last executing test programs: 22.183669917s ago: executing program 3 (id=258): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x83, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x28, 0x1056}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000140)=0x1) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000280)='2', 0x1) 17.353446702s ago: executing program 3 (id=269): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc5c, &(0x7f0000000000)={[{@errors_remount}, {@grpid}]}, 0x3, 0x459, &(0x7f00000009c0)="$eJzs3MtvG0UYAPBvN48S2pJQyqMPIFAQEY+kaQv0wAEQSByKhAQHOEZJWpWmDWqCRKsIWoTKCSEk7ogj/wInuCDECYkr3FGlCuWSlpPR2ruN7dhu4tpxi38/ycnMzmxmPu+OPbtjJ4C+NZ79SCJ2RcSfETFaydZWGK/8ur66MntjdWU2iVLp3X+Scr211ZXZomqx3848M5FGpF8kcaBBu0sXLp6ZWViYP5/np5bPfjS1dOHiC6fPzpyaPzV/7sjx48eOTr/80pEXOxJn1qe1/Z8uHtz31gffvH3iq5r46+LokPFWhU+XSh1urrd2V6WTwQ3FI9vaGTZtICKywzVUHv+jMRDrB2803vy8p50DuqpUKpV2Ni++VAL+x5KozRvy0C+KN/q11ZU0VldmG10Hv9q96UfPXXutcgGUxX09f1RKBiPN6wzVXd920nhEvH/p3++yR3TnPgQAQI2fsvnP85V5x1rN/C+Nh6rq3ZevDY1FxP0RsSciHoiIvRHxYES57sMR8cgW269fJNk4/0mvthXYJmXzv1fyta3a+V8x+4uxgTy3uxz/UHLy9ML84fw5mYihHVl+ukUbP7/xx9fNyqrnf9kja7+YC+b9uDq4o3afuZnlmduJudq1yxH7BxvFn9xcCUgiYl9E7G+zjdPP/nCwWdmt429h4zrTlpW+j3imcvwvRV38haT1+uTUPbEwf3iqOCs2+u33K+80a/+24u+A7Pjf2/D8vxn/WFK9Xru09Tau/PVl02uads//4eS9cno43/bJzPLy+emI4eREpdPV24+s71vki/pZ/BOHGo//PbH+TByIiOwkfjQiHouIx/O+PxERT0bEoRbx//r6Ux+2H393ZfHPben4ryeGo35L48TAmV9+rGl0bEP8N1of/2Pl1ES+ZTOvf5vpV3tnMwAAANx90ojYFUk6eTOdppOTlc/L741IFxaXlp87ufjxubnKdwTGYigt7nSNVt0Pnc4v6yv5yxFR+WhBUX40v2/87cBIOT85u7gw1+vgoc/tbDL+M38P9Lp3QNd1YB0NuEsZ/9C/jH/oX8Y/9K8G498/bIE+0ej9/7Me9APYfnXj37If9BHX/9C/jH/oX8Y/9KWlkbj1l+RbJoq/1Obut5sY2fRX/bc5EUN3RDe6loj0juiGRJcSvX1dAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6JT/AgAA//9OFd7A") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, 0x0, &(0x7f00000003c0)) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x2}) 16.404250131s ago: executing program 4 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 13.752654466s ago: executing program 0 (id=275): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$packet(0x11, 0x3, 0x300) r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xc8Ng\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000006, 0x11, r0, 0x392fc000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r1 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r1, 0x0, 0x0, 0x100004) r2 = socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, 0x0}) r3 = msgget$private(0x0, 0x20) msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f0000000380)=""/45) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r4, &(0x7f0000000040)='F', 0x1) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioprio_get$pid(0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000001200)="05010906a101", 0x6) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') 13.562574086s ago: executing program 4 (id=276): prctl$PR_SET_SECUREBITS(0x1c, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000f40)=""/4096) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xd81, &(0x7f0000001400)=ANY=[], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103600000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x1004000, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) 13.369994236s ago: executing program 3 (id=277): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = syz_usb_connect(0x0, 0x47, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000006140)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0) write(r5, &(0x7f00000061c0)='dir', 0x3) syz_usb_ep_write(r1, 0x3, 0x4, &(0x7f0000000080)="69b5113d") ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="030000000018"}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 12.501068164s ago: executing program 2 (id=278): r0 = io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x6046, 0x8, 0x3, 0x25}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r8, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{r9}, {r8, 0x900}], 0x2, 0x0, 0x0, 0x0) dup3(r9, r7, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}}}, 0x24}}, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x8010) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x2) 11.688485547s ago: executing program 4 (id=280): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r3, 0x0) close(0x3) bind$inet(r0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r4, &(0x7f00000001c0)=[{0xe, 0x1, 0x0, 0xfd, @tick, {}, {0xe}, @result={0xffffffff, 0x20000}}], 0x1c) sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10041, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000180)={0x30000000}) ioctl$TCSBRKP(r5, 0x5425, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r6 = syz_open_dev$cec(&(0x7f00000007c0), 0x0, 0x600) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000580)={'Wc9\t', 0xff, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", '\x00', "0300", "798a202d", ["c2fffeff17c64881ffffffff", "ffff190008a215016c4a2371", "1d25aaedd22555024b00dc1a", "38a70ed483c99b9f1600d333"]}) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) 11.6396482s ago: executing program 0 (id=281): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x40) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001680), 0x0, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7e", 0x62}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{0x0}], 0x1}}], 0x2, 0x0) 10.770769848s ago: executing program 4 (id=283): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000500)=0xd79d, 0x4) close(0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0000d20b060005"], 0x24}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x7fff}, &(0x7f0000000200)=0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80c0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 10.299224201s ago: executing program 3 (id=284): r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) times(0xfffffffffffffffe) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) sendmsg$nl_route(r2, 0x0, 0x4054) setns(0xc9, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r4, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_setup(0x5ba8, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.213037983s ago: executing program 0 (id=285): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[], 0x3, 0x2cb, &(0x7f0000000ac0)="$eJzs3U9LW1kYx/GfJmNiHE0Ww8AMDHOY2cxsgpN5ATNhUBgmMMUaabsoXOtNG3KbyL3BEik1m9JtX4d02V2h7RtwU7rpvjspFLpxUXqL9yaaaJLGkD9avx+Q8yTPeXKO5ihPLiTuX3t8t1Tw0gWrqum40bRU14GUOowaphrjdBDPqFVdv899ePPT1es3/svmcksrxixnV//MGGMWfn5+7/6TX15W59aeLjyLaS91c/995u3ezN4P+59W7xQ9U/RMuVI1llmvVKrWumObjaJXShtzxbEtzzbFsme7bfmCU9ncrBmrvDGf2HRtzzNWuWZKds1UK6bq1ox12yqWTTqdNvMJXW7RPubkd1dWrGzXtB8Z6o4wcrOd7nTdbL1zMr87hj0BAIBzpnf/H/b63fv/3Fo4nqX///7L/b9E/z8i9bZbXfr/b8e4IYyc62atROP3tx39PwAAAAAAAAAAAAAAAAAAAAAAF8GB7yd9308ejo27gtsxSXFJfiN/VNDP28pxYbQ+/37LV9fnP/TXhLaLIWt5415cch5t5bfy4RjmswUV5cjWopL6GJyHhjBe/je3tGgCKb1wdhr1O1v5iGLN+qZUp/qpqBQ+QHv9N0q0rp9RUt91Xj9jOtXP6LdfW+rTSurVLVXkaCM418f1D/4w5p//cyfqZ4N5AAAAAAB8DdLmyKnX70E+mBDX6XxY33J9wPf9nV7XB068vo7qR64lAgAAAAAwFl5tu2Q5ju0OEMQkDVYuDbxor8D3paE+4EBBRJNcvVvwt6RzsI1xBXE1z5gZpPydznRE/T7mRCVN/MdyhmDSf5kAAAAADJtX2z7+Bz/9ev1wRLsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBy6vfzwJrzT6WaiZ6f9nckMvZvEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhHPgcAAP//ps0YVA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) syz_open_procfs(0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 10.212878204s ago: executing program 2 (id=286): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) 9.925486769s ago: executing program 2 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xd, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3f}, 0x94) socket$kcm(0x29, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$getflags(r3, 0x401) 8.673549097s ago: executing program 1 (id=289): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r0) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003) r2 = socket(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x9) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x100000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, &(0x7f0000000180)='0xfff', 0x5) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, &(0x7f0000000200)='0xf', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/acpi/devices/QEMU0002:00/status\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./sys/module/acpi/parameters/debug_level\x00', r4, 0x4000, r6}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='pi3usb30532 0x5', 0xf) 8.283905279s ago: executing program 2 (id=299): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x107800, 0x0) unlinkat(r1, 0x0, 0x200) socket$nl_generic(0x10, 0x3, 0x10) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./sys/class/rnbd-client/ctl/map_device\x00', 0x0, 0x80000, &(0x7f0000000540)=ANY=[@ANYBLOB="14bb6a0d53e2060000000000", @ANYRES32]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) 6.875670438s ago: executing program 4 (id=290): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) 6.86927561s ago: executing program 2 (id=301): r0 = syz_ublk_setup_io_uring(0x277c, 0x0, 0x0, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000002780)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x11, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(r6, 0x0) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r8, 0x4, 0x0) socket$key(0xf, 0x3, 0x2) getdents64(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) 6.673967111s ago: executing program 1 (id=291): prctl$PR_SET_SECUREBITS(0x1c, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000f40)=""/4096) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xd81, &(0x7f0000001400)=ANY=[], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103600000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x1004000, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) 5.905778052s ago: executing program 4 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) 5.833592041s ago: executing program 2 (id=293): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x11, 0x3, 