last executing test programs: 5.174004703s ago: executing program 0 (id=263): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r0, 0x4, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) 4.975941513s ago: executing program 0 (id=264): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) 4.317794436s ago: executing program 4 (id=265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff00"}) 4.167252655s ago: executing program 4 (id=268): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045519, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x58}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.74393753s ago: executing program 0 (id=270): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$kcm(0x10, 0x2, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) ioctl$FITRIM(r0, 0xc0185879, 0x0) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)=""/76, 0x4c}, {0x0}], 0x2, &(0x7f0000000640)=""/175, 0xaf}, 0x1}], 0x1, 0x2002, 0x0) 3.423065732s ago: executing program 2 (id=272): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r2, 0x3, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) 3.159904699s ago: executing program 2 (id=273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8004) 3.144554852s ago: executing program 4 (id=275): setresuid(0x0, 0xee00, 0xee01) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setresuid(0xffffffffffffffff, r1, 0xee01) 3.051963748s ago: executing program 2 (id=276): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0xffff8880b840e000) 3.05178975s ago: executing program 4 (id=277): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0xa1, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.007893894s ago: executing program 2 (id=278): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x1a, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x28}}, 0x0) 2.884839524s ago: executing program 1 (id=279): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) 2.815821665s ago: executing program 2 (id=280): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) 2.815570259s ago: executing program 3 (id=281): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) 2.77035788s ago: executing program 3 (id=282): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) r5 = socket$inet(0x2, 0x1006, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_mreq(r5, 0x0, 0x23, 0x0, 0x0) 2.747705694s ago: executing program 0 (id=283): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0xffffffff, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x7b, 0x0, 0x0, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0x8000, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400002], [0x6, 0x6, 0x80000001, 0x5, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.687310924s ago: executing program 1 (id=284): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pread64(r1, 0x0, 0x0, 0xce2) close_range(r0, 0xffffffffffffffff, 0x0) 2.527851093s ago: executing program 1 (id=285): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="05000806", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r1}, 0x14) 1.79363566s ago: executing program 3 (id=286): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYBLOB], 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.748444494s ago: executing program 0 (id=287): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008c08}, 0x4000) 1.671437926s ago: executing program 1 (id=288): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e0b06c90006"], 0xe) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e041e0b20"], 0x7) 1.615844251s ago: executing program 0 (id=289): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1.615629171s ago: executing program 1 (id=290): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) 1.423362057s ago: executing program 4 (id=291): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000001800)=[{0x63, 0x2800, 0x0, 0x0}, {0x63, 0x1011, 0x0, 0x0}], 0x2}) 1.204148466s ago: executing program 3 (id=292): syz_emit_ethernet(0xd6, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xa0, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0xf, "1d6ace8f8ca9100083faa1f1a6db56fa1ede4bc5398bd6606aaa671ffdd8e79d60cde5302fa555d0f9e0b2fa0d62fffea7fab292bbcd05812814821553a38e86fe6101bf2c4e313e4f930b10cd9a70cebc77f319c1857ad9d50341d17b5e7857a871249feab9b7b485d93f657e39417fb957d1b7fa15"}]}}}}}}, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4084}, 0x5044) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0xe8ed, @private1, 0x80}}, 0x4, 0x8000}, &(0x7f0000000080)=0x90) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r7 = syz_open_pts(r6, 0x0) read(r7, &(0x7f0000000180)=""/209, 0x7b) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x4) 871.893291ms ago: executing program 1 (id=293): fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f000017f000/0x2000)=nil, 0x2000, 0x8000, 0x0, 0x0, 0x2) 216.318334ms ago: executing program 4 (id=294): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETLINK(r1, 0x4020940d, 0x200000000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x9, 0x5, 0x17, 0x8, "038b0ced01d119456adc3b7aa5fda49436ef7fc25f433b0666324210780fd75009efb2033b1d6397f69e31a3b8a6f59f3ad6a6cfc3e99f3ca0cc8e0cda21bfcc", "1adad85867f7c226807b0f528c3e616ddbcdbbb3dc002b7ee11f8d8752ac335b", [0x5]}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRESHEX=r7], 0x6c}, 0x1, 0x0, 0x0, 0x801}, 0x40000) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r6, @ANYRES32=0x1, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0000000001000000000000000000"], 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000c40)=ANY=[@ANYBLOB="0180c200000050a245d5cde086dd4500001c000000000002907800000000ffffffff1cff49dc958bb45948a35779ee2fb5981200907800000000"], 0x0) 80.660145ms ago: executing program 3 (id=295): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x6, @mcast1, 0x9545}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@hoplimit={{0x14, 0x29, 0x34, 0xf}}], 0x18}}], 0x1, 0x8000) 47.042208ms ago: