last executing test programs: 16.880783372s ago: executing program 0 (id=377): syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r1}, 0x38) 12.28145797s ago: executing program 2 (id=398): socket$key(0xf, 0x3, 0x2) mbind(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xa002, &(0x7f0000000040)=0x243a, 0x61, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b080)=""/102400, 0x19000) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(0xffffffffffffffff, r4, 0x0) read$rfkill(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a3000000000140002800600014000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000043950003000000001e", 0x68}], 0x1}, 0x4008040) 10.547102051s ago: executing program 2 (id=401): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b000003a384600", @ANYRES8=r0, @ANYRES32], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000, r0}, 0x50) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000004c0)=0x7, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000140)="7696ae80befcb6c85c262236fde99dafd2cb3ae8c94255371bd7", 0x1a}, {&(0x7f0000001080)="77dd3099d1a4b2a8e4d28cd3a13c5ae418e3af304ab3513c5be1a05a8a21767d09f3c8963e07110ab224045fda59cf3eece5275f4bea51f49e9ba4a042e12b3fa646cee0210707a5bef4db1c4081203a4e3366fb20cc9351f11a6bc0635b9f5bfd1e1a5b842502b5ce8bf216ea70737f696df3f7e7a70d1fb6792f", 0x7b}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="e00000017f000001000000001c000000000000000000000008000000", @ANYRES32, @ANYRES32, @ANYBLOB="0a010102640101020000000098"], 0x210}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2090) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x6}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='net/wireless\x00') read$FUSE(r3, &(0x7f00000095c0)={0x2020}, 0x2020) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x994, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}]}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000200)) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 9.10896465s ago: executing program 0 (id=407): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 8.734075248s ago: executing program 0 (id=411): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f00000001c0)=ANY=[], 0x1, 0x5e8, &(0x7f0000000cc0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 6.528261792s ago: executing program 0 (id=413): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 5.620686184s ago: executing program 0 (id=418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) 5.447694522s ago: executing program 1 (id=420): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x0, 0x2, 0x1, {}, 0xfc}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) socket(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x4c020) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc17882d00a137af9}, 0x804c080) write$sndseq(r2, &(0x7f00000000c0), 0xe) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f00000006c0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) 5.357215987s ago: executing program 1 (id=423): write$binfmt_aout(0xffffffffffffffff, 0x0, 0x5b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) socket$kcm(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 5.255093652s ago: executing program 0 (id=424): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0xa02, 0x27) 3.102208903s ago: executing program 1 (id=426): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) sendmmsg$inet6(r0, &(0x7f0000005200)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x47e4, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x40}}], 0x1, 0x0) 3.079799815s ago: executing program 4 (id=427): openat$dsp(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='smaps_rollup\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) timerfd_create(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x801}) 3.048969226s ago: executing program 1 (id=428): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="100000000400000008"], 0x50) 2.9689961s ago: executing program 2 (id=429): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f023}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000080000000f00000000000000", @ANYRES32, @ANYBLOB="000000003e6d5fab03b6176e0b3f0000002000"/30, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(r3, 0x0, 0xc001) r5 = socket$kcm(0x10, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0xff}, 0xfe}, 0x18) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f0000000340)={0x24, @short={0x2, 0x1}}, 0x14) r7 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$kcm(r5, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000170000006400068014000300313233343536373839303132333435364c00040063636d"], 0x78}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) 2.966606069s ago: executing program 3 (id=430): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) fcntl$getown(r2, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea3) read(0xffffffffffffffff, &(0x7f0000000080)=""/10, 0xa) 2.932672802s ago: executing program 4 (id=431): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x169100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r2 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x5400}], 0x1, &(0x7f00000002c0), 0x0, 0x0) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) io_uring_setup(0x3450, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xcd) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x10000, 0x5, 0x8001, 0x8000, 0x507, 0x4, 0x4}) add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000600)={0x2020}, 0x2020) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.928753042s ago: executing program 1 (id=432): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 1.749606757s ago: executing program 3 (id=433): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x0, 0x2, 0x1, {}, 0xfc}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) socket(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x4c020) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc17882d00a137af9}, 0x804c080) write$sndseq(r2, &(0x7f00000000c0), 0xe) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f00000006c0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) 1.749047347s ago: executing program 4 (id=434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) 1.640371743s ago: executing program 3 (id=435): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @rand_addr=0x64010101, 0x0, 0x6, [@private=0xa010100, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010101, @broadcast, @broadcast]}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) socket$nl_route(0x10, 0x3, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) write(0xffffffffffffffff, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain= /new_domain\n', 0x65) 1.581602146s ago: executing program 1 (id=436): write$binfmt_aout(0xffffffffffffffff, 0x0, 0x5b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) socket$kcm(0x1e, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 1.574507776s ago: executing program 4 (id=437): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x169100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r2 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x5400}], 0x1, &(0x7f00000002c0), 0x0, 0x0) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) io_uring_setup(0x3450, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xcd) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x10000, 0x5, 0x8001, 0x8000, 0x507, 0x4, 0x4}) add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000600)={0x2020}, 0x2020) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) keyctl$unlink(0x9, r2, r2) 598.040892ms ago: executing program 2 (id=438): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 566.335463ms ago: executing program 3 (id=439): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) sendmmsg$inet6(r0, &(0x7f0000005200)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x47e4, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0], 0x40}}], 0x1, 0x0) 565.353113ms ago: executing program 4 (id=440): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) 449.693509ms ago: executing program 2 (id=441): openat$dsp(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='smaps_rollup\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) timerfd_create(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x801}) 405.247341ms ago: executing program 3 (id=442): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="100000000400000008"], 0x50) 112.568935ms ago: executing program 2 (id=443): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) fcntl$getown(r2, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r4, &(0x7f0000000080)=""/10, 0xa) 112.165375ms ago: executing program 3 (id=444): mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0), 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0xf}, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0xa) shutdown(r2, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) socket(0x1d, 0x2, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) 0s ago: executing program 4 (id=445): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x0, 0x2, 0x1, {}, 0xfc}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) socket(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x4c020) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc17882d00a137af9}, 0x804c080) write$sndseq(r2, &(0x7f00000000c0), 0xe) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f00000006c0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 62.662481][ T4173] cgroup: Unknown subsys name 'net' [ 62.823276][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.261643][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.652563][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.728036][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 65.762094][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 65.830311][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.840564][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 65.874368][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.881786][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.889725][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.927242][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.934481][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.943239][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.989003][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.996093][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.004010][ T4195] device bridge_slave_0 entered promiscuous mode [ 