.649414][ T6281] md/raid:md0: device ram0 operational as raid disk 0 [ 118.757249][ T6281] md/raid:md0: cannot start dirty degraded array. [ 118.767512][ T5774] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 119.039291][ T6281] md/raid:md0: failed to run raid set. [ 119.052717][ T6281] md: pers->run() failed ... [ 119.259497][ T6293] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(9) [ 121.087407][ T6319] md/raid:md0: not clean -- starting background reconstruction [ 121.096164][ T6319] md/raid:md0: device ram2 operational as raid disk 2 [ 121.111084][ T6319] md/raid:md0: device ram1 operational as raid disk 1 [ 121.141505][ T6319] md/raid:md0: device ram0 operational as raid disk 0 [ 121.254309][ T6319] md/raid:md0: cannot start dirty degraded array. [ 121.510962][ T6327] Bluetooth: MGMT ver 1.22 [ 121.516880][ T6289] syz.2.157 (6289): drop_caches: 1 [ 121.529479][ T6319] md/raid:md0: failed to run raid set. [ 121.538706][ T6319] md: pers->run() failed ... [ 121.571067][ T6291] syz.2.157 (6291): drop_caches: 1 [ 122.101957][ T5810] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.312406][ T5810] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 122.321106][ T5810] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 122.344217][ T5810] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 122.357999][ T5810] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 122.371461][ T5810] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 122.403286][ T5810] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.428549][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.439146][ T5810] usb 2-1: Product: syz [ 122.447254][ T5810] usb 2-1: Manufacturer: syz [ 122.476288][ T5810] cdc_wdm 2-1:1.0: skipping garbage [ 122.481580][ T5810] cdc_wdm 2-1:1.0: skipping garbage [ 122.497444][ T5810] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 122.519321][ T5810] cdc_wdm 2-1:1.0: Unknown control protocol [ 122.710378][ C0] wdm_int_callback: 3 callbacks suppressed [ 122.710406][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.722951][ C0] wdm_int_callback: 3 callbacks suppressed [ 122.722972][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 122.741891][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.748571][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 122.761849][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.768518][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 122.774900][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.781557][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 122.791792][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.798455][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 122.804933][ T5810] usb 2-1: USB disconnect, device number 7 [ 122.811923][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.818598][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 122.824724][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 122.919112][ T6363] md/raid:md0: not clean -- starting background reconstruction [ 122.931287][ T6363] md/raid:md0: device ram2 operational as raid disk 2 [ 122.939878][ T6363] md/raid:md0: device ram1 operational as raid disk 1 [ 122.956907][ T6363] md/raid:md0: device ram0 operational as raid disk 0 [ 123.016603][ T6363] md/raid:md0: cannot start dirty degraded array. [ 123.114247][ T6363] md/raid:md0: failed to run raid set. [ 123.121045][ T6363] md: pers->run() failed ... [ 123.311416][ T6377] [ 123.313853][ T6377] ====================================================== [ 123.320909][ T6377] WARNING: possible circular locking dependency detected [ 123.327960][ T6377] syzkaller #0 Not tainted [ 123.332395][ T6377] ------------------------------------------------------ [ 123.339448][ T6377] syz.2.188/6377 is trying to acquire lock: [ 123.345359][ T6377] ffffffff8ce648e8 (bdev_lock){+.