last executing test programs: 4m28.016920857s ago: executing program 3 (id=4): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000002c0)={{}, 0x4, 0x1, 0xfffffffffffffffe}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000007c0)={0x8, {{0xa, 0x4e20, 0x2, @remote}}, {{0xa, 0x4e23, 0xc, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffff9}}}, 0x108) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000003640)={&(0x7f0000000340)={0x2c, 0x2, 0x0, 0xa}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000000380)="179e790fca3b54ef8c28d7d298da0cd6", 0x10}, {&(0x7f00000006c0)="1932499f46006425cb69a4e11498920d3bb549aeb3cad54c238f3647d6dbb2ad8635bda3860747f92111a8016a42e54e3a32224af7a9212bf0129549c99f64be563e00c17285e041a683352ca7b2cb8907b0d21070f16bf0b9caf51c86e2c2696e77dc1bafcfb5f767bf7d51e0614a4a780759d9ec9128a5aa202b03d87466ddc2f02234eae1c08dbdfd75bd85c47213e3ad4d6ec39684ae2fcb4c2c1672b7920c5afac7dfc1cdeac0290653f830f05199639b8056c81a17d3c1e9f4d75fc08e6e7ab7fb34824bfa00605a74bfe1e0c23a04506e3b368f06d31675304d8f13ee3b6a5bf12e8336a3fcd9bff43d0352600cea52623a79f13e580ca13a5f8bec", 0xff}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000003540)="97259833b3ea06f13e6666f19074b599257e48058524bc67cf51670b6c5489982b2d97987bc7478aa500b798fa3491ad800f25eb792554afca0b4a2841bbc89d3ca64089abe0a6519c28116bc6a8cd", 0x4f}], 0x5, 0x0, 0x0, 0x40d0}, 0x41) preadv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 4m25.131765184s ago: executing program 3 (id=7): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) r1 = getpid() kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'veth0_vlan\x00', {0x2}, 0xa}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) openat$pfkey(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpriority(0x2, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) 4m22.418150854s ago: executing program 3 (id=9): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0}}], 0x1, 0x80) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 4m20.952888407s ago: executing program 3 (id=10): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = open_tree(0xffffffffffffffff, 0x0, 0x1001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = signalfd4(r3, &(0x7f00000001c0)={[0x3c4f5a0e]}, 0x8, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) write$cgroup_subtree(r5, 0x0, 0xfe3a) setresgid(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f0000000000)) 4m19.637378883s ago: executing program 3 (id=11): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)='port', 0x400, &(0x7f0000000180)={@align=0x8000, {0x10, 0x5, 0x80, 0xd57}}, 0x8000, &(0x7f00000001c0), &(0x7f0000000200)=0xfff}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={0x0, 0x0, 0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000300)=ANY=[@ANYBLOB]) 4m19.596955508s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xcf) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) utime(&(0x7f0000000000)='./file0\x00', 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee00, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) socket(0x10, 0x3, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback, 0x1}}}, 0x108) write$UHID_INPUT(r2, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) 4m17.732997587s ago: executing program 0 (id=12): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000440)="0f018ff0ef66b9910400000f320fc79f8a100f01cf660f017c80f4ea80334700f26767dad2360f46116766c7442400050000006766c74424020b0000006766c744240600000000670f011424", 0x4c}], 0x1, 0x43, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x6, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m4.731255788s ago: executing program 3 (id=18): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = open_tree(0xffffffffffffffff, 0x0, 0x1001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = signalfd4(r3, &(0x7f00000001c0)={[0x3c4f5a0e]}, 0x8, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) write$cgroup_subtree(r5, 0x0, 0xfe3a) setresgid(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f0000000000)) 3m59.66721376s ago: executing program 32 (id=12): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000440)="0f018ff0ef66b9910400000f320fc79f8a100f01cf660f017c80f4ea80334700f26767dad2360f46116766c7442400050000006766c74424020b0000006766c744240600000000670f011424", 0x4c}], 0x1, 0x43, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x6, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m48.974461797s ago: executing program 33 (id=18): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = open_tree(0xffffffffffffffff, 0x0, 0x1001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = signalfd4(r3, &(0x7f00000001c0)={[0x3c4f5a0e]}, 0x8, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) write$cgroup_subtree(r5, 0x0, 0xfe3a) setresgid(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f0000000000)) 2m43.606569269s ago: executing program 2 (id=90): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = open_tree(0xffffffffffffffff, 0x0, 0x1001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = signalfd4(r3, &(0x7f00000001c0)={[0x3c4f5a0e]}, 0x8, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) write$cgroup_subtree(r5, 0x0, 0xfe3a) setresgid(0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x5437, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x541c, &(0x7f0000000000)) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) 2m42.227708328s ago: executing program 2 (id=92): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) socket(0x2b, 0x1, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x800, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m40.741901632s ago: executing program 2 (id=93): pipe2(&(0x7f0000000040), 0x80000) r0 = getpid() kcmp(r0, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)={0x2, 'veth0_vlan\x00', {0x2}, 0xa}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) 2m36.96303901s ago: executing program 2 (id=96): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) r1 = getpid() kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'veth0_vlan\x00', {0x2}, 0xa}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) openat$pfkey(0xffffffffffffff9c, 0x0, 0x100, 0x0) getpriority(0x2, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x810) 2m35.37928711s ago: executing program 2 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='\x00\x00', 0x2) 2m34.545618244s ago: executing program 2 (id=101): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x8, 0x399}) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfa, 0x0}}, 0x1c) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0xa000000000000000, 0x10000, 0xe6, 0x2, 0xd}) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 2m25.400031416s ago: executing program 4 (id=124): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="616e306d058d8ef0ea4e8c880aeaacc859553d3372cce5142d560fdad57b7811d200157f21cc0200285a159d9a2c227ab14697", 0x33) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) 2m25.288544967s ago: executing program 4 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="3002", 0x2) 2m25.076646052s ago: executing program 4 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='3276u', 0x5) 2m24.840001213s ago: executing program 4 (id=127): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000200)={0x1c, &(0x7f00000002c0)=[{0x26, '\x00', @data=0x9, 0x9}]}) 2m24.612755259s ago: executing program 4 (id=128): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z\xe7\xeb\x06\xcf\xf3>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f00000005c0)='AQB/\x0fK9e\xc7;M\x13\x9a-\r\xffS)@\xd1\xde[8?\xc7\xc8\x12\xd0;\xeaA\xee0l\xf9`c\xb9E\xcfv\x9a\x9e\x88\xa9F\xaf\xab\x98\xdcK\x1e\xb1\xdb\xd0\xf2):\xf1\xbdW\xad<\x17\xb7\xf1f]\xd4l?\x0e\x00\x86 \x83\xe2\xd0,]G\xdaQI\xc0\xe1x\xd6\xf6\xb9%t\x19\xda\x982\x17I\x04*n\xe6xM\xe36\xc4\b\x97\xb2\x04\xa9\x9a\x19\x05\xf6\x84Mz\xa6\x12n\xb3\xd1%\xa1%D\r^tT\x93\x8b\xc7*\xbe\x1b\x1b\x11\x82\x00\x00\x00\x00\x00\x00\xebo\xf5h\xef\xa1\xdd\xf3\x995\xa2JlL\xb8\xa3Vq\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdY\x96\xae\xc3Y\xea2\x92s\xe3Bb\x94\x15V\xb8F\x19=\xaf+\xa9<\xfeA\x91t\xd8\xa2\x8f4\xc7\xb9\x9d\xd6\xc6\x0e`\x99\xb2\x8e;\x02\xed\xfcuW\xe1\x06\xf3 \x8d\xecy\t\x7f@\x1c!\xb1\xcd\n@Q:G<\xd3\xd7\xa8\xf4\x03m\xb6\xac\xe2\xa6b\x05\xfa\xdb`\x91L$\x8b2\x16\xf0\x8a=\x83\x85\xa0\xed\xcaX\xb4\xb0\xe8\xbf\x95n\xf8\xed>\x82Y\xab\x9b-|\xc7', 0x0) 2m24.454897637s ago: executing program 4 (id=129): syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) mkdir(&(0x7f0000000000)='./nfsd_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd_dir\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd_dir/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd_dir/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='tcp 2', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd_dir/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='2', 0x1) 2m19.065905902s ago: executing program 34 (id=101): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x8, 0x399}) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfa, 0x0}}, 0x1c) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0xa000000000000000, 0x10000, 0xe6, 0x2, 0xd}) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 2m9.166215744s ago: executing program 35 (id=129): syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) mkdir(&(0x7f0000000000)='./nfsd_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd_dir\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd_dir/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd_dir/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='tcp 2', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd_dir/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='2', 0x1) 2m0.814552659s ago: executing program 1 (id=147): timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, &(0x7f0000000100)}}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x44040200) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 1m58.575594624s ago: executing program 1 (id=148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x22, 0x0, 0x0, @multicast2, "0000000104000001"}}}}}, 0x0) 1m57.558185042s ago: executing program 1 (id=149): pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m57.021120379s ago: executing program 1 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='44100,48000,88200,96000,176400,192000,352800,384000,705600,7', 0x3c) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='44100,48000,88200,96000,176400,192000,352800,384000,705600,7', 0x3c) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='usbip-vudc.0', 0xc) 1m56.659698949s ago: executing program 1 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="00ff", 0x2) 1m56.442127264s ago: executing program 1 (id=152): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) read(r1, &(0x7f0000000b00), 0x64) 1m40.959489046s ago: executing program 36 (id=152): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) read(r1, &(0x7f0000000b00), 0x64) 54.050164483s ago: executing program 8 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/fail_page_alloc/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000380), 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x140, 0x2, 0x1, 0x2, 0x1, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x1, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9a, 0x101, 0x400, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0x81, 0x200000, 0xae, 0x100000, 0x9, 0x0, 0x8]}) 53.518104551s ago: executing program 8 (id=199): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x21}, 0xe75}], 0x3aa0, 0x60002000, 0x0) 51.685643649s ago: executing program 6 (id=202): add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffd) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000900)='syz \x00', 0x5) bind$rxrpc(r0, &(0x7f0000000300)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0xc351, @loopback}}, 0x24) listen(r0, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0x2) add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)="0100000002000800ffffff7f010000000011223344556677aabbccddeeff0011", 0x20, 0xfffffffd) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000a00)='syz \x00', 0x5) connect$rxrpc(r1, &(0x7f0000000700)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0xc351, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000d00)='hello', 0x5}], 0x1, &(0x7f0000000e00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) 49.651966217s ago: executing program 9 (id=207): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/fail_page_alloc/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000380), 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x140, 0x2, 0x1, 0x2, 0x1, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x1, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9a, 0x101, 0x400, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0x81, 0x200000, 0xae, 0x100000, 0x9, 0x0, 0x8]}) 49.38647454s ago: executing program 6 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 48.845926044s ago: executing program 6 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='0\x00', 0x2) 48.844762937s ago: executing program 9 (id=210): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0', 0x1) 48.133565962s ago: executing program 9 (id=212): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='77', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1', 0x1) close(r3) close(0xffffffffffffffff) mkdir(&(0x7f0000000440)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) close(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000680)='4', 0x1) 47.892191183s ago: executing program 9 (id=213): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000180)=0x58, 0x3fffff) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 46.962193454s ago: executing program 8 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='44100,48000,88200,96000,176400,192000,352800,384000,705600,7', 0x3c) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='44100,48000,88200,96000,176400,192000,352800,384000,705600,7', 0x3c) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='usbip-vudc.0', 0xc) 46.532062105s ago: executing program 9 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', r0, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='3', 