0x7f) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysinfo(&(0x7f0000000280)=""/208) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x4000000000009) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x121a03, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x7b) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000040)) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) 5.674645523s ago: executing program 3 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000c40)='p:s/p ./file0:0\f$', 0x11) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fsopen(0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000240)=0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) pipe(&(0x7f00000001c0)) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4b, &(0x7f0000000040)) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 4.362676616s ago: executing program 1 (id=295): r0 = userfaultfd(0x80803) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x4}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1004801, &(0x7f0000000140)=ANY=[], 0x1, 0x224, &(0x7f0000000340)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x3) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0xc, 0x500}]}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) 2.735216663s ago: executing program 1 (id=296): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x40) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001680), 0x0, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7e", 0x62}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{0x0}], 0x1}}], 0x2, 0x0) 2.725214236s ago: executing program 0 (id=308): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000040003"], 0xc0}}, 0x0) sendmsg$key(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001040)={0x2, 0x13, 0x8, 0x0, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0x10) 2.665145972s ago: executing program 0 (id=297): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a37d3b31", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)='G)', 0x2}], 0x1}}], 0x3, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000002100)=0x40) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) ptrace(0x4207, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.630207391s ago: executing program 3 (id=298): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRES64, @ANYBLOB="000000000000000007000000000000000000000000000000ffffff7f000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000010000000000000000000000000000000000022b0000000a000000ac1e0101000000200000000000000000000000000402000000000000000000000040"], 0xfc}, 0x1, 0x0, 0x0, 0x40041}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b703040000000000850000000d000000b7d6880000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r6 = memfd_create(&(0x7f0000000100)='\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc', 0xc) ftruncate(r6, 0x2000000) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000005c0)={r6, 0x1f, 0x0, 0x1000000}) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x81, 0x0, &(0x7f00000010c0)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000240)=@ethtool_cmd={0x1, 0x3, 0x4, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x8, 0x4, 0x1, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) r8 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x12, r8, 0x108000) 1.552513483s ago: executing program 1 (id=300): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x14) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x7f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, &(0x7f00000000c0)) 224.179661ms ago: executing program 0 (id=302): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0) getdents(r6, 0x0, 0x0) 0s ago: executing program 1 (id=303): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448d4, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100), 0x8) listen(r1, 0x5) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xd) nanosleep(0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x0, 0x0, 0x3c, 0x3c}}}, 0x14) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b0000000b000000010001004900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xf40, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) pipe2$watch_queue(0x0, 0x80) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in=@multicast2, 0x4e24, 0xffff, 0x4e20, 0x6, 0x2, 0x30, 0x60, 0x2b, 0x0, 0xffffffffffffffff}, {0x100000000, 0x2, 0x4, 0x3, 0x7, 0x9, 0x7, 0x2}, {0x1, 0x8001, 0x9, 0x4}, 0x7ff, 0x6e6bbe, 0x2, 0x1, 0x2, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x3013015ccdd6850d}, 0x2, @in=@local, 0x0, 0x0, 0x3, 0xd, 0xfffffff9, 0x5, 0x3}}, 0xe8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts. [ 49.152346][ T4173] cgroup: Unknown subsys name 'net' [ 49.293981][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.503648][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.247084][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 52.276458][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 52.325912][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 52.365541][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 52.399362][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 52.459712][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.466762][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.475143][ T4187] device bridge_slave_0 entered promiscuous mode [ 52.485578][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.492847][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.500535][ T4199] device bridge_slave_0 entered promiscuous mode [ 52.515068][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.522296][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.530210][ T4187] device bridge_slave_1 entered promiscuous mode [ 52.540575][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.547617][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.555250][ T4199] device bridge_slave_1 entered promiscuous mode [ 52.603490][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.610942][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.618455][ T4193] device bridge_slave_0 entered promiscuous mode [ 52.638077][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.645189][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.653259][ T4186] device bridge_slave_0 entered promiscuous mode [ 52.662004][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.673268][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.682597][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.689648][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.697949][ T4193] device bridge_slave_1 entered promiscuous mode [ 52.706017][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.715264][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.722358][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.731190][ T4192] device bridge_slave_0 entered promiscuous mode [ 52.738161][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.745242][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.753446][ T4186] device bridge_slave_1 entered promiscuous mode [ 52.783672][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.792850][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.800108][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.807600][ T4192] device bridge_slave_1 entered promiscuous mode [ 52.826770][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.848532][ T4199] team0: Port device team_slave_0 added [ 52.855906][ T4199] team0: Port device team_slave_1 added [ 52.867587][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.884384][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.899874][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.921650][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.937117][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.949299][ T4187] team0: Port device team_slave_0 added [ 52.971809][ T4193] team0: Port device team_slave_0 added [ 52.979321][ T4186] team0: Port device team_slave_0 added [ 52.986447][ T4187] team0: Port device team_slave_1 added [ 52.993145][ T4186] team0: Port device team_slave_1 added [ 52.999323][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.006329][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.032363][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.049635][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.056593][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.082481][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.094478][ T4193] team0: Port device team_slave_1 added [ 53.124708][ T4192] team0: Port device team_slave_0 added [ 53.147732][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.154838][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.180778][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.192362][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.199293][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.225262][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.237372][ T4192] team0: Port device team_slave_1 added [ 53.259394][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.266425][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.292593][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.303963][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.311135][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.337041][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.356171][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.363221][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.389193][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.413853][ T4199] device hsr_slave_0 entered promiscuous mode [ 53.420563][ T4199] device hsr_slave_1 entered promiscuous mode [ 53.427558][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.434674][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.461212][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.475570][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.482696][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.508600][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.520800][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.527734][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.554010][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.629480][ T4187] device hsr_slave_0 entered promiscuous mode [ 53.636236][ T4187] device hsr_slave_1 entered promiscuous mode [ 53.643215][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.650979][ T4187] Cannot create hsr debugfs directory [ 53.659228][ T4193] device hsr_slave_0 entered promiscuous mode [ 53.666287][ T4193] device hsr_slave_1 entered promiscuous mode [ 53.672769][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.680661][ T4193] Cannot create hsr debugfs directory [ 53.688936][ T4186] device hsr_slave_0 entered promiscuous mode [ 53.695516][ T4186] device hsr_slave_1 entered promiscuous mode [ 53.702152][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.709777][ T4186] Cannot create hsr debugfs directory [ 53.722528][ T4192] device hsr_slave_0 entered promiscuous mode [ 53.729092][ T4192] device hsr_slave_1 entered promiscuous mode [ 53.735573][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.743195][ T4192] Cannot create hsr debugfs directory [ 54.000395][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 54.006807][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 54.009910][ T2297] Bluetooth: hci2: command 0x0409 tx timeout [ 54.013419][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 54.035339][ T4199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.045547][ T4199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.054875][ T4199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.063302][ T4199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.081590][ T2297] Bluetooth: hci4: command 0x0409 tx timeout [ 54.103119][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.111826][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.121692][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.132528][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.208320][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.221890][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.231218][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.239414][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.266365][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.296507][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.305281][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.324649][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.333914][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.351709][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.364731][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.376143][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.385940][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.415916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.425626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.434661][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.441821][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.452063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.460862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.469077][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.476132][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.484574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.497577][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.518920][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.535677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.543552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.552735][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.571370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.580735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.588993][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.596050][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.605061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.613849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.623474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.631857][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.638886][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.646586][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.656160][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.671614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.682329][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.709497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.719190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.733630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.741713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.750540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.758917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.767588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.777471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.807831][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.820371][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.829500][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.838445][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.847399][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.856243][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.865414][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.874088][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.882570][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.894052][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.902500][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.918592][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.930897][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.939112][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.954011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.962478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.985695][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.999521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.009865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.024095][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.033011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.063285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.079470][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.120076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.128974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.144406][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.151505][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.161649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.170629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.178871][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.185945][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.193616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.202860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.211378][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.218409][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.225986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.233924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.253505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.262313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.273038][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.280127][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.288780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.297896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.331630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.340492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.348842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.356549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.364255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.373983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.383602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.391442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.398780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.407218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.415494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.424287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.432645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.444996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.461183][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.470765][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.484888][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.495617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.505242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.514460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.524040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.534107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.548997][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.559543][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.581071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.589580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.610888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.631026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.644039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.652756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.671223][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.695610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.704678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.747248][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.761202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.770466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.790794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.798939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.807106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.815153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.827009][ T4192] device veth0_vlan entered promiscuous mode [ 