last executing test programs: 9.039357232s ago: executing program 3 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 8.013573767s ago: executing program 3 (id=121): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="3c81c2e35d8724b584c586f2ae924b277f0443ec773eab2757910e28988217c9c45f1169bc", 0x25) 7.932184039s ago: executing program 3 (id=123): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f0000000100)={0x20, 0xc, 0x2, {0x2, 0x7}}, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "64a85d98"}]}}, 0x0}, 0x0) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.875640619s ago: executing program 0 (id=124): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000000c0)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@test_dummy_encryption}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e0, &(0x7f00000011c0)="$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") r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000280)=""/240, 0xf0}], 0x1, 0x33, 0x2) 6.963411723s ago: executing program 2 (id=126): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0x1, 0x4a1, &(0x7f00000001c0)="$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") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 6.813100726s ago: executing program 1 (id=127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 6.771886156s ago: executing program 0 (id=128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061121d000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x2c040090) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r1, &(0x7f0000019080)=""/102360, 0x18fd8, 0x2) 5.687842023s ago: executing program 1 (id=130): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da144f"], 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xfffff7ffffffffff}, {0x2cf, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0, 0x0, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz1\x00', {0x6fc9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x3, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0xbeb, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x8000, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x5, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x4, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x1, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x2, 0x1, 0x0, 0x6, 0x8000000, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0x1, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x1, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x0, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x10, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4000004, 0x1000, 0x1, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x100, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3d, 0x7, 0x2, 0x4, 0x4, 0x10, 0x340a, 0x0, 0x7fff, 0xffffffff, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) readv(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000a00)=""/113, 0x71}], 0x2) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/firmware/fdt', 0x80, 0x40) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffa000/0x4000)=nil) lseek(0xffffffffffffffff, 0x289e0cb5, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x1110, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff4}]}, @TIPC_NLA_NODE={0x10ec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xbf, 0x3, "6433261cabc7d6809000f4d450ac066d0a0731f60ac8b44d87728e37afe40110ca0e0fb7caddf19922cdc98bc082a9cc601142dba125bb83b76136fb33029eb6188151e9e2e94a96d51f48e2166dcec35a1c29560963c185d3fcbb238b230f5543fec0c239d081106543cf4991e56b000e94be481aadd3a8ce2a333840bf8923b037898fe975afac426a28166f1454ab920ca2b40eda1ab7aedefabe6bfa169ace87f8c0ddb924f9c96a34cfe0f01dcb4cba466fc1f77cc7908cbf"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xf44, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xcc, 0x3, "06e3eb7bce7bc60b0025d58ba902a396e586697208a84c8adfbe181ab4a65d820e1717660c9bbcee73b4efc5e8437660e8b200aa345b49633fba50f41ffcac001fffa9a6e306662601f7ced61350f75d8dc4b216613041bb67f2db1dd4843bc694d20ec57d257676ded94060a741aa86e0a0ca7b6a1940e2dbe12b42dc0c6c21fd01668bc11785ccbbe0805bfc9e414f99737491cde21e0c1a81ac7153dae86dfde2cd6f8042fb5a077294949b2837fb1a44d7074acd06826c8efbb8e4adf082c04ef1d77c746a1c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x4}]}, 0x1110}, 0x1, 0x0, 0x0, 0x4085}, 0x20000800) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000040)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmallocinfo\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) 5.668547183s ago: executing program 3 (id=132): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000240), 0x0, 0xfffffffffffffff9) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x10) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000740)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a\xdd\x05\xdc\xb8\xc7\xb4v\x1f\xe3\xb6)\x1dM\x1e\xf9\x97\xffLW\x82\t\xf7\xb4\xe2fP\b\n\xdd\x03\x9d&\xd2\xce0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) 4.637354239s ago: executing program 1 (id=136): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$tcp_mem(r0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$eJzsmbFrFEEUxr+Z3ds7gwRtLGwsDBjR7O3uqaSJEMFSEKKo5WHWEN3k5LJC7kDwsLHRzkKwtbG0sLCy8C+w1UIFwcIrBQthZGZnd4e93fMOTwXzfpDJN/PezLz3YF6xB4Ig9iyfPn778PDc8qWTAPZjAXW9/sXKfbjh//7JnROPV84/ffHu2Zvt+buviucxAEJUXve9aHIAvF61EIPZyYoQmM/tC0YIWuMyOI5rfQUMbiJ/CEUyCcFwTfvcNHRnnxZR6F7vROs3NqPQk4Mvh0AOLTM+GdRwwLAOoKGiE4IZ9p1e/1Y7isJuUdREes+IaVrBK8up41vlWEFaPSGk/9UH9wdyrmsDDzyrnw8OX+sWGNa0XkYdruvmJTHyP2zn51uT5D9jcVbd9WjSXc+VOLj05wNLRPpGptkly/g3SvcfidpMzmHFFfmgs5VDw7QHmj6f/1nu+LVPY/xjhLaPmN7ORdGF34jQKSlUJvL+JDv7MaM/2bCz/tGMt243d3r9pc2t9ka4EW4HQeuMd8rzTgdN1YiScUz/a6j+NGecX6vwdZiD3XYcd/1dIO762TxIxjwBrL3sfJVbDkD1P47Fo+oI1VNV2vXyO5j+4+q/VItWuee9ypwIgiAIgiAIgiAIgiAIgiDKOQKG5JcwwfQH0TKCi+oL5c8AAAD//40vYXw=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000040)={0x3000000, 0x10000002000003, 0x0, 0x0, 0x300}) 4.529458981s ago: executing program 3 (id=137): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = msgget$private(0x0, 0x790) msgctl$IPC_RMID(r0, 0x0) 2.440005913s ago: executing program 2 (id=138): r0 = getpgid(0x0) get_robust_list(r0, &(0x7f0000003780)=0x0, &(0x7f00000037c0)) 2.329553145s ago: executing program 2 (id=139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x5c, r1, 0x1, 0x0, 0x4000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1152}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.329326215s ago: executing program 4 (id=140): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2.261941746s ago: executing program 0 (id=141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 2.185192147s ago: executing program 1 (id=142): ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000300)={0x4, 0x6, 0x3, 0x0, 0x3, [0x0, 0xdc, 0x0, 0x5]}) io_uring_setup(0x1f8b, &(0x7f0000000480)={0x0, 0x2c2c, 0x1, 0x3, 0x307}) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 2.184821337s ago: executing program 2 (id=143): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f0000000100)={0x20, 0xc, 0x2, {0x2, 0x7}}, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "64a85d98"}]}}, 0x0}, 0x0) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.905540801s ago: executing program 4 (id=144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x8b501a, 0x0) 1.236474182s ago: executing program 1 (id=145): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000f40)={[{@gid_forget}, {@adinicb}, {}, {@umask={'umask', 0x3d, 0x1}}, {@shortad}, {}, {@undelete}, {@uid}, {@lastblock={'lastblock', 0x3d, 0x3ff}}, {@longad}, {@dmode={'dmode', 0x3d, 0x9}}, {@nostrict}, {@partition={'partition', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0xffff}}]}, 0x2, 0xc2d, &(0x7f00000001c0)="$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") 1.233107502s ago: executing program 0 (id=146): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) 1.177603372s ago: executing program 4 (id=147): socket(0x10, 0x3, 0x0) unshare(0x2a020400) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084149, &(0x7f0000000080)) 1.177276502s ago: executing program 3 (id=148): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x44, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.154128272s ago: executing program 0 (id=149): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0xf8, r0, 