66.032137][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.039859][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.047653][ T4192] device bridge_slave_0 entered promiscuous mode [ 66.054895][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.062191][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.069958][ T4195] device bridge_slave_1 entered promiscuous mode [ 66.090792][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.108450][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.115523][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.123593][ T4192] device bridge_slave_1 entered promiscuous mode [ 66.145535][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.157882][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.167066][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.174730][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.182569][ T4199] device bridge_slave_0 entered promiscuous mode [ 66.196315][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.203681][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.212028][ T4199] device bridge_slave_1 entered promiscuous mode [ 66.220921][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.230136][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.237188][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.245511][ T4186] device bridge_slave_0 entered promiscuous mode [ 66.283331][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.290591][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.298846][ T4186] device bridge_slave_1 entered promiscuous mode [ 66.309132][ T4187] team0: Port device team_slave_0 added [ 66.316598][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.333303][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.354572][ T4187] team0: Port device team_slave_1 added [ 66.362625][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.379257][ T4195] team0: Port device team_slave_0 added [ 66.392647][ T4195] team0: Port device team_slave_1 added [ 66.411740][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.429921][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.448238][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.471939][ T4192] team0: Port device team_slave_0 added [ 66.478626][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.485578][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.511628][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.529415][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.536375][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.562742][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.583176][ T4192] team0: Port device team_slave_1 added [ 66.589575][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.596521][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.622528][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.641047][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.648358][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.674388][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.687826][ T4199] team0: Port device team_slave_0 added [ 66.712305][ T4186] team0: Port device team_slave_0 added [ 66.720963][ T4186] team0: Port device team_slave_1 added [ 66.732190][ T4199] team0: Port device team_slave_1 added [ 66.752567][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.759668][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.792922][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.805275][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.812377][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.838750][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.886332][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.893406][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.919814][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.931474][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.938776][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.964719][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.985630][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.992605][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.006455][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.013512][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.040000][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.051544][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.058851][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.084837][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.112987][ T4195] device hsr_slave_0 entered promiscuous mode [ 67.119956][ T4195] device hsr_slave_1 entered promiscuous mode [ 67.126520][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.134310][ T4195] Cannot create hsr debugfs directory [ 67.156233][ T4192] device hsr_slave_0 entered promiscuous mode [ 67.163448][ T4192] device hsr_slave_1 entered promiscuous mode [ 67.170219][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.178253][ T4192] Cannot create hsr debugfs directory [ 67.259111][ T4186] device hsr_slave_0 entered promiscuous mode [ 67.265760][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.272329][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.280397][ T4186] Cannot create hsr debugfs directory [ 67.298710][ T4199] device hsr_slave_0 entered promiscuous mode [ 67.305408][ T4199] device hsr_slave_1 entered promiscuous mode [ 67.312035][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.319616][ T4199] Cannot create hsr debugfs directory [ 67.418460][ T4175] Bluetooth: hci4: command 0x0409 tx timeout [ 67.427613][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 67.431118][ T4175] Bluetooth: hci3: command 0x0409 tx timeout [ 67.433664][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 67.447007][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 67.623937][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.635004][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.648553][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.658055][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.708931][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.723019][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.746759][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.764615][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.811889][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.834753][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.849782][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.866692][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.887287][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.935324][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.945150][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.960927][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.972070][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.999132][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.007744][ T4199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.021666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.031998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.045950][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.053143][ T4199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.064917][ T4199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.083543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.092635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.107115][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.114368][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.132715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.148217][ T4199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.168971][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.176771][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.185622][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.195450][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.203848][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.210934][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.219240][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.227983][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.240217][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.261161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.271946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.280698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.301798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.310994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.319822][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.326872][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.334942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.347053][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.358375][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.394915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.404400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.414546][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.421653][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.431614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.440143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.448910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.457175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.469347][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.499650][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.510235][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.521827][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.534705][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.555028][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.606005][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.616287][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.627430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.637386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.646701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.655885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.664374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.673745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.684367][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.700787][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.716972][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.727333][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.755924][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.770475][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.787455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.808988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.832642][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.860557][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.876473][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.885706][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.900728][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.913261][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.920389][ T1241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.928239][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.936780][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.945461][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.952579][ T1241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.960977][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.969783][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.978384][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.985447][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.993750][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.002410][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.011008][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.018126][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.026012][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.036984][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.046112][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.054860][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.063589][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.078942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.087495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.097145][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.104237][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.131194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.140559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.150503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.160345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.169155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.178708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.187027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.195960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.205061][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.212172][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.219940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.229089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.237988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.246403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.256475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.287431][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.303056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.313245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.321868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.331755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.339746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.347122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.355959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.365132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.374685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.383533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.400140][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.431490][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.439943][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.455683][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.463782][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.473584][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.482714][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.491947][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.500399][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 69.501231][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.506562][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 69.520217][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.529894][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.538906][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.542398][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 69.553051][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 69.556628][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.559393][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 69.576605][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.594216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.602812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.612687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.626249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.656368][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.667846][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.680893][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.714324][ T4187] device veth0_vlan entered promiscuous mode [ 69.732593][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.750839][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.766564][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.775671][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.815271][ T4187] device veth1_vlan entered promiscuous mode [ 69.830635][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.843552][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.851743][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.870671][ T4186] device veth0_vlan entered promiscuous mode [ 69.888111][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.916018][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.924926][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.933064][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.947432][ T4186] device veth1_vlan entered promiscuous mode [ 69.969543][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.988407][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.998735][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.006632][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.015804][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.025310][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.034244][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.059592][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.078939][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.086421][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.104577][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.118241][ T4186] device veth0_macvtap entered promiscuous mode [ 70.130955][ T4187] device veth0_macvtap entered promiscuous mode [ 70.140901][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.150736][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.161016][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.170525][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.179498][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.187492][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.211310][ T4186] device veth1_macvtap entered promiscuous mode [ 70.222657][ T4187] device veth1_macvtap entered promiscuous mode [ 70.266152][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.284620][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.303757][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.315933][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.324522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.332635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.341618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.351140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.360209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.370047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.380548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.389731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.399936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.409301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.427440][ T4192] device veth0_vlan entered promiscuous mode [ 70.446359][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.455985][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.466889][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.483217][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.491296][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.499788][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.508421][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.516853][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.525994][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.535717][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.545133][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.553695][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.573273][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.583921][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.592759][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.602042][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.614928][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.624140][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.633259][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.643035][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.669852][ T4192] device veth1_vlan entered promiscuous mode [ 70.689415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.697434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.706349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.726510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.734680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.744736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.753660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.783158][ T4195] device veth0_vlan entered promiscuous mode [ 70.801319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.809795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.818703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.831516][ T4192] device veth0_macvtap entered promiscuous mode [ 70.841990][ T4192] device veth1_macvtap entered promiscuous mode [ 70.857058][ T4199] device veth0_vlan entered promiscuous mode [ 