55.841251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.849802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.858111][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.865175][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.875064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.883721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.892511][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.899543][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.907504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.915070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.923256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.945371][ T4192] device veth1_vlan entered promiscuous mode [ 55.980251][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.988597][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.997708][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.007244][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.016632][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.025460][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.034269][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.043836][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.052255][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.060710][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.068848][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.087113][ T4199] device veth0_vlan entered promiscuous mode [ 56.090123][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 56.093691][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 56.105484][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 56.108991][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.111836][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 56.128166][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.139435][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.158368][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.166269][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 56.168147][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.180626][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.188635][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.197107][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.205479][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.213825][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.221469][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.229008][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.237148][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.266051][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.275919][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.284544][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.293223][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.302442][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.312816][ T4199] device veth1_vlan entered promiscuous mode [ 56.342245][ T4192] device veth0_macvtap entered promiscuous mode [ 56.376282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.385076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.393444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.402492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.411617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.423135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.431294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.439358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.447859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.456259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.464249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.473815][ T4187] device veth0_vlan entered promiscuous mode [ 56.487364][ T4199] device veth0_macvtap entered promiscuous mode [ 56.505571][ T4192] device veth1_macvtap entered promiscuous mode [ 56.515343][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.528957][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.539198][ T4199] device veth1_macvtap entered promiscuous mode [ 56.557386][ T4186] device veth0_vlan entered promiscuous mode [ 56.571748][ T4187] device veth1_vlan entered promiscuous mode [ 56.584923][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.593833][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.603243][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.611612][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.626455][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.637164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.646381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.659039][ T4186] device veth1_vlan entered promiscuous mode [ 56.671100][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.681206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.689212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.697999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.709588][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.718780][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.728450][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.737349][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.765290][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.780653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.788504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.796257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.805972][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.816813][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.827710][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.840343][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.851568][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.862560][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.875389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.884694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.893754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.902432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.918691][ T4186] device veth0_macvtap entered promiscuous mode [ 56.933398][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.948385][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.959349][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.968693][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.980454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.988806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.997368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.006549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.017231][ T4186] device veth1_macvtap entered promiscuous mode [ 57.028579][ T4187] device veth0_macvtap entered promiscuous mode [ 57.040681][ T4187] device veth1_macvtap entered promiscuous mode [ 57.056743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.064880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.073481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.081542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.089250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.098055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.124310][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.132945][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.143897][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.158506][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.169579][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.180081][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.191031][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.215739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.224833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.233694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.247994][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.259511][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.269532][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.283325][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.293320][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.303830][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.315015][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.324831][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.335949][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.346100][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.356732][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.369277][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.388238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.398909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.407693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.416928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.427540][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.438177][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.448414][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.460168][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.470173][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.480825][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.491442][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.502413][ T4193] device veth0_vlan entered promiscuous mode [ 57.512339][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.526928][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.536556][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.545601][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.559993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.568464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.577195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.586182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.595465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.604170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.615303][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.624346][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.633290][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.642454][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.666127][ T4193] device veth1_vlan entered