last executing test programs: 3.701034195s ago: executing program 2 (id=3): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.160135732s ago: executing program 3 (id=11): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 2.869024686s ago: executing program 3 (id=13): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x100}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffc, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) 2.641959037s ago: executing program 3 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.374280431s ago: executing program 3 (id=18): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4fa6, 0x105, 0x4, 0x10000421, 0x2000001, 0x400cc5, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0xfffffffe, 0x1, 0x9, 0x0, 0x40400, 0x9, 0x2, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xd, 0x3, 0x1, 0x5, 0x4, 0x7ffffff, 0x4857]}) 2.019687389s ago: executing program 2 (id=19): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000011c0)={0x1, &(0x7f0000001180)=[{0x6, 0x0, 0x0, 0x7ffffcb8}]}) mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') 2.019335679s ago: executing program 3 (id=20): r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.947072442s ago: executing program 2 (id=21): unshare(0x6020400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) 1.920229414s ago: executing program 1 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x2008040) 1.743669882s ago: executing program 2 (id=24): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000080)={[{@acl}, {@nodatacow}, {@flushoncommit}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@nodatasum}, {@compress_algo={'compress', 0x3d, 'no'}}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@max_inline={'max_inline', 0x3d, [0x45, 0x38, 0x67, 0x74, 0x65, 0x65]}}]}, 0x3, 0x512d, &(0x7f000000f380)="$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") mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) 1.60179169s ago: executing program 1 (id=26): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000080)) 1.499490725s ago: executing program 1 (id=27): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @local}], 0x20) sendto$inet(r0, &(0x7f0000000000)=' a', 0x2, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0xfffffffffffffffe}, 0x10) 1.255873747s ago: executing program 0 (id=29): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) 1.096701275s ago: executing program 0 (id=30): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000200)=0xf0) close(0x3) 998.97238ms ago: executing program 3 (id=31): syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0x8, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0x7, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x80, 0x30, 0xee}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0) fsopen(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) 954.525012ms ago: executing program 0 (id=32): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r0, &(0x7f0000000040)="240000001a005f0214f9f507000909000a000000000000000000000004001e0000000000", 0x24) 721.875253ms ago: executing program 0 (id=33): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r0, 0x7fffffffffffffff, 0x0) read$usbfs(r0, &(0x7f00000002c0)=""/234, 0xea) 631.573908ms ago: executing program 0 (id=34): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000005c0)={'pcl711\x00', [0x4f26, 0x80000002, 0x4, 0x4, 0x5, 0x5, 0x20656b, 0x7, 0x54c6cff3, 0xfe, 0x2, 0x40000000, 0x1, 0xfffffffe, 0x6, 0x101, 0x0, 0x80, 0x3, 0x40000003, 0x8a, 0xcaa2, 0x0, 0xfff, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) 525.119533ms ago: executing program 1 (id=35): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000040), &(0x7f0000000040)=""/61}, 0x20) 479.582826ms ago: executing program 0 (id=36): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 315.081844ms ago: executing program 1 (id=37): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1f, 0xfffffffe, @empty, 0xcc1}, 0x1c) 175.238761ms ago: executing program 1 (id=38): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001500)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@numtail}, {@utf8}, {@rodir}, {@numtail}, {@shortname_mixed}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@uni_xlateno}]}, 0x29, 0x339, &(0x7f00000011c0)="$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") r0 = open(&(0x7f00000001c0)='.\x00', 0x40480, 0x0) getdents(r0, &(0x7f0000000280)=""/4096, 0x9005) 0s ago: executing program 2 (id=39): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100)=0x4, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. [ 73.565474][ T5761] cgroup: Unknown subsys name 'net' [ 73.696636][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.399583][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.848838][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.860971][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.871837][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.880356][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.888315][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.896695][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.910059][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.930782][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.938765][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.965109][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.975513][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.985558][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.995052][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.003146][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.012480][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.026322][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.050962][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.059478][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.083219][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.095730][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.105518][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.116145][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.127679][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.135468][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.448045][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 