70.869549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.878585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.886554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.895273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.904817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.913466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.965096][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.977445][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.988041][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.998638][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.009596][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.027083][ T4199] device veth1_vlan entered promiscuous mode [ 71.036205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.046109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.057037][ T4195] device veth1_vlan entered promiscuous mode [ 71.067191][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.078358][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.089432][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.100798][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.111734][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.145504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.154368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.166366][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.177387][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.186889][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.196638][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.236400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.245498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.257224][ T4199] device veth0_macvtap entered promiscuous mode [ 71.267981][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.275969][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.319954][ T4199] device veth1_macvtap entered promiscuous mode [ 71.332338][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.345700][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.348923][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.352239][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.365801][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.379103][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.389578][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.423305][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.424565][ T1229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.438048][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.447745][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.456213][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.464209][ T1229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.465325][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.481030][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.489126][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.510733][ T4195] device veth0_macvtap entered promiscuous mode [ 71.518230][ T1229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.526063][ T1229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.545876][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.559714][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.570384][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.581461][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 71.590592][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.600714][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 71.606798][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 71.613555][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.625123][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 71.631526][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 71.634211][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.649838][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.665339][ T4195] device veth1_macvtap entered promiscuous mode [ 71.672654][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.681061][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.681186][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.692008][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.704348][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.712059][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.721091][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.729807][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.749894][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.761733][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.790237][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.808944][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.830171][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.842447][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.861426][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.865671][ T4272] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.890802][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.905071][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.915399][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.926833][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.937280][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.948434][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.958815][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.971013][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.983437][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.992132][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.002174][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.012701][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.025173][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.044118][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.104365][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.125845][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.134719][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.218222][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.229520][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.242375][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.253046][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.286887][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.299213][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.310806][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.328453][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.340556][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.355297][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.370053][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.394256][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.416835][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.445696][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.461565][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.473746][ T4272] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.510342][ T4272] Dead loop on virtual device ip6_vti0, fix it urgently! [ 72.566818][ T4274] loop2: detected capacity change from 0 to 256 [ 72.597123][ T4274] ======================================================= [ 72.597123][ T4274] WARNING: The mand mount option has been deprecated and [ 72.597123][ T4274] and is ignored by this kernel. Remove the mand [ 72.597123][ T4274] option from the mount to silence this warning. [ 72.597123][ T4274] ======================================================= [ 72.638214][ T4274] exfat: Unknown parameter '0x000000110c2300000x000000000000000000000000000000000000003' [ 72.706494][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.731197][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.743599][ T4276] loop3: detected capacity change from 0 to 32768 [ 72.762347][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.763142][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.809047][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.871667][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.003419][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.061042][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.104533][ T4283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.224051][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.249754][ T4283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.304863][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.378929][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 74.385029][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 74.392182][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 74.399238][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 74.405345][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 75.907565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.927551][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.937546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.947546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.957546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.138982][ T4318] loop2: detected capacity change from 0 to 512 [ 78.292840][ T4307] loop1: detected capacity change from 0 to 32768 [ 78.351123][ T4318] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.388764][ T4318] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.439762][ T4307] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 78.639306][ T4318] EXT4-fs (loop2): 1 truncate cleaned up [ 78.677106][ T4318] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,errors=remount-ro,. Quota mode: none. [ 79.622018][ T4318] EXT4-fs error (device loop2): ext4_find_dest_de:2117: inode #2: block 13: comm syz.2.12: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 79.687230][ T4318] EXT4-fs (loop2): Remounting filesystem read-only [ 79.779310][ T4318] EXT4-fs error (device loop2): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.2.12: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 79.834274][ T4307] syz.1.2 (4307) used greatest stack depth: 17184 bytes left [ 79.912490][ T4318] EXT4-fs (loop2): Remounting filesystem read-only [ 79.970238][ T4318] EXT4-fs error (device loop2) in ext4_delete_entry:2802: Corrupt filesystem [ 80.103586][ T4318] EXT4-fs (loop2): Remounting filesystem read-only [ 80.204354][ T4318] EXT4-fs warning (device loop2): ext4_rename_delete:3794: inode #2: comm syz.2.12: Deleting old file: nlink 5, error=-117 [ 80.227882][ T1107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.507706][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 80.570553][ T4195] ocfs2: Unmounting device (7,1) on (node local) [ 80.580058][ T4326] loop4: detected capacity change from 0 to 32768 [ 80.638033][ T1107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.738527][ T1107] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 80.937059][ T1107] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 