promiscuous mode [ 57.672378][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.685019][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.712190][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.722286][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.732232][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.753687][ T406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.766109][ T406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.779019][ T4193] device veth0_macvtap entered promiscuous mode [ 57.827337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.836099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.848251][ T4193] device veth1_macvtap entered promiscuous mode [ 57.889034][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.917534][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.924264][ T4263] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.943017][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.954542][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.967701][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.978479][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.994261][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.006756][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.022191][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.038565][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.051362][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.063422][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.074517][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.090226][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.101797][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.112387][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.123062][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.134920][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.145506][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.157797][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.165522][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 58.174054][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 58.182866][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.191949][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.199242][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 58.206373][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.215009][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 58.221678][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.231704][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.240213][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 58.247884][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.291677][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.292191][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.303851][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.309124][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.325333][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.334670][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.370111][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.412602][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.426297][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.433962][ T3089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.435363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.458250][ T3089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.511346][ T3089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.454550][ T4274] sched: RT throttling activated [ 59.803521][ T3089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.822181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.895956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.952353][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.970768][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.018311][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.057770][ T4283] device syzkaller0 entered promiscuous mode [ 60.070920][ T406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.078736][ T406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.129756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.241877][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 60.247939][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 60.254050][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 60.260099][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 60.270793][ T4288] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 60.399431][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 61.197982][ T4288] ODEBUG: Out of memory. ODEBUG disabled [ 61.466207][ T4299] loop4: detected capacity change from 0 to 32768 [ 61.751516][ T4299] JBD2: Ignoring recovery information on journal [ 61.759284][ T4299] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 61.767872][ T4299] JBD2: bad block at offset 32 [ 61.848399][ T4299] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 61.997394][ T4301] syz.2.11 (4301) used greatest stack depth: 20912 bytes left [ 62.271132][ T4315] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 62.292192][ T4315] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 62.302084][ T4315] OCFS2: File system is now read-only. [ 62.307615][ T4315] (syz.4.12,4315,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 62.315954][ T4315] (syz.4.12,4315,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 62.324250][ T4315] (syz.4.12,4315,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 62.332345][ T4315] (syz.4.12,4315,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 62.340864][ T4315] (syz.4.12,4315,1):ocfs2_write_cluster:1156 ERROR: status = -30 [ 62.348655][ T4315] (syz.4.12,4315,1):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30 [ 62.357146][ T4315] (syz.4.12,4315,1):ocfs2_write_begin_nolock:1823 ERROR: status = -30 [ 62.366616][ T4315] (syz.4.12,4315,1):ocfs2_write_begin:1910 ERROR: status = -30 [ 62.612796][ T4319] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 62.681344][ T4199] ocfs2: Unmounting device (7,4) on (node local) [ 64.189724][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 64.299717][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 64.728683][ T4355] loop2: detected capacity change from 0 to 512 [ 65.641902][ T4355] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 65.723011][ T4367] ip_tables: iptables: counters copy to user failed while replacing table [ 66.873156][ T4355] System zones: 1-12 [ 67.588873][ T4355] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.20: missing EA_INODE flag [ 67.613860][ T4355] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.20: error while reading EA inode 12 err=-117 [ 67.653199][ T4355] EXT4-fs (loop2): 1 orphan inode deleted [ 68.950515][ T4355] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 71.738511][ T4420] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4420] [ 71.991174][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.013991][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.207394][ T4415] ALSA: mixer_oss: invalid OSS volume '' [ 72.293643][ T4427] loop4: detected capacity change from 0 to 8 [ 72.318623][ T4429] Zero length message leads to an empty skb [ 72.534632][ T4427] SQUASHFS error: zlib decompression failed, data probably corrupt [ 72.680420][ T4440] netlink: 'syz.2.39': attribute type 10 has an invalid length. [ 72.796812][ T4427] SQUASHFS error: Failed to read block 0x9b: -5 [ 72.982236][ T4427] SQUASHFS error: Unable to read metadata cache entry [99] [ 73.006200][ T4427] SQUASHFS error: Unable to read inode 0x127 [ 73.060351][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.068166][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.156015][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.163212][ T4440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.170672][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.177736][ T4440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.320052][ T4440] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 76.742250][ T4476] 9pnet: Insufficient options for proto=fd [ 77.449394][ T4460] sctp: failed to load transform for md5: -2 [ 79.278224][ T4487] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 79.654918][ T4497] loop0: detected capacity change from 0 to 1024 [ 79.844969][ T4388] Bluetooth: hci4: command 0x0407 tx timeout [ 81.274236][ T4514] loop1: detected capacity change from 0 to 16 [ 81.293012][ T4497] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.336349][ T1110] cfg80211: failed to load regulatory.db [ 81.543606][ T4514] erofs: Unknown parameter 'pim6reg0' [ 82.424305][ T4534] loop4: detected capacity change from 0 to 128 [ 82.761858][ T4534] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.911984][ T4534] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.504973][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 84.515499][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 85.164332][ T4557] atomic_op ffff888020dc6998 conn xmit_atomic 0000000000000000 [ 85.298782][ T4554] device syzkaller0 entered promiscuous mode [ 86.219403][ T4567] device syzkaller0 entered promiscuous mode [ 88.040110][ T4593] loop0: detected capacity change from 0 to 1024 [ 88.943798][ T4592] Invalid option length (409) for dns_resolver key [ 91.909371][ T7] Bluetooth: hci2: command 0x0401 tx timeout [ 91.933333][ T4630] loop2: detected capacity change from 0 to 512 [ 91.986973][ T4631] nvmet: adding nsid 1 to subsystem testsubsys [ 92.111880][ T4623] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.123235][ T4623] hpfs: hpfs_map_sector(): read error [ 92.602692][ T4635] device syzkaller0 entered promiscuous mode [ 92.652609][ T4630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.727095][ T4630] device bond_slave_0 entered promiscuous mode [ 92.733498][ T4630] device bond_slave_1 entered promiscuous mode [ 92.739716][ T4630] device bridge0 entered promiscuous mode [ 92.752232][ T4630] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.761146][ T4630] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 92.818526][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 93.410906][ T4651] loop0: detected capacity change from 0 to 512 [ 93.445193][ T4651] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 93.568546][ T4651] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 93.590391][ T4651] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.800036][ T4661] SET target dimension over the limit! [ 95.622149][ T4681] loop1: detected capacity change from 0 to 2048 [ 95.668426][ T4684] mmap: syz.0.95 (4684) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 95.757158][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 95.789626][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 95.800450][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 95.811276][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 95.822096][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 95.832918][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 96.983308][ T4691] loop0: detected capacity change from 0 to 32768 [ 97.069170][ T4691] (syz.0.95,4691,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 97.085920][ T4691] (syz.0.95,4691,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 97.384812][ T4691] JBD2: Ignoring recovery information on journal [ 97.572605][ T4681] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.693457][ T4691] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 100.412231][ T4707] lo speed is unknown, defaulting to 1000 [ 100.561728][ T4711] loop4: detected capacity change from 0 to 256 [ 100.575301][ T4707] lo speed is unknown, defaulting to 1000 [ 100.584128][ T4707] lo speed is unknown, defaulting to 1000 [ 100.631907][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 100.656838][ T4711] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 103.350935][ T4707] infiniband sz1: set active [ 103.355837][ T4707] infiniband sz1: added lo [ 103.382280][ T2297] lo speed is unknown, defaulting to 1000 [ 104.763304][ T4707] infiniband sz1: Couldn't open port 1 [ 104.779079][ T4747] netlink: 72 bytes leftover after parsing attributes in process `syz.4.110'. [ 105.975876][ T4747] netlink: 44 bytes leftover after parsing attributes in process `syz.4.110'. [ 106.054025][ T4754] loop1: detected capacity change from 0 to 512 [ 106.075963][ T4707] RDS/IB: sz1: added [ 106.080428][ T4707] smc: adding ib device sz1 with port count 1 [ 106.086707][ T4707] smc: ib device sz1 port 1 has pnetid [ 106.095191][ T4229] lo speed is unknown, defaulting to 1000 [ 106.108070][ T4707] lo speed is unknown, defaulting to 1000 [ 106.146465][ T4754] ======================================================= [ 106.146465][ T4754] WARNING: The mand mount option has been deprecated and [ 106.146465][ T4754] and is ignored by this kernel. Remove the mand [ 106.146465][ T4754] option from the mount to silence this warning. [ 106.146465][ T4754] ======================================================= [ 106.334653][ T4754] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.486846][ T4754] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.717726][ T4754] EXT4-fs (loop1): 1 truncate cleaned up [ 106.799531][ T4754] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 107.458682][ T4776] loop4: detected capacity change from 0 to 512 [ 107.466080][ T4707] lo speed is unknown, defaulting to 1000 [ 107.777703][ T4776] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.116: missing EA_INODE flag [ 107.854982][ T4776] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.116: error while reading EA inode 2 err=-117 [ 107.923041][ T4776] EXT4-fs (loop4): 1 orphan inode deleted [ 107.928789][ T4776] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 108.121759][ T4707] lo speed is unknown, defaulting to 1000 [ 108.341904][ T4707] lo speed is unknown, defaulting to 1000 [ 109.429522][ T4810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.118'. [ 109.551285][ T4811] process 'syz.1.119' launched './file0' with NULL argv: empty string added [ 110.904616][ T4707] lo speed is unknown, defaulting to 1000 [ 114.193417][ T4855] kAFS: bad VL server IP address [ 117.320449][ T4906] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.240756][ T4198] Bluetooth: hci4: link tx timeout [ 118.246263][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.951903][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.289421][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 120.505350][ T7] usb 4-1: config 0 has no interfaces? [ 120.517122][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 120.550836][ T4942] netlink: 'syz.1.149': attribute type 21 has an invalid length. [ 120.551811][ T7] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 120.569057][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.601456][ T7] usb 4-1: config 0 descriptor?? [ 120.647683][ T7] usb 4-1: can't set config #0, error -71 [ 120.885789][ T7] usb 4-1: USB disconnect, device number 2 [ 121.747341][ T4944] bridge0: port 3(wlan1) entered blocking state [ 121.788233][ T4944] bridge0: port 3(wlan1) entered disabled state [ 122.761068][ T4952] loop2: detected capacity change from 0 to 2048 [ 122.772825][ T4944] device wlan1 entered promiscuous mode [ 122.964443][ T4952] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.981461][ T4969] loop3: detected capacity change from 0 to 2048 [ 123.012726][ T4976] nvmet: disable ns before setting buffered_io value. [ 124.286251][ T4985] loop3: detected capacity change from 0 to 512 [ 124.296963][ T4983] loop4: detected capacity change from 0 to 512 [ 124.454581][ T4983] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.786285][ T4990] netlink: 36 bytes leftover after parsing attributes in process `syz.2.161'. [ 127.039456][ T21] Bluetooth: hci4: command 0x0405 tx timeout [ 127.140819][ T5005] loop3: detected capacity change from 0 to 512 [ 129.056066][ T5027] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 129.056066][ T5027] program syz.0.170 not setting count and/or reply_len properly [ 130.370187][ T5041] loop3: detected capacity change from 0 to 2048 [ 136.547122][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.553510][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.731203][ T5063] device syzkaller0 entered promiscuous mode [ 136.807247][ T5063] tipc: Started in network mode [ 136.812294][ T5063] tipc: Node identity 12d1d15b0661, cluster identity 4711 [ 136.846916][ T5063] tipc: Enabled bearer , priority 0 [ 136.873091][ T5066] tipc: Resetting bearer [ 137.882796][ T5062] tipc: Resetting bearer [ 137.897903][ T5062] tipc: Disabling bearer [ 137.931069][ T5078] loop2: detected capacity change from 0 to 128 [ 138.124358][ T5078] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 138.746361][ T5084] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 138.746361][ T5084] program syz.3.185 not setting count and/or reply_len properly [ 139.389488][ T5091] loop1: detected capacity change from 0 to 128 [ 140.578885][ T5107] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5107] [ 141.634104][ T5114] loop3: detected capacity change from 0 to 64 [ 142.994518][ T5128] loop2: detected capacity change from 0 to 512 [ 144.024747][ T5128] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 144.128954][ T5138] syz.0.197 (5138) used greatest stack depth: 20304 bytes left [ 144.299556][ T5128] EXT4-fs (loop2): 1 truncate cleaned up [ 145.247848][ T5128] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 146.943589][ T5169] xt_hashlimit: size too large, truncated to 1048576 [ 146.950680][ T5169] xt_hashlimit: max too large, truncated to 1048576 [ 148.768810][ T5187] loop4: detected capacity change from 0 to 2048 [ 149.473741][ T5196] ip_tables: iptables: counters copy to user failed while replacing table [ 149.557893][ T5187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.471681][ T5203] No such timeout policy "syz1" [ 151.871630][ T5207] loop3: detected capacity change from 0 to 512 [ 151.955738][ T5207] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.007803][ T5207] EXT4-fs (loop3): 1 truncate cleaned up [ 152.021353][ T5207] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 152.766933][ T5222] FS-Cache: Duplicate cookie detected [ 152.772642][ T5222] FS-Cache: O-cookie c=00000008 [p=00000002 fl=222 nc=0 na=1] [ 152.780204][ T5222] FS-Cache: O-cookie d=ffffffff8a416220{NFS.server} n=ffff88807a9de000 [ 152.788693][ T5222] FS-Cache: O-key=[16] '0400000000000000020008017f000001' [ 152.795927][ T5222] FS-Cache: N-cookie c=00000009 [p=00000002 fl=2 nc=0 na=1] [ 152.803223][ T5222] FS-Cache: N-cookie d=ffffffff8a416220{NFS.server} n=ffff888025d11000 [ 152.811432][ T5222] FS-Cache: N-key=[16] '0400000000000000020008017f000001' [ 154.445271][ T5239] loop1: detected capacity change from 0 to 512 [ 154.495528][ T5239] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 154.521523][ T5239] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.220: corrupted in-inode xattr [ 154.534046][ T5239] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.220: couldn't read orphan inode 15 (err -117) [ 154.551802][ T5239] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nodiscard,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,lazytime,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 155.180623][ T5246] tipc: Started in network mode [ 155.185639][ T5246] tipc: Node identity 4, cluster identity 4711 [ 155.191950][ T5246] tipc: Node number set to 4 [ 156.348294][ T5258] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 156.348294][ T5258] program syz.2.225 not setting count and/or reply_len properly [ 157.541262][ T5264] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 158.686678][ T4304] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 159.543162][ T5275] loop0: detected capacity change from 0 to 512 [ 159.564380][ T4304] usb 2-1: Using ep0 maxpacket: 8 [ 159.605416][ T5275] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 159.659280][ T5275] EXT4-fs (loop0): 1 truncate cleaned up [ 159.665905][ T5275] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 