0x1) 46.472853405s ago: executing program 8 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 46.162170909s ago: executing program 6 (id=221): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000440)="9e8e0a", 0x3) 46.099508562s ago: executing program 9 (id=222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\'', 0x1}], 0x1}, 0x4) 45.933173404s ago: executing program 6 (id=224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x10}]}]}, 0x44}}, 0x0) 45.82758869s ago: executing program 8 (id=226): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x21}, 0xe75}], 0x3aa0, 0x60002000, 0x0) 45.493072418s ago: executing program 6 (id=228): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) unshare(0x42000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r3, r5, 0xd, 0x0, @void}, 0x10) socket$rds(0x15, 0x5, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 42.475081408s ago: executing program 8 (id=237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x20000000) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000) recvmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10102) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 35.175636167s ago: executing program 7 (id=254): mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)="020013f7", 0x4) 35.108015209s ago: executing program 7 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 35.019299107s ago: executing program 7 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000340)='0x80', 0x4) 34.74748364s ago: executing program 7 (id=257): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='77', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1', 0x1) close(r3) close(0xffffffffffffffff) mkdir(&(0x7f0000000440)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) close(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000680)='4', 0x1) 34.277649996s ago: executing program 7 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 34.139132401s ago: executing program 7 (id=261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x148, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x8}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f0000000340)=0x10) 31.027273347s ago: executing program 37 (id=222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\'', 0x1}], 0x1}, 0x4) 29.782001155s ago: executing program 38 (id=228): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) unshare(0x42000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r3, r5, 0xd, 0x0, @void}, 0x10) socket$rds(0x15, 0x5, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 27.022773563s ago: executing program 39 (id=237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x20000000) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000) recvmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10102) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 19.052319365s ago: executing program 40 (id=261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x148, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x8}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f0000000340)=0x10) 10.372723119s ago: executing program 5 (id=278): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x48013, 0x0, 0x0) 8.874194756s ago: executing program 5 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/fail_page_alloc/probability\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='10', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/fail_page_alloc/times\x00', 0x1, 0x1d) write(r2, &(0x7f0000000580)='10', 0x2) 7.659563878s ago: executing program 5 (id=280): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup(r1) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) 4.13059472s ago: executing program 5 (id=281): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000440)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='11', 0x2) 3.581920622s ago: executing program 5 (id=282): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='0\x00', 0x2) 0s ago: executing program 5 (id=283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x100000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x1000, 0x100000, &(0x7f0000f00000/0x100000)=nil, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0x1000, 0x100000, 0x8}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x1000, 0x100000}) (async, rerun: 100) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x1000, 0x100000}) (async, rerun: 100) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x100000}) (async, rerun: 100) close(r2) (async, rerun: 100) close(r5) (async, rerun: 100) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. [ 91.834648][ T36] cfg80211: failed to load regulatory.db [ 92.762418][ T5587] cgroup: Unknown subsys name 'net' [ 93.004995][ T5587] cgroup: Unknown subsys name 'cpuset' [ 93.058446][ T5587] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.996672][ T5587] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.511042][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.519308][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.523036][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.545046][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.547443][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.761452][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.815840][ T4914] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.823270][ T4914] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.840017][ T4914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.841641][ T4914] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.843726][ T4914] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.877191][ T4914] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.880586][ T4914] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.909669][ T4914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.951323][ T4914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.998323][ T4914] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.006518][ T4914] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.010379][ T4914] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.016128][ T4914] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.025690][ T4914] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.078642][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.084339][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.104134][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.120450][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.123300][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.598857][ T5618] Bluetooth: hci0: command tx timeout [ 99.908304][ T5618] Bluetooth: hci1: command tx timeout [ 100.068185][ T5618] Bluetooth: hci2: command tx timeout [ 100.147943][ T5618] Bluetooth: hci3: command tx timeout [ 100.227862][ T5618] Bluetooth: hci4: command tx timeout [ 100.370299][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.371930][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.372943][ T5603] bridge_slave_0: entered allmulticast mode [ 100.375901][ T5603] bridge_slave_0: entered promiscuous mode [ 100.452723][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.452830][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.452960][ T5603] bridge_slave_1: entered allmulticast mode [ 100.454929][ T5603] bridge_slave_1: entered promiscuous mode [ 100.653159][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.702013][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.702262][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.702370][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.702485][ T5611] bridge_slave_0: entered allmulticast mode [ 100.704362][ T5611] bridge_slave_0: entered promiscuous mode [ 100.819158][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.819349][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.819483][ T5611] bridge_slave_1: entered allmulticast mode [ 100.821655][ T5611] bridge_slave_1: entered promiscuous mode [ 100.921337][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.921522][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.921643][ T5608] bridge_slave_0: entered allmulticast mode [ 100.923710][ T5608] bridge_slave_0: entered promiscuous mode [ 100.982880][ T5603] team0: Port device team_slave_0 added [ 101.002943][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.003086][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.003355][ T5608] bridge_slave_1: entered allmulticast mode [ 101.012478][ T5608] bridge_slave_1: entered promiscuous mode [ 101.047355][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.047478][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.047638][ T5610] bridge_slave_0: entered allmulticast mode [ 101.063080][ T5610] bridge_slave_0: entered promiscuous mode [ 101.078683][ T5603] team0: Port device team_slave_1 added [ 101.081973][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.108993][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.109128][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.109269][ T5607] bridge_slave_0: entered allmulticast mode [ 101.111364][ T5607] bridge_slave_0: entered promiscuous mode [ 101.113360][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.113463][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.113802][ T5610] bridge_slave_1: entered allmulticast mode [ 101.116013][ T5610] bridge_slave_1: entered promiscuous mode [ 101.175829][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.203589][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.203808][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.203966][ T5607] bridge_slave_1: entered allmulticast mode [ 101.206365][ T5607] bridge_slave_1: entered promiscuous mode [ 101.277333][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.315045][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.315059][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.315101][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.371823][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.396053][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.397330][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.397341][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.397363][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.420444][ T5611] team0: Port device team_slave_0 added [ 101.467308][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.478117][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.498646][ T5611] team0: Port device team_slave_1 added [ 101.525959][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.569661][ T5608] team0: Port device team_slave_0 added [ 101.620085][ T5608] team0: Port device team_slave_1 added [ 101.643267][ T5610] team0: Port device team_slave_0 added [ 101.662262][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.662275][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.662294][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.677870][ T5618] Bluetooth: hci0: command tx timeout [ 101.724379][ T5607] team0: Port device team_slave_0 added [ 101.733671][ T5610] team0: Port device team_slave_1 added [ 101.754091][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.754104][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.754124][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.810137][ T5607] team0: Port device team_slave_1 added [ 101.837267][ T5603] hsr_slave_0: entered promiscuous mode [ 101.840710][ T5603] hsr_slave_1: entered promiscuous mode [ 101.863571][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.863587][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.863614][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.987975][ T5618] Bluetooth: hci1: command tx timeout [ 102.148009][ T5618] Bluetooth: hci2: command tx timeout [ 102.227953][ T5618] Bluetooth: hci3: command tx timeout [ 102.303129][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.303143][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.303162][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.308044][ T5618] Bluetooth: hci4: command tx timeout [ 102.349498][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.349550][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.349624][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.426798][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.426811][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.426830][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.432681][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.432724][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.432806][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.543979][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.543992][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.544012][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.651466][ T5611] hsr_slave_0: entered promiscuous mode [ 102.652487][ T5611] hsr_slave_1: entered promiscuous mode [ 102.653304][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 102.653390][ T5611] Cannot create hsr debugfs directory [ 102.731211][ T5608] hsr_slave_0: entered promiscuous mode [ 102.732197][ T5608] hsr_slave_1: entered promiscuous mode [ 102.732911][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 102.732928][ T5608] Cannot create hsr debugfs directory [ 102.817460][ T5610] hsr_slave_0: entered promiscuous mode [ 102.821309][ T5610] hsr_slave_1: entered promiscuous mode [ 102.824238][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 102.824308][ T5610] Cannot create hsr debugfs directory [ 102.880826][ T5607] hsr_slave_0: entered promiscuous mode [ 102.881780][ T5607] hsr_slave_1: entered promiscuous mode [ 102.882481][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 102.882498][ T5607] Cannot create hsr debugfs directory [ 103.749895][ T5618] Bluetooth: hci0: command tx timeout [ 103.783198][ T5603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.844460][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.869871][ T5603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.892185][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.907095][ T5603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.944167][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.972697][ T5603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.995247][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.077906][ T5618] Bluetooth: hci1: command tx timeout [ 104.133782][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.165371][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.183762][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.211591][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.227836][ T5618] Bluetooth: hci2: command tx timeout [ 104.228372][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.282003][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.311055][ T5618] Bluetooth: hci3: command tx timeout [ 104.314565][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.351508][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.388790][ T5618] Bluetooth: hci4: command tx timeout [ 104.510166][ T5610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.552674][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.556466][ T5610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.583238][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.602635][ T5610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.646887][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.680628][ T5610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.722638][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.908888][ T5607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.941214][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.947248][ T5607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.983485][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.995143][ T5607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.023936][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.055961][ T5607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.084585][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.131286][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.223078][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.251756][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.272560][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.291283][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.311874][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.356504][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.370288][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.391831][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.395320][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.497087][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.529241][ T2174] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.530592][ T2174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.596590][ T2174] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.610954][ T2174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.697503][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.728671][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.755622][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.755769][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.798018][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.798797][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.832648][ T5618] Bluetooth: hci0: command tx timeout [ 105.896766][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.957528][ T3360] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.970557][ T3360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.024417][ T3360] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.024686][ T3360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.079782][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.148492][ T5618] Bluetooth: hci1: command tx timeout [ 106.234793][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.293273][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.308602][ T5618] Bluetooth: hci2: command tx timeout [ 106.337597][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.347389][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.389332][ T5618] Bluetooth: hci3: command tx timeout [ 106.393296][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.393462][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.467933][ T5618] Bluetooth: hci4: command tx timeout [ 106.512541][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.641017][ T3360] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.643195][ T3360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.706780][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.706985][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.381657][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.639230][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.853960][ T5603] veth0_vlan: entered promiscuous mode [ 107.941223][ T5603] veth1_vlan: entered promiscuous mode [ 107.981505][ T5608] veth0_vlan: entered promiscuous mode [ 108.039770][ T5608] veth1_vlan: entered promiscuous mode [ 108.216263][ T5603] veth0_macvtap: entered promiscuous mode [ 108.246787][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.275571][ T5603] veth1_macvtap: entered promiscuous mode [ 108.305599][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.319976][ T5608] veth0_macvtap: entered promiscuous mode [ 108.385917][ T5608] veth1_macvtap: entered promiscuous mode [ 108.431604][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.451414][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.497363][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.516806][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.577308][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.597471][ T3360] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.620259][ T3360] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.622343][ T3360] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.626129][ T3360] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.688603][ T3390] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.714044][ T3390] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.772954][ T3390] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.799489][ T3390] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.938834][ T5607] veth0_vlan: entered promiscuous mode [ 109.206444][ T5611] veth0_vlan: entered promiscuous mode [ 109.308728][ T5607] veth1_vlan: entered promiscuous mode [ 109.417640][ T5611] veth1_vlan: entered promiscuous mode [ 109.516911][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.516930][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.575121][ T5610] veth0_vlan: entered promiscuous mode [ 109.617126][ T2174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.617144][ T2174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.645207][ T5607] veth0_macvtap: entered promiscuous mode [ 109.686172][ T5610] veth1_vlan: entered promiscuous mode [ 109.704441][ T5607] veth1_macvtap: entered promiscuous mode [ 109.744070][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.744091][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.842453][ T5611] veth0_macvtap: entered promiscuous mode [ 109.855019][ T3360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.855040][ T3360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.911121][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.940871][ T5611] veth1_macvtap: entered promiscuous mode [ 109.982464][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.042998][ T2174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.053190][ T5610] veth0_macvtap: entered promiscuous mode [ 110.066403][ T2174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.083663][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.083765][ T2174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.130508][ T2174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.155861][ T5610] veth1_macvtap: entered promiscuous mode [ 110.178515][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.378213][ T1123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.410186][ T1186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.430112][ T1186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.463886][ T1186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.650788][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.764181][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.061790][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.061813][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.062075][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.108520][ T1149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.118919][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.141939][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.921297][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.921335][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.443849][ T3390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.443870][ T3390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.814712][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.814732][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.205969][ T2174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.205989][ T2174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.473798][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.473819][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.467085][ T5828] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 124.607794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.627806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.597787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.607789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.617784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.627789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.637781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.657804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.667784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.677782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.299231][ T5821] 9pnet_virtio: no channels available for device 127.0.0.1 [ 132.809933][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.810055][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.164124][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 142.370115][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 142.914646][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 143.922589][ T5910] 9pnet_fd: p9_fd_create_tcp (5910): problem connecting socket to 127.0.0.1 [ 144.413625][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.431714][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.424824][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 147.510652][ T5618] Bluetooth: hci5: command tx timeout [ 147.515488][ T5923] ubi0: attaching mtd0 [ 147.520533][ T5923] ubi0: scanning is finished [ 147.520552][ T5923] ubi0: empty MTD device detected [ 148.063990][ T5923] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 151.081005][ T5618] Bluetooth: hci5: command tx timeout [ 152.974276][ T5954] 9pnet_fd: p9_fd_create_tcp (5954): problem connecting socket to 127.0.0.1 [ 153.513958][ T5618] Bluetooth: hci5: command tx timeout [ 155.584846][ T5952] 9pnet_fd: p9_fd_create_tcp (5952): problem connecting socket to 127.0.0.1 [ 155.587942][ T5618] Bluetooth: hci5: command tx timeout [ 156.011828][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.055420][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.079001][ T5604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.110408][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.134136][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.119446][ T3348] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.360002][ T5618] Bluetooth: hci1: command tx timeout [ 160.868949][ T5618] Bluetooth: hci1: command tx timeout [ 161.423313][ T3348] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.588027][ T5618] Bluetooth: hci1: command tx timeout [ 164.588645][ T3348] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.225510][ T5618] Bluetooth: hci1: command tx timeout [ 167.456554][ T6017] 9pnet_fd: p9_fd_create_tcp (6017): problem connecting socket to 127.0.0.1 [ 167.758410][ T3348] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.165288][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.165420][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.165682][ T5901] bridge_slave_0: entered allmulticast mode [ 173.220228][ T5901] bridge_slave_0: entered promiscuous mode [ 173.270983][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.271111][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.273505][ T5901] bridge_slave_1: entered allmulticast mode [ 173.282126][ T5901] bridge_slave_1: entered promiscuous mode [ 176.463649][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.781166][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.790065][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.790384][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.791004][ T5958] bridge_slave_0: entered allmulticast mode [ 176.807076][ T5958] bridge_slave_0: entered promiscuous mode [ 177.098934][ T3348] bridge_slave_1: left allmulticast mode [ 177.099099][ T3348] bridge_slave_1: left promiscuous mode [ 177.132700][ T3348] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.193215][ T3348] bridge_slave_0: left allmulticast mode [ 178.193252][ T3348] bridge_slave_0: left promiscuous mode [ 178.193524][ T3348] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.808754][ T3348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.888521][ T3348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.910249][ T3348] bond0 (unregistering): Released all slaves [ 184.952501][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.952592][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.952761][ T5958] bridge_slave_1: entered allmulticast mode [ 184.956740][ T5958] bridge_slave_1: entered promiscuous mode [ 185.148371][ T5901] team0: Port device team_slave_0 added [ 185.253770][ T5901] team0: Port device team_slave_1 added [ 