executing program 2 (id=296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @local}, 0x10) 0s ago: executing program 3 (id=297): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. [ 35.340623][ T6509] cgroup: Unknown subsys name 'net' [ 35.481391][ T6509] cgroup: Unknown subsys name 'cpuset' [ 35.484863][ T6509] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.672255][ T6509] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 37.230849][ T6531] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.231528][ T6531] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.232197][ T6531] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.233090][ T6531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.233423][ T6531] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.233888][ T6531] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.234405][ T6531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.234715][ T6531] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 37.235003][ T6531] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.235290][ T6531] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.235702][ T6531] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.236533][ T6531] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.236778][ T6531] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.238147][ T6531] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 37.238463][ T6531] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.238785][ T6531] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.239368][ T6531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.239607][ T6531] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 37.240265][ T6531] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.240735][ T6531] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.240977][ T6531] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.241608][ T6531] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.242430][ T6531] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.247651][ T6530] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 37.258156][ T6523] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 37.517781][ T6519] chnl_net:caif_netlink_parms(): no params data found [ 37.594722][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 37.667420][ T6519] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.667546][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.667677][ T6519] bridge_slave_0: entered allmulticast mode [ 37.668581][ T6519] bridge_slave_0: entered promiscuous mode [ 37.670547][ T6519] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.670607][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.670705][ T6519] bridge_slave_1: entered allmulticast mode [ 37.671537][ T6519] bridge_slave_1: entered promiscuous mode [ 37.708249][ T6522] chnl_net:caif_netlink_parms(): no params data found [ 37.721392][ T6519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.723020][ T6519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.782050][ T6519] team0: Port device team_slave_0 added [ 37.798443][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.800622][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.802891][ T6527] bridge_slave_0: entered allmulticast mode [ 37.805675][ T6527] bridge_slave_0: entered promiscuous mode [ 37.807290][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.807335][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.807437][ T6527] bridge_slave_1: entered allmulticast mode [ 37.808252][ T6527] bridge_slave_1: entered promiscuous mode [ 37.809330][ T6520] chnl_net:caif_netlink_parms(): no params data found [ 37.822293][ T6519] team0: Port device team_slave_1 added [ 37.872359][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.872444][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.872500][ T6519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.876588][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.876625][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.876656][ T6519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.905881][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.908194][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.919134][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 37.941474][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.941573][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.941681][ T6522] bridge_slave_0: entered allmulticast mode [ 37.942552][ T6522] bridge_slave_0: entered promiscuous mode [ 37.943913][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.943973][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.944105][ T6522] bridge_slave_1: entered allmulticast mode [ 37.944969][ T6522] bridge_slave_1: entered promiscuous mode [ 37.959859][ T6519] hsr_slave_0: entered promiscuous mode [ 37.962113][ T6519] hsr_slave_1: entered promiscuous mode [ 37.983535][ T6527] team0: Port device team_slave_0 added [ 37.985406][ T6527] team0: Port device team_slave_1 added [ 38.035377][ T6522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.038302][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.038353][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.038389][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.039889][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.039913][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.039944][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.096834][ T6522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.117576][ T6520] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.119778][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.120896][ T6520] bridge_slave_0: entered allmulticast mode [ 38.121764][ T6520] bridge_slave_0: entered promiscuous mode [ 38.123188][ T6520] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.123233][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.123338][ T6520] bridge_slave_1: entered allmulticast mode [ 38.124209][ T6520] bridge_slave_1: entered promiscuous mode [ 38.124763][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.124808][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.124909][ T6526] bridge_slave_0: entered allmulticast mode [ 38.125787][ T6526] bridge_slave_0: entered promiscuous mode [ 38.127255][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.127307][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.127407][ T6526] bridge_slave_1: entered allmulticast mode [ 38.128300][ T6526] bridge_slave_1: entered promiscuous mode [ 38.143579][ T6522] team0: Port device team_slave_0 added [ 38.146546][ T6527] hsr_slave_0: entered promiscuous mode [ 38.147077][ T6527] hsr_slave_1: entered promiscuous mode [ 38.147432][ T6527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.147499][ T6527] Cannot create hsr debugfs directory [ 38.172728][ T6522] team0: Port device team_slave_1 added [ 38.231125][ T6520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.232523][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.234160][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.242345][ T6522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.242393][ T6522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.242446][ T6522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.267389][ T6520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.287411][ T6522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.287460][ T6522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.287500][ T6522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.316068][ T6526] team0: Port device team_slave_0 added [ 38.320529][ T6526] team0: Port device team_slave_1 added [ 38.324036][ T6520] team0: Port device team_slave_0 added [ 38.353822][ T6520] team0: Port device team_slave_1 added [ 38.403847][ T6522] hsr_slave_0: entered promiscuous mode [ 38.406018][ T6522] hsr_slave_1: entered promiscuous mode [ 38.407997][ T6522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.409472][ T6522] Cannot create hsr debugfs directory [ 38.426305][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.426351][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.426402][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.427457][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.427481][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.427515][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.434244][ T6520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.434271][ T6520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.434313][ T6520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.435475][ T6520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.435500][ T6520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.435534][ T6520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.531419][ T6520] hsr_slave_0: entered promiscuous mode [ 38.531915][ T6520] hsr_slave_1: entered promiscuous mode [ 38.532287][ T6520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.532324][ T6520] Cannot create hsr debugfs directory [ 38.544832][ T6526] hsr_slave_0: entered promiscuous mode [ 38.545423][ T6526] hsr_slave_1: entered promiscuous mode [ 38.545801][ T6526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.545831][ T6526] Cannot create hsr debugfs directory [ 38.583358][ T6519] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.588563][ T6519] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.623198][ T6519] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.629819][ T6519] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.704293][ T6527] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.708299][ T6527] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.740221][ T6527] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.743872][ T6527] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.810338][ T6522] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.820834][ T6522] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.827806][ T6522] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.839670][ T6522] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.892005][ T6520] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.908143][ T6520] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.912408][ T6520] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.915931][ T6520] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.963492][ T6519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.973150][ T6526] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.979986][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.993375][ T6526] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.996850][ T6526] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.010040][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.010294][ T6526] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.041571][ T6519] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.046106][ T764] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.046241][ T764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.072500][ T649] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.072575][ T649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.073605][ T649] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.073669][ T649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.075203][ T649] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.075250][ T649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.085424][ T6520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.138545][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.142769][ T6527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.161584][ T6519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.161654][ T6519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.165308][ T6520] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.186903][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.187007][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.195772][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.196038][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.206616][ T6522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.216942][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.277751][ T6522] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.286184][ T649] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.286268][ T649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.288197][ T649] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.288242][ T649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.308990][ T6533] Bluetooth: hci1: command tx timeout [ 39.309205][ T6533] Bluetooth: hci0: command tx timeout [ 39.309337][ T6533] Bluetooth: hci3: command tx timeout [ 39.309441][ T6533] Bluetooth: hci2: command tx timeout [ 39.309557][ T6533] Bluetooth: hci4: command tx timeout [ 39.322851][ T649] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.322925][ T649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.361651][ T649] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.361724][ T649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.407165][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.429542][ T6519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.437876][ T6522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.442997][ T6522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.510290][ T6527] veth0_vlan: entered promiscuous mode [ 39.516172][ T6527] veth1_vlan: entered promiscuous mode [ 39.539874][ T6519] veth0_vlan: entered promiscuous mode [ 39.559913][ T6519] veth1_vlan: entered promiscuous mode [ 39.574374][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.577078][ T6527] veth0_macvtap: entered promiscuous mode [ 39.582980][ T6527] veth1_macvtap: entered promiscuous mode [ 39.607719][ T6520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.616761][ T6519] veth0_macvtap: entered promiscuous mode [ 39.635906][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.648340][ T6522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.652434][ T6519] veth1_macvtap: entered promiscuous mode [ 39.663974][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.682483][ T6527] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.682578][ T6527] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.682610][ T6527] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.682640][ T6527] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.705901][ T6520] veth0_vlan: entered promiscuous mode [ 39.731029][ T6520] veth1_vlan: entered promiscuous mode [ 39.736461][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.757821][ T6522] veth0_vlan: entered promiscuous mode [ 39.772378][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.795475][ T6519] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.798074][ T6519] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.799555][ T6519] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.799589][ T6519] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.811613][ T6520] veth0_macvtap: entered promiscuous mode [ 39.834222][ T6520] veth1_macvtap: entered promiscuous mode [ 39.837443][ T6522] veth1_vlan: entered promiscuous mode [ 39.843247][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.843323][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.854734][ T6520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.860182][ T6520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.875304][ T6520] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.877756][ T6520] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.878878][ T6520] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.878911][ T6520] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.896040][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.897034][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.932057][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.932111][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.991456][ T6527] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.002905][ T6522] veth0_macvtap: entered promiscuous mode [ 40.004815][ T6522] veth1_macvtap: entered promiscuous mode [ 40.012761][ T6522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.053277][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.053335][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.056265][ T6522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.057775][ T6522] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.057815][ T6522] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.057845][ T6522] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.057875][ T6522] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.065730][ T764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.065761][ T764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.144374][ T6526] veth0_vlan: entered promiscuous mode [ 40.188112][ T6526] veth1_vlan: entered promiscuous mode [ 40.206066][ T764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.206117][ T764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.256599][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.256650][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.292659][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.292871][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.926645][ T6526] veth0_macvtap: entered promiscuous mode [ 40.933928][ T6526] veth1_macvtap: entered promiscuous mode [ 40.992569][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.015515][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.028380][ T6526] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.038017][ T6526] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.038090][ T6526] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.038127][ T6526] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.046302][ T6637] loop1: detected capacity change from 0 to 