159.691945][ T5279] loop3: detected capacity change from 0 to 1024 [ 159.753113][ T4304] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.333655][ T4304] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 160.342954][ T4304] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 160.353339][ T4304] usb 2-1: config 4 has no interface number 0 [ 160.424134][ T4304] usb 2-1: string descriptor 0 read error: -71 [ 160.428306][ T5289] netlink: 44 bytes leftover after parsing attributes in process `syz.3.233'. [ 160.430395][ T4304] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 160.467313][ T5292] loop1: detected capacity change from 0 to 128 [ 160.478069][ T4304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.544563][ T4304] usb 2-1: can't set config #4, error -71 [ 160.597520][ T4304] usb 2-1: USB disconnect, device number 2 [ 160.807791][ T5302] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5302] [ 162.123901][ T5294] sctp: failed to load transform for md5: -2 [ 162.149230][ T5300] sctp: failed to load transform for md5: -2 [ 164.032654][ T5305] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 164.230362][ T5317] loop1: detected capacity change from 0 to 4096 [ 166.748007][ T5354] loop4: detected capacity change from 0 to 164 [ 167.132837][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 167.687466][ T4304] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 168.078030][ T4304] usb 4-1: Using ep0 maxpacket: 8 [ 168.300357][ T4304] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.461952][ T4304] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 168.494558][ T4304] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 168.554036][ T4304] usb 4-1: config 4 has no interface number 0 [ 168.874543][ T4304] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 168.898131][ T4304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.821684][ T4304] usb 4-1: Product: syz [ 169.825877][ T4304] usb 4-1: Manufacturer: syz [ 169.839511][ T4304] usb 4-1: SerialNumber: syz [ 169.872975][ T5375] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.880223][ T5375] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.908692][ T5375] device bridge_slave_1 left promiscuous mode [ 169.922034][ T5375] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.984494][ T5375] device bridge_slave_0 left promiscuous mode [ 169.991237][ T5375] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.020420][ T5375] bond0: (slave bridge0): Releasing backup interface [ 171.041887][ T4304] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 171.059376][ T4304] usb 4-1: No valid video chain found. [ 171.185851][ T4198] block nbd3: Receive control failed (result -107) [ 171.195299][ T5389] nbd3: detected capacity change from 0 to 18 [ 171.204743][ T263] block nbd3: Dead connection, failed to find a fallback [ 171.212159][ T263] block nbd3: shutting down sockets [ 171.217640][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.229238][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 171.238157][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.248979][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 171.256859][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.267661][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 171.275966][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.286821][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 171.298586][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.309558][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 171.318552][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.329630][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 171.338080][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.349224][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 171.368154][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.379102][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 171.390502][ T5297] ldm_validate_partition_table(): Disk read failed. [ 171.409431][ T4304] usb 4-1: USB disconnect, device number 3 [ 171.447214][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.458049][ T150] Buffer I/O error on dev nbd3, logical block 0, async page read [ 171.466183][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.477014][ T150] Buffer I/O error on dev nbd3, logical block 0, async page read [ 171.493477][ T5297] Dev nbd3: unable to read RDB block 0 [ 171.549628][ T5400] loop4: detected capacity change from 0 to 512 [ 171.556774][ T5297] nbd3: unable to read partition table [ 171.583992][ T5297] nbd3: partition table beyond EOD, truncated [ 171.623948][ T5297] ldm_validate_partition_table(): Disk read failed. [ 171.723503][ T5404] loop2: detected capacity change from 0 to 256 [ 171.739289][ T5297] Dev nbd3: unable to read RDB block 0 [ 171.745828][ T5297] nbd3: unable to read partition table [ 172.385607][ T5400] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.393721][ T5297] nbd3: partition table beyond EOD, truncated [ 172.432994][ T5404] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 172.920781][ T5400] EXT4-fs (loop4): 1 truncate cleaned up [ 172.926456][ T5400] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 174.675996][ T5428] EXT4-fs error (device loop4): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.4.257: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 174.726336][ T5428] EXT4-fs (loop4): Remounting filesystem read-only [ 174.732950][ T5428] EXT4-fs error (device loop4) in ext4_delete_entry:2802: Corrupt filesystem [ 174.742755][ T5428] EXT4-fs (loop4): Remounting filesystem read-only [ 174.749309][ T5428] EXT4-fs warning (device loop4): ext4_rename_delete:3794: inode #2: comm syz.4.257: Deleting old file: nlink 4, error=-117 [ 174.810142][ T5431] loop1: detected capacity change from 0 to 128 [ 175.391726][ T5441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.264'. [ 176.638188][ T5455] loop3: detected capacity change from 0 to 512 [ 177.023456][ T5458] tipc: Started in network mode [ 177.028506][ T5458] tipc: Node identity 4, cluster identity 4711 [ 177.034794][ T5458] tipc: Node number set to 4 [ 177.331013][ T5455] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 177.613487][ T5455] EXT4-fs (loop3): 1 truncate cleaned up [ 178.331133][ T5455] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 178.459785][ T5460] loop1: detected capacity change from 0 to 256 [ 179.919620][ T5460] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 180.276026][ T5480] syz.2.274 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 181.879180][ T5494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 182.110895][ T5498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 183.450862][ T4175] Bluetooth: hci1: command 0x0406 tx timeout [ 183.464964][ T4175] Bluetooth: hci2: command 0x0406 tx timeout [ 183.477701][ T4175] Bluetooth: hci3: command 0x0406 tx timeout [ 183.518460][ T5519] bridge0: port 3(wlan1) entered blocking state [ 183.529509][ T5519] bridge0: port 3(wlan1) entered disabled state [ 183.537305][ T5519] device wlan1 entered promiscuous mode [ 183.899308][ T5529] loop0: detected capacity change from 0 to 128 [ 183.971060][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 184.065179][ T5524] bridge0: port 3(wlan1) entered disabled state [ 184.144154][ T5529] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.350445][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 185.131219][ T21] usb 4-1: config 0 has no interfaces? [ 185.144618][ T21] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 185.299415][ T5524] device wlan1 left promiscuous mode [ 185.305507][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.333197][ T5524] bridge0: port 3(wlan1) entered disabled state [ 185.399904][ T21] usb 4-1: config 0 descriptor?? [ 185.426320][ T5540] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 185.435041][ T5540] FAT-fs (loop0): Filesystem has been set read-only [ 185.442116][ T5538] nbd1: detected capacity change from 0 to 18 [ 185.448746][ T5540] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 185.460079][ T4202] block nbd1: Receive control failed (result -107) [ 185.501159][ T263] block nbd1: Dead connection, failed to find a fallback [ 185.509724][ T263] block nbd1: shutting down sockets [ 185.517039][ T263] print_req_error: 25 callbacks suppressed [ 185.517050][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.534297][ T263] buffer_io_error: 25 callbacks suppressed [ 185.534347][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 185.557336][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.568322][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 185.577558][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.589024][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 185.603251][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.614281][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 185.623830][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.635403][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 185.646373][ T5539] nbd1: detected capacity change from 18 to 8589934592 [ 185.804583][ T4231] usb 4-1: USB disconnect, device number 4 [ 186.567838][ T5538] pi3usb30532 0-0005: Error reading config register -5 [ 186.592359][ T5538] pi3usb30532: probe of 0-0005 failed with error -5 [ 186.613588][ T5538] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 186.768543][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.779379][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 186.787282][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.798092][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 186.805959][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.816775][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 186.824535][ T4594] ldm_validate_partition_table(): Disk read failed. [ 186.857129][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.868757][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 186.880886][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.891768][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 