185.315524][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.382235][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.109854][ T6126] 9pnet_fd: p9_fd_create_tcp (6126): problem connecting socket to 127.0.0.1 [ 187.851846][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.851864][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.851891][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.221240][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.221259][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.221290][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.946420][ T5958] team0: Port device team_slave_0 added [ 193.435951][ T5958] team0: Port device team_slave_1 added [ 194.052675][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.052692][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.052722][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.287597][ T5901] hsr_slave_0: entered promiscuous mode [ 194.327003][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.327178][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.524241][ T5901] hsr_slave_1: entered promiscuous mode [ 194.525258][ T5901] debugfs: 'hsr0' already exists in 'hsr' [ 194.528191][ T5901] Cannot create hsr debugfs directory [ 194.536587][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.536626][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.536698][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.734524][ T6166] 9pnet_fd: p9_fd_create_tcp (6166): problem connecting socket to 127.0.0.1 [ 202.565062][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.618780][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.638950][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.647327][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.655800][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.540049][ T6196] 9pnet_fd: p9_fd_create_tcp (6196): problem connecting socket to 127.0.0.1 [ 204.992453][ T5604] Bluetooth: hci2: command tx timeout [ 205.036967][ T6194] Bluetooth: MGMT ver 1.23 [ 205.037013][ T6194] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 205.193556][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 205.735741][ T5958] hsr_slave_0: entered promiscuous mode [ 205.736970][ T5958] hsr_slave_1: entered promiscuous mode [ 205.741544][ T5958] debugfs: 'hsr0' already exists in 'hsr' [ 205.741568][ T5958] Cannot create hsr debugfs directory [ 207.029364][ T5618] Bluetooth: hci2: command tx timeout [ 209.437852][ T5618] Bluetooth: hci2: command tx timeout [ 209.509271][ T3348] hsr_slave_0: left promiscuous mode [ 209.634039][ T3348] hsr_slave_1: left promiscuous mode [ 209.640774][ T3348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.640829][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.796130][ T3348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.796159][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.013278][ T5618] Bluetooth: hci2: command tx timeout [ 213.634284][ T6235] 9pnet_fd: p9_fd_create_tcp (6235): problem connecting socket to 127.0.0.1 [ 214.608205][ T6239] 9pnet_fd: p9_fd_create_tcp (6239): problem connecting socket to 127.0.0.1 [ 215.328054][ T3348] veth1_macvtap: left promiscuous mode [ 215.328336][ T3348] veth0_macvtap: left promiscuous mode [ 215.335492][ T3348] veth1_vlan: left promiscuous mode [ 215.336237][ T3348] veth0_vlan: left promiscuous mode [ 216.519694][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.521726][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.551031][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.552739][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.554857][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.197927][ T5604] Bluetooth: hci5: command tx timeout [ 220.093075][ T3348] team0 (unregistering): Port device team_slave_1 removed [ 220.178516][ T3348] team0 (unregistering): Port device team_slave_0 removed [ 221.271030][ T59] Bluetooth: hci5: command tx timeout [ 221.907866][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 221.922350][ T4914] Bluetooth: hci3: command 0x0406 tx timeout [ 221.922387][ T4914] Bluetooth: hci4: command 0x0406 tx timeout [ 223.349278][ T5604] Bluetooth: hci5: command tx timeout [ 225.016828][ T5618] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 225.173990][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 225.439955][ T5618] Bluetooth: hci5: command tx timeout [ 225.485219][ T6333] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 226.576341][ T6348] netlink: 'syz.4.108': attribute type 10 has an invalid length. [ 226.644342][ T3348] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.450223][ T3348] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.035980][ T5727] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 228.211250][ T3348] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.278267][ T5727] usb 2-1: Using ep0 maxpacket: 32 [ 228.296795][ T5727] usb 2-1: unable to get BOS descriptor or descriptor too short [ 228.377450][ T5727] usb 2-1: config 8 has an invalid interface number: 188 but max is 0 [ 228.377480][ T5727] usb 2-1: config 8 has no interface number 0 [ 228.377514][ T5727] usb 2-1: config 8 interface 188 has no altsetting 0 [ 228.406233][ T5727] usb 2-1: string descriptor 0 read error: -22 [ 228.406386][ T5727] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 228.406411][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.685318][ T5727] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 228.685375][ T5727] dw2102: su3000_power_ctrl: 1, initialized 0 [ 228.706537][ T5727] dvb-usb: bulk message failed: -22 (2/0) [ 228.972720][ T5727] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 229.022970][ T5727] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 229.024791][ T5727] usb 2-1: media controller created [ 229.031633][ T5618] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 229.031870][ T5618] Bluetooth: hci0: Injecting HCI hardware error event [ 229.034374][ T5618] Bluetooth: hci0: hardware error 0x00 [ 229.074571][ T5727] dvb-usb: bulk message failed: -22 (6/0) [ 229.074594][ T5727] dw2102: i2c transfer failed. [ 229.074614][ T5727] dvb-usb: bulk message failed: -22 (6/0) [ 229.074629][ T5727] dw2102: i2c transfer failed. [ 229.074645][ T5727] dvb-usb: bulk message failed: -22 (6/0) [ 229.074658][ T5727] dw2102: i2c transfer failed. [ 229.074683][ T5727] dvb-usb: bulk message failed: -22 (6/0) [ 229.074697][ T5727] dw2102: i2c transfer failed. [ 229.074714][ T5727] dvb-usb: bulk message failed: -22 (6/0) [ 229.074728][ T5727] dw2102: i2c transfer failed. [ 229.074744][ T5727] dvb-usb: bulk message failed: -22 (6/0) [ 229.074758][ T5727] dw2102: i2c transfer failed. [ 229.074768][ T5727] dvb-usb: MAC address: 02:02:02:02:02:02 [ 229.166435][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.255799][ T5727] dvb-usb: bulk message failed: -22 (3/0) [ 229.255824][ T5727] dw2102: command 0x0e transfer failed. [ 229.277351][ T5727] dvb-usb: bulk message failed: -22 (3/0) [ 229.277372][ T5727] dw2102: command 0x0e transfer failed. [ 229.307165][ T3348] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.581119][ T5727] dvb-usb: bulk message failed: -22 (3/0) [ 229.581141][ T5727] dw2102: command 0x0e transfer failed. [ 229.581151][ T5727] dvb-usb: bulk message failed: -22 (3/0) [ 229.581165][ T5727] dw2102: command 0x0e transfer failed. [ 229.581174][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 229.581189][ T5727] dw2102: command 0x51 transfer failed. [ 229.641430][ T6188] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.641529][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.641748][ T6188] bridge_slave_0: entered allmulticast mode [ 229.657289][ T6188] bridge_slave_0: entered promiscuous mode [ 229.825685][ T6188] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.825864][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.826064][ T6188] bridge_slave_1: entered allmulticast mode [ 229.867846][ T6188] bridge_slave_1: entered promiscuous mode [ 229.924458][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 229.948272][ T5727] DVB: Unable to find symbol ds3000_attach() [ 229.948289][ T5727] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 230.148024][ T5727] rc_core: IR keymap rc-su3000 not found [ 230.148043][ T5727] Registered IR keymap rc-empty [ 230.211715][ T5727] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 230.266805][ T5727] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input6 [ 230.413863][ T6188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.429946][ T5727] dvb-usb: schedule remote query interval to 150 msecs. [ 230.429962][ T5727] dw2102: su3000_power_ctrl: 0, initialized 1 [ 230.429972][ T5727] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 230.569154][ T6188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.590115][ T36] dvb-usb: bulk message failed: -22 (1/0) [ 230.590131][ T36] dw2102: i2c transfer failed. [ 230.878554][ T5727] usb 2-1: USB disconnect, device number 2 [ 231.072652][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.072756][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.072945][ T6251] bridge_slave_0: entered allmulticast mode [ 231.085902][ T6251] bridge_slave_0: entered promiscuous mode [ 231.429708][ T5618] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 231.829028][ T5727] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 231.905789][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.905915][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.906122][ T6251] bridge_slave_1: entered allmulticast mode [ 232.005444][ T6415] FAULT_INJECTION: forcing a failure. [ 232.005444][ T6415] name fail_page_alloc, interval 1, probability 1, space 0, times 1 [ 232.005501][ T6415] CPU: 0 UID: 0 PID: 6415 Comm: syz.1.121 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 232.005530][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 232.005552][ T6415] Call Trace: [ 232.005561][ T6415] [ 232.005570][ T6415] dump_stack_lvl+0xe8/0x150 [ 232.005615][ T6415] should_fail_ex+0x467/0x600 [ 232.005657][ T6415] prepare_alloc_pages+0x223/0x690 [ 232.005692][ T6415] __alloc_frozen_pages_noprof+0x12f/0x380 [ 232.005726][ T6415] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 232.005762][ T6415] ? __pfx_policy_nodemask+0x10/0x10 [ 232.005791][ T6415] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 232.005816][ T6415] ? rcu_is_watching+0x15/0xb0 [ 232.005851][ T6415] alloc_pages_mpol+0xce/0x280 [ 232.005884][ T6415] alloc_pages_noprof+0xd2/0x2f0 [ 232.005924][ T6415] get_zeroed_page_noprof+0x1a/0x90 [ 232.005953][ T6415] comedi_buf_alloc+0x3ca/0x8f0 [ 232.006000][ T6415] comedi_device_postconfig+0x59b/0xd00 [ 232.006046][ T6415] comedi_device_attach+0x554/0x730 [ 232.006083][ T6415] comedi_unlocked_ioctl+0x8f4/0x1af0 [ 232.006123][ T6415] ? kasan_quarantine_put+0xbb/0x1f0 [ 232.006145][ T6415] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 232.006193][ T6415] ? do_vfs_ioctl+0x1184/0x1550 [ 232.006226][ T6415] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 232.006258][ T6415] ? __pfx_smack_log+0x10/0x10 [ 232.006305][ T6415] ? smk_tskacc+0x2fb/0x370 [ 232.006346][ T6415] ? smack_file_ioctl+0x263/0x360 [ 232.006373][ T6415] ? __pfx_smack_file_ioctl+0x10/0x10 [ 232.006409][ T6415] ? __fget_files+0x2a/0x420 [ 232.006433][ T6415] ? __fget_files+0x3a8/0x420 [ 232.006458][ T6415] ? __fget_files+0x2a/0x420 [ 232.006487][ T6415] ? bpf_lsm_file_ioctl+0x9/0x20 [ 232.006509][ T6415] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 232.006535][ T6415] __se_sys_ioctl+0xff/0x170 [ 232.006565][ T6415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.006591][ T6415] do_syscall_64+0x174/0x580 [ 232.006620][ T6415] ? trace_irq_disable+0x3b/0x140 [ 232.006643][ T6415] ? clear_bhb_loop+0x40/0x90 [ 232.006672][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.006695][ T6415] RIP: 0033:0x7fceb60bde99 [ 232.006724][ T6415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.006743][ T6415] RSP: 002b:00007fceb4316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.006777][ T6415] RAX: ffffffffffffffda RBX: 00007fceb6345fa0 RCX: 00007fceb60bde99 [ 232.006794][ T6415] RDX: 00002000000003c0 RSI: 0000000040946400 RDI: 0000000000000004 [ 232.006808][ T6415] RBP: 00007fceb6153eaf R08: 0000000000000000 R09: 0000000000000000 [ 232.006822][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.006835][ T6415] R13: 00007fceb6346038 R14: 00007fceb6345fa0 R15: 00007ffcc842cb18 [ 232.006871][ T6415] [ 232.155306][ T6251] bridge_slave_1: entered promiscuous mode [ 232.216968][ T6415] comedi comedi2: Buffer allocation failed [ 232.312168][ T6188] team0: Port device team_slave_0 added [ 232.399593][ T6188] team0: Port device team_slave_1 added [ 232.672482][ T6251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.823167][ T6251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.825648][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.825664][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.825693][ T6188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.925409][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.925428][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.925458][ T6188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.047991][ T5727] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 233.148077][ T3348] bridge_slave_1: left allmulticast mode [ 233.148111][ T3348] bridge_slave_1: left promiscuous mode [ 233.148413][ T3348] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.211593][ T5727] usb 2-1: Using ep0 maxpacket: 8 [ 233.220627][ T5727] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 233.220711][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.220772][ T5727] usb 2-1: Product: syz [ 233.220814][ T5727] usb 2-1: Manufacturer: syz [ 233.220851][ T5727] usb 2-1: SerialNumber: syz [ 233.312960][ T5727] usb 2-1: config 0 descriptor?? [ 233.339931][ T3348] bridge_slave_0: left allmulticast mode [ 233.339966][ T3348] bridge_slave_0: left promiscuous mode [ 233.368346][ T3348] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.406978][ T5727] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 233.407042][ T5727] dvb-usb: bulk message failed: -22 (2/0) [ 233.450177][ T5727] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 233.450971][ T5727] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 233.451029][ T5727] usb 2-1: media controller created [ 233.553666][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.707950][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 233.733965][ T3348] bridge_slave_1: left allmulticast mode [ 233.733995][ T3348] bridge_slave_1: left promiscuous mode [ 233.734178][ T3348] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.805808][ T5727] DVB: Unable to find symbol mt352_attach() [ 233.805825][ T5727] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 233.881229][ T3348] bridge_slave_0: left allmulticast mode [ 233.881267][ T3348] bridge_slave_0: left promiscuous mode [ 233.881525][ T3348] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.937874][ T5727] rc_core: IR keymap rc-dvico-portable not found [ 233.937895][ T5727] Registered IR keymap rc-empty [ 233.940349][ T5727] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 234.010900][ T5727] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input7 [ 234.050022][ T6431] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 234.084505][ T5727] dvb-usb: schedule remote query interval to 100 msecs. [ 234.084530][ T5727] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 234.187956][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 234.300265][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 234.328347][ T3348] bridge_slave_1: left allmulticast mode [ 234.328382][ T3348] bridge_slave_1: left promiscuous mode [ 234.328643][ T3348] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.409215][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 234.517896][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 234.619411][ T3348] bridge_slave_0: left allmulticast mode [ 234.619447][ T3348] bridge_slave_0: left promiscuous mode [ 234.637982][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 234.652116][ T3348] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.771992][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 234.877797][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 235.075576][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 235.177928][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 235.335433][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 235.437967][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 235.583915][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 235.688509][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 235.797852][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 235.908820][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 236.019780][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 236.127868][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 236.238027][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 236.263495][ T3348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.347963][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 236.407391][ T3348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.457889][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 236.480717][ T3348] bond0 (unregistering): Released all slaves [ 236.579417][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 236.687960][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 236.797948][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 236.893664][ T3348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.934872][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 237.008728][ T3348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.037940][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 237.094691][ T3348] bond0 (unregistering): Released all slaves [ 237.263706][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 237.367874][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 237.481624][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 237.587919][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 237.699340][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 237.807942][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 237.917924][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 238.027854][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 238.139054][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 238.247868][ T36] dvb-usb: bulk message failed: -22 (1/0) [ 238.358760][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 238.396859][ T3348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.487584][ T36] dvb-usb: bulk message failed: -22 (1/0) [ 238.587860][ T36] dvb-usb: bulk message failed: -22 (1/0) [ 238.630964][ T3348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.673138][ T3348] bond0 (unregistering): Released all slaves [ 238.698006][ T36] dvb-usb: bulk message failed: -22 (1/0) [ 238.755408][ T6251] team0: Port device team_slave_0 added [ 238.818074][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 238.927953][ T5802] dvb-usb: bulk message failed: -22 (1/0) [ 239.003476][ T6418] batadv_slave_1: entered promiscuous mode [ 239.021532][ T6251] team0: Port device team_slave_1 added [ 239.037858][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 239.157367][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 239.287483][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 239.387317][ T6418] batadv_slave_1: left promiscuous mode [ 239.389024][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 239.497899][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 239.506759][ T5707] usb 2-1: USB disconnect, device number 3 [ 239.696709][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.696727][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.696757][ T6251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.767910][ T6188] hsr_slave_0: entered promiscuous mode [ 239.769325][ T6188] hsr_slave_1: entered promiscuous mode [ 239.770281][ T6188] debugfs: 'hsr0' already exists in 'hsr' [ 239.770305][ T6188] Cannot create hsr debugfs directory [ 239.771711][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.771725][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.771754][ T6251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.234860][ T5707] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 240.622842][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.666567][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.675628][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.706232][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.724467][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.991830][ T6451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.992003][ T6451] IPv6: NLM_F_CREATE should be set when creating new route [ 240.992055][ T6451] IPv6: NLM_F_CREATE should be set when creating new route [ 241.025787][ T6251] hsr_slave_0: entered promiscuous mode [ 241.027313][ T6251] hsr_slave_1: entered promiscuous mode [ 241.042420][ T6251] debugfs: 'hsr0' already exists in 'hsr' [ 241.042448][ T6251] Cannot create hsr debugfs directory [ 242.019540][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.039708][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.829227][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.849652][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.867809][ T5618] Bluetooth: hci1: command tx timeout [ 244.475480][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 244.487998][ T55] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.560775][ T55] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.714814][ T55] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.786753][ T55] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.947848][ T5618] Bluetooth: hci1: command tx timeout [ 246.291526][ T3348] hsr_slave_0: left promiscuous mode [ 246.330703][ T3348] hsr_slave_1: left promiscuous mode [ 246.331918][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.380351][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.529527][ T3348] hsr_slave_0: left promiscuous mode [ 246.570878][ T3348] hsr_slave_1: left promiscuous mode [ 246.571941][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.618783][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.817898][ T3348] hsr_slave_0: left promiscuous mode [ 246.857892][ T3348] hsr_slave_1: left promiscuous mode [ 246.859079][ T3348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.859106][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.936032][ T3348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.936061][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.027972][ T5618] Bluetooth: hci1: command tx timeout [ 247.052760][ T3348] veth1_macvtap: left promiscuous mode [ 247.052862][ T3348] veth0_macvtap: left promiscuous mode [ 247.053127][ T3348] veth1_vlan: left promiscuous mode [ 247.053346][ T3348] veth0_vlan: left promiscuous mode [ 247.732304][ T3348] team0 (unregistering): Port device team_slave_1 removed [ 247.791801][ T3348] team0 (unregistering): Port device team_slave_0 removed [ 248.332714][ T3348] team0 (unregistering): Port device team_slave_1 removed [ 248.385882][ T3348] team0 (unregistering): Port device team_slave_0 removed [ 249.107975][ T5618] Bluetooth: hci1: command tx timeout [ 249.244125][ T3348] team0 (unregistering): Port device team_slave_1 removed [ 249.314975][ T3348] team0 (unregistering): Port device team_slave_0 removed [ 250.077168][ T5616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 250.092702][ T5616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.127926][ T5616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.129673][ T5616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.130779][ T5616] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 250.319377][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 250.923310][ T6188] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 251.098575][ T6188] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.183730][ T6188] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 251.622055][ T6188] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.743355][ T6188] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 251.895812][ T6188] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.212756][ T6188] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.307946][ T5618] Bluetooth: hci6: command tx timeout [ 252.424403][ T6188] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.500702][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 253.481314][ T6251] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.559144][ T6251] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 253.733845][ T6251] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.800157][ T6251] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.019372][ T6251] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 254.075236][ T6251] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.127057][ T6251] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 254.170324][ T6251] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.400561][ T5616] Bluetooth: hci6: command tx timeout [ 254.710223][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.710354][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.710597][ T6444] bridge_slave_0: entered allmulticast mode [ 254.713492][ T6444] bridge_slave_0: entered promiscuous mode [ 254.773330][ T6444] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.773478][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.773720][ T6444] bridge_slave_1: entered allmulticast mode [ 254.801802][ T6444] bridge_slave_1: entered promiscuous mode [ 255.542457][ T6444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.662306][ T6444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.748974][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.749037][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.220925][ T6444] team0: Port device team_slave_0 added [ 256.280113][ T6444] team0: Port device team_slave_1 added [ 256.282488][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7 [ 256.468199][ T5616] Bluetooth: hci6: command tx timeout [ 256.582110][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.582128][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.582167][ T6444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.646084][ T6582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.674908][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.674925][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.674954][ T6444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.738546][ T6582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.820834][ T6582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.196078][ T6444] hsr_slave_0: entered promiscuous mode [ 257.197638][ T6444] hsr_slave_1: entered promiscuous mode [ 257.204118][ T6444] debugfs: 'hsr0' already exists in 'hsr' [ 257.204190][ T6444] Cannot create hsr debugfs directory [ 257.492926][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.493044][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.493584][ T6498] bridge_slave_0: entered allmulticast mode [ 257.533626][ T6498] bridge_slave_0: entered promiscuous mode [ 257.635070][ T6591] kernel kvm profiling enabled (shift: 4) [ 257.800013][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.800144][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.800364][ T6498] bridge_slave_1: entered allmulticast mode [ 257.803869][ T6498] bridge_slave_1: entered promiscuous mode [ 257.855509][ T6188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.032538][ T6498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.133109][ T6498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.558015][ T5616] Bluetooth: hci6: command tx timeout [ 258.926030][ T6498] team0: Port device team_slave_0 added [ 258.960990][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8 [ 259.009618][ T6498] team0: Port device team_slave_1 added [ 259.038176][ T6188] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.385136][ T6251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.387198][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.387213][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.387241][ T6498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.499668][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.499883][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.501670][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.501682][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.501702][ T6498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.716799][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.717030][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.728290][ T6615] bridge0: port 3(syz_tun) entered blocking state [ 260.728413][ T6615] bridge0: port 3(syz_tun) entered disabled state [ 260.728566][ T6615] syz_tun: entered allmulticast mode [ 260.731279][ T6615] syz_tun: entered promiscuous mode [ 260.796330][ T6498] hsr_slave_0: entered promiscuous mode [ 260.803558][ T6498] hsr_slave_1: entered promiscuous mode [ 260.804512][ T6498] debugfs: 'hsr0' already exists in 'hsr' [ 260.804536][ T6498] Cannot create hsr debugfs directory [ 260.825209][ T6251] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.371505][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.373443][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.238488][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.238672][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.243410][ T6444] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 262.303168][ T5604] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 262.365512][ T5604] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 262.370375][ T5604] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 262.385179][ T5604] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 262.386109][ T5604] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 262.554104][ T6444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 263.021835][ T6444] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 263.054414][ T6188] syz-executor (6188) used greatest stack depth: 19616 bytes left [ 263.109482][ T6444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.157494][ T6444] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 263.226745][ T6444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 263.332410][ T6444] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 263.441689][ T6444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.547996][ T5604] Bluetooth: hci7: command tx timeout [ 266.627939][ T5604] Bluetooth: hci7: command tx timeout [ 266.672279][ T6498] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 267.123619][ T6498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 267.151783][ T6498] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 267.210874][ T6498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.231347][ T6498] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 267.292167][ T6498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.403182][ T6498] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 267.436619][ T6498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 268.019534][ T1149] bridge_slave_1: left allmulticast mode [ 268.019578][ T1149] bridge_slave_1: left promiscuous mode [ 268.019854][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.183368][ T1149] bridge_slave_0: left allmulticast mode [ 268.183404][ T1149] bridge_slave_0: left promiscuous mode [ 268.183648][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.726244][ T5604] Bluetooth: hci7: command tx timeout [ 269.549289][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.608692][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.661943][ T1149] bond0 (unregistering): Released all slaves [ 269.847621][ T6444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.567892][ T1149] hsr_slave_0: left promiscuous mode [ 270.623509][ T1149] hsr_slave_1: left promiscuous mode [ 270.624556][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.658677][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.787845][ T5604] Bluetooth: hci7: command tx timeout [ 271.700705][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 271.761005][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 272.062619][ T6444] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.127333][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 272.231180][ T6251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.350233][ T2174] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.351948][ T2174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.413947][ T6627] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.414066][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.414251][ T6627] bridge_slave_0: entered allmulticast mode [ 272.449801][ T6627] bridge_slave_0: entered promiscuous mode [ 272.467308][ T6627] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.467428][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.467624][ T6627] bridge_slave_1: entered allmulticast mode [ 272.494577][ T6627] bridge_slave_1: entered promiscuous mode [ 272.690878][ T2174] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.691012][ T2174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.786909][ T6627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.807520][ T6627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.085652][ T6627] team0: Port device team_slave_0 added [ 273.144338][ T6627] team0: Port device team_slave_1 added [ 273.287661][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.288236][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.288282][ T6627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.355803][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.355820][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.355850][ T6627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.445648][ T6498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.869518][ T6627] hsr_slave_0: entered promiscuous mode [ 273.876709][ T6627] hsr_slave_1: entered promiscuous mode [ 273.889134][ T6627] debugfs: 'hsr0' already exists in 'hsr' [ 273.889160][ T6627] Cannot create hsr debugfs directory [ 274.195140][ T6498] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.451137][ T6251] veth0_vlan: entered promiscuous mode [ 274.483728][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.483874][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.611217][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 274.687939][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.688068][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.864527][ T6251] veth1_vlan: entered promiscuous mode [ 275.360234][ T6251] veth0_macvtap: entered promiscuous mode [ 275.502972][ T6251] veth1_macvtap: entered promiscuous mode [ 275.637916][ T6251] IPv6: veth1_to_batadv: Failed to add prefix route for address fe80::3d; dropping [ 276.637264][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.704671][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.706201][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.744387][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.789304][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.494778][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.532995][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.547900][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.566386][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.575664][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.775804][ T6444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.950845][ T5604] Bluetooth: hci2: command tx timeout [ 280.709339][ T5604] Bluetooth: hci5: command tx timeout [ 280.872977][ T6498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.028241][ T5604] Bluetooth: hci2: command tx timeout [ 282.790432][ T5604] Bluetooth: hci5: command tx timeout [ 283.117781][ T5604] Bluetooth: hci2: command tx timeout [ 284.877826][ T5604] Bluetooth: hci5: command tx timeout [ 285.030096][ T6444] veth0_vlan: entered promiscuous mode [ 285.197303][ T5604] Bluetooth: hci2: command tx timeout [ 285.794149][ T6627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 285.852209][ T6627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 285.901193][ T6444] veth1_vlan: entered promiscuous mode [ 285.995053][ T6627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 286.039528][ T6627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.221810][ T6627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 286.274030][ T6627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 286.463959][ T6627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 286.653962][ T6627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 286.714391][ T6498] veth0_vlan: entered promiscuous mode [ 286.948035][ T5604] Bluetooth: hci5: command tx timeout [ 287.250053][ T1136] bridge_slave_1: left allmulticast mode [ 287.250091][ T1136] bridge_slave_1: left promiscuous mode [ 287.250370][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.391227][ T1136] bridge_slave_0: left allmulticast mode [ 287.391272][ T1136] bridge_slave_0: left promiscuous mode [ 287.391548][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.455738][ T1136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.512981][ T1136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.537634][ T1136] bond0 (unregistering): Released all slaves [ 288.787815][ T6498] veth1_vlan: entered promiscuous mode [ 288.852196][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.852336][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.852579][ T6759] bridge_slave_0: entered allmulticast mode [ 288.855622][ T6759] bridge_slave_0: entered promiscuous mode [ 288.953364][ T6759] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.953495][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.953712][ T6759] bridge_slave_1: entered allmulticast mode [ 288.956679][ T6759] bridge_slave_1: entered promiscuous mode [ 289.213034][ T1136] hsr_slave_0: left promiscuous mode [ 289.250314][ T1136] hsr_slave_1: left promiscuous mode [ 289.251561][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.284588][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.383497][ T1136] veth1_macvtap: left promiscuous mode [ 289.383620][ T1136] veth0_macvtap: left promiscuous mode [ 289.383887][ T1136] veth1_vlan: left promiscuous mode [ 289.385064][ T1136] veth0_vlan: left promiscuous mode [ 290.372142][ T1136] team0 (unregistering): Port device team_slave_1 removed [ 290.446250][ T1136] team0 (unregistering): Port device team_slave_0 removed [ 290.875634][ T6759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.035360][ T6759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.137224][ T6788] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.137455][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.137777][ T6788] bridge_slave_0: entered allmulticast mode [ 291.168923][ T6788] bridge_slave_0: entered promiscuous mode [ 291.250455][ T6444] veth0_macvtap: entered promiscuous mode [ 291.301262][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.301442][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.301681][ T6788] bridge_slave_1: entered allmulticast mode [ 291.304644][ T6788] bridge_slave_1: entered promiscuous mode [ 291.416159][ T6759] team0: Port device team_slave_0 added [ 291.483621][ T6759] team0: Port device team_slave_1 added [ 291.625470][ T6444] veth1_macvtap: entered promiscuous mode [ 291.713265][ T6788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.861019][ T6788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.289981][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.290000][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.290029][ T6759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.432392][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.432410][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.432454][ T6759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.488016][ T6498] veth0_macvtap: entered promiscuous mode [ 292.617375][ T6788] team0: Port device team_slave_0 added [ 292.642154][ T6498] veth1_macvtap: entered promiscuous mode [ 292.653550][ T6788] team0: Port device team_slave_1 added [ 292.662975][ T6444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.949067][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.949086][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.949115][ T6788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.954612][ T6444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.083080][ T6759] hsr_slave_0: entered promiscuous mode [ 293.091223][ T6759] hsr_slave_1: entered promiscuous mode [ 293.097400][ T6759] debugfs: 'hsr0' already exists in 'hsr' [ 293.097478][ T6759] Cannot create hsr debugfs directory [ 293.126279][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.126297][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.126327][ T6788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.220081][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 293.265263][ T1136] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.330753][ T1136] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.360620][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.360740][ T1136] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.486455][ T1136] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.571270][ T6788] hsr_slave_0: entered promiscuous mode [ 293.572794][ T6788] hsr_slave_1: entered promiscuous mode [ 293.573862][ T6788] debugfs: 'hsr0' already exists in 'hsr' [ 293.573888][ T6788] Cannot create hsr debugfs directory [ 293.709474][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.215116][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.267012][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.313452][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.548839][ T6627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.549303][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.235040][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.235062][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.871681][ T6627] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.375548][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.375580][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.377136][ T3390] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.377272][ T3390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.118073][ T3360] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.118294][ T3360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.385803][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.385826][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.112716][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.112737][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.673656][ T6759] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 301.796966][ T6759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 301.813415][ T6759] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 302.005360][ T6759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.034104][ T6759] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 302.314116][ T6759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 302.694741][ T6759] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 302.783702][ T6759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 303.793241][ T6788] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 303.886201][ T6788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 303.975069][ T7019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.044067][ T7019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.060127][ T7019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.289789][ T6788] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 304.373349][ T6788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 304.452166][ T6788] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 304.860095][ T6788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.049633][ T6788] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 305.238298][ T6788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.275064][ T6627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.385571][ T6759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.627919][ T1010] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 306.731004][ T6759] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.832572][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.832801][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.837861][ T1010] usb 8-1: Using ep0 maxpacket: 32 [ 306.866080][ T1010] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 306.866128][ T1010] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 306.866155][ T1010] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 306.866180][ T1010] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 306.935401][ T1010] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 306.935433][ T1010] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.935455][ T1010] usb 8-1: Product: syz [ 306.935470][ T1010] usb 8-1: Manufacturer: syz [ 306.935486][ T1010] usb 8-1: SerialNumber: syz [ 307.145442][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 307.220224][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.220489][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.258229][ T1010] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input8 [ 307.361336][ T1010] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 307.361357][ T1010] (id 0x00) [ 307.450415][ T1010] rc_core: IR keymap rc-imon-pad not found [ 307.450437][ T1010] Registered IR keymap rc-empty [ 307.450535][ T1010] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 307.450552][ T1010] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 307.565686][ T1010] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0 [ 307.589483][ T1010] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input9 [ 307.590540][ T6788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.653095][ T1010] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:2> initialized [ 307.828867][ T1010] usb 8-1: USB disconnect, device number 2 [ 307.948276][ T7067] imon:vfd_write: invalid payload size [ 307.950936][ T7068] imon:display_open: display port is already open [ 308.409639][ T6627] veth0_vlan: entered promiscuous mode [ 308.565201][ T6788] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.621929][ T6627] veth1_vlan: entered promiscuous mode [ 308.686645][ T3360] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.694049][ T3360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.866555][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.866690][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.124194][ T7079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.378019][ T6627] veth0_macvtap: entered promiscuous mode [ 309.436557][ T6627] veth1_macvtap: entered promiscuous mode [ 309.644028][ T6627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.680260][ T6627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.752950][ T3348] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.756704][ T3348] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.786981][ T3348] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.798777][ T3348] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.643748][ T7103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.683127][ T6759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.722292][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.722314][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.488030][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.488052][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.296965][ T7120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.380557][ T6788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.415685][ T7124] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 315.228966][ T7137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.239040][ T5714] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 315.312533][ T7137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.317304][ T7137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.417819][ T5714] usb 6-1: Using ep0 maxpacket: 32 [ 315.423727][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.423760][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.423800][ T5714] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 315.423824][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.544031][ T7137] warning: `syz.7.173' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 315.683093][ T5714] usb 6-1: config 0 descriptor?? [ 316.294167][ T6759] veth0_vlan: entered promiscuous mode [ 316.424579][ T5714] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 316.672729][ T6759] veth1_vlan: entered promiscuous mode [ 316.677517][ T5714] usb 6-1: USB disconnect, device number 2 [ 317.124901][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.124975][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.163477][ T7146] usbip-vudc usbip-vudc.0: Expecting SOCK_STREAM - found 3 [ 317.598834][ T7148] fido_id[7148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 318.077912][ T5714] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 318.153496][ T6759] veth0_macvtap: entered promiscuous mode [ 318.305416][ T6788] veth0_vlan: entered promiscuous mode [ 318.366977][ T5714] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 318.367005][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.393373][ T6759] veth1_macvtap: entered promiscuous mode [ 318.433945][ T5714] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 318.511552][ T7155] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 318.511998][ T7155] CIFS: Attempting to mount //127.0.0.1/share [ 318.579947][ T6788] veth1_vlan: entered promiscuous mode [ 318.640224][ T5714] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 318.640253][ T5714] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 318.741854][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.796841][ T7159] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 318.891166][ T5714] usb 6-1: emi26_load_firmware - request_firmware() failed [ 318.891191][ T5714] usb 6-1: emi26_load_firmware - error loading firmware: error = -2 [ 318.891259][ T5714] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 318.930645][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.214109][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.242736][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.283133][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.394390][ T10] usb 6-1: USB disconnect, device number 3 [ 319.428920][ T7155] CIFS: VFS: cifs_mount failed w/return code = -112 [ 319.433089][ T7155] syz.7.177 (7155) used greatest stack depth: 19328 bytes left [ 319.434229][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.739181][ T6788] veth0_macvtap: entered promiscuous mode [ 319.857283][ T6788] veth1_macvtap: entered promiscuous mode [ 320.599311][ T6788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.335375][ T6788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.462932][ T1010] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 321.623257][ T1010] usb 8-1: Using ep0 maxpacket: 32 [ 321.641246][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.641267][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.654747][ T1010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.654777][ T1010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.654821][ T1010] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 321.654842][ T1010] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.790697][ T154] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.794299][ T154] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.877284][ T1010] usb 8-1: config 0 descriptor?? [ 322.023260][ T154] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.026275][ T154] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.685891][ T7189] usbip_vudc: v_rx exit with error -32 [ 322.857453][ T7160] cifsd (7160) used greatest stack depth: 17656 bytes left [ 323.014794][ T1010] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 323.182941][ T1010] usb 8-1: USB disconnect, device number 3 [ 323.485906][ T7196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.558949][ T7193] fido_id[7193]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 323.618087][ T7196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.041271][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.041293][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.223040][ T3360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.223061][ T3360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.790995][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.791017][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.071632][ T5728] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 327.310916][ T5728] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 327.310946][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.564679][ T5728] usb 6-1: ATUSB: AT86RF231 version 1 [ 328.782051][ T5728] usb 6-1: Firmware: major: 0, minor: 2, hardware type: ATUSB (2) [ 330.082626][ T5728] usb 6-1: USB disconnect, device number 4 [ 330.748795][ T1010] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 330.980170][ T1010] usb 7-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 330.980203][ T1010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.171655][ T1010] emi26 - firmware loader 7-1:1.0: emi26_probe start [ 331.174764][ T1010] usb 7-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 331.174791][ T1010] usb 7-1: Falling back to sysfs fallback for: emi26/loader.fw [ 331.558942][ T7277] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 331.620670][ T1010] usb 7-1: emi26_load_firmware - request_firmware() failed [ 331.620695][ T1010] usb 7-1: emi26_load_firmware - error loading firmware: error = -2 [ 331.620759][ T1010] emi26 - firmware loader 7-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 332.085392][ T5714] usb 7-1: USB disconnect, device number 2 [ 334.617837][ T5728] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 334.901647][ T5728] usb 8-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 334.901678][ T5728] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.992981][ T5728] emi26 - firmware loader 8-1:1.0: emi26_probe start [ 334.995735][ T5728] usb 8-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 334.995759][ T5728] usb 8-1: Falling back to sysfs fallback for: emi26/loader.fw [ 335.441336][ T5728] usb 8-1: Direct firmware load for emi26/bitstream.fw failed with error -2 [ 335.441363][ T5728] usb 8-1: Falling back to sysfs fallback for: emi26/bitstream.fw [ 338.921003][ T1010] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 339.117404][ T1010] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 339.117435][ T1010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.219831][ T1010] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 340.733181][ T7380] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 348.513714][ T5616] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 348.568285][ T5616] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 348.680550][ T5616] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 348.732003][ T5616] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 348.735251][ T5616] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 349.760790][ T5604] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 349.817351][ T5604] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 349.832691][ T5604] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 349.835536][ T5604] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 349.836510][ T5604] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 350.869932][ T5604] Bluetooth: hci8: command tx timeout [ 351.907784][ T5604] Bluetooth: hci9: command tx timeout [ 352.032993][ T5616] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 352.097966][ T5616] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 352.187527][ T5616] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 352.211111][ T5616] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 352.230193][ T5616] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 352.953060][ T5604] Bluetooth: hci8: command tx timeout [ 353.989312][ T5604] Bluetooth: hci9: command tx timeout [ 354.392044][ T5604] Bluetooth: hci10: command tx timeout [ 355.027798][ T5604] Bluetooth: hci8: command tx timeout [ 356.067744][ T5604] Bluetooth: hci9: command tx timeout [ 356.468037][ T5604] Bluetooth: hci10: command tx timeout [ 357.107738][ T5604] Bluetooth: hci8: command tx timeout [ 357.470903][ T7414] Set syz1 is full, maxelem 65536 reached [ 358.154530][ T5604] Bluetooth: hci9: command tx timeout [ 358.571597][ T5604] Bluetooth: hci10: command tx timeout [ 360.012957][ T5616] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 360.039710][ T5616] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 360.069844][ T5616] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 360.074099][ T5616] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 360.074866][ T5616] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 360.628209][ T5604] Bluetooth: hci10: command tx timeout [ 362.228074][ T5604] Bluetooth: hci11: command tx timeout [ 364.308096][ T5604] Bluetooth: hci11: command tx timeout [ 365.267992][ T5604] Bluetooth: hci1: command 0x0406 tx timeout [ 366.389149][ T5616] Bluetooth: hci11: command tx timeout [ 367.155862][ T7347] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.237'. [ 368.107243][ T7483] capability: warning: `syz.5.277' uses 32-bit capabilities (legacy support in use) [ 368.477860][ T5616] Bluetooth: hci11: command tx timeout [ 372.355716][ T3360] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.832691][ T3360] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.280494][ T5616] Bluetooth: hci7: command 0x0406 tx timeout [ 373.654416][ T3360] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.746730][ T3360] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.552597][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.552669][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.108581][ T38] INFO: task syz.4.129:6438 blocked for more than 143 seconds. [ 381.108605][ T38] Not tainted syzkaller #0 [ 381.108616][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.108625][ T38] task:syz.4.129 state:D stack:27304 pid:6438 tgid:6436 ppid:5610 task_flags:0x400040 flags:0x00080002 [ 381.108712][ T38] Call Trace: [ 381.108720][ T38] [ 381.108733][ T38] __schedule+0x16dc/0x5500 [ 381.108781][ T38] ? __pfx___schedule+0x10/0x10 [ 381.108806][ T38] ? irqentry_exit+0x218/0x8f0 [ 381.108831][ T38] ? trace_irq_disable+0x3b/0x140 [ 381.108855][ T38] ? __pfx___schedule+0x10/0x10 [ 381.108876][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 381.108925][ T38] rt_mutex_schedule+0x76/0xf0 [ 381.108951][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 381.109004][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 381.109042][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 381.109080][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 381.109116][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 381.109161][ T38] ? write_threads+0x3a0/0x5a0 [ 381.109199][ T38] ? write_threads+0x3a0/0x5a0 [ 381.109238][ T38] ? write_threads+0x3a0/0x5a0 [ 381.109270][ T38] mutex_lock_nested+0x168/0x1d0 [ 381.109311][ T38] write_threads+0x3a0/0x5a0 [ 381.109362][ T38] ? __might_fault+0xaf/0x130 [ 381.109390][ T38] ? __pfx_write_threads+0x10/0x10 [ 381.109445][ T38] ? _copy_from_user+0x94/0xb0 [ 381.109475][ T38] ? simple_transaction_get+0x130/0x170 [ 381.109505][ T38] nfsctl_transaction_write+0x112/0x160 [ 381.109542][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 381.109578][ T38] vfs_write+0x29f/0xbb0 [ 381.109618][ T38] ? __pfx_vfs_write+0x10/0x10 [ 381.109651][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 381.109680][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 381.109708][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 381.109736][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 381.109771][ T38] ? fdget_pos+0x252/0x320 [ 381.109807][ T38] ksys_write+0x156/0x270 [ 381.109839][ T38] ? __pfx_ksys_write+0x10/0x10 [ 381.109879][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.109905][ T38] do_syscall_64+0x174/0x580 [ 381.109935][ T38] ? clear_bhb_loop+0x40/0x90 [ 381.109972][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.110001][ T38] RIP: 0033:0x7f6940b9de99 [ 381.110022][ T38] RSP: 002b:00007f693edd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 381.110045][ T38] RAX: ffffffffffffffda RBX: 00007f6940e26090 RCX: 00007f6940b9de99 [ 381.110062][ T38] RDX: 0000000000000001 RSI: 0000200000000900 RDI: 0000000000000005 [ 381.110075][ T38] RBP: 00007f6940c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 381.110089][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.110102][ T38] R13: 00007f6940e26128 R14: 00007f6940e26090 R15: 00007ffd5e843598 [ 381.110137][ T38] [ 381.110196][ T38] [ 381.110196][ T38] Showing all locks held in the system: [ 381.110210][ T38] 2 locks held by kworker/u8:1/13: [ 381.110224][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.110288][ T38] #1: ffffc90000127c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.110347][ T38] 5 locks held by ksoftirqd/0/15: [ 381.110361][ T38] 1 lock held by khungtaskd/38: [ 381.110372][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 381.110427][ T38] 3 locks held by kworker/u8:5/89: [ 381.110441][ T38] 2 locks held by kworker/u8:7/165: [ 381.110453][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.110512][ T38] #1: ffffc900039c7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.110570][ T38] 5 locks held by kworker/0:2/1010: [ 381.110583][ T38] #0: ffff88801a730d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.110640][ T38] #1: ffffc900059d7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.110697][ T38] #2: ffff88802addc210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 381.110749][ T38] #3: ffff888040e0e210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 381.110807][ T38] #4: ffff888060ac31d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 381.110866][ T38] 5 locks held by kworker/u8:10/1149: [ 381.110892][ T38] 2 locks held by kworker/u8:15/3348: [ 381.110903][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.110970][ T38] #1: ffffc9000efe7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.111027][ T38] 10 locks held by kworker/u8:16/3360: [ 381.111042][ T38] 2 locks held by udevd/4965: [ 381.111054][ T38] 2 locks held by dhcpcd/5260: [ 381.111066][ T38] #0: ffff88803369a928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 381.111122][ T38] #1: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14b0 [ 381.111177][ T38] 2 locks held by getty/5352: [ 381.111196][ T38] #0: ffff888036eb40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 381.111252][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 381.111317][ T38] 2 locks held by syz-executor/5603: [ 381.111329][ T38] #0: ffff88803b2d80d0 (&type->s_umount_key#59){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 381.111391][ T38] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 381.111449][ T38] 2 locks held by kworker/u9:4/5618: [ 381.111462][ T38] #0: ffff8880277dc938 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.111519][ T38] #1: ffffc90004ce7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.111583][ T38] 6 locks held by kworker/0:6/5728: [ 381.111595][ T38] #0: ffff88801a730d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.111682][ T38] #1: ffffc90005947c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.111743][ T38] #2: ffff88802ac76210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 381.111796][ T38] #3: ffff88803abe4210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 381.111853][ T38] #4: ffff888038e5a1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 381.111914][ T38] #5: ffffffff8e0606c0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 381.111980][ T38] 2 locks held by syz.2.96/6295: [ 381.111992][ T38] #0: ffff888054b560d0 (&type->s_umount_key#59){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 381.112054][ T38] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 381.112112][ T38] 3 locks held by syz.4.129/6437: [ 381.112124][ T38] #0: ffff88803bc3b728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 381.112179][ T38] #1: ffff88802a23e500 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 381.112242][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 381.112306][ T38] 3 locks held by syz.4.129/6438: [ 381.112318][ T38] #0: ffff888020f77328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 381.112370][ T38] #1: ffff88802a23e500 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 381.112434][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 381.112510][ T38] 3 locks held by syz.6.228/7318: [ 381.112522][ T38] #0: ffff888027bc6128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 381.112576][ T38] #1: ffff888038036500 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 381.112639][ T38] #2: ffff88806132bc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 381.112703][ T38] 2 locks held by syz-executor/7439: [ 381.112716][ T38] #0: ffffffff8fafb348 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 381.112779][ T38] #1: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 381.112834][ T38] 1 lock held by udevd/7524: [ 381.112846][ T38] 2 locks held by syz.5.283/7525: [ 381.112859][ T38] 4 locks held by modprobe/7531: [ 381.112871][ T38] 2 locks held by modprobe/7532: [ 381.112883][ T38] 2 locks held by modprobe/7533: [ 381.112897][ T38] [ 381.112902][ T38] ============================================= [ 381.112902][ T38] [ 381.112921][ T38] NMI backtrace for cpu 0 [ 381.112941][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.112976][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 381.112989][ T38] Call Trace: [ 381.112997][ T38] [ 381.113005][ T38] dump_stack_lvl+0xe8/0x150 [ 381.113041][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 381.113064][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 381.113101][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 381.113142][ T38] sys_info+0x135/0x170 [ 381.113173][ T38] watchdog+0xfd7/0x1030 [ 381.113202][ T38] ? watchdog+0x1c7/0x1030 [ 381.113230][ T38] kthread+0x388/0x470 [ 381.113264][ T38] ? __pfx_watchdog+0x10/0x10 [ 381.113282][ T38] ? __pfx_kthread+0x10/0x10 [ 381.113316][ T38] ret_from_fork+0x514/0xb70 [ 381.113353][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 381.113387][ T38] ? __switch_to+0xc89/0x1420 [ 381.113421][ T38] ? __pfx_kthread+0x10/0x10 [ 381.113455][ T38] ret_from_fork_asm+0x1a/0x30 [ 381.113494][ T38] [ 381.113509][ T38] Sending NMI from CPU 0 to CPUs 1: [ 381.113540][ C1] NMI backtrace for cpu 1 [ 381.113555][ C1] CPU: 1 UID: 0 PID: 7524 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.113576][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 381.113586][ C1] RIP: 0010:trace_irq_disable+0x15/0x140 [ 381.113607][ C1] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 54 53 66 90 65 8b 05 b4 e6 cf 10 83 f8 08 73 37 <89> c3 c1 e8 06 48 8d 3c c5 30 97 af 8f be 08 00 00 00 e8 34 36 61 [ 381.113622][ C1] RSP: 0018:ffffc9000644fc20 EFLAGS: 00000097 [ 381.113638][ C1] RAX: 0000000000000001 RBX: 0000000000000246 RCX: 0000000000000046 [ 381.113650][ C1] RDX: 0000000000000000 RSI: ffffffff8d885223 RDI: ffffffff8b4740ba [ 381.113662][ C1] RBP: ffffc9000644fd20 R08: ffffffff82465881 R09: 0000000000000000 [ 381.113675][ C1] R10: 0000000000000000 R11: ffff88803c494598 R12: 1ffff92000c89f95 [ 381.113699][ C1] R13: dffffc0000000000 R14: ffff88803c494540 R15: ffffc9000644fca0 [ 381.113713][ C1] FS: 00007fe1e666d880(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 381.113728][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.113739][ C1] CR2: 00007f5b9ead1000 CR3: 000000004091a000 CR4: 00000000003526f0 [ 381.113755][ C1] Call Trace: [ 381.113761][ C1] [ 381.113768][ C1] _raw_spin_lock_irqsave+0x1a/0x60 [ 381.113790][ C1] rt_spin_lock+0x157/0x400 [ 381.113819][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 381.113852][ C1] alloc_fd+0x61/0x6d0 [ 381.113875][ C1] do_sys_openat2+0xee/0x200 [ 381.113894][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 381.113919][ C1] __x64_sys_openat+0x138/0x170 [ 381.113939][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.113957][ C1] do_syscall_64+0x174/0x580 [ 381.113979][ C1] ? trace_irq_disable+0x3b/0x140 [ 381.113996][ C1] ? clear_bhb_loop+0x40/0x90 [ 381.114027][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.114063][ C1] RIP: 0033:0x7fe1e675b407 [ 381.114078][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 381.114093][ C1] RSP: 002b:00007ffe41fa8ae0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 381.114110][ C1] RAX: ffffffffffffffda RBX: 00007fe1e666d880 RCX: 00007fe1e675b407 [ 381.114123][ C1] RDX: 0000000000080000 RSI: 00007ffe41fa8c10 RDI: ffffffffffffff9c [ 381.114136][ C1] RBP: 0000562887606ba0 R08: 0000000000000000 R09: 0000000000000000 [ 381.114147][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562887606c90 [ 381.114159][ C1] R13: 00007ffe41fa8c10 R14: 00007ffe41faa890 R15: 00005628808d1bcc [ 381.114195][ C1] [ 381.114544][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 381.114560][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.114585][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 381.114597][ T38] Call Trace: [ 381.114605][ T38] [ 381.114614][ T38] vpanic+0x56c/0xa60 [ 381.114642][ T38] ? __pfx_vpanic+0x10/0x10 [ 381.114675][ T38] panic+0xc5/0xd0 [ 381.114697][ T38] ? __pfx_panic+0x10/0x10 [ 381.114723][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 381.114751][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 381.114795][ T38] watchdog+0x1030/0x1030 [ 381.114824][ T38] ? watchdog+0x1c7/0x1030 [ 381.114852][ T38] kthread+0x388/0x470 [ 381.114886][ T38] ? __pfx_watchdog+0x10/0x10 [ 381.114905][ T38] ? __pfx_kthread+0x10/0x10 [ 381.114941][ T38] ret_from_fork+0x514/0xb70 [ 381.114986][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 381.115021][ T38] ? __switch_to+0xc89/0x1420 [ 381.115056][ T38] ? __pfx_kthread+0x10/0x10 [ 381.115092][ T38] ret_from_fork_asm+0x1a/0x30 [ 381.115131][ T38] [ 381.115746][ T38] Kernel Offset: disabled