+.}-{3:3}, at: bd_prepare_to_claim+0x1d9/0x4a0 [ 123.354462][ T6377] [ 123.354462][ T6377] but task is already holding lock: [ 123.361855][ T6377] ffff888148d39550 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_fallocate+0x22b/0x6a0 [ 123.372353][ T6377] [ 123.372353][ T6377] which lock already depends on the new lock. [ 123.372353][ T6377] [ 123.382774][ T6377] [ 123.382774][ T6377] the existing dependency chain (in reverse order) is: [ 123.391814][ T6377] [ 123.391814][ T6377] -> #4 (mapping.invalidate_lock){++++}-{3:3}: [ 123.400183][ T6377] down_write+0x97/0x200 [ 123.404992][ T6377] set_blocksize+0x247/0x4b0 [ 123.410132][ T6377] sb_min_blocksize+0xbe/0x190 [ 123.415451][ T6377] ext4_fill_super+0x6e7/0x6870 [ 123.420859][ T6377] get_tree_bdev+0x3e5/0x520 [ 123.426008][ T6377] vfs_get_tree+0x8c/0x280 [ 123.430970][ T6377] do_new_mount+0x24a/0xa40 [ 123.436026][ T6377] init_mount+0xde/0x130 [ 123.440827][ T6377] do_mount_root+0x97/0x230 [ 123.445880][ T6377] mount_root_generic+0x1a6/0x3e0 [ 123.451458][ T6377] prepare_namespace+0xc2/0x100 [ 123.456873][ T6377] kernel_init_freeable+0x41a/0x560 [ 123.462642][ T6377] kernel_init+0x1d/0x1c0 [ 123.467532][ T6377] ret_from_fork+0x48/0x80 [ 123.472512][ T6377] ret_from_fork_asm+0x11/0x20 [ 123.477831][ T6377] [ 123.477831][ T6377] -> #3 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 123.486490][ T6377] down_write+0x97/0x200 [ 123.491286][ T6377] set_blocksize+0x1ff/0x4b0 [ 123.496420][ T6377] sb_min_blocksize+0xbe/0x190 [ 123.501730][ T6377] ext4_fill_super+0x6e7/0x6870 [ 123.507127][ T6377] get_tree_bdev+0x3e5/0x520 [ 123.512300][ T6377] vfs_get_tree+0x8c/0x280 [ 123.517274][ T6377] do_new_mount+0x24a/0xa40 [ 123.522329][ T6377] init_mount+0xde/0x130 [ 123.527165][ T6377] do_mount_root+0x97/0x230 [ 123.532224][ T6377] mount_root_generic+0x1a6/0x3e0 [ 123.537800][ T6377] prepare_namespace+0xc2/0x100 [ 123.543211][ T6377] kernel_init_freeable+0x41a/0x560 [ 123.548960][ T6377] kernel_init+0x1d/0x1c0 [ 123.553850][ T6377] ret_from_fork+0x48/0x80 [ 123.558814][ T6377] ret_from_fork_asm+0x11/0x20 [ 123.564139][ T6377] [ 123.564139][ T6377] -> #2 (&type->s_umount_key#31){++++}-{3:3}: [ 123.572441][ T6377] down_read+0x46/0x2e0 [ 123.577156][ T6377] super_lock+0x189/0x390 [ 123.582062][ T6377] fs_bdev_mark_dead+0xad/0x1f0 [ 123.587494][ T6377] bdev_mark_dead+0x83/0x1a0 [ 123.592652][ T6377] blk_report_disk_dead+0x21c/0x3e0 [ 123.598417][ T6377] del_gendisk+0x2cb/0x8f0 [ 123.603407][ T6377] sd_remove+0x8d/0x100 [ 123.608114][ T6377] device_release_driver_internal+0x458/0x6f0 [ 123.614740][ T6377] bus_remove_device+0x43b/0x520 [ 123.620284][ T6377] device_del+0x51f/0x910 [ 123.625262][ T6377] __scsi_remove_device+0x1a2/0x390 [ 123.631114][ T6377] scsi_forget_host+0xd0/0x110 [ 123.636436][ T6377] scsi_remove_host+0x1b3/0x730 [ 123.641843][ T6377] virtscsi_remove+0x130/0x1a0 [ 123.647160][ T6377] virtio_dev_remove+0x96/0x1a0 [ 123.652557][ T6377] device_release_driver_internal+0x408/0x6f0 [ 123.659196][ T6377] bus_remove_device+0x43b/0x520 [ 123.664698][ T6377] device_del+0x51f/0x910 [ 123.669660][ T6377] device_unregister+0x20/0xc0 [ 123.674977][ T6377] unregister_virtio_device+0x37/0x60 [ 123.680898][ T6377] virtio_pci_remove+0x7f/0xf0 [ 123.686222][ T6377] pci_device_remove+0x97/0x230 [ 123.691708][ T6377] device_release_driver_internal+0x408/0x6f0 [ 123.698325][ T6377] unbind_store+0x1a1/0x1d0 [ 123.703379][ T6377] kernfs_fop_write_iter+0x3a4/0x520 [ 123.709219][ T6377] vfs_write+0x474/0x9a0 [ 123.714015][ T6377] ksys_write+0x151/0x260 [ 123.718893][ T6377] do_syscall_64+0x55/0xb0 [ 123.723853][ T6377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.730291][ T6377] [ 123.730291][ T6377] -> #1 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 123.738595][ T6377] __mutex_lock+0x135/0xc80 [ 123.743646][ T6377] bd_finish_claiming+0x229/0x3f0 [ 123.749222][ T6377] blkdev_get_by_dev+0x469/0x610 [ 123.754700][ T6377] bdev_open_by_dev+0x77/0x100 [ 123.760089][ T6377] setup_bdev_super+0x59/0x660 [ 123.765399][ T6377] mount_bdev+0x1ce/0x2c0 [ 123.770275][ T6377] legacy_get_tree+0xea/0x180 [ 123.775504][ T6377] vfs_get_tree+0x8c/0x280 [ 123.780466][ T6377] do_new_mount+0x24a/0xa40 [ 123.785542][ T6377] init_mount+0xde/0x130 [ 123.790325][ T6377] do_mount_root+0x97/0x230 [ 123.795382][ T6377] mount_root_generic+0x1a6/0x3e0 [ 123.800964][ T6377] prepare_namespace+0xc2/0x100 [ 123.806367][ T6377] kernel_init_freeable+0x41a/0x560 [ 123.812117][ T6377] kernel_init+0x1d/0x1c0 [ 123.817002][ T6377] ret_from_fork+0x48/0x80 [ 123.822000][ T6377] ret_from_fork_asm+0x11/0x20 [ 123.827312][ T6377] [ 123.827312][ T6377] -> #0 (bdev_lock){+.+.}-{3:3}: [ 123.834464][ T6377] __lock_acquire+0x37ef/0x7d80 [ 123.839870][ T6377] lock_acquire+0x19e/0x420 [ 123.844958][ T6377] __mutex_lock+0x135/0xc80 [ 123.850013][ T6377] bd_prepare_to_claim+0x1d9/0x4a0 [ 123.855690][ T6377] truncate_bdev_range+0x4e/0x260 [ 123.861254][ T6377] blkdev_fallocate+0x428/0x6a0 [ 123.866655][ T6377] vfs_fallocate+0x585/0x6f0 [ 123.871798][ T6377] do_madvise+0x166b/0x3790 [ 123.876858][ T6377] __x64_sys_madvise+0xa6/0xc0 [ 123.882170][ T6377] do_syscall_64+0x55/0xb0 [ 123.887136][ T6377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.893581][ T6377] [ 123.893581][ T6377] other info that might help us debug this: [ 123.893581][ T6377] [ 123.903828][ T6377] Chain exists of: [ 123.903828][ T6377] bdev_lock --> &sb->s_type->i_mutex_key#8 --> mapping.invalidate_lock [ 123.903828][ T6377] [ 123.918034][ T6377] Possible unsafe locking scenario: [ 123.918034][ T6377] [ 123.925504][ T6377] CPU0 CPU1 [ 123.930881][ T6377] ---- ---- [ 123.936290][ T6377] lock(mapping.invalidate_lock); [ 123.941422][ T6377] lock(&sb->s_type->i_mutex_key#8); [ 123.949343][ T6377] lock(mapping.invalidate_lock); [ 123.957001][ T6377] lock(bdev_lock); [ 123.960922][ T6377] [ 123.960922][ T6377] *** DEADLOCK *** [ 123.960922][ T6377] [ 123.969088][ T6377] 2 locks held by syz.2.188/6377: [ 123.974229][ T6377] #0: ffff888148d393c0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_fallocate+0x205/0x6a0 [ 123.984988][ T6377] #1: ffff888148d39550 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_fallocate+0x22b/0x6a0 [ 123.995508][ T6377] [ 123.995508][ T6377] stack backtrace: [ 124.001434][ T6377] CPU: 0 PID: 6377 Comm: syz.2.188 Not tainted syzkaller #0 [ 124.008736][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.018852][ T6377] Call Trace: [ 124.022160][ T6377] [ 124.025116][ T6377] dump_stack_lvl+0x18c/0x250 [ 124.029818][ T6377] ? load_image+0x420/0x420 [ 124.034361][ T6377] ? show_regs_print_info+0x20/0x20 [ 124.039673][ T6377] ? print_circular_bug+0x12b/0x1a0 [ 124.044906][ T6377] check_noncircular+0x2fc/0x400 [ 124.049912][ T6377] ? print_deadlock_bug+0x5d0/0x5d0 [ 124.055153][ T6377] ? lockdep_lock+0xf5/0x230 [ 124.059797][ T6377] ? mark_lock+0x94/0x320 [ 124.064152][ T6377] ? _find_first_zero_bit+0xd6/0x100 [ 124.069661][ T6377] __lock_acquire+0x37ef/0x7d80 [ 124.074574][ T6377] ? verify_lock_unused+0x140/0x140 [ 124.079820][ T6377] ? finish_task_switch+0x262/0x8f0 [ 124.085069][ T6377] ? verify_lock_unused+0x140/0x140 [ 124.090300][ T6377] ? finish_task_switch+0x262/0x8f0 [ 124.095547][ T6377] ? __schedule+0x15b6/0x4660 [ 124.100282][ T6377] lock_acquire+0x19e/0x420 [ 124.104820][ T6377] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 124.110171][ T6377] ? __might_sleep+0xe0/0xe0 [ 124.114796][ T6377] ? mark_lock+0x94/0x320 [ 124.119268][ T6377] ? read_lock_is_recursive+0x20/0x20 [ 124.124778][ T6377] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 124.130800][ T6377] ? __lock_acquire+0x7d80/0x7d80 [ 124.135887][ T6377] ? lock_chain_count+0x20/0x20 [ 124.140855][ T6377] ? _raw_spin_lock_irq+0xbb/0xf0 [ 124.145934][ T6377] __mutex_lock+0x135/0xc80 [ 124.150465][ T6377] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 124.155777][ T6377] ? rcu_is_watching+0x15/0xb0 [ 124.160587][ T6377] ? trace_contention_end+0x3b/0x110 [ 124.165916][ T6377] ? rwsem_down_write_slowpath+0xe0f/0x1020 [ 124.172063][ T6377] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 124.177388][ T6377] ? mutex_lock_nested+0x20/0x20 [ 124.182396][ T6377] ? rwsem_down_read_slowpath+0x880/0x880 [ 124.188163][ T6377] bd_prepare_to_claim+0x1d9/0x4a0 [ 124.193312][ T6377] ? invalidate_bdev+0xc0/0xc0 [ 124.198110][ T6377] ? truncate_bdev_range+0x260/0x260 [ 124.203433][ T6377] ? down_write+0x16e/0x200 [ 124.207995][ T6377] ? down_read_killable+0x340/0x340 [ 124.213233][ T6377] truncate_bdev_range+0x4e/0x260 [ 124.218279][ T6377] blkdev_fallocate+0x428/0x6a0 [ 124.223162][ T6377] vfs_fallocate+0x585/0x6f0 [ 124.227781][ T6377] do_madvise+0x166b/0x3790 [ 124.232324][ T6377] ? madvise_set_anon_name+0x440/0x440 [ 124.237837][ T6377] ? schedule+0xc7/0x170 [ 124.242103][ T6377] ? futex_wait_queue+0x27/0x1b0 [ 124.247070][ T6377] ? futex_wait_queue+0x138/0x1b0 [ 124.252120][ T6377] ? futex_unqueue+0xcb/0xf0 [ 124.256905][ T6377] ? futex_wait+0x4a7/0x5c0 [ 124.261436][ T6377] ? futex_wait_setup+0x270/0x270 [ 124.266498][ T6377] ? __fget_files+0x28/0x460 [ 124.271120][ T6377] ? do_futex+0x2ff/0x3e0 [ 124.275508][ T6377] ? __lock_acquire+0x7d80/0x7d80 [ 124.280561][ T6377] ? __ia32_sys_get_robust_list+0x110/0x110 [ 124.286484][ T6377] ? __fdget+0x192/0x210 [ 124.290766][ T6377] ? lock_chain_count+0x20/0x20 [ 124.295643][ T6377] __x64_sys_madvise+0xa6/0xc0 [ 124.300443][ T6377] do_syscall_64+0x55/0xb0 [ 124.304884][ T6377] ? clear_bhb_loop+0x40/0x90 [ 124.309583][ T6377] ? clear_bhb_loop+0x40/0x90 [ 124.314291][ T6377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.320241][ T6377] RIP: 0033:0x7f4bc139e019 [ 124.324691][ T6377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.344333][ T6377] RSP: 002b:00007f4bc22c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 124.352787][ T6377] RAX: ffffffffffffffda RBX: 00007f4bc1626180 RCX: 00007f4bc139e019 [ 124.360780][ T6377] RDX: 0000000000000009 RSI: 0000000000600000 RDI: 0000200000000000 [ 124.368780][ T6377] RBP: 00007f4bc143500c R08: 0000000000000000 R09: 0000000000000000 [ 124.376777][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.384778][ T6377] R13: 00007f4bc1626218 R14: 00007f4bc1626180 R15: 00007ffcdbafe2b8 [ 124.392779][ T6377] [ 133.115129][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.121490][ T1286] ieee802154 phy1 wpan1: encryption failed: -22