186.905499][ T4594] Dev nbd1: unable to read RDB block 0 [ 186.924355][ T4594] nbd1: unable to read partition table [ 187.100996][ T4594] ldm_validate_partition_table(): Disk read failed. [ 187.125662][ T4594] Dev nbd1: unable to read RDB block 0 [ 187.133430][ T4594] nbd1: unable to read partition table [ 189.493665][ T5571] loop1: detected capacity change from 0 to 512 [ 189.827550][ T5571] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.295: missing EA_INODE flag [ 189.843180][ T5571] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.295: error while reading EA inode 2 err=-117 [ 190.036363][ T5571] EXT4-fs (loop1): 1 orphan inode deleted [ 190.074359][ T5571] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 192.150056][ T5585] loop0: detected capacity change from 0 to 16 [ 192.990408][ T5585] erofs: (device loop0): mounted with root inode @ nid 36. [ 193.942861][ T5592] capability: warning: `syz.1.303' uses deprecated v2 capabilities in a way that may be insecure [ 194.184134][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 194.193917][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 194.201459][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.211506][ T4198] Workqueue: hci2 hci_rx_work [ 194.216203][ T4198] Call Trace: [ 194.219478][ T4198] [ 194.222403][ T4198] dump_stack_lvl+0x188/0x250 [ 194.227079][ T4198] ? show_regs_print_info+0x20/0x20 [ 194.232275][ T4198] ? load_image+0x410/0x410 [ 194.236786][ T4198] sysfs_create_dir_ns+0x26a/0x290 [ 194.241893][ T4198] ? sysfs_warn_dup+0xa0/0xa0 [ 194.246565][ T4198] ? ret_from_fork+0x1f/0x30 [ 194.251150][ T4198] ? do_raw_spin_unlock+0x11d/0x230 [ 194.256351][ T4198] kobject_add_internal+0x5ba/0xcd0 [ 194.261551][ T4198] kobject_add+0x160/0x230 [ 194.265971][ T4198] ? kobject_init+0x1c0/0x1c0 [ 194.270647][ T4198] ? __raw_spin_lock_init+0x41/0x100 [ 194.275929][ T4198] ? get_device_parent+0x121/0x3e0 [ 194.281038][ T4198] device_add+0x470/0x1050 [ 194.285453][ T4198] hci_conn_add_sysfs+0xd1/0x1e0 [ 194.290388][ T4198] hci_sync_conn_complete_evt+0x647/0x9d0 [ 194.296101][ T4198] ? __rwlock_init+0x140/0x140 [ 194.300859][ T4198] hci_event_packet+0x8cf/0x1310 [ 194.305795][ T4198] ? _raw_spin_unlock+0x40/0x40 [ 194.310642][ T4198] ? rcu_lock_release+0x20/0x20 [ 194.315493][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 194.320688][ T4198] hci_rx_work+0x255/0xa10 [ 194.325114][ T4198] process_one_work+0x867/0xff0 [ 194.329974][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 194.335599][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 194.340884][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 194.345903][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 194.351448][ T4198] ? wq_worker_running+0x97/0x170 [ 194.356472][ T4198] worker_thread+0xad7/0x12a0 [ 194.361168][ T4198] kthread+0x42e/0x520 [ 194.365230][ T4198] ? rcu_lock_release+0x20/0x20 [ 194.370074][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 194.374663][ T4198] ret_from_fork+0x1f/0x30 [ 194.379090][ T4198] [ 194.388506][ T4198] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 194.402599][ T4198] Bluetooth: hci2: failed to register connection device [ 194.409701][ T4198] [ 194.412021][ T4198] ====================================================== [ 194.419019][ T4198] WARNING: possible circular locking dependency detected [ 194.426028][ T4198] syzkaller #0 Not tainted [ 194.430431][ T4198] ------------------------------------------------------ [ 194.437432][ T4198] kworker/u5:5/4198 is trying to acquire lock: [ 194.443569][ T4198] ffff88805fb88120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x70a/0xd00 [ 194.454265][ T4198] [ 194.454265][ T4198] but task is already holding lock: [ 194.461612][ T4198] ffffffff8d593e48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0x45e/0x9d0 [ 194.471869][ T4198] [ 194.471869][ T4198] which lock already depends on the new lock. [ 194.471869][ T4198] [ 194.482257][ T4198] [ 194.482257][ T4198] the existing dependency chain (in reverse order) is: [ 194.491257][ T4198] [ 194.491257][ T4198] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 194.498979][ T4198] __mutex_lock_common+0x1e5/0x2400 [ 194.504691][ T4198] mutex_lock_nested+0x17/0x20 [ 194.509969][ T4198] hci_remote_features_evt+0x5d9/0xa10 [ 194.515941][ T4198] hci_event_packet+0x600/0x1310 [ 194.521389][ T4198] hci_rx_work+0x255/0xa10 [ 194.526317][ T4198] process_one_work+0x867/0xff0 [ 194.531677][ T4198] worker_thread+0xad7/0x12a0 [ 194.536868][ T4198] kthread+0x42e/0x520 [ 194.541446][ T4198] ret_from_fork+0x1f/0x30 [ 194.546380][ T4198] [ 194.546380][ T4198] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 194.553662][ T4198] __mutex_lock_common+0x1e5/0x2400 [ 194.559363][ T4198] mutex_lock_nested+0x17/0x20 [ 194.564628][ T4198] sco_sock_connect+0x189/0x940 [ 194.569984][ T4198] __sys_connect+0x3cb/0x450 [ 194.575073][ T4198] __x64_sys_connect+0x76/0x80 [ 194.580337][ T4198] do_syscall_64+0x4c/0xa0 [ 194.585250][ T4198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.591640][ T4198] [ 194.591640][ T4198] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 194.600730][ T4198] __lock_acquire+0x2c66/0x7b50 [ 194.606082][ T4198] lock_acquire+0x19e/0x400 [ 194.611083][ T4198] lock_sock_nested+0x44/0x100 [ 194.616343][ T4198] sco_connect_cfm+0x70a/0xd00 [ 194.621603][ T4198] hci_sync_conn_complete_evt+0x4be/0x9d0 [ 194.627820][ T4198] hci_event_packet+0x8cf/0x1310 [ 194.633253][ T4198] hci_rx_work+0x255/0xa10 [ 194.638167][ T4198] process_one_work+0x867/0xff0 [ 194.643515][ T4198] worker_thread+0xad7/0x12a0 [ 194.648691][ T4198] kthread+0x42e/0x520 [ 194.653264][ T4198] ret_from_fork+0x1f/0x30 [ 194.658176][ T4198] [ 194.658176][ T4198] other info that might help us debug this: [ 194.658176][ T4198] [ 194.668377][ T4198] Chain exists of: [ 194.668377][ T4198] sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock [ 194.668377][ T4198] [ 194.682596][ T4198] Possible unsafe locking scenario: [ 194.682596][ T4198] [ 194.690022][ T4198] CPU0 CPU1 [ 194.695359][ T4198] ---- ---- [ 194.700701][ T4198] lock(hci_cb_list_lock); [ 194.705184][ T4198] lock(&hdev->lock); [ 194.711745][ T4198] lock(hci_cb_list_lock); [ 194.718740][ T4198] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 194.724608][ T4198] [ 194.724608][ T4198] *** DEADLOCK *** [ 194.724608][ T4198] [ 194.732726][ T4198] 4 locks held by kworker/u5:5/4198: [ 194.737985][ T4198] #0: ffff88807b148938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 194.748227][ T4198] #1: ffffc9000301fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 194.759503][ T4198] #2: ffff888078f8c478 (&hdev->lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0xb8/0x9d0 [ 194.769652][ T4198] #3: ffffffff8d593e48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0x45e/0x9d0 [ 194.780322][ T4198] [ 194.780322][ T4198] stack backtrace: [ 194.786186][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 194.793704][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.803734][ T4198] Workqueue: hci2 hci_rx_work [ 194.808394][ T4198] Call Trace: [ 194.811652][ T4198] [ 194.814563][ T4198] dump_stack_lvl+0x188/0x250 [ 194.819216][ T4198] ? load_image+0x410/0x410 [ 194.823699][ T4198] ? show_regs_print_info+0x20/0x20 [ 194.828879][ T4198] ? print_circular_bug+0x12b/0x1a0 [ 194.834053][ T4198] check_noncircular+0x296/0x330 [ 194.838967][ T4198] ? stack_trace_snprint+0xe0/0xe0 [ 194.844054][ T4198] ? add_chain_block+0x9b0/0x9b0 [ 194.848967][ T4198] ? lockdep_lock+0xf1/0x1f0 [ 194.853536][ T4198] ? mark_lock+0x94/0x320 [ 194.857840][ T4198] ? _find_first_zero_bit+0xd1/0xf0 [ 194.863018][ T4198] __lock_acquire+0x2c66/0x7b50 [ 194.867855][ T4198] ? verify_lock_unused+0x140/0x140 [ 194.873033][ T4198] ? verify_lock_unused+0x140/0x140 [ 194.878211][ T4198] ? hci_rx_work+0x255/0xa10 [ 194.882777][ T4198] ? process_one_work+0x867/0xff0 [ 194.887779][ T4198] ? worker_thread+0xad7/0x12a0 [ 194.892607][ T4198] ? kthread+0x42e/0x520 [ 194.896823][ T4198] ? ret_from_fork+0x1f/0x30 [ 194.901395][ T4198] lock_acquire+0x19e/0x400 [ 194.905880][ T4198] ? sco_connect_cfm+0x70a/0xd00 [ 194.910797][ T4198] ? sco_connect_cfm+0x6fa/0xd00 [ 194.915733][ T4198] ? read_lock_is_recursive+0x10/0x10 [ 194.921085][ T4198] ? __lock_acquire+0x7b50/0x7b50 [ 194.926086][ T4198] ? do_raw_spin_lock+0x128/0x2f0 [ 194.931089][ T4198] ? __rwlock_init+0x140/0x140 [ 194.935831][ T4198] lock_sock_nested+0x44/0x100 [ 194.940571][ T4198] ? sco_connect_cfm+0x70a/0xd00 [ 194.945489][ T4198] sco_connect_cfm+0x70a/0xd00 [ 194.950232][ T4198] ? sco_skb_put_cmsg+0xa0/0xa0 [ 194.955061][ T4198] ? sco_skb_put_cmsg+0xa0/0xa0 [ 194.959889][ T4198] hci_sync_conn_complete_evt+0x4be/0x9d0 [ 194.965585][ T4198] ? __rwlock_init+0x140/0x140 [ 194.970327][ T4198] hci_event_packet+0x8cf/0x1310 [ 194.975242][ T4198] ? _raw_spin_unlock+0x40/0x40 [ 194.980071][ T4198] ? rcu_lock_release+0x20/0x20 [ 194.984897][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 194.990073][ T4198] hci_rx_work+0x255/0xa10 [ 194.994472][ T4198] process_one_work+0x867/0xff0 [ 194.999308][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 195.004919][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 195.010187][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 195.015188][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 195.020711][ T4198] ? wq_worker_running+0x97/0x170 [ 195.025713][ T4198] worker_thread+0xad7/0x12a0 [ 195.030379][ T4198] kthread+0x42e/0x520 [ 195.034423][ T4198] ? rcu_lock_release+0x20/0x20 [ 195.039249][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 195.043816][ T4198] ret_from_fork+0x1f/0x30 [ 195.048215][ T4198] [ 195.095661][ T25] audit: type=1800 audit(1790768263.902:2): pid=5601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.304" name="c_srate" dev="configfs" ino=38104 res=0 errno=0 [ 196.369379][ T5574] Bluetooth: hci2: command 0x0409 tx timeout [ 198.623682][ T5574] Bluetooth: hci2: command 0x0406 tx timeout [ 203.134899][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.141187][ T1420] ieee802154 phy1 wpan1: encryption failed: -22