1024 [ 41.121646][ T6637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.175774][ T6642] loop0: detected capacity change from 0 to 2048 [ 41.339652][ T6642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.371052][ T6647] xt_CT: No such helper "syz1" [ 41.378911][ T6530] Bluetooth: hci4: command tx timeout [ 41.380555][ T6523] Bluetooth: hci3: command tx timeout [ 41.380628][ T6523] Bluetooth: hci0: command tx timeout [ 41.380683][ T6523] Bluetooth: hci1: command tx timeout [ 41.382543][ T6533] Bluetooth: hci2: command tx timeout [ 42.152655][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.152710][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.282959][ T6646] loop3: detected capacity change from 0 to 32768 [ 42.286200][ T6646] (syz.3.4,6646,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 42.286934][ T6646] (syz.3.4,6646,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 42.296983][ T705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.297046][ T705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.733069][ T6658] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 42.972378][ T6655] loop2: detected capacity change from 0 to 4096 [ 42.976731][ T6646] JBD2: Ignoring recovery information on journal [ 43.025173][ T6519] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.043101][ T6646] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 43.059607][ T6527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.217450][ T6665] overlayfs: failed to resolve './file1': -2 [ 43.487240][ T6671] bridge0: port 3(gretap0) entered blocking state [ 43.487671][ T6671] bridge0: port 3(gretap0) entered disabled state [ 43.489625][ T6671] gretap0: entered allmulticast mode [ 43.502675][ T6671] gretap0: entered promiscuous mode [ 43.505156][ T6671] bridge0: port 3(gretap0) entered blocking state [ 43.505258][ T6671] bridge0: port 3(gretap0) entered forwarding state [ 43.768072][ T6671] gretap0: left allmulticast mode [ 43.768259][ T6671] gretap0: left promiscuous mode [ 43.769169][ T6671] bridge0: port 3(gretap0) entered disabled state [ 43.799266][ T6530] Bluetooth: hci4: command tx timeout [ 43.800213][ T6530] Bluetooth: hci2: command tx timeout [ 43.800957][ T6530] Bluetooth: hci1: command tx timeout [ 43.801293][ T6530] Bluetooth: hci0: command tx timeout [ 43.801595][ T6530] Bluetooth: hci3: command tx timeout [ 44.082500][ T6674] loop4: detected capacity change from 0 to 8 [ 44.085957][ T6674] ======================================================= [ 44.085957][ T6674] WARNING: The mand mount option has been deprecated and [ 44.085957][ T6674] and is ignored by this kernel. Remove the mand [ 44.085957][ T6674] option from the mount to silence this warning. [ 44.085957][ T6674] ======================================================= [ 44.095784][ T6674] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 44.128366][ T6667] loop0: detected capacity change from 0 to 1024 [ 44.165555][ T6667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.193506][ T6674] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 44.196428][ T6670] udevd[6670]: incorrect cramfs checksum on /dev/loop4 [ 44.217315][ T6522] ocfs2: Unmounting device (7,3) on (node local) [ 44.295346][ T6664] loop1: detected capacity change from 0 to 32768 [ 44.306870][ T6664] (syz.1.9,6664,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 44.310156][ T6664] (syz.1.9,6664,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 44.322145][ T6670] udevd[6670]: incorrect cramfs checksum on /dev/loop4 [ 44.344371][ T6664] JBD2: Ignoring recovery information on journal [ 44.454693][ T6664] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 44.475820][ T6519] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.271607][ T6686] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13'. [ 45.492788][ T6527] ocfs2: Unmounting device (7,1) on (node local) [ 45.589889][ T6696] process 'syz.3.14' launched './file2' with NULL argv: empty string added [ 45.859309][ T6533] Bluetooth: hci3: command tx timeout [ 45.861088][ T6530] Bluetooth: hci0: command tx timeout [ 45.862897][ T6530] Bluetooth: hci1: command tx timeout [ 45.864740][ T6530] Bluetooth: hci2: command tx timeout [ 45.867023][ T6530] Bluetooth: hci4: command tx timeout [ 46.243319][ T6701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.246350][ T6701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.255073][ T6701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.257875][ T6701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.548911][ T6524] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 46.713090][ T6726] Zero length message leads to an empty skb [ 46.728849][ T6524] usb 1-1: Using ep0 maxpacket: 16 [ 46.736538][ T6524] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 46.736632][ T6524] usb 1-1: config 1 has no interface number 0 [ 46.736675][ T6524] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 46.736711][ T6524] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 46.736745][ T6524] usb 1-1: config 1 interface 105 has no altsetting 0 [ 46.738727][ T6524] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 46.738762][ T6524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.738787][ T6524] usb 1-1: Product: syz [ 46.738809][ T6524] usb 1-1: Manufacturer: syz [ 46.738830][ T6524] usb 1-1: SerialNumber: syz [ 46.758193][ T6706] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 46.758316][ T6706] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 47.010222][ T6744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.013755][ T6744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.191100][ T6751] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.192411][ T6706] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 47.192494][ T6706] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 48.401589][ T6524] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 48.583858][ T6770] netlink: 'syz.4.37': attribute type 1 has an