'id1\x00'}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x5, &(0x7f0000000640)=[{0x6, 0x0, 0xa, 0x5}, {0xf, 0x7, 0xfc, 0x5}, {0x7, 0x1, 0xff, 0xffffffff}, {0x7, 0x4, 0x3, 0x5}, {0x75b4, 0xf8, 0x0, 0x8}]}, 0x10) sendmmsg(r8, &(0x7f0000000180), 0x4000190, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000000c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x2) 1.136468333s ago: executing program 4 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x89}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000084}, 0x4010) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, 0x0, 0x4) 1.027039645s ago: executing program 4 (id=151): socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/mdstat\x00', 0x0, 0x0) timer_delete(0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000dc0)=ANY=[@ANYBLOB="646d6f64653d3078303030303030303030303030303062312c757466382c6f76657272696465726f636b7065726d2c636865636b3d72656c617865642c6e6f726f636b2c696f636861727365743d6d61636761656c69632c6d61703d6f66662c6d6f64653d3078303030303030303030303030303030362c696f636861727365743d63703433372c73657373696f6e3d3078303030303030303030303030303031302c6f76657272696465726f636b7065726d2c6d6f64653d3078303030303030303030303030313030302c696f636861727365743d69736f383835392d352c6e6f6a6f6c6965742c636865636b3d72656c617865642c00797e518698b10b3f16374bd3575cf06ae53c8e0895d04f696a3e035a8da998e23ff8b2329374c0d54a00c45eb635de47bbaaa67e3cb6c498c6a3e4446fdab9e6fdff6e25f96e6b1c7267eda815d64b3475c0c1000087eead6f12fd328b73c7db8716399eb06e59fd31573df2c00aa94f2d"], 0x1, 0xa2f, &(0x7f0000000380)="$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") write(0xffffffffffffffff, &(0x7f0000000040)="3a03000018", 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000600b500c9020000060012000000fb8c0a000600ffffffffffff00001c008100050001"], 0x60}}, 0x0) 855.843177ms ago: executing program 1 (id=152): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[], 0x48}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x16) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000280)={'wg0\x00', 0x200}) write$rfkill(r0, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x4}, 0x8) 51.36693ms ago: executing program 0 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_usb_connect(0x0, 0xe3, &(0x7f0000000180)=ANY=[@ANYBLOB="12014101c8082520890436e0a33f010203010902d1000101031000090439"], 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) chdir(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ac1414aa00001100000000001c0000000000000000000000070000004404730001000000f092f2301cc09f605c7688c634988a97d57857b4d044d1ac39885bb990bca8c250cf6bdb5efc0e02d78d2a522467713035a900004aef77dadc810e2029ce0c03e477a8522ed59d34ae4eb8186505af216dafd3715afe5c90667861debcc2d352a66020eb"], 0x40}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIuHMyla+uPCV7MS9HhQG+8miE9K6PpMpp0rHXgduFuvJEheOFAvNd7L4f/gH/FQIdDRvHGm8hJT7quSdasy9rMfD5w2vfNe5L3PDnnefOenIQEMLQmsj+FiJcj4psk4nBEJHnbaOSNE2vrrT68Xs6WJBqNT/5KsvX2R0S59Vit+x3MKy9FxK9fRZwstPdbW16ZL1Uq6WJe3xsLVyZryyunLi2U5tK59PL0zMyZt2am333n7b7E2fhy7f/Hdz848/Xx1e9+vn/kdhJn41DensXVh25ubKxMxET+nIzF2U0rTvWhs0GS7PYGsC0jeZ6PRTYGHI6RPOuB/77sZbEBDKlE/sOQas0DWuf2fToPfmE8eH/tBKg9/tG190ZiX/Pc6MBq8tiZUXa+O96H/rM+fvnjzu1sif69DwGwpRs3I+L06Gj7+Jfk49/2ne5hnc19GP9g59zN5j9vdJr/FNbnP9Fh/nOwQ+5ux9b5X7jfh266yuZ/73Wc/65ftBofyWv/a875xpKLlyppNrb9PyJOxNjerP6k6zlnVu81urVtnP9lS9Z/ay6Yb8f90b2P32e2VC89S8wbPbgZ8UrH+W+yvv+TDvs/ez7O99jHsfTOa93ato7/+Wr8GPF6x/3/6IpWVpqsd70+Odk8HiZbR0W7v28d+61b/7sdf7b/Dzw5/vFk4/Xa2tP38cO+f9K8uG9z22PxR+/H/57k02Z5T37btVK9vjgVsSf5qP326Uf3bdVb62fxnzj+5PGv0/G/PyI+7zH+W0d/erVb2yDs/9mn2v9PX7j34Rffd+u/t/HvzWbpRH5LL+Nfrxv4LM8dAAAAAAAADJpCRByKpFBcLxcKxeLa5zuOxoFCpVqrn7xYXbo8G83vyo7HWKF1pfvwhs9DTOWfh23VpzfVZyLiSER8O7K/WS+Wq5XZ3Q4eAAAAAAAAAAAAAAAAAAAABsTBLt//z/w+0rb6Z3/u/CYCz5Of/IbhtWX+9+OXnoCB5PUfhpf8h+El/2F4yX8YXvIfhpf8h+El/2F4yX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq/PnzmVLY/Xh9XJWn726vDRfvXpqNq3NFxeWysVydfFKca5anaukxXJ1YavHq1SrV6amY+naZD2t1SdryysXFqpLl+sXLi2U5tIL6diORAUAAAAAAAAAAAAAAAAAAAAvltryynypUkkXFRS2VRgdjM1Q6HNht0cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjk3wAAAP//cHo1gQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus\x00', 0x400000, 0x40) getdents64(r2, 0x0, 0x22) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x90) mount(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 571.171µs ago: executing program 4 (id=154): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x1, r1}) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, 0x0, 0x0) epoll_create1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl(r3, 0x8936, &(0x7f0000000000)) 0s ago: executing program 2 (id=155): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x10, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 41.741616][ T4013] cgroup: Unknown subsys name 'net' [ 42.032279][ T4013] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.389109][ T4013] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 44.273794][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 44.320380][ T4028] chnl_net:caif_netlink_parms(): no params data found [ 44.344692][ T4023] chnl_net:caif_netlink_parms(): no params data found [ 44.382285][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.384337][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.387643][ T4025] device bridge_slave_0 entered promiscuous mode [ 44.395089][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.397400][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.399903][ T4025] device bridge_slave_1 entered promiscuous mode [ 44.440152][ T4024] chnl_net:caif_netlink_parms(): no params data found [ 44.469337][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.483084][ T4030] chnl_net:caif_netlink_parms(): no params data found [ 44.488245][ T4028] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.490282][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.492881][ T4028] device bridge_slave_0 entered promiscuous mode [ 44.498090][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.514242][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.516568][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.519072][ T4028] device bridge_slave_1 entered promiscuous mode [ 44.567908][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.569829][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.572602][ T4023] device bridge_slave_0 entered promiscuous mode [ 44.602070][ T4028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.606974][ T4025] team0: Port device team_slave_0 added [ 44.610347][ T4028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.616233][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.618273][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.620816][ T4023] device bridge_slave_1 entered promiscuous mode [ 44.633579][ T4025] team0: Port device team_slave_1 added [ 44.659733][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.661716][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.664394][ T4024] device bridge_slave_0 entered promiscuous mode [ 44.678157][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.680044][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.687372][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.712984][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.715028][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.718013][ T4024] device bridge_slave_1 entered promiscuous mode [ 44.720894][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.722806][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.730014][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.735279][ T4028] team0: Port device team_slave_0 added [ 44.747117][ T4030] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.749186][ T4030] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.751783][ T4030] device bridge_slave_0 entered promiscuous mode [ 44.756504][ T4023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.759227][ T4030] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.761276][ T4030] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.763920][ T4030] device bridge_slave_1 entered promiscuous mode [ 44.772851][ T4028] team0: Port device team_slave_1 added [ 44.783621][ T4023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.809459][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.811443][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.819056][ T4028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.837357][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.846215][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.848166][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.855194][ T4028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.866556][ T4030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.871090][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.878062][ T4030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.893499][ T4023] team0: Port device team_slave_0 added [ 44.968932][ T4025] device hsr_slave_0 entered promiscuous mode [ 45.005950][ T4025] device hsr_slave_1 entered promiscuous mode [ 45.068315][ T4023] team0: Port device team_slave_1 added [ 45.100983][ T4030] team0: Port device team_slave_0 added [ 45.157702][ T4028] device hsr_slave_0 entered promiscuous mode [ 45.195994][ T4028] device hsr_slave_1 entered promiscuous mode [ 45.235646][ T4028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.237858][ T4028] Cannot create hsr debugfs directory [ 45.241401][ T4024] team0: Port device team_slave_0 added [ 45.245119][ T4030] team0: Port device team_slave_1 added [ 45.253938][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.256092][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.263244][ T4023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.285671][ T4024] team0: Port device team_slave_1 added [ 45.303156][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.305115][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.313091][ T4030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.317289][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.319322][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.326973][ T4023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.343972][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.346036][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.353154][ T4030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.368547][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.370498][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.377872][ T4024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.395298][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.401076][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.409548][ T4024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.478167][ T4023] device hsr_slave_0 entered promiscuous mode [ 45.515919][ T4023] device hsr_slave_1 entered promiscuous mode [ 45.555659][ T4023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.557852][ T4023] Cannot create hsr debugfs directory [ 45.668512][ T4030] device hsr_slave_0 entered promiscuous mode [ 45.715954][ T4030] device hsr_slave_1 entered promiscuous mode [ 45.755669][ T4030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.757821][ T4030] Cannot create hsr debugfs directory [ 45.798220][ T4024] device hsr_slave_0 entered promiscuous mode [ 45.835954][ T4024] device hsr_slave_1 entered promiscuous mode [ 45.875721][ T4024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.877791][ T4024] Cannot create hsr debugfs directory [ 46.017288][ T4025] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.026127][ T1959] Bluetooth: hci4: command 0x0409 tx timeout [ 46.026226][ T4032] Bluetooth: hci2: command 0x0409 tx timeout [ 46.028413][ T1959] Bluetooth: hci0: command 0x0409 tx timeout [ 46.031263][ T1959] Bluetooth: hci3: command 0x0409 tx timeout [ 46.064657][ T4025] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.105687][ T1959] Bluetooth: hci1: command 0x0409 tx timeout [ 46.126892][ T4025] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.167618][ T4025] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.269826][ T4028] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.307803][ T4028] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.385372][ T4028] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.437670][ T4028] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.488514][ T4023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.571003][ T4023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.621483][ T4023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.675962][ T4023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.723332][ T4030] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.757887][ T4030] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.803458][ T4030] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.847859][ T4030] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.932701][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.990269][ T4024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.053691][ T4028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.056284][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.059956][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.066695][ T4024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.117982][ T4024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.172921][ T4024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.208869][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.220804][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.223724][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.227515][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.229575][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.232458][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.235302][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.238970][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.240971][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.243511][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.248545][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.251387][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.272099][ T4028] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.278081][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.291347][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.303302][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.309167][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.311921][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.314462][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.316465][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.324543][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.331179][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.334505][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.353131][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.355322][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.360346][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.363156][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.366341][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.368250][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.370614][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.373071][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.394257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.401459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.404627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.409656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.412324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.414909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.418854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.440254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.443175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.446643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.449396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.452462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.455048][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.457060][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.460940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.463538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.469111][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.471060][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.473420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.477365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.480018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.484319][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