77.550119][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 77.650427][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 77.681820][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.689878][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.697461][ T5772] bridge_slave_0: entered allmulticast mode [ 77.704789][ T5772] bridge_slave_0: entered promiscuous mode [ 77.721037][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.728265][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.735631][ T5772] bridge_slave_1: entered allmulticast mode [ 77.743096][ T5772] bridge_slave_1: entered promiscuous mode [ 77.796059][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.803482][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.812734][ T5775] bridge_slave_0: entered allmulticast mode [ 77.819504][ T5775] bridge_slave_0: entered promiscuous mode [ 77.840810][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.869566][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.877377][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.885000][ T5775] bridge_slave_1: entered allmulticast mode [ 77.892054][ T5775] bridge_slave_1: entered promiscuous mode [ 77.903652][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.969605][ T5772] team0: Port device team_slave_0 added [ 77.978504][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.993947][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.003895][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 78.026094][ T5772] team0: Port device team_slave_1 added [ 78.073934][ T5775] team0: Port device team_slave_0 added [ 78.094590][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.102137][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.109469][ T5779] bridge_slave_0: entered allmulticast mode [ 78.116561][ T5779] bridge_slave_0: entered promiscuous mode [ 78.125550][ T5775] team0: Port device team_slave_1 added [ 78.158945][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.166862][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.174444][ T5779] bridge_slave_1: entered allmulticast mode [ 78.182129][ T5779] bridge_slave_1: entered promiscuous mode [ 78.197191][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.204391][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.230726][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.274089][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.281401][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.307765][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.345245][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.352360][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.378678][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.392626][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.400642][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.427166][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.460859][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.473555][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.504478][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.514161][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.522330][ T5782] bridge_slave_0: entered allmulticast mode [ 78.529120][ T5782] bridge_slave_0: entered promiscuous mode [ 78.538614][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.545937][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.553473][ T5782] bridge_slave_1: entered allmulticast mode [ 78.560924][ T5782] bridge_slave_1: entered promiscuous mode [ 78.631291][ T5772] hsr_slave_0: entered promiscuous mode [ 78.637962][ T5772] hsr_slave_1: entered promiscuous mode [ 78.674947][ T5779] team0: Port device team_slave_0 added [ 78.694130][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.708587][ T5775] hsr_slave_0: entered promiscuous mode [ 78.715921][ T5775] hsr_slave_1: entered promiscuous mode [ 78.722568][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.731130][ T5775] Cannot create hsr debugfs directory [ 78.738818][ T5779] team0: Port device team_slave_1 added [ 78.759663][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.828605][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.836133][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.862710][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.904513][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.911779][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.938186][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.953050][ T5782] team0: Port device team_slave_0 added [ 78.996711][ T5782] team0: Port device team_slave_1 added [ 79.040825][ T5781] Bluetooth: hci1: command tx timeout [ 79.049972][ T5776] Bluetooth: hci0: command tx timeout [ 79.084704][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.092960][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.119785][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.130001][ T5776] Bluetooth: hci2: command tx timeout [ 79.132886][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.143113][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.169612][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.205865][ T5776] Bluetooth: hci3: command tx timeout [ 79.209526][ T5779] hsr_slave_0: entered promiscuous mode [ 79.218389][ T5779] hsr_slave_1: entered promiscuous mode [ 79.225141][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.232912][ T5779] Cannot create hsr debugfs directory [ 79.319467][ T5782] hsr_slave_0: entered promiscuous mode [ 79.326116][ T5782] hsr_slave_1: entered promiscuous mode [ 79.333027][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.341097][ T5782] Cannot create hsr debugfs directory [ 79.470320][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.507703][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.544556][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.583980][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.676703][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.687074][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.714272][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.725666][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.819961][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.851450][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.868606][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.879538][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.967115][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.977054][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.987299][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.012792][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.036953][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.063782][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.116536][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.124095][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.178055][ T4462] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.185270][ T4462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.217239][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.276769][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.298953][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.326321][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.333688][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.348933][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.356090][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.457299][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.487695][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.505146][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.512365][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.538305][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.545527][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.699546][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.748877][ T5030] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.756161][ T5030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.818837][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.826099][ T5030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.948268][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.027447][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.121044][ T5776] Bluetooth: hci0: command tx timeout [ 81.121083][ T5781] Bluetooth: hci1: command tx timeout [ 81.166209][ T5775] veth0_vlan: entered promiscuous mode [ 81.201394][ T5781] Bluetooth: hci2: command tx timeout [ 81.231738][ T5775] veth1_vlan: entered promiscuous mode [ 81.258676][ T5772] veth0_vlan: entered promiscuous mode [ 81.280870][ T5781] Bluetooth: hci3: command tx timeout [ 81.316408][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.332082][ T5772] veth1_vlan: entered promiscuous mode [ 81.348712][ T5775] veth0_macvtap: entered promiscuous mode [ 81.374278][ T5775] veth1_macvtap: entered promiscuous mode [ 81.424646][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.448259][ T5772] veth0_macvtap: entered promiscuous mode [ 81.458755][ T5772] veth1_macvtap: entered promiscuous mode [ 81.474164][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.491378][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.537876][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.550917][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.564516][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.587223][ T5779] veth0_vlan: entered promiscuous mode [ 81.596638][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.607730][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.617445][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.626337][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.638321][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.650442][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.661889][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.704166][ T5779] veth1_vlan: entered promiscuous mode [ 81.718505][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.728819][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.737839][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.747026][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.794305][ T5782] veth0_vlan: entered promiscuous mode [ 81.864950][ T5782] veth1_vlan: entered promiscuous mode [ 81.903407][ T5779] veth0_macvtap: entered promiscuous mode [ 81.918805][ T5779] veth1_macvtap: entered promiscuous mode [ 81.971059][ T4462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.979454][ T4462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.015201][ T5782] veth0_macvtap: entered promiscuous mode [ 82.087844][ T5782] veth1_macvtap: entered promiscuous mode [ 