invalid length. [ 48.583930][ T6770] netlink: 208 bytes leftover after parsing attributes in process `syz.4.37'. [ 48.591712][ T6524] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 48.597588][ T6524] aqc111 1-1:1.105 eth0: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 48.652984][ T6773] random: crng reseeded on system resumption [ 48.757261][ T6778] netlink: 128 bytes leftover after parsing attributes in process `syz.1.40'. [ 48.817785][ T3912] usb 1-1: USB disconnect, device number 2 [ 48.819522][ T3912] aqc111 1-1:1.105 eth0: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 48.860873][ T3912] aqc111 1-1:1.105 eth0 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 48.864839][ T3912] aqc111 1-1:1.105 eth0 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 48.864942][ T3912] aqc111 1-1:1.105 eth0 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 48.865666][ T6784] warning: `syz.1.40' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 48.991223][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.991535][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.031125][ T6794] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 49.044334][ T6797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.044417][ T6797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.050421][ T6797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.050464][ T6797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.101747][ T6803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.106408][ T6803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.102196][ T6828] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.102286][ T6828] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 50.235784][ T6843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.53'. [ 50.300220][ T6828] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.300328][ T6828] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 50.479522][ T6828] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.479841][ T6828] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 51.290537][ T6828] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 51.290597][ T6828] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 51.392272][ T31] audit: type=1326 audit(51.050:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6882 comm="syz.4.64" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155a7a8 code=0x0 [ 51.451069][ T6828] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 51.451971][ T6828] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 52.294329][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.294652][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.628807][ T6576] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 52.789202][ T6576] usb 1-1: Using ep0 maxpacket: 32 [ 52.792034][ T6576] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 52.792098][ T6576] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 52.792135][ T6576] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 52.792168][ T6576] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 52.805633][ T6576] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 52.805685][ T6576] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.805727][ T6576] usb 1-1: Product: syz [ 52.805755][ T6576] usb 1-1: Manufacturer: syz [ 52.805782][ T6576] usb 1-1: SerialNumber: syz [ 52.821636][ T6576] usb 1-1: config 0 descriptor?? [ 53.115427][ T6973] syz.4.72 uses obsolete (PF_INET,SOCK_PACKET) [ 53.943917][ T6576] usb 1-1: USB disconnect, device number 3 [ 54.159159][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 54.235257][ T6985] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.375298][ T6992] macvlan0: entered allmulticast mode [ 54.375359][ T6992] veth1_vlan: entered allmulticast mode [ 54.386400][ T6992] veth1_vlan: left allmulticast mode [ 54.463092][ T6992] macvlan0 (unregistering): left allmulticast mode [ 54.700335][ T7018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.703180][ T7018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.823711][ T7028] binder: BINDER_SET_CONTEXT_MGR already set [ 54.823815][ T7028] binder: 7025:7028 ioctl 4018620d 20000040 returned -16 [ 54.828259][ T7028] binder: 7025:7028 got transaction to invalid handle, 1 [ 54.830956][ T7028] binder: 7028:7025 cannot find target node [ 54.831025][ T7028] binder: 7025:7028 transaction call to 0:0 failed 3/29201/-22, code 0 size 1792-0 line 3152 [ 54.831559][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 55.675649][ T7040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.677280][ T7040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.817849][ T7044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.820767][ T7044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.109271][ T7057] netlink: 32 bytes leftover after parsing attributes in process `syz.0.98'. [ 57.629958][ T7067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.630324][ T7067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.726135][ T7070] binder: 7065:7070 BC_CLEAR_DEATH_NOTIFICATION invalid ref 5 [ 59.336753][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.339675][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.696401][ T7123] netlink: 'syz.1.118': attribute type 1 has an invalid length. [ 63.050720][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.124'. [ 63.050793][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.124'. [ 63.062950][ T7140] Lens B: ================= START STATUS ================= [ 63.063019][ T7140] Lens B: Focus, Absolute: 0 [ 63.063104][ T7140] Lens B: ================== END STATUS ================== [ 63.395774][ T7135] Bluetooth: MGMT ver 1.23 [ 64.330286][ T7168] macvlan0: entered allmulticast mode [ 64.330352][ T7168] veth1_vlan: entered allmulticast mode [ 64.422247][ T7164] loop8: detected capacity change from 0 to 16384 [ 64.496448][ T7174] netlink: 32 bytes leftover after parsing attributes in process `syz.0.135'. [ 