.499336][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.509090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.512169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.525744][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.528516][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.531333][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.550312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.553103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.565003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.569888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.580630][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.583221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.587171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.603343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.613184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.617104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.620495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.623239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.627161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.629813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.634158][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.640972][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.667152][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.675181][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.678462][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.680447][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.693088][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.699301][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.702616][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.704842][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.716723][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.726195][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.728962][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.730843][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.749881][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.753707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.778334][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.788328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.790823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.793756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.797323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.800762][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.802674][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.805057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.813059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.833118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.836163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.838938][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.840891][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.843268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.847857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.853587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.865093][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.869861][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.872030][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.874174][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.877449][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.898756][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.901068][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.904572][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.912050][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.914802][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.920861][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.923635][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.937522][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.941156][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.945069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.948898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.951922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.968998][ T4030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.973146][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.978518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.981537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.984478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.988560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.008287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.011155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.013945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.020146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.033406][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.036928][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.052315][ T4025] device veth0_vlan entered promiscuous mode [ 48.055334][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.058567][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.061168][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.065006][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.072347][ T4024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.083719][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.091944][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.094855][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.106556][ T1959] Bluetooth: hci4: command 0x041b tx timeout [ 48.108464][ T4073] Bluetooth: hci3: command 0x041b tx timeout [ 48.115018][ T4073] Bluetooth: hci0: command 0x041b tx timeout [ 48.117337][ T4073] Bluetooth: hci2: command 0x041b tx timeout [ 48.133066][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.136396][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.141184][ T4025] device veth1_vlan entered promiscuous mode [ 48.152094][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.154863][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.158918][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.167348][ T4028] device veth0_vlan entered promiscuous mode [ 48.178714][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.180808][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.186087][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 48.195931][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.198797][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.201698][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.204824][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.221721][ T4023] device veth0_vlan entered promiscuous mode [ 48.233379][ T4028] device veth1_vlan entered promiscuous mode [ 48.241174][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.251243][ T4023] device veth1_vlan entered promiscuous mode [ 48.270735][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.273460][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.276317][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.279082][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.284486][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.288601][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.306414][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.309120][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.311298][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.315372][ T4025] device veth0_macvtap entered promiscuous mode [ 48.336829][ T4025] device veth1_macvtap entered promiscuous mode [ 48.343393][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.351790][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.354486][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.357884][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.368668][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.390387][ T4028] device veth0_macvtap entered promiscuous mode [ 48.394617][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.398172][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.407369][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.417674][ T4023] device veth0_macvtap entered promiscuous mode [ 48.424244][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.433164][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.443944][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.446806][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.451077][ T4028] device veth1_macvtap entered promiscuous mode [ 48.462397][ T4023] device veth1_macvtap entered promiscuous mode [ 48.472859][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.479692][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.482556][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.494420][ T4025] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.498121][ T4025] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.500607][ T4025] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.502952][ T4025] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.515340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.519250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.529222][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.532142][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.536960][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.541915][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.544741][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.549644][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.551680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.554510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.558660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.561479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.564257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.568762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.613558][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.618039][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.620846][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.623605][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.628580][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.632722][ T4028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.635151][ T4028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.638631][ T4028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.640942][ T4028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.644824][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.649692][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.652526][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.656402][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.661704][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.664290][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.682280][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.685135][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.689692][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.693239][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.697797][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.704398][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.713717][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.717301][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.720141][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.723203][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.726872][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.741390][ T4030] device veth0_vlan entered promiscuous mode [ 48.743886][ T4024] device veth0_vlan entered promiscuous mode [ 48.774096][ T4023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.776618][ T4023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.778989][ T4023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.781353][ T4023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.794368][ T4030] device veth1_vlan entered promiscuous mode [ 48.802789][ T4024] device veth1_vlan entered promiscuous mode [ 48.810960][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.813179][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.855628][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.858485][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.861140][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.864392][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.869340][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.872124][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.916838][ T4030] device veth0_macvtap entered promiscuous mode [ 48.940312][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.942704][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.956683][ T4030] device veth1_macvtap entered promiscuous mode [ 48.959654][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.962377][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.965085][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.974600][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.018114][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.020936][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.026585][ T595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.028644][ T595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.038699][ T4024] device veth0_macvtap entered promiscuous mode [ 49.041869][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.044789][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.064021][ T4024] device veth1_macvtap entered promiscuous mode [ 49.086266][ T595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.088598][ T595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.093622][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.097529][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.100195][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.103120][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.108029][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.110939][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.124719][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.133274][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.137085][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.139754][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.144118][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.160824][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.163081][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.169289][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.203724][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.209997][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.212728][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.219702][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.222411][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.225197][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.235227][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.251194][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.254029][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.258723][ T595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.260927][ T595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.262707][ T4030] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.268436][ T4030] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.270816][ T4030] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.273133][ T4030] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.286391][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.317950][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.320860][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.323540][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.336961][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.339644][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.342413][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.345054][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.366185][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.386903][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.416683][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.419721][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.456886][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.459752][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.462358][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.465171][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.499918][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.502868][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.506097][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.509038][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.512073][ T4112] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 49.512912][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.528255][ T4024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.530727][ T4024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.533040][ T4024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.546123][ T4024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.595847][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.600674][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.622051][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.624381][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.656807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.680661][ T4116] loop0: detected capacity change from 0 to 2048 [ 49.729221][ T4109] loop3: detected capacity change from 0 to 32768 [ 49.733223][ T4118] loop2: detected capacity change from 0 to 2048 [ 49.737985][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.740206][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.806757][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.837256][ T4109] XFS (loop3): Mounting V5 Filesystem [ 49.895898][ T595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.898262][ T595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.901338][ T595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.904157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.954078][ T595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.969072][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.062897][ T4109] XFS (loop3): Ending clean mount [ 50.095139][ T4109] XFS (loop3): Quotacheck needed: Please wait. [ 50.105217][ T4131] loop4: detected capacity change from 0 to 1024 [ 50.147035][ T4109] XFS (loop3): Quotacheck: Done. [ 50.156332][ T4131] ======================================================= [ 50.156332][ T4131] WARNING: The mand mount option has been deprecated and [ 50.156332][ T4131] and is ignored by this kernel. Remove the mand [ 50.156332][ T4131] option from the mount to silence this warning. [ 50.156332][ T4131] ======================================================= [ 50.186130][ T4076] Bluetooth: hci2: command 0x040f tx timeout [ 50.188066][ T4076] Bluetooth: hci0: command 0x040f tx timeout [ 50.189826][ T4076] Bluetooth: hci3: command 0x040f tx timeout [ 50.191644][ T4076] Bluetooth: hci4: command 0x040f tx timeout [ 50.209458][ T4131] EXT4-fs (loop4): Ignoring removed oldalloc option [ 50.211338][ T4131] EXT4-fs (loop4): Ignoring removed bh option [ 50.213357][ T4131] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.266706][ T4076] Bluetooth: hci1: command 0x040f tx timeout [ 50.374655][ T4131] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 50.404715][ T4144] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2'. [ 50.855830][ T4025] XFS (loop3): Unmounting Filesystem [ 51.589540][ T4166] loop2: detected capacity change from 0 to 2048 [ 52.123579][ T4169] loop4: detected capacity change from 0 to 1024 [ 52.144585][ T4166] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 52.146947][ T4166] UDF-fs: Scanning with blocksize 512 failed [ 52.152188][ T4166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 52.251522][ T4169] blk_update_request: I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 52.255023][ T4169] EXT4-fs (loop4): unable to read superblock [ 52.265864][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 52.268145][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 52.270287][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 52.272206][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 52.283711][ T26] audit: type=1326 audit(52.240:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ffee8a8 code=0x7ffc0000 [ 52.312299][ T26] audit: type=1326 audit(52.240:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ffee8a8 code=0x7ffc0000 [ 52.332577][ T26] audit: type=1326 audit(52.250:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff9ffee8a8 code=0x7ffc0000 [ 52.351467][ T26] audit: type=1326 audit(52.250:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ffee8a8 code=0x7ffc0000 [ 52.366923][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 52.421548][ T26] audit: type=1326 audit(52.250:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ffee8a8 code=0x7ffc0000 [ 52.459361][ T4178] kAFS: No cell specified [ 52.465559][ T26] audit: type=1326 audit(52.260:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9ffee8a8 code=0x7ffc0000 [ 52.471684][ T26] audit: type=1326 audit(52.260:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ffee8a8 code=0x7ffc0000 [ 52.488172][ T26] audit: type=1326 audit(52.260:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ffee8a8 code=0x7ffc0000 [ 52.500637][ T4179] could not allocate digest TFM handle sha3-224-ce [ 52.531154][ T4187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 52.576118][ T4159] loop1: detected capacity change from 0 to 32768 [ 52.620036][ T4159] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.13 (4159) [ 52.640705][ T4191] loop2: detected capacity change from 0 to 256 [ 52.675106][ T4193] loop3: detected capacity change from 0 to 128 [ 52.687908][ T4159] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 52.691312][ T4191] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.693350][ T4159] BTRFS info (device loop1): force zlib compression, level 3 [ 52.694564][ T4191] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 52.700849][ T4159] BTRFS info (device loop1): force clearing of disk cache [ 52.703663][ T4193] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.706075][ T4159] BTRFS info (device loop1): setting nodatasum [ 52.726705][ T4159] BTRFS info (device loop1): allowing degraded mounts [ 52.728650][ T4159] BTRFS info (device loop1): enabling disk space caching [ 52.730678][ T4159] BTRFS info (device loop1): disk space caching is enabled [ 52.743025][ T4159] BTRFS info (device loop1): has skinny extents [ 52.820463][ T4191] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 53.839437][ T4159] BTRFS info (device loop1): clearing free space tree [ 53.841530][ T4159] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 53.852116][ T4159] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 53.980388][ T4175] loop4: detected capacity change from 0 to 32768 [ 54.138913][ T4221] loop3: detected capacity change from 0 to 512 [ 54.257836][ T4221] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.24: casefold flag without casefold feature [ 54.275656][ T4221] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.24: couldn't read orphan inode 15 (err -117) [ 54.312981][ T4221] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.345893][ T4074] Bluetooth: hci4: command 0x0405 tx timeout [ 54.491846][ T4240] netlink: 'syz.3.26': attribute type 4 has an invalid length. [ 54.633995][ T4242] netlink: 'syz.3.26': attribute type 4 has an invalid length. [ 56.559201][ T4259] udc-core: couldn't find an available UDC or it's busy [ 56.561984][ T4259] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.603049][ T4261] loop3: detected capacity change from 0 to 256 [ 56.691909][ T4261] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 56.715356][ T4268] udc-core: couldn't find an available UDC or it's busy [ 56.730504][ T4268] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.799552][ T4274] loop1: detected capacity change from 0 to 2048 [ 56.821432][ T4271] loop3: detected capacity change from 0 to 2048 [ 56.881706][ T4274] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.898647][ T4271] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.918000][ T4274] EXT4-fs (loop1): shut down requested (2) [ 57.017407][ T4281] udc-core: couldn't find an available UDC or it's busy [ 57.019375][ T4281] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.141902][ T4271] fs-verity: sha256 using implementation "sha256-ce" [ 57.152861][ T4283] binder: 4282:4283 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 57.157922][ T4233] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.169676][ T4271] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.39: bg 0: block 345: padding at end of block bitmap is not set [ 57.176512][ T4233] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 57.177243][ T4283] binder: 4283 RLIMIT_NICE