81.096710][ T4326] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 81.133243][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.394476][ T1107] usb 4-1: config 0 descriptor?? [ 82.205800][ T4199] ocfs2: Unmounting device (7,4) on (node local) [ 83.248663][ T4355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'. [ 84.000372][ T4359] loop1: detected capacity change from 0 to 1024 [ 84.054513][ T4359] EXT4-fs (loop1): Ignoring removed bh option [ 84.157566][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 85.157577][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 85.177581][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 85.187561][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 85.321347][ T4359] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,bh,nodioread_nolock,,errors=continue. Quota mode: none. [ 85.407800][ T4359] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.456719][ T4267] usb 4-1: USB disconnect, device number 2 [ 86.019807][ T4370] loop3: detected capacity change from 0 to 1764 [ 86.127764][ T1324] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.324706][ T4370] nullb0: [CUMANA/ADFS] p1 [ADFS] p1 [ 86.562736][ T4370] nullb0: partition table partially beyond EOD, truncated [ 86.708633][ T3156] cfg80211: failed to load regulatory.db [ 86.765229][ T4370] nullb0: p1 size 1652452772 extends beyond EOD, truncated [ 87.447646][ T1324] usb 3-1: Using ep0 maxpacket: 16 [ 88.317373][ T4380] block device autoloading is deprecated and will be removed. [ 88.444804][ T4382] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 88.506864][ T1324] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 88.675555][ T1324] usb 3-1: can't read configurations, error -71 [ 90.612017][ T263] block nbd3: Attempted send on invalid socket [ 90.618974][ T263] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 90.630729][ T263] gfs2: error 10 reading superblock [ 90.716874][ T4396] loop3: detected capacity change from 0 to 2048 [ 90.769866][ T4396] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.866537][ T4400] loop2: detected capacity change from 0 to 32768 [ 90.897140][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.905121][ T4405] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.929954][ T4405] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.937025][ T4405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.944945][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.952020][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.959905][ T4405] device bridge0 entered promiscuous mode [ 91.154148][ T4400] XFS (loop2): Mounting V5 Filesystem [ 91.332504][ T4419] loop0: detected capacity change from 0 to 1024 [ 91.979128][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.142140][ T4400] XFS (loop2): Ending clean mount [ 92.418990][ T21] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 92.433205][ T21] XFS (loop2): Unmount and run xfs_repair [ 92.441850][ T21] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 92.449512][ T21] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 92.487540][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 93.277991][ T21] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 93.307450][ T21] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 93.579817][ T21] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 94.703624][ T21] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 94.713302][ T21] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 94.722626][ T21] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 94.733655][ T21] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 94.744285][ T4400] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 94.763119][ T4400] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 94.781289][ T4400] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 94.995417][ T4187] XFS (loop2): Unmounting Filesystem [ 96.101770][ T263] block nbd3: Attempted send on invalid socket [ 96.108159][ T263] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 96.119766][ T263] gfs2: error 10 reading superblock [ 96.173988][ T4449] loop3: detected capacity change from 0 to 2048 [ 96.199990][ T4446] device syzkaller0 entered promiscuous mode [ 96.528002][ T4449] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.353609][ T4456] loop0: detected capacity change from 0 to 164 [ 97.514797][ T4451] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 97.740522][ T4443] loop4: detected capacity change from 0 to 32768 [ 98.725457][ T4468] rock: directory entry would overflow storage [ 98.732368][ T4468] rock: sig=0x4f50, size=4, remaining=3 [ 98.738091][ T4468] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 98.846957][ T4460] sched: RT throttling activated [ 102.390436][ T4491] jffs2: notice: (4491) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 102.622418][ T4491] blk_update_request: I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.017973][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.902383][ T4494] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.942425][ T4494] Dead loop on virtual device ip6_vti0, fix it urgently! [ 104.114265][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 104.273479][ T150] block nbd2: Attempted send on invalid socket [ 104.282194][ T150] blk_update_request: I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 104.293866][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 104.301735][ T150] gfs2: error 10 reading superblock [ 104.328724][ T4512] loop2: detected capacity change from 0 to 2048 [ 104.423230][ T4512] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.432865][ T21] usb 2-1: config 174 has an invalid interface number: 197 but max is 0 [ 104.454139][ T21] usb 2-1: config 174 has no interface number 0 [ 105.402894][ T21] usb 2-1: config 174 interface 197 has no altsetting 0 [ 105.610841][ T21] usb 2-1: string descriptor 0 read error: -71 [ 105.617570][ T21] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=bd.a1 [ 105.627975][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.657701][ T21] usb 2-1: can't set config #174, error -71 [ 105.669459][ T21] usb 2-1: USB disconnect, device number 2 [ 107.497732][ T1324] Bluetooth: hci3: command 0x6100 tx timeout [ 110.154750][ T4555] Dead loop on virtual device ip6_vti0, fix it urgently! [ 112.785477][ T4571] tmpfs: Unknown parameter 'quota' [ 112.798873][ T263] block nbd3: Attempted send on invalid socket [ 112.805145][ T263] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 112.816499][ T263] gfs2: error 10 reading superblock [ 112.833254][ T4563] loop3: detected capacity change from 0 to 2048 [ 113.146352][ T4578] FAULT_INJECTION: forcing a failure. [ 113.146352][ T4578] name failslab, interval 1, probability 0, space 0, times 1 [ 113.168185][ T4578] CPU: 0 PID: 4578 Comm: syz.1.80 Not tainted syzkaller #0 [ 113.170750][ T4563] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.175428][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.175461][ T4578] Call Trace: [ 113.175469][ T4578] [ 113.200528][ T4578] dump_stack_lvl+0x188/0x250 [ 113.205248][ T4578] ? show_regs_print_info+0x20/0x20 [ 113.210476][ T4578] ? load_image+0x410/0x410 [ 113.215009][ T4578] ? __lock_acquire+0x7b50/0x7b50 [ 113.220069][ T4578] should_fail+0x383/0x4b0 [ 113.224522][ T4578] should_failslab+0x5/0x20 [ 113.229053][ T4578] slab_pre_alloc_hook+0x51/0xc0 [ 113.234015][ T4578] __kmalloc+0x6b/0x340 [ 113.238168][ T4578] ? ima_eventname_init_common+0x1d7/0x700 [ 113.243993][ T4578] ima_eventname_init_common+0x1d7/0x700 [ 113.249633][ T4578] ? ima_eventname_init+0x20/0x20 [ 113.254699][ T4578] ? ima_eventname_init_common+0x700/0x700 [ 113.260568][ T4578] ima_alloc_init_template+0x304/0x6e0 [ 113.266329][ T4578] ima_store_measurement+0x1d1/0x690 [ 113.271654][ T4578] ? ima_collect_measurement+0x7e0/0x7e0 [ 113.277317][ T4578] ? ima_d_path+0x1e0/0x240 [ 113.281878][ T4578] process_measurement+0x124d/0x1c20 [ 113.287216][ T4578] ? ima_file_mmap+0x140/0x140 [ 113.292003][ T4578] ? rcu_lock_release+0x5/0x20 [ 113.296859][ T4578] ima_file_mmap+0xec/0x140 [ 113.301384][ T4578] ? ima_file_free+0x3e0/0x3e0 [ 113.306173][ T4578] ? common_file_perm+0x171/0x1c0 [ 113.311236][ T4578] ? bpf_lsm_mmap_file+0x5/0x10 [ 113.316113][ T4578] ? security_mmap_file+0x11b/0x180 [ 113.321342][ T4578] vm_mmap_pgoff+0x12e/0x2d0 [ 113.325958][ T4578] ? account_locked_vm+0xe0/0xe0 [ 113.330917][ T4578] ? __lock_acquire+0x7b50/0x7b50 [ 113.335974][ T4578] ksys_mmap_pgoff+0x5c9/0x790 [ 113.340773][ T4578] ? mmap_region+0x1730/0x1730 [ 113.345568][ T4578] ? lockdep_hardirqs_on+0x94/0x140 [ 113.350785][ T4578] do_syscall_64+0x4c/0xa0 [ 113.355211][ T4578] ? clear_bhb_loop+0x30/0x80 [ 113.359877][ T4578] ? clear_bhb_loop+0x30/0x80 [ 113.364544][ T4578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.370428][ T4578] RIP: 0033:0x7f5730cfa159 [ 113.374858][ T4578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.394451][ T4578] RSP: 002b:00007f572ef52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 113.402907][ T4578] RAX: ffffffffffffffda RBX: 00007f5730f81fa0 RCX: 00007f5730cfa159 [ 113.410886][ T4578] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000200000 [ 113.418858][ T4578] RBP: 00007f5730d9103b R08: ffffffffffffffff R09: 0000000000000000 [ 113.426836][ T4578] R10: 000200000006c832 R11: 0000000000000246 R12: 0000000000000000 [ 113.434816][ T4578] R13: 00007f5730f82038 R14: 00007f5730f81fa0 R15: 00007ffff21b27e8 [ 113.442830][ T4578] [ 113.569177][ T26] audit: type=1804 audit(1789423794.985:2): pid=4578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.80" name="anon_hugepage" dev="hugetlbfs" ino=33387 res=0 errno=0 [ 115.996968][ T263] block nbd2: Attempted send on invalid socket [ 116.004104][ T263] blk_update_request: I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 116.016258][ T263] gfs2: error 10 reading superblock [ 116.144949][ T4583] loop2: detected capacity change from 0 to 2048 [ 116.531086][ T4583] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.178258][ T4235] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.547782][ T4235] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 117.957665][ T4235] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 118.010071][ T4235] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.198015][ T4235] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 118.214655][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 118.576317][ T4235] usb 3-1: Product: syz [ 118.606709][ T4235] usb 3-1: Manufacturer: syz [ 118.611540][ T4235] usb 3-1: SerialNumber: syz [ 119.407364][ T4235] usb 3-1: config 0 descriptor?? [ 119.422000][ T4619] loop1: detected capacity change from 0 to 2048 [ 119.454526][ T4235] hub 3-1:0.0: bad descriptor, ignoring hub [ 119.531693][ T4235] hub: probe of 3-1:0.0 failed with error -5 [ 120.201779][ T4235] usb 3-1: selecting invalid altsetting 0 [ 121.126115][ T263] block nbd3: Attempted send on invalid socket [ 121.133286][ T263] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 121.144870][ T263] gfs2: error 10 reading superblock [ 121.466146][ T4622] loop3: detected capacity change from 0 to 2048 [ 121.479822][ T4636] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.503557][ T4622] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.552751][ T4619] attempt to access beyond end of device [ 121.552751][ T4619] loop1: rw=0, want=281474976710724, limit=2048 [ 121.592776][ T4619] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 121.624868][ T4235] usb 3-1: USB disconnect, device number 4 [ 123.219004][ T4593] udevd[4593]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.135039][ T4659] loop1: detected capacity change from 0 to 2048 [ 124.548062][ T4658] loop0: detected capacity change from 0 to 4096 [ 124.564075][ T4670] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.612973][ T4658] ntfs3: Unknown parameter 'windows_names' [ 124.964399][ T150] block nbd2: Attempted send on invalid socket [ 124.970728][ T150] blk_update_request: I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 124.982481][ T150] gfs2: error 10 reading superblock [ 125.010433][ T4675] loop2: detected capacity change from 0 to 2048 [ 125.058244][ T4675] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.436844][ T150] block nbd0: Attempted send on invalid socket [ 126.443213][ T150] blk_update_request: I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 126.454589][ T150] gfs2: error 10 reading superblock [ 126.516917][ T4686] loop0: detected capacity change from 0 to 2048 [ 126.531672][ T4686] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.854031][ T4702] Zero length message leads to an empty skb [ 127.946288][ T4715] loop0: detected capacity change from 0 to 164 [ 128.239856][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 128.249672][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 128.260645][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 128.269456][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 128.278670][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 128.287474][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 128.297051][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 128.503083][ T4707] loop4: detected capacity change from 0 to 32768 [ 128.665997][ T263] block nbd1: Attempted send on invalid socket [ 128.672790][ T263] blk_update_request: I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 128.685489][ T263] gfs2: error 10 reading superblock [ 128.750143][ T4722] loop1: detected capacity change from 0 to 2048 [ 128.825982][ T4722] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.747105][ T4707] XFS (loop4): Mounting V5 Filesystem [ 129.832857][ T150] block nbd3: Attempted send on invalid socket [ 129.839806][ T150] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 129.859462][ T150] gfs2: error 10 reading superblock [ 129.896469][ T4736] loop3: detected capacity change from 0 to 2048 [ 130.020427][ T4736] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.049965][ T4707] XFS (loop4): Ending clean mount [ 131.004329][ T4707] XFS (loop4): Quotacheck needed: Please wait. [ 131.153505][ T4707] XFS (loop4): Quotacheck: Done. [ 131.245414][ T4199] XFS (loop4): Unmounting Filesystem [ 131.347778][ T3156] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.628072][ T3156] usb 2-1: Using ep0 maxpacket: 16 [ 132.816641][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.837829][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.954021][ T3156] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.228420][ T3156] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.240111][ T3156] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.246761][ T3156] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 133.256416][ T3156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.274275][ T3156] usb 2-1: config 0 descriptor?? [ 133.544941][ T150] block nbd3: Attempted send on invalid socket [ 133.551244][ T150] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 133.562635][ T150] gfs2: error 10 reading superblock [ 133.611284][ T4791] netlink: 'syz.4.141': attribute type 9 has an invalid length. [ 133.667883][ T4791] netlink: 7679 bytes leftover after parsing attributes in process `syz.4.141'. [ 133.683928][ T4785] loop3: detected capacity change from 0 to 2048 [ 133.774087][ T4785] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.961505][ T4803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.150'. [ 133.994394][ T4803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.150'. [ 134.023562][ T3156] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 134.032378][ T4796] netlink: 60 bytes leftover after parsing attributes in process `syz.2.150'. [ 134.155496][ T4801] netlink: 60 bytes leftover after parsing attributes in process `syz.2.150'. [ 134.831268][ T3156] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 134.838708][ T3156] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 134.845936][ T3156] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 134.853908][ T3156] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 134.864904][ T3156] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 135.052812][ T4822] tipc: Started in network mode [ 135.058060][ T4822] tipc: Node identity 4, cluster identity 4711 [ 135.064469][ T4822] tipc: Node number set to 4 [ 135.877572][ T3156] usb 2-1: USB disconnect, device number 3 [ 136.060735][ T150] block nbd4: Attempted send on invalid socket [ 136.067002][ T150] blk_update_request: I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 136.078641][ T150] gfs2: error 10 reading superblock [ 137.949374][ T4827] loop4: detected capacity change from 0 to 2048 [ 138.026768][ T4827] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.247771][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.459685][ T4852] tipc: Started in network mode [ 138.464763][ T4852] tipc: Node identity 4, cluster identity 4711 [ 138.471041][ T4852] tipc: Node number set to 4 [ 139.487623][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 139.727672][ T21] usb 2-1: device descriptor read/all, error -71 [ 142.038212][ T4884] tipc: Started in network mode [ 142.043234][ T4884] tipc: Node identity 4, cluster identity 4711 [ 142.049496][ T4884] tipc: Node number set to 4 [ 147.090416][ T150] block nbd0: Attempted send on invalid socket [ 147.096650][ T150] blk_update_request: I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 147.108404][ T150] gfs2: error 10 reading superblock [ 148.234268][ T4922] loop0: detected capacity change from 0 to 2048 [ 148.582759][ T4922] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.079283][ T4959] jffs2: notice: (4959) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 154.627542][ T4987] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 157.112656][ T5013] tipc: Started in network mode [ 157.117676][ T5013] tipc: Node identity 4, cluster identity 4711 [ 157.123893][ T5013] tipc: Node number set to 4 [ 158.248156][ T263] block nbd1: Attempted send on invalid socket [ 158.254823][ T263] blk_update_request: I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 158.266501][ T263] gfs2: error 10 reading superblock [ 158.296606][ T5016] loop1: detected capacity change from 0 to 2048 [ 158.352236][ T5016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.533168][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 163.547769][ T5068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 163.751996][ T263] block nbd3: Attempted send on invalid socket [ 163.758353][ T263] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 163.769895][ T263] gfs2: error 10 reading superblock [ 163.770865][ T5068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.814670][ T5072] loop3: detected capacity change from 0 to 2048 [ 163.909121][ T5072] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.968910][ T5068] bond1: (slave bond0): making interface the new active one [ 164.070637][ T5068] bond1: (slave bond0): Enslaving as an active interface with an up link [ 164.289359][ T5084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.245'. [ 164.717685][ T1107] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.017642][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 166.637708][ T1107] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 166.647020][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.967585][ T1107] usb 5-1: Product: syz [ 167.971805][ T1107] usb 5-1: Manufacturer: syz [ 167.976428][ T1107] usb 5-1: SerialNumber: syz [ 168.957658][ T1107] usb 5-1: can't set config #157, error -71 [ 168.969124][ T1107] usb 5-1: USB disconnect, device number 2 [ 169.266585][ T263] block nbd0: Attempted send on invalid socket [ 169.272914][ T263] blk_update_request: I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 170.025092][ T263] gfs2: error 10 reading superblock [ 170.062313][ T5116] loop0: detected capacity change from 0 to 2048 [ 170.151701][ T5116] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.307592][ T4232] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 173.427572][ T4232] usb 5-1: device not accepting address 3, error -71 [ 175.911022][ T150] block nbd3: Attempted send on invalid socket [ 175.917668][ T150] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 175.930621][ T150] gfs2: error 10 reading superblock [ 175.947829][ T5167] loop3: detected capacity change from 0 to 2048 [ 176.021298][ T5167] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.823439][ T150] block nbd4: Attempted send on invalid socket [ 179.830712][ T150] blk_update_request: I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 179.842108][ T150] gfs2: error 10 reading superblock [ 179.870439][ T5205] loop4: detected capacity change from 0 to 2048 [ 180.004407][ T5205] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.488330][ T263] block nbd3: Attempted send on invalid socket [ 184.494558][ T263] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 184.506451][ T263] gfs2: error 10 reading superblock [ 184.708780][ T5228] loop3: detected capacity change from 0 to 2048 [ 184.743408][ T5230] page:ffffea00013a0000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4e800 [ 184.765235][ T5230] head:ffffea00013a0000 order:2 compound_mapcount:0 compound_pincount:0 [ 184.788110][ T5230] memcg:ffff888022384201 [ 184.796178][ T5228] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.068287][ T5230] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 185.078293][ T5230] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c4fdc0 [ 185.087252][ T5230] raw: 0000000000000000 0000000000170017 00000001ffffffff ffff888022384201 [ 185.104554][ T5230] page dumped because: unmovable page [ 185.110294][ T5230] page_owner tracks the page as allocated [ 185.116211][ T5230] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0x152810(GFP_NOWAIT|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5191, ts 178729921259, free_ts 20818148102 [ 185.138133][ T5230] get_page_from_freelist+0x24f6/0x2670 [ 185.143937][ T5230] __alloc_pages+0x1ee/0x480 [ 185.149227][ T5230] new_slab+0xc0/0x4b0 [ 185.154456][ T5230] ___slab_alloc+0x807/0xdd0 [ 185.159929][ T5230] kmem_cache_alloc+0xf0/0x280 [ 185.165287][ T5230] xas_create+0x1047/0x15a0 [ 185.210223][ T5230] xas_create_range+0x1e4/0x810 [ 185.215487][ T5230] shmem_add_to_page_cache+0xbd8/0x14d0 [ 185.221594][ T5230] shmem_getpage_gfp+0x1735/0x2c10 [ 185.227018][ T5230] shmem_write_begin+0xcd/0x1a0 [ 185.232296][ T5230] generic_perform_write+0x2b6/0x550 [ 185.238196][ T5230] __generic_file_write_iter+0x261/0x4e0 [ 185.244056][ T5230] generic_file_write_iter+0xa6/0x1b0 [ 185.250069][ T5230] __kernel_write+0x522/0x980 [ 185.255682][ T5230] __dump_emit+0x258/0x380 [ 185.267721][ T5230] dump_user_range+0x84/0x340 [ 185.286417][ T5230] page last free stack trace: [ 185.333229][ T5230] free_unref_page_prepare+0x637/0x6c0 [ 185.357698][ T5230] free_unref_page+0x8f/0x2a0 [ 185.362676][ T5230] free_contig_range+0x96/0xf0 [ 185.368805][ T5230] destroy_args+0xef/0xa00 [ 185.377814][ T5230] debug_vm_pgtable+0x321/0x380 [ 185.389124][ T5230] do_one_initcall+0x272/0x730 [ 185.396235][ T5230] do_initcall_level+0x13d/0x1f0 [ 185.401554][ T5230] do_initcalls+0x4b/0x90 [ 185.406320][ T5230] kernel_init_freeable+0x3d5/0x560 [ 185.414188][ T5230] kernel_init+0x19/0x1b0 [ 185.418955][ T5230] ret_from_fork+0x1f/0x30 [ 185.789682][ T263] block nbd0: Attempted send on invalid socket [ 185.796053][ T263] blk_update_request: I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 185.807614][ T263] gfs2: error 10 reading superblock [ 185.828567][ T5244] loop0: detected capacity change from 0 to 2048 [ 185.915941][ T5244] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.022433][ T5250] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 186.099128][ T5250] CIFS: Attempting to mount \\127.0.0.1\share [ 186.117710][ T4297] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 186.132363][ T5250] CIFS: VFS: No username specified [ 186.275205][ T5255] binder: 5253:5255 ioctl 400c620e 200000000280 returned -22 [ 187.157775][ T4297] usb 4-1: Using ep0 maxpacket: 8 [ 187.337700][ T4297] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 188.015906][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.028742][ T4297] usb 4-1: config 0 descriptor?? [ 188.069337][ T4297] usb 4-1: probing VID:PID(0424:012C) [ 188.087050][ T4297] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 188.100428][ T4297] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 188.106930][ T4297] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 188.114278][ T4297] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 188.122088][ T4297] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 188.204619][ T5278] device syzkaller0 entered promiscuous mode [ 188.247100][ T5279] tipc: Started in network mode [ 188.252221][ T5279] tipc: Node identity 4, cluster identity 4711 [ 188.258500][ T5279] tipc: Node number set to 4 [ 189.089154][ T4297] vub300: probe of 4-1:0.0 failed with error -71 [ 189.133151][ T4297] usb 4-1: USB disconnect, device number 3 [ 189.154270][ T263] block nbd1: Attempted send on invalid socket [ 189.160581][ T263] blk_update_request: I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 189.172923][ T263] gfs2: error 10 reading superblock [ 189.209833][ T5281] loop1: detected capacity change from 0 to 2048 [ 189.280144][ T5281] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.991576][ T4297] Bluetooth: hci1: command 0x0406 tx timeout [ 191.996103][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 191.998530][ T4297] Bluetooth: hci3: command 0x0406 tx timeout [ 192.075117][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 192.147709][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 193.868638][ T5321] FAULT_INJECTION: forcing a failure. [ 193.868638][ T5321] name failslab, interval 1, probability 0, space 0, times 0 [ 193.917660][ T5321] CPU: 1 PID: 5321 Comm: syz.0.324 Not tainted syzkaller #0 [ 193.925009][ T5321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.935093][ T5321] Call Trace: [ 193.938401][ T5321] [ 193.941369][ T5321] dump_stack_lvl+0x188/0x250 [ 193.946086][ T5321] ? show_regs_print_info+0x20/0x20 [ 193.951319][ T5321] ? load_image+0x410/0x410 [ 193.955876][ T5321] ? __might_sleep+0xf0/0xf0 [ 193.960494][ T5321] ? __lock_acquire+0x7b50/0x7b50 [ 193.965594][ T5321] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 193.971605][ T5321] should_fail+0x383/0x4b0 [ 193.976058][ T5321] should_failslab+0x5/0x20 [ 193.980591][ T5321] slab_pre_alloc_hook+0x51/0xc0 [ 193.985547][ T5321] kmem_cache_alloc_trace+0x47/0x290 [ 193.990822][ T5321] ? __se_sys_io_uring_setup+0x2096/0x2900 [ 193.996623][ T5321] __se_sys_io_uring_setup+0x2096/0x2900 [ 194.002257][ T5321] ? __x64_sys_io_uring_setup+0x60/0x60 [ 194.007792][ T5321] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 194.013423][ T5321] ? syscall_enter_from_user_mode+0x2a/0x70 [ 194.019311][ T5321] do_syscall_64+0x4c/0xa0 [ 194.023723][ T5321] ? clear_bhb_loop+0x30/0x80 [ 194.028395][ T5321] ? clear_bhb_loop+0x30/0x80 [ 194.033061][ T5321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.038939][ T5321] RIP: 0033:0x7efe78c76159 [ 194.043346][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.062940][ T5321] RSP: 002b:00007efe76ece028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 194.071349][ T5321] RAX: ffffffffffffffda RBX: 00007efe78efdfa0 RCX: 00007efe78c76159 [ 194.079308][ T5321] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000bbc [ 194.087270][ T5321] RBP: 00007efe78d0d03b R08: 0000000000000000 R09: 0000000000000000 [ 194.095328][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.103302][ T5321] R13: 00007efe78efe038 R14: 00007efe78efdfa0 R15: 00007ffedefd9d58 [ 194.111300][ T5321] [ 194.236599][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.246145][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.515518][ T263] block nbd4: Attempted send on invalid socket [ 194.521786][ T263] blk_update_request: I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 194.533121][ T263] gfs2: error 10 reading superblock [ 194.548680][ T5328] loop4: detected capacity change from 0 to 2048 [ 194.618342][ T5328] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.956372][ T5346] process 'syz.0.333' launched './file0' with NULL argv: empty string added [ 197.908002][ T4344] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 198.177691][ T4344] usb 5-1: Using ep0 maxpacket: 16 [ 198.297808][ T4344] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 198.381333][ T4344] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.413023][ T5356] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 198.452362][ T4344] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 198.756348][ T4344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.821588][ T4344] usb 5-1: config 0 descriptor?? [ 199.451596][ T263] block nbd1: Attempted send on invalid socket [ 199.457867][ T263] blk_update_request: I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 199.475974][ T263] gfs2: error 10 reading superblock [ 199.547144][ T5363] loop1: detected capacity change from 0 to 2048 [ 199.557902][ T263] block nbd0: Attempted send on invalid socket [ 199.564180][ T263] blk_update_request: I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 199.576398][ T263] gfs2: error 10 reading superblock [ 199.588534][ T4344] usbhid 5-1:0.0: can't add hid device: -71 [ 199.595659][ T4344] usbhid: probe of 5-1:0.0 failed with error -71 [ 199.606195][ T4344] usb 5-1: USB disconnect, device number 5 [ 199.661224][ T5373] loop0: detected capacity change from 0 to 2048 [ 199.805205][ T5363] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.816994][ T5373] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.337629][ T4344] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 202.433636][ T5419] loop4: detected capacity change from 0 to 164 [ 202.801829][ T5426] rock: directory entry would overflow storage [ 202.808219][ T5426] rock: sig=0x4f50, size=4, remaining=3 [ 202.813955][ T5426] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 203.017740][ T4344] usb 4-1: config 0 has no interfaces? [ 203.467745][ T4344] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 203.497267][ T4344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.536988][ T4344] usb 4-1: Product: syz [ 203.550988][ T4344] usb 4-1: Manufacturer: syz [ 203.555840][ T4344] usb 4-1: SerialNumber: syz [ 203.583801][ T4344] usb 4-1: config 0 descriptor?? [ 203.635322][ T5431] capability: warning: `syz.4.356' uses deprecated v2 capabilities in a way that may be insecure [ 203.899124][ T5411] netlink: 'syz.3.350': attribute type 2 has an invalid length. [ 203.907150][ T5411] netlink: 'syz.3.350': attribute type 1 has an invalid length. [ 203.927920][ T5411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.350'. [ 203.936851][ T5411] netlink: 'syz.3.350': attribute type 2 has an invalid length. [ 203.953520][ T5411] netlink: 'syz.3.350': attribute type 1 has an invalid length. [ 204.107082][ T5411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.350'. [ 204.273819][ T5411] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 206.078437][ T3156] usb 4-1: USB disconnect, device number 4 [ 209.416790][ T5473] netlink: 'syz.2.372': attribute type 1 has an invalid length. [ 209.602428][ T263] block nbd4: Attempted send on invalid socket [ 209.608673][ T263] blk_update_request: I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 209.619916][ T263] gfs2: error 10 reading superblock [ 209.771502][ T5461] loop4: detected capacity change from 0 to 2048 [ 210.724941][ T5461] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.070783][ T5520] snd_dummy snd_dummy.0: control 2:0:0:syz0:254 is already present [ 212.267706][ T4267] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 214.153683][ T4344] Bluetooth: hci1: command 0x0406 tx timeout [ 215.283827][ T4344] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 215.295271][ T4344] Bluetooth: hci4: Injecting HCI hardware error event [ 215.303913][ T4198] Bluetooth: hci4: hardware error 0x00 [ 217.022375][ T5552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 220.818824][ T5588] loop0: detected capacity change from 0 to 1024 [ 222.268911][ T5618] gadgetfs: bound to dummy_udc driver [ 226.195275][ T5673] CIFS: Attempting to mount \\127.0.0.1\share [ 226.201895][ T5673] CIFS: VFS: No username specified [ 227.208751][ T5683] FAULT_INJECTION: forcing a failure. [ 227.208751][ T5683] name failslab, interval 1, probability 0, space 0, times 0 [ 227.237713][ T5683] CPU: 1 PID: 5683 Comm: syz.4.440 Not tainted syzkaller #0 [ 227.245056][ T5683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.255139][ T5683] Call Trace: [ 227.258442][ T5683] [ 227.261395][ T5683] dump_stack_lvl+0x188/0x250 [ 227.266106][ T5683] ? show_regs_print_info+0x20/0x20 [ 227.271331][ T5683] ? load_image+0x410/0x410 [ 227.275859][ T5683] ? __lock_acquire+0x7b50/0x7b50 [ 227.280910][ T5683] should_fail+0x383/0x4b0 [ 227.285335][ T5683] should_failslab+0x5/0x20 [ 227.289837][ T5683] slab_pre_alloc_hook+0x51/0xc0 [ 227.294904][ T5683] ? __alloc_file+0x25/0x240 [ 227.299503][ T5683] kmem_cache_alloc+0x3d/0x280 [ 227.304272][ T5683] __alloc_file+0x25/0x240 [ 227.308688][ T5683] alloc_empty_file+0x90/0x180 [ 227.313450][ T5683] alloc_file+0x5c/0x510 [ 227.317693][ T5683] ? do_raw_spin_unlock+0x11d/0x230 [ 227.322895][ T5683] alloc_file_pseudo+0x180/0x200 [ 227.327836][ T5683] ? alloc_empty_file_noaccount+0x80/0x80 [ 227.333559][ T5683] ? _raw_spin_unlock+0x24/0x40 [ 227.338422][ T5683] __anon_inode_getfd+0x26b/0x3d0 [ 227.343449][ T5683] ? anon_inode_getfd+0x40/0x40 [ 227.348332][ T5683] ? bpf_lsm_bpf_map+0x5/0x10 [ 227.353021][ T5683] map_create+0x1a62/0x2330 [ 227.357529][ T5683] ? bpf_lsm_bpf+0x5/0x10 [ 227.361860][ T5683] __sys_bpf+0x30a/0x6f0 [ 227.366102][ T5683] ? bpf_link_show_fdinfo+0x380/0x380 [ 227.371490][ T5683] __x64_sys_bpf+0x78/0x90 [ 227.375911][ T5683] do_syscall_64+0x4c/0xa0 [ 227.380348][ T5683] ? clear_bhb_loop+0x30/0x80 [ 227.385026][ T5683] ? clear_bhb_loop+0x30/0x80 [ 227.389708][ T5683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.395602][ T5683] RIP: 0033:0x7fa9c078a159 [ 227.400020][ T5683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.419627][ T5683] RSP: 002b:00007fa9be9e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.428040][ T5683] RAX: ffffffffffffffda RBX: 00007fa9c0a11fa0 RCX: 00007fa9c078a159 [ 227.436015][ T5683] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 227.443986][ T5683] RBP: 00007fa9c082103b R08: 0000000000000000 R09: 0000000000000000 [ 227.451956][ T5683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.459927][ T5683] R13: 00007fa9c0a12038 R14: 00007fa9c0a11fa0 R15: 00007ffc65d5b058 [ 227.467911][ T5683] [ 227.776125][ T5693] [ 227.778508][ T5693] ====================================================== [ 227.785529][ T5693] WARNING: possible circular locking dependency detected [ 227.792554][ T5693] syzkaller #0 Not tainted [ 227.796978][ T5693] ------------------------------------------------------ [ 227.803998][ T5693] syz.3.444/5693 is trying to acquire lock: [ 227.809897][ T5693] ffff888073918478 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfb/0xe20 [ 227.819255][ T5693] [ 227.819255][ T5693] but task is already holding lock: [ 227.826640][ T5693] ffffffff8d5b37c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 227.835812][ T5693] [ 227.835812][ T5693] which lock already depends on the new lock. [ 227.835812][ T5693] [ 227.846239][ T5693] [ 227.846239][ T5693] the existing dependency chain (in reverse order) is: [ 227.855263][ T5693] [ 227.855263][ T5693] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 227.862679][ T5693] __mutex_lock_common+0x1e5/0x2400 [ 227.868418][ T5693] mutex_lock_nested+0x17/0x20 [ 227.873726][ T5693] rfcomm_security_cfm+0x95/0x780 [ 227.879287][ T5693] hci_auth_complete_evt+0x388/0xbb0 [ 227.885106][ T5693] hci_event_packet+0x701/0x1310 [ 227.890579][ T5693] hci_rx_work+0x255/0xa10 [ 227.895528][ T5693] process_one_work+0x867/0xff0 [ 227.900920][ T5693] worker_thread+0xad7/0x12a0 [ 227.906133][ T5693] kthread+0x42e/0x520 [ 227.910730][ T5693] ret_from_fork+0x1f/0x30 [ 227.915684][ T5693] [ 227.915684][ T5693] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 227.923431][ T5693] __mutex_lock_common+0x1e5/0x2400 [ 227.929162][ T5693] mutex_lock_nested+0x17/0x20 [ 227.934469][ T5693] hci_remote_features_evt+0x5d9/0xa10 [ 227.940466][ T5693] hci_event_packet+0x600/0x1310 [ 227.945938][ T5693] hci_rx_work+0x255/0xa10 [ 227.950895][ T5693] process_one_work+0x867/0xff0 [ 227.956282][ T5693] worker_thread+0xad7/0x12a0 [ 227.961501][ T5693] kthread+0x42e/0x520 [ 227.966101][ T5693] ret_from_fork+0x1f/0x30 [ 227.971055][ T5693] [ 227.971055][ T5693] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 227.978379][ T5693] __lock_acquire+0x2c66/0x7b50 [ 227.983773][ T5693] lock_acquire+0x19e/0x400 [ 227.988815][ T5693] __mutex_lock_common+0x1e5/0x2400 [ 227.994552][ T5693] mutex_lock_nested+0x17/0x20 [ 227.999856][ T5693] l2cap_chan_connect+0xfb/0xe20 [ 228.005323][ T5693] l2cap_sock_connect+0x5a3/0x770 [ 228.010866][ T5693] kernel_connect+0x11c/0x180 [ 228.016060][ T5693] rfcomm_dlc_open+0x600/0x10c0 [ 228.021422][ T5693] rfcomm_sock_connect+0x2e9/0x600 [ 228.027044][ T5693] __sys_connect+0x3cb/0x450 [ 228.032162][ T5693] __x64_sys_connect+0x76/0x80 [ 228.037439][ T5693] do_syscall_64+0x4c/0xa0 [ 228.042389][ T5693] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.048794][ T5693] [ 228.048794][ T5693] other info that might help us debug this: [ 228.048794][ T5693] [ 228.059019][ T5693] Chain exists of: [ 228.059019][ T5693] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 228.059019][ T5693] [ 228.071519][ T5693] Possible unsafe locking scenario: [ 228.071519][ T5693] [ 228.078957][ T5693] CPU0 CPU1 [ 228.084330][ T5693] ---- ---- [ 228.089701][ T5693] lock(rfcomm_mutex); [ 228.093865][ T5693] lock(hci_cb_list_lock); [ 228.100876][ T5693] lock(rfcomm_mutex); [ 228.107536][ T5693] lock(&hdev->lock); [ 228.111609][ T5693] [ 228.111609][ T5693] *** DEADLOCK *** [ 228.111609][ T5693] [ 228.119738][ T5693] 1 lock held by syz.3.444/5693: [ 228.124657][ T5693] #0: ffffffff8d5b37c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 228.134037][ T5693] [ 228.134037][ T5693] stack backtrace: [ 228.139911][ T5693] CPU: 0 PID: 5693 Comm: syz.3.444 Not tainted syzkaller #0 [ 228.147177][ T5693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.157216][ T5693] Call Trace: [ 228.160492][ T5693] [ 228.163415][ T5693] dump_stack_lvl+0x188/0x250 [ 228.168085][ T5693] ? load_image+0x410/0x410 [ 228.172590][ T5693] ? show_regs_print_info+0x20/0x20 [ 228.177793][ T5693] ? print_circular_bug+0x12b/0x1a0 [ 228.183021][ T5693] check_noncircular+0x296/0x330 [ 228.187956][ T5693] ? add_chain_block+0x9b0/0x9b0 [ 228.192899][ T5693] ? lockdep_lock+0xf1/0x1f0 [ 228.197486][ T5693] ? check_noncircular+0x189/0x330 [ 228.202584][ T5693] ? mark_lock+0x94/0x320 [ 228.206918][ T5693] ? _find_first_zero_bit+0xd1/0xf0 [ 228.212104][ T5693] __lock_acquire+0x2c66/0x7b50 [ 228.216947][ T5693] ? verify_lock_unused+0x140/0x140 [ 228.222140][ T5693] ? verify_lock_unused+0x140/0x140 [ 228.227385][ T5693] lock_acquire+0x19e/0x400 [ 228.231880][ T5693] ? l2cap_chan_connect+0xfb/0xe20 [ 228.236979][ T5693] ? __lock_acquire+0x13dc/0x7b50 [ 228.241993][ T5693] ? __might_sleep+0xf0/0xf0 [ 228.246580][ T5693] ? read_lock_is_recursive+0x10/0x10 [ 228.251946][ T5693] __mutex_lock_common+0x1e5/0x2400 [ 228.257158][ T5693] ? l2cap_chan_connect+0xfb/0xe20 [ 228.262258][ T5693] ? reacquire_held_locks+0x319/0x5c0 [ 228.267617][ T5693] ? l2cap_chan_connect+0xfb/0xe20 [ 228.272737][ T5693] ? do_raw_read_unlock+0x39/0x70 [ 228.277765][ T5693] ? _raw_read_unlock+0x24/0x40 [ 228.282609][ T5693] ? mutex_lock_io_nested+0x60/0x60 [ 228.287796][ T5693] ? mark_lock+0x94/0x320 [ 228.292112][ T5693] mutex_lock_nested+0x17/0x20 [ 228.296861][ T5693] l2cap_chan_connect+0xfb/0xe20 [ 228.301790][ T5693] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 228.307760][ T5693] ? l2cap_chan_busy+0x90/0x90 [ 228.312508][ T5693] ? __local_bh_enable_ip+0x136/0x1c0 [ 228.317869][ T5693] ? _local_bh_enable+0xa0/0xa0 [ 228.322707][ T5693] l2cap_sock_connect+0x5a3/0x770 [ 228.327732][ T5693] ? do_syscall_64+0x4c/0xa0 [ 228.332339][ T5693] ? l2cap_sock_bind+0x870/0x870 [ 228.337270][ T5693] ? kernel_connect+0xd2/0x180 [ 228.342024][ T5693] kernel_connect+0x11c/0x180 [ 228.346688][ T5693] ? kernel_accept+0x420/0x420 [ 228.351439][ T5693] ? rfcomm_dlc_open+0x5c4/0x10c0 [ 228.356718][ T5693] rfcomm_dlc_open+0x600/0x10c0 [ 228.361574][ T5693] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 228.367554][ T5693] ? rfcomm_dlc_free+0x40/0x40 [ 228.372315][ T5693] ? __local_bh_enable_ip+0x136/0x1c0 [ 228.377703][ T5693] ? lockdep_hardirqs_on+0x94/0x140 [ 228.382900][ T5693] ? __local_bh_enable_ip+0x136/0x1c0 [ 228.388262][ T5693] ? _local_bh_enable+0xa0/0xa0 [ 228.393101][ T5693] ? do_raw_spin_unlock+0x11d/0x230 [ 228.398287][ T5693] rfcomm_sock_connect+0x2e9/0x600 [ 228.403391][ T5693] ? rfcomm_sock_bind+0x550/0x550 [ 228.408403][ T5693] __sys_connect+0x3cb/0x450 [ 228.412985][ T5693] ? __sys_connect_file+0x170/0x170 [ 228.418178][ T5693] __x64_sys_connect+0x76/0x80 [ 228.422935][ T5693] do_syscall_64+0x4c/0xa0 [ 228.427343][ T5693] ? clear_bhb_loop+0x30/0x80 [ 228.432021][ T5693] ? clear_bhb_loop+0x30/0x80 [ 228.436687][ T5693] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.442567][ T5693] RIP: 0033:0x7fcd1aa70159 [ 228.446972][ T5693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.466572][ T5693] RSP: 002b:00007fcd18cc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 228.474976][ T5693] RAX: ffffffffffffffda RBX: 00007fcd1acf7fa0 RCX: 00007fcd1aa70159 [ 228.483167][ T5693] RDX: 000000000000000a RSI: 0000200000000080 RDI: 0000000000000009 [ 228.491143][ T5693] RBP: 00007fcd1ab0703b R08: 0000000000000000 R09: 0000000000000000 [ 228.499124][ T5693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.507106][ T5693] R13: 00007fcd1acf8038 R14: 00007fcd1acf7fa0 R15: 00007ffe0ee97e48 [ 228.515072][ T5693] [ 228.518150][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.617614][ T4232] Bluetooth: hci3: command 0x0405 tx timeout