64.821554][ T7181] netlink: 68 bytes leftover after parsing attributes in process `syz.2.132'. [ 64.828235][ T2410] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.851777][ T6603] libceph: connect (1)[c::]:6789 error -101 [ 64.856406][ T6603] libceph: mon0 (1)[c::]:6789 connect error [ 65.188658][ T6603] libceph: connect (1)[c::]:6789 error -101 [ 65.204051][ T6603] libceph: mon0 (1)[c::]:6789 connect error [ 65.212383][ T7178] ceph: No mds server is up or the cluster is laggy [ 65.476179][ T7186] (syz.3.138,7186,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 65.476324][ T7186] (syz.3.138,7186,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 66.237560][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 66.391917][ T7192] [U] M٭q& K4 [ 67.192806][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 67.439460][ T7209] netlink: 996 bytes leftover after parsing attributes in process `syz.3.146'. [ 68.322306][ T7190] [U] [)U}ǔJ}Nsef* nZf[F_h'W"x~;vA [ 68.378689][ T7211] macvlan0: entered allmulticast mode [ 68.378747][ T7211] veth1_vlan: entered allmulticast mode [ 68.384274][ T7220] veth0_vlan: entered allmulticast mode [ 68.391474][ T7222] veth0_vlan: left promiscuous mode [ 68.392491][ T7222] veth0_vlan: entered promiscuous mode [ 68.671364][ T7239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.671698][ T7239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.748449][ T7245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.748786][ T7245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.265213][ T7259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 69.959883][ T7265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.960254][ T7265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.089687][ T26] cfg80211: failed to load regulatory.db [ 71.719924][ T7289] macvlan0: entered allmulticast mode [ 71.721745][ T7289] veth1_vlan: entered allmulticast mode [ 71.724730][ T7289] veth1_vlan: left allmulticast mode [ 71.930829][ T7289] macvlan0 (unregistering): left allmulticast mode [ 73.796844][ T7321] IPv6: NLM_F_REPLACE set, but no existing node found! [ 73.964670][ T7331] binder: 7328:7331 tried to acquire reference to desc 0, got 1 instead [ 73.972900][ T7331] binder: 7328:7331 got transaction with invalid offsets ptr [ 73.973052][ T7331] binder: 7328:7331 transaction call to 7328:0 failed 10/29201/-14, code 0 size 0-1792 line 3375 [ 73.978725][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.014721][ T7334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.017504][ T7334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.149065][ T7347] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 74.331378][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.331679][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.335775][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.336100][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.096774][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 76.158303][ T7387] vhci_hcd: invalid port number 96 [ 76.158355][ T7387] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 77.166097][ T7405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.166399][ T7405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.338032][ T7419] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 79.120458][ T7438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.128146][ T7438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.371461][ T7447] netlink: 32 bytes leftover after parsing attributes in process `syz.0.226'. [ 79.451659][ T7452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.452731][ T7452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.544864][ T7466] binder: 7465:7466 tried to acquire reference to desc 0, got 1 instead [ 80.547765][ T7466] binder_alloc: 7465: binder_alloc_buf size 22272 failed, no address space [ 80.551840][ T7466] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 80.554571][ T7466] binder: cannot allocate buffer: no space left [ 80.554639][ T7466] binder: 7465:7466 transaction call to 7465:0 failed 16/29201/-28, code 0 size 16384-1792 line 3336 [ 80.648801][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.442278][ T7499] netlink: 'syz.2.240': attribute type 10 has an invalid length. [ 82.659004][ T6533] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 84.064169][ T7523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.067920][ T7523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.350475][ T7499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.352746][ T7499] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 97.099027][ T7547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.099354][ T7547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.414380][ T7558] capability: warning: `syz.3.258' uses deprecated v2 capabilities in a way that may be insecure [ 98.296455][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.298484][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.580345][ T7602] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.712721][ T7602] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.023994][ T7602] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.695404][ T7630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.701943][ T7630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.781792][ T7602] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.929517][ T7640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.939004][ T7640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.963369][ T7602] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.977950][ T7602] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.985143][ T7602] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.002481][ T7602] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.078432][ T7644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.079496][ T7644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.680427][ T7660] [ 102.681160][ T7660] ====================================================== [ 102.683011][ T7660] WARNING: possible circular locking dependency detected [ 102.684868][ T7660] 6.16.0-rc1-syzkaller-g39dfc971e42d #0 Not tainted [ 102.686645][ T7660] ------------------------------------------------------ [ 102.688571][ T7660] syz.4.294/7660 is trying to acquire lock: [ 102.690218][ T7660] ffff800092bd96e8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x24c/0x548 [ 102.693073][ T7660] [ 102.693073][ T7660] but task is already holding lock: [ 102.695074][ T7660] ffff0000c9ddcea8 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: loop_set_status+0x1d4/0x9e0 [ 102.697822][ T7660] [ 102.697822][ T7660] which lock already depends on the new lock. [ 102.697822][ T7660] [ 102.700621][ T7660] [ 102.700621][ T7660] the existing dependency chain (in reverse order) is: [ 102.703073][ T7660] [ 102.703073][ T7660] -> #2 (&q->q_usage_counter(io)#25){++++}-{0:0}: [ 102.705412][ T7660] blk_alloc_queue+0x48c/0x54c [ 102.706816][ T7660] __blk_mq_alloc_disk+0x12c/0x310 [ 102.708323][ T7660] loop_add+0x32c/0x88c [ 102.709591][ T7660] loop_init+0x168/0x1a0 [ 102.710909][ T7660] do_one_initcall+0x250/0x990 [ 102.712330][ T7660] do_initcall_level+0x154/0x214 [ 102.713809][ T7660] do_initcalls+0x84/0xf4 [ 102.715113][ T7660] do_basic_setup+0x8c/0xa0 [ 102.716444][ T7660] kernel_init_freeable+0x2dc/0x444 [ 102.717962][ T7660] kernel_init+0x24/0x1dc [ 102.719239][ T7660] ret_from_fork+0x10/0x20 [ 102.720549][ T7660] [ 102.720549][ T7660] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 102.722474][ T7660] fs_reclaim_acquire+0x8c/0x118 [ 102.723900][ T7660] kmem_cache_alloc_node_noprof+0x60/0x3f4 [ 102.725616][ T7660] __alloc_skb+0x144/0x2ec [ 102.726961][ T7660] alloc_uevent_skb+0x78/0x1e0 [ 102.728385][ T7660] kobject_uevent_net_broadcast+0x2d4/0x548 [ 102.730075][ T7660] kobject_uevent_env+0x528/0x884 [ 102.731544][ T7660] kobject_synth_uevent+0x82c/0xa74 [ 102.733064][ T7660] bus_uevent_store+0x114/0x16c [ 102.734507][ T7660] bus_attr_store+0x80/0xa4 [ 102.735856][ T7660] sysfs_kf_write+0x1a8/0x23c [ 102.737290][ T7660] kernfs_fop_write_iter+0x314/0x488 [ 102.738811][ T7660] vfs_write+0x62c/0x97c [ 102.740086][ T7660] ksys_write+0x120/0x210 [ 102.741376][ T7660] __arm64_sys_write+0x7c/0x90 [ 102.742811][ T7660] invoke_syscall+0x98/0x2b8 [ 102.744193][ T7660] el0_svc_common+0x130/0x23c [ 102.745650][ T7660] do_el0_svc+0x48/0x58 [ 102.746880][ T7660] el0_svc+0x58/0x17c [ 102.748112][ T7660] el0t_64_sync_handler+0x78/0x108 [ 102.749624][ T7660] el0t_64_sync+0x198/0x19c [ 102.750949][ T7660] [ 102.750949][ T7660] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 102.753100][ T7660] __lock_acquire+0x1774/0x30a4 [ 102.754514][ T7660] lock_acquire+0x14c/0x2e0 [ 102.755825][ T7660] __mutex_lock_common+0x1d0/0x2190 [ 102.757407][ T7660] mutex_lock_nested+0x2c/0x38 [ 102.758836][ T7660] kobject_uevent_net_broadcast+0x24c/0x548 [ 102.760583][ T7660] kobject_uevent_env+0x528/0x884 [ 102.762095][ T7660] kobject_uevent+0x2c/0x3c [ 102.763452][ T7660] loop_set_status+0x43c/0x9e0 [ 102.764864][ T7660] lo_ioctl+0x7f0/0x1b8c [ 102.766136][ T7660] blkdev_ioctl+0x610/0xac0 [ 102.767443][ T7660] __arm64_sys_ioctl+0x14c/0x1c4 [ 102.768888][ T7660] invoke_syscall+0x98/0x2b8 [ 102.770284][ T7660] el0_svc_common+0x130/0x23c [ 102.771655][ T7660] do_el0_svc+0x48/0x58 [ 102.772912][ T7660] el0_svc+0x58/0x17c [ 102.774135][ T7660] el0t_64_sync_handler+0x78/0x108 [ 102.775669][ T7660] el0t_64_sync+0x198/0x19c [ 102.777049][ T7660] [ 102.777049][ T7660] other info that might help us debug this: [ 102.777049][ T7660] [ 102.779805][ T7660] Chain exists of: [ 102.779805][ T7660] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#25 [ 102.779805][ T7660] [ 102.783489][ T7660] Possible unsafe locking scenario: [ 102.783489][ T7660] [ 102.785538][ T7660] CPU0 CPU1 [ 102.787004][ T7660] ---- ---- [ 102.788457][ T7660] lock(&q->q_usage_counter(io)#25); [ 102.789881][ T7660] lock(fs_reclaim); [ 102.791641][ T7660] lock(&q->q_usage_counter(io)#25); [ 102.793783][ T7660] lock(uevent_sock_mutex); [ 102.795032][ T7660] [ 102.795032][ T7660] *** DEADLOCK *** [ 102.795032][ T7660] [ 102.797240][ T7660] 3 locks held by syz.4.294/7660: [ 102.798582][ T7660] #0: ffff0000c9f50400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x40/0x9e0 [ 102.801142][ T7660] #1: ffff0000c9ddcea8 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: loop_set_status+0x1d4/0x9e0 [ 102.804037][ T7660] #2: ffff0000c9ddcee0 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: loop_set_status+0x1d4/0x9e0 [ 102.807005][ T7660] [ 102.807005][ T7660] stack backtrace: [ 102.808593][ T7660] CPU: 0 UID: 0 PID: 7660 Comm: syz.4.294 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 102.811513][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.814264][ T7660] Call trace: [ 102.815150][ T7660] show_stack+0x2c/0x3c (C) [ 102.816390][ T7660] __dump_stack+0x30/0x40 [ 102.817519][ T7660] dump_stack_lvl+0xd8/0x12c [ 102.818721][ T7660] dump_stack+0x1c/0x28 [ 102.819816][ T7660] print_circular_bug+0x324/0x32c [ 102.821268][ T7660] check_noncircular+0x154/0x174 [ 102.822574][ T7660] __lock_acquire+0x1774/0x30a4 [ 102.823827][ T7660] lock_acquire+0x14c/0x2e0 [ 102.825087][ T7660] __mutex_lock_common+0x1d0/0x2190 [ 102.826442][ T7660] mutex_lock_nested+0x2c/0x38 [ 102.827748][ T7660] kobject_uevent_net_broadcast+0x24c/0x548 [ 102.829335][ T7660] kobject_uevent_env+0x528/0x884 [ 102.830823][ T7660] kobject_uevent+0x2c/0x3c [ 102.832097][ T7660] loop_set_status+0x43c/0x9e0 [ 102.833352][ T7660] lo_ioctl+0x7f0/0x1b8c [ 102.834467][ T7660] blkdev_ioctl+0x610/0xac0 [ 102.835710][ T7660] __arm64_sys_ioctl+0x14c/0x1c4 [ 102.837055][ T7660] invoke_syscall+0x98/0x2b8 [ 102.838270][ T7660] el0_svc_common+0x130/0x23c [ 102.839557][ T7660] do_el0_svc+0x48/0x58 [ 102.840695][ T7660] el0_svc+0x58/0x17c [ 102.841814][ T7660] el0t_64_sync_handler+0x78/0x108 [ 102.843194][ T7660] el0t_64_sync+0x198/0x19c