82.113072][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.129187][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.139661][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.159116][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.180893][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.208126][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.223010][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.242259][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.255600][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.271629][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.282508][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.295223][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.310377][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.319271][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.330277][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.339095][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.422492][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.437182][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.450060][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.461534][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.476842][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.493343][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.509368][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.520643][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.533692][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.582377][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.600480][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.614660][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.632953][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.651061][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.662127][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.696968][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.759063][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.775040][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.786638][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.797016][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.820720][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.844497][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.971036][ T4462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.978926][ T4462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.086614][ T4462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.111673][ T4462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.128225][ T5842] binder: 5840:5842 ioctl 4018620d 0 returned -22 [ 83.138095][ T5842] binder: 5840:5842 ioctl c0306201 200000000300 returned -11 [ 83.157459][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.182753][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.202176][ T5781] Bluetooth: hci0: command tx timeout [ 83.204746][ T5776] Bluetooth: hci1: command tx timeout [ 83.280038][ T5776] Bluetooth: hci2: command tx timeout [ 83.360273][ T5776] Bluetooth: hci3: command tx timeout [ 83.475226][ T4462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.496217][ T4462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.603229][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.669417][ T5850] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.740785][ T5850] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.769458][ T5850] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.816637][ T5850] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.838555][ T5850] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.905974][ T5860] syz.0.10[5860]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.917181][ T5850] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.929389][ T5850] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.951312][ T5850] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.955138][ T5860] loop0: detected capacity change from 0 to 164 [ 83.968443][ T5850] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.977221][ T5850] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.985845][ T5860] ======================================================= [ 83.985845][ T5860] WARNING: The mand mount option has been deprecated and [ 83.985845][ T5860] and is ignored by this kernel. Remove the mand [ 83.985845][ T5860] option from the mount to silence this warning. [ 83.985845][ T5860] ======================================================= [ 84.021134][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.045603][ T5850] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 84.523053][ T5872] loop1: detected capacity change from 0 to 128 [ 84.591611][ T5872] EXT4-fs: Ignoring removed nobh option [ 84.664235][ T5874] loop0: detected capacity change from 0 to 1024 [ 84.705075][ T5872] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.764866][ T5872] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.782958][ T5874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.814988][ T5874] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.144395][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.173395][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.679962][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.839925][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.920361][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.941669][ T5892] loop2: detected capacity change from 0 to 32768 [ 86.000856][ T5776] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.020365][ T5892] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.24 (5892) [ 86.087692][ T5892] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.103496][ T5892] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 86.114292][ T5892] BTRFS info (device loop2): setting nodatacow, compression disabled [ 86.129809][ T5892] BTRFS info (device loop2): turning on flush-on-commit [ 86.145461][ T5892] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 86.172961][ T5892] BTRFS info (device loop2): use lzo compression, level 0 [ 86.188714][ T5892] BTRFS info (device loop2): setting nodatasum [ 86.189629][ T5908] netlink: 'syz.0.32': attribute type 30 has an invalid length. [ 86.195524][ T5892] BTRFS info (device loop2): use no compression [ 86.210206][ T5892] BTRFS info (device loop2): trying to use backup root at mount time [ 86.219316][ T5892] BTRFS info (device loop2): max_inline at 0 [ 86.226053][ T5892] BTRFS info (device loop2): using free space tree [ 86.283864][ T4462] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 86.311643][ T5892] BTRFS warning (device loop2): couldn't read tree root [ 86.338898][ T1856] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.361128][ T5892] BTRFS warning (device loop2): try to load backup roots slot 1 [ 86.384205][ T1085] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 86.418396][ T5892] BTRFS warning (device loop2): couldn't read tree root [ 86.452352][ T5892] BTRFS warning (device loop2): try to load backup roots slot 2 [ 86.479136][ T42] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 86.510272][ T5892] BTRFS warning (device loop2): couldn't read tree root [ 86.539797][ T5892] BTRFS warning (device loop2): try to load backup roots slot 3 [ 86.560392][ T1856] usb 4-1: Using ep0 maxpacket: 8 [ 86.610026][ T1856] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 86.619451][ T1856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.630482][ T1856] usb 4-1: Product: syz [ 86.634920][ T1856] usb 4-1: Manufacturer: syz [ 86.657417][ T5892] BTRFS info (device loop2): enabling ssd optimizations [ 86.666397][ T1856] usb 4-1: SerialNumber: syz [ 86.671365][ T5892] BTRFS info (device loop2): auto enabling async discard [ 86.696236][ T5892] BTRFS info (device loop2): rebuilding free space tree [ 86.778006][ T5892] BTRFS info (device loop2): checking UUID tree [ 86.924596][ T1863] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.931128][ T5937] loop1: detected capacity change from 0 to 256 [ 86.991921][ T1856] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 87.014822][ T1856] usb 4-1: clock source 0 is not valid, cannot use [ 87.047599][ T1856] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 87.052845][ T5937] FAT-fs (loop1): Directory bread(block 64) failed [ 87.062744][ T1203] cfg80211: failed to load regulatory.db [ 87.076161][ T1856] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 87.084487][ T5937] FAT-fs (loop1): Directory bread(block 65) failed [ 87.093799][ T5779] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.106388][ T1856] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 87.110924][ T5937] FAT-fs (loop1): Directory bread(block 66) failed [ 87.118392][ T1856] usb 4-1: clock source 0 is not valid, cannot use [ 87.140789][ T1863] usb 1-1: Using ep0 maxpacket: 32 [ 87.152459][ T1856] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 87.163150][ T1863] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 87.178908][ T1863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.182574][ T5937] FAT-fs (loop1): Directory bread(block 67) failed [ 87.187463][ T1856] usb 4-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 87.217943][ T5937] FAT-fs (loop1): Directory bread(block 68) failed [ 87.231095][ T1863] usb 1-1: config 0 descriptor?? [ 87.235538][ T5937] FAT-fs (loop1): Directory bread(block 69) failed [ 87.250558][ T5937] FAT-fs (loop1): Directory bread(block 70) failed [ 87.260599][ T5937] FAT-fs (loop1): Directory bread(block 71) failed [ 87.287432][ T5937] FAT-fs (loop1): Directory bread(block 72) failed [ 87.303432][ T1863] as10x_usb: device has been detected [ 87.306289][ T5937] FAT-fs (loop1): Directory bread(block 73) failed [ 87.332153][ T1863] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 87.449114][ T1856] usb 4-1: USB disconnect, device number 2 [ 87.456303][ T1863] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 87.553393][ T5930] ------------[ cut here ]------------ [ 87.559012][ T5930] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 87.559097][ T5930] WARNING: CPU: 1 PID: 5930 at kernel/locking/mutex.c:582 __mutex_lock+0xb85/0xcc0 [ 87.574561][ T5930] Modules linked in: [ 87.578499][ T5930] CPU: 1 PID: 5930 Comm: syz.0.36 Not tainted syzkaller #0 [ 87.585974][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.596123][ T5930] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 87.602574][ T5930] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 94 87 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 5b 28 c2 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 87.623333][ T5930] RSP: 0018:ffffc9000488faa0 EFLAGS: 00010246 [ 87.629451][ T5930] RAX: bfd447107679ee00 RBX: ffff88802f14ace0 RCX: 0000000000080000 [ 87.637819][ T5930] RDX: ffffc9000ce0a000 RSI: 000000000000276d RDI: 000000000000276e [ 87.646434][ T5930] RBP: ffffc9000488fbf8 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 87.654841][ T5930] R10: dffffc0000000000 R11: ffffed10171e5183 R12: 0000000000000000 [ 87.662898][ T5930] R13: 1ffff92000911f64 R14: dffffc0000000000 R15: 0000000000000000 [ 87.671049][ T5930] FS: 00007f84350bc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 87.680364][ T5930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.687007][ T5930] CR2: 000000110c2aa448 CR3: 00000000752e9000 CR4: 00000000003506e0 [ 87.695069][ T5930] Call Trace: [ 87.698410][ T5930] [ 87.701409][ T5930] ? trace_contention_end+0x39/0xe0 [ 87.706654][ T5930] ? __mutex_lock+0x315/0xcc0 [ 87.711395][ T5930] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 87.717073][ T5930] ? mutex_lock_nested+0x20/0x20 [ 87.722133][ T5930] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 87.727877][ T5930] ? dmx_section_feed_start_filtering+0x55/0x690 [ 87.734292][ T5930] ? mutex_lock_nested+0x20/0x20 [ 87.739332][ T5930] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 87.745409][ T5930] ? lock_chain_count+0x20/0x20 [ 87.750839][ T5930] ? _raw_spin_lock_irq+0xbb/0xf0 [ 87.755984][ T5930] as102_dvb_dmx_start_feed+0x70/0x280 [ 87.762269][ T5930] dmx_section_feed_start_filtering+0x4f5/0x690 [ 87.764392][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.768905][ T5930] dvb_dmxdev_filter_start+0xcbd/0x10c0 [ 87.780266][ T5930] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 87.785744][ T5930] dvb_demux_do_ioctl+0x467/0x530 [ 87.790820][ T5930] dvb_usercopy+0x195/0x2b0 [ 87.795360][ T5930] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 87.801071][ T5930] ? dvb_generic_ioctl+0xb0/0xb0 [ 87.806032][ T5930] ? dvb_demux_poll+0x220/0x220 [ 87.811207][ T5930] dvb_demux_ioctl+0x29/0x30 [ 87.815844][ T5930] __se_sys_ioctl+0xfd/0x170 [ 87.820598][ T5930] do_syscall_64+0x55/0xa0 [ 87.825046][ T5930] ? clear_bhb_loop+0x40/0x90 [ 87.829782][ T5930] ? clear_bhb_loop+0x40/0x90 [ 87.834503][ T5930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.841362][ T5930] RIP: 0033:0x7f843419c819 [ 87.845833][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.865453][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.872466][ T5930] RSP: 002b:00007f84350bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.881055][ T5930] RAX: ffffffffffffffda RBX: 00007f8434415fa0 RCX: 00007f843419c819 [ 87.889166][ T5930] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 87.897235][ T5930] RBP: 00007f8434232c91 R08: 0000000000000000 R09: 0000000000000000 [ 87.905362][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.913400][ T5930] R13: 00007f8434416038 R14: 00007f8434415fa0 R15: 00007ffc444d0528 [ 87.921912][ T5930] [ 87.922832][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.924968][ T5930] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.924979][ T5930] CPU: 1 PID: 5930 Comm: syz.0.36 Not tainted syzkaller #0 [ 87.924997][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.925007][ T5930] Call Trace: [ 87.925015][ T5930] [ 87.925022][ T5930] dump_stack_lvl+0x18c/0x250 [ 87.925054][ T5930] ? show_regs_print_info+0x20/0x20 [ 87.925078][ T5930] ? load_image+0x400/0x400 [ 87.925103][ T5930] panic+0x2dc/0x730 [ 87.925125][ T5930] ? bpf_jit_dump+0xd0/0xd0 [ 87.925150][ T5930] __warn+0x2e0/0x470 [ 87.925168][ T5930] ? __mutex_lock+0xb85/0xcc0 [ 87.925185][ T5930] ? __mutex_lock+0xb85/0xcc0 [ 87.925199][ T5930] report_bug+0x2be/0x4f0 [ 87.925215][ T5930] ? __mutex_lock+0xb85/0xcc0 [ 87.925230][ T5930] ? __mutex_lock+0xb85/0xcc0 [ 87.925245][ T5930] ? __mutex_lock+0xb87/0xcc0 [ 87.925260][ T5930] handle_bug+0xcf/0x120 [ 87.925275][ T5930] exc_invalid_op+0x1a/0x50 [ 87.925291][ T5930] asm_exc_invalid_op+0x1a/0x20 [ 87.925310][ T5930] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 87.925329][ T5930] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 94 87 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 5b 28 c2 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 87.925342][ T5930] RSP: 0018:ffffc9000488faa0 EFLAGS: 00010246 [ 87.925360][ T5930] RAX: bfd447107679ee00 RBX: ffff88802f14ace0 RCX: 0000000000080000 [ 87.925372][ T5930] RDX: ffffc9000ce0a000 RSI: 000000000000276d RDI: 000000000000276e [ 87.925384][ T5930] RBP: ffffc9000488fbf8 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 87.925396][ T5930] R10: dffffc0000000000 R11: ffffed10171e5183 R12: 0000000000000000 [ 87.925408][ T5930] R13: 1ffff92000911f64 R14: dffffc0000000000 R15: 0000000000000000 [ 87.925427][ T5930] ? trace_contention_end+0x39/0xe0 [ 87.925444][ T5930] ? __mutex_lock+0x315/0xcc0 [ 87.925459][ T5930] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 87.925484][ T5930] ? mutex_lock_nested+0x20/0x20 [ 87.925498][ T5930] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 87.925513][ T5930] ? dmx_section_feed_start_filtering+0x55/0x690 [ 87.925536][ T5930] ? mutex_lock_nested+0x20/0x20 [ 87.925551][ T5930] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 87.925570][ T5930] ? lock_chain_count+0x20/0x20 [ 87.925587][ T5930] ? _raw_spin_lock_irq+0xbb/0xf0 [ 87.925607][ T5930] as102_dvb_dmx_start_feed+0x70/0x280 [ 87.925631][ T5930] dmx_section_feed_start_filtering+0x4f5/0x690 [ 87.925656][ T5930] dvb_dmxdev_filter_start+0xcbd/0x10c0 [ 87.925678][ T5930] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 87.925698][ T5930] dvb_demux_do_ioctl+0x467/0x530 [ 87.925719][ T5930] dvb_usercopy+0x195/0x2b0 [ 87.925737][ T5930] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 87.925756][ T5930] ? dvb_generic_ioctl+0xb0/0xb0 [ 87.925780][ T5930] ? dvb_demux_poll+0x220/0x220 [ 87.925798][ T5930] dvb_demux_ioctl+0x29/0x30 [ 87.925825][ T5930] __se_sys_ioctl+0xfd/0x170 [ 87.925847][ T5930] do_syscall_64+0x55/0xa0 [ 87.925870][ T5930] ? clear_bhb_loop+0x40/0x90 [ 87.925888][ T5930] ? clear_bhb_loop+0x40/0x90 [ 87.925907][ T5930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.925926][ T5930] RIP: 0033:0x7f843419c819 [ 87.925939][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.925952][ T5930] RSP: 002b:00007f84350bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.925969][ T5930] RAX: ffffffffffffffda RBX: 00007f8434415fa0 RCX: 00007f843419c819 [ 87.925980][ T5930] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 87.925991][ T5930] RBP: 00007f8434232c91 R08: 0000000000000000 R09: 0000000000000000 [ 87.926001][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.926011][ T5930] R13: 00007f8434416038 R14: 00007f8434415fa0 R15: 00007ffc444d0528 [ 87.926029][ T5930] [ 87.931301][ T5930] Kernel Offset: disabled