not set [ 57.187629][ T4285] loop1: detected capacity change from 0 to 1024 [ 57.191141][ T4283] binder: 4282:4283 ioctl c0306201 20000480 returned -14 [ 57.199446][ T4271] fs-verity (loop3, inode 13): Error -117 writing Merkle tree block 0 [ 57.202146][ T4271] fs-verity (loop3, inode 13): Error -117 building Merkle tree [ 57.209084][ T4283] udc-core: couldn't find an available UDC or it's busy [ 57.210957][ T4283] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.293641][ T4285] EXT4-fs (loop1): Test dummy encryption mode enabled [ 57.295741][ T4285] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 57.298614][ T4285] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 57.301420][ T4285] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.329229][ T4285] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,nolazytime,abort,test_dummy_encryption,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,nobarrier,,errors=continue. Quota mode: writeback. [ 57.489459][ T4299] loop2: detected capacity change from 0 to 512 [ 57.972283][ T4323] loop4: detected capacity change from 0 to 512 [ 57.980662][ T4325] udc-core: couldn't find an available UDC or it's busy [ 57.982531][ T4325] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.001364][ T4323] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 58.011584][ T4323] EXT4-fs (loop4): invalid journal inode [ 58.013303][ T4323] EXT4-fs (loop4): can't get journal size [ 58.025545][ T4323] EXT4-fs (loop4): 1 truncate cleaned up [ 58.027272][ T4323] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 59.090802][ T4337] netlink: 51 bytes leftover after parsing attributes in process `syz.3.59'. [ 60.168604][ T4347] loop2: detected capacity change from 0 to 1024 [ 60.262697][ T4349] loop3: detected capacity change from 0 to 8 [ 60.309097][ T4347] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.340934][ T4347] EXT4-fs (loop2): shut down requested (1) [ 60.402113][ T4349] SQUASHFS error: zlib decompression failed, data probably corrupt [ 60.404398][ T4349] SQUASHFS error: Failed to read block 0x4de: -5 [ 60.406734][ T4349] SQUASHFS error: Failed to read block 0x4e2: -5 [ 60.408694][ T4349] SQUASHFS error: Failed to read block 0x9ca: -5 [ 60.410560][ T4349] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 60.412481][ T4349] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 60.417472][ T4349] SQUASHFS error: Failed to read block 0x535f2: -5 [ 60.529284][ T4356] loop2: detected capacity change from 0 to 128 [ 60.547404][ T4356] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.594808][ T4360] loop1: detected capacity change from 0 to 512 [ 60.678197][ T4360] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.66: casefold flag without casefold feature [ 60.684331][ T4360] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.66: couldn't read orphan inode 15 (err -117) [ 60.711728][ T4360] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.065922][ T4074] Bluetooth: hci4: command 0x0405 tx timeout [ 61.678477][ T4377] loop0: detected capacity change from 0 to 256 [ 61.805984][ T4378] loop1: detected capacity change from 0 to 256 [ 62.500696][ T4377] exfat: Deprecated parameter 'namecase' [ 62.514360][ T4380] loop2: detected capacity change from 0 to 164 [ 62.537115][ T4377] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 62.641787][ T4378] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x18b10316, utbl_chksum : 0xe619d30d) [ 62.645445][ T4378] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 62.667219][ T4380] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 63.574088][ T4400] loop0: detected capacity change from 0 to 512 [ 63.615643][ T4393] xt_CT: No such helper "netbios-ns" [ 63.644980][ T4400] EXT4-fs (loop0): Ignoring removed nobh option [ 63.849546][ T4414] loop1: detected capacity change from 0 to 164 [ 64.025726][ T4032] Bluetooth: hci2: command 0x0406 tx timeout [ 64.702721][ T4421] loop4: detected capacity change from 0 to 256 [ 64.704834][ T4400] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue. Quota mode: writeback. [ 64.731030][ T4423] loop2: detected capacity change from 0 to 1024 [ 64.759053][ T4421] FAT-fs (loop4): Directory bread(block 64) failed [ 64.771289][ T4421] FAT-fs (loop4): Directory bread(block 65) failed [ 64.773208][ T4421] FAT-fs (loop4): Directory bread(block 66) failed [ 64.786040][ T4421] FAT-fs (loop4): Directory bread(block 67) failed [ 64.787972][ T4421] FAT-fs (loop4): Directory bread(block 68) failed [ 64.789692][ T4421] FAT-fs (loop4): Directory bread(block 69) failed [ 64.791526][ T4421] FAT-fs (loop4): Directory bread(block 70) failed [ 64.793289][ T4421] FAT-fs (loop4): Directory bread(block 71) failed [ 64.822262][ T4421] FAT-fs (loop4): Directory bread(block 72) failed [ 64.824393][ T4421] FAT-fs (loop4): Directory bread(block 73) failed [ 65.862077][ T4437] loop2: detected capacity change from 0 to 4096 [ 65.941629][ T4437] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.453245][ T4458] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 67.921426][ T4460] loop0: detected capacity change from 0 to 1024 [ 68.190279][ T4468] loop3: detected capacity change from 0 to 1024 [ 68.244616][ T4460] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.960471][ T4472] udc-core: couldn't find an available UDC or it's busy [ 68.962482][ T4472] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.095231][ T4479] udc-core: couldn't find an available UDC or it's busy [ 69.123350][ T4479] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.157914][ T4245] hfsplus: b-tree write err: -5, ino 4 [ 69.871707][ T1534] cfg80211: failed to load regulatory.db [ 70.043204][ T4490] loop0: detected capacity change from 0 to 256 [ 70.119872][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.121959][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.186399][ T4490] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 70.271025][ T4496] loop4: detected capacity change from 0 to 512 [ 72.745276][ T4496] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.111: inode #1: comm syz.4.111: iget: illegal inode # [ 72.782505][ T4496] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.111: error while reading EA inode 1 err=-117 [ 72.800804][ T4496] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 72.818615][ T4496] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.111: inode #1: comm syz.4.111: iget: illegal inode # [ 72.897485][ T4496] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.111: error while reading EA inode 1 err=-117 [ 72.927640][ T4496] EXT4-fs (loop4): 1 orphan inode deleted [ 72.929222][ T4496] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,usrquota,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 73.027449][ T4535] udc-core: couldn't find an available UDC or it's busy [ 73.041100][ T4535] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 73.065014][ T4229] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.178853][ T4538] loop1: detected capacity change from 0 to 16 [ 73.871832][ T4538] erofs: (device loop1): mounted with root inode @ nid 36. [ 73.880110][ T4229] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 73.900632][ T4539] loop0: detected capacity change from 0 to 1024 [ 73.948337][ T4539] EXT4-fs (loop0): Test dummy encryption mode enabled [ 73.951281][ T4539] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 73.954052][ T4539] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 73.983589][ T4539] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.029705][ T4539] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,nolazytime,abort,test_dummy_encryption,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,nobarrier,,errors=continue. Quota mode: writeback. [ 74.141829][ T4547] loop2: detected capacity change from 0 to 512 [ 74.315248][ T4547] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.126: casefold flag without casefold feature [ 75.140957][ T4547] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.126: couldn't read orphan inode 15 (err -117) [ 75.155527][ T4547] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.237284][ T4556] Zero length message leads to an empty skb [ 75.286123][ T4566] udc-core: couldn't find an available UDC or it's busy [ 75.288171][ T4566] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 78.176740][ T4589] loop1: detected capacity change from 0 to 16 [ 78.443775][ T1534] Bluetooth: hci4: command 0x0405 tx timeout [ 78.540419][ T4589] erofs: (device loop1): mounted with root inode @ nid 36. [ 78.726916][ T4574] fido_id[4574]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.785211][ T4599] udc-core: couldn't find an available UDC or it's busy [ 78.794784][ T4599] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.739736][ T4616] loop1: detected capacity change from 0 to 2048 [ 79.800077][ T4616] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.961820][ T4626] loop4: detected capacity change from 0 to 1764 [ 79.973340][ T4620] loop3: detected capacity change from 0 to 128 [ 80.044697][ T4626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'. [ 80.767000][ T4626] netlink: 16 bytes leftover after parsing attributes in process `syz.4.151'. [ 80.826195][ T4620] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.990810][ T4641] [ 80.991526][ T4641] ====================================================== [ 80.993443][ T4641] WARNING: possible circular locking dependency detected [ 80.995375][ T4641] 5.15.185-syzkaller #0 Not tainted [ 80.996813][ T4641] ------------------------------------------------------ [ 80.998820][ T4641] syz.1.152/4641 is trying to acquire lock: [ 81.000497][ T4641] ffff0000c1a78c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 81.003504][ T4641] [ 81.003504][ T4641] but task is already holding lock: [ 81.005605][ T4641] ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 81.008366][ T4641] [ 81.008366][ T4641] which lock already depends on the new lock. [ 81.008366][ T4641] [ 81.011368][ T4641] [ 81.011368][ T4641] the existing dependency chain (in reverse order) is: [ 81.013875][ T4641] [ 81.013875][ T4641] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 81.016110][ T4641] __mutex_lock_common+0x194/0x1edc [ 81.017699][ T4641] mutex_lock_nested+0xac/0x11c [ 81.019175][ T4641] rfkill_register+0x44/0x77c [ 81.020678][ T4641] hci_register_dev+0x3d8/0x854 [ 81.022196][ T4641] vhci_create_device+0x2bc/0x564 [ 81.023736][ T4641] vhci_write+0x30c/0x3ac [ 81.025086][ T4641] vfs_write+0x7c8/0xa2c [ 81.026381][ T4641] ksys_write+0x120/0x210 [ 81.027748][ T4641] __arm64_sys_write+0x7c/0x90 [ 81.029272][ T4641] invoke_syscall+0x98/0x2b8 [ 81.030670][ T4641] el0_svc_common+0x138/0x258 [ 81.032152][ T4641] do_el0_svc+0x58/0x14c [ 81.033463][ T4641] el0_svc+0x78/0x1e0 [ 81.034711][ T4641] el0t_64_sync_handler+0xcc/0xe4 [ 81.036296][ T4641] el0t_64_sync+0x1a0/0x1a4 [ 81.037858][ T4641] [ 81.037858][ T4641] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 81.040125][ T4641] __mutex_lock_common+0x194/0x1edc [ 81.041784][ T4641] mutex_lock_nested+0xac/0x11c [ 81.043313][ T4641] vhci_send_frame+0x88/0x118 [ 81.044775][ T4641] hci_send_frame+0x194/0x2f0 [ 81.046282][ T4641] hci_tx_work+0x7e4/0x1394 [ 81.047709][ T4641] process_one_work+0x79c/0x1140 [ 81.049285][ T4641] worker_thread+0x8f4/0x101c [ 81.050704][ T4641] kthread+0x374/0x454 [ 81.052040][ T4641] ret_from_fork+0x10/0x20 [ 81.053445][ T4641] [ 81.053445][ T4641] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 81.056024][ T4641] __flush_work+0xf4/0x1bc [ 81.057466][ T4641] flush_work+0x24/0x38 [ 81.058782][ T4641] hci_dev_do_close+0x164/0x105c [ 81.060291][ T4641] hci_dev_close+0xc8/0x1b8 [ 81.061698][ T4641] hci_sock_ioctl+0x474/0x94c [ 81.063141][ T4641] sock_do_ioctl+0xf8/0x240 [ 81.064617][ T4641] sock_ioctl+0x5c8/0x87c [ 81.066005][ T4641] __arm64_sys_ioctl+0x14c/0x1c8 [ 81.067586][ T4641] invoke_syscall+0x98/0x2b8 [ 81.069056][ T4641] el0_svc_common+0x138/0x258 [ 81.070472][ T4641] do_el0_svc+0x58/0x14c [ 81.071807][ T4641] el0_svc+0x78/0x1e0 [ 81.073090][ T4641] el0t_64_sync_handler+0xcc/0xe4 [ 81.074675][ T4641] el0t_64_sync+0x1a0/0x1a4 [ 81.076065][ T4641] [ 81.076065][ T4641] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 81.078212][ T4641] __mutex_lock_common+0x194/0x1edc [ 81.079867][ T4641] mutex_lock_nested+0xac/0x11c [ 81.081429][ T4641] bg_scan_update+0x48/0x3d0 [ 81.082829][ T4641] process_one_work+0x79c/0x1140 [ 81.084335][ T4641] worker_thread+0x8f4/0x101c [ 81.085816][ T4641] kthread+0x374/0x454 [ 81.087155][ T4641] ret_from_fork+0x10/0x20 [ 81.088587][ T4641] [ 81.088587][ T4641] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 81.091394][ T4641] __lock_acquire+0x2928/0x651c [ 81.092947][ T4641] lock_acquire+0x1f4/0x620 [ 81.094374][ T4641] __flush_work+0xf4/0x1bc [ 81.095794][ T4641] __cancel_work_timer+0x2ec/0x448 [ 81.097369][ T4641] cancel_work_sync+0x24/0x38 [ 81.098890][ T4641] hci_request_cancel_all+0xbc/0x2d0 [ 81.100565][ T4641] hci_dev_do_close+0x54/0x105c [ 81.102108][ T4641] hci_rfkill_set_block+0xdc/0x1d0 [ 81.103691][ T4641] rfkill_set_block+0x18c/0x374 [ 81.105233][ T4641] rfkill_fop_write+0x4a4/0x5cc [ 81.106784][ T4641] vfs_write+0x280/0xa2c [ 81.108089][ T4641] ksys_write+0x120/0x210 [ 81.109469][ T4641] __arm64_sys_write+0x7c/0x90 [ 81.111006][ T4641] invoke_syscall+0x98/0x2b8 [ 81.112450][ T4641] el0_svc_common+0x138/0x258 [ 81.113979][ T4641] do_el0_svc+0x58/0x14c [ 81.115315][ T4641] el0_svc+0x78/0x1e0 [ 81.116558][ T4641] el0t_64_sync_handler+0xcc/0xe4 [ 81.118181][ T4641] el0t_64_sync+0x1a0/0x1a4 [ 81.119622][ T4641] [ 81.119622][ T4641] other info that might help us debug this: [ 81.119622][ T4641] [ 81.122563][ T4641] Chain exists of: [ 81.122563][ T4641] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 81.122563][ T4641] [ 81.127138][ T4641] Possible unsafe locking scenario: [ 81.127138][ T4641] [ 81.129208][ T4641] CPU0 CPU1 [ 81.130703][ T4641] ---- ---- [ 81.132265][ T4641] lock(rfkill_global_mutex); [ 81.133611][ T4641] lock(&data->open_mutex); [ 81.135719][ T4641] lock(rfkill_global_mutex); [ 81.137755][ T4641] lock((work_completion)(&hdev->bg_scan_update)); [ 81.139625][ T4641] [ 81.139625][ T4641] *** DEADLOCK *** [ 81.139625][ T4641] [ 81.141915][ T4641] 1 lock held by syz.1.152/4641: [ 81.143376][ T4641] #0: ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 81.146415][ T4641] [ 81.146415][ T4641] stack backtrace: [ 81.148025][ T4641] CPU: 0 PID: 4641 Comm: syz.1.152 Not tainted 5.15.185-syzkaller #0 [ 81.150306][ T4641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.153117][ T4641] Call trace: [ 81.154021][ T4641] dump_backtrace+0x0/0x43c [ 81.155312][ T4641] show_stack+0x2c/0x3c [ 81.156516][ T4641] __dump_stack+0x30/0x40 [ 81.157791][ T4641] dump_stack_lvl+0xf8/0x160 [ 81.159117][ T4641] dump_stack+0x1c/0x5c [ 81.160313][ T4641] print_circular_bug+0x148/0x1b0 [ 81.161697][ T4641] check_noncircular+0x240/0x2d4 [ 81.163085][ T4641] __lock_acquire+0x2928/0x651c [ 81.164551][ T4641] lock_acquire+0x1f4/0x620 [ 81.165789][ T4641] __flush_work+0xf4/0x1bc [ 81.167023][ T4641] __cancel_work_timer+0x2ec/0x448 [ 81.168474][ T4641] cancel_work_sync+0x24/0x38 [ 81.169741][ T4641] hci_request_cancel_all+0xbc/0x2d0 [ 81.171273][ T4641] hci_dev_do_close+0x54/0x105c [ 81.172582][ T4641] hci_rfkill_set_block+0xdc/0x1d0 [ 81.174001][ T4641] rfkill_set_block+0x18c/0x374 [ 81.175337][ T4641] rfkill_fop_write+0x4a4/0x5cc [ 81.176667][ T4641] vfs_write+0x280/0xa2c [ 81.177855][ T4641] ksys_write+0x120/0x210 [ 81.179031][ T4641] __arm64_sys_write+0x7c/0x90 [ 81.180375][ T4641] invoke_syscall+0x98/0x2b8 [ 81.181696][ T4641] el0_svc_common+0x138/0x258 [ 81.182976][ T4641] do_el0_svc+0x58/0x14c [ 81.184153][ T4641] el0_svc+0x78/0x1e0 [ 81.185328][ T4641] el0t_64_sync_handler+0xcc/0xe4 [ 81.186726][ T4641] el0t_64_sync+0x1a0/0x1a4 [ 81.265491][ T4073] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.505433][ T4073] usb 1-1: Using ep0 maxpacket: 32 [ 81.626996][ T4073] usb 1-1: config 1 has an invalid interface number: 57 but max is 0 [ 81.629250][ T4073] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.632005][ T4073] usb 1-1: config 1 has no interface number 0 [ 81.786788][ T4073] usb 1-1: New USB device found, idVendor=0489, idProduct=e036, bcdDevice=3f.a3 [ 81.789277][ T4073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.791419][ T4073] usb 1-1: Product: syz [ 81.792513][ T4073] usb 1-1: Manufacturer: syz [ 81.793732][ T4073] usb 1-1: SerialNumber: syz [ 82.040655][ T4635] loop0: detected capacity change from 0 to 512 [ 82.108963][ T4635] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002,. Quota mode: writeback. [ 82.198738][ T4073] usb 1-1: USB disconnect, device number 2