last executing test programs: 12.209981601s ago: executing program 0 (id=250): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x52880, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002240), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000024c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002500)={@void, @void, @eth={@random="163e79baae36", @local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x67, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x4e22, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x1, 0x7, 0x0, @void}, "245ac175"}}}}}}}, 0x36) 11.997502122s ago: executing program 2 (id=256): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004030000"], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 11.979849594s ago: executing program 0 (id=257): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f0000000440)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000019440)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000019480)='./sys\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000019500)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r3, &(0x7f0000019540)=""/265, 0x109) 10.26087661s ago: executing program 2 (id=258): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="0000009c796f06ef0600"/27, @ANYBLOB='\x00'/14], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f00000003c0)=0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x0, 0x7f, 0x6, 0xffffffc2}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x8fb2, 0x10022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x10001) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x4000800) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000600)) msgctl$IPC_SET(0x0, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) 9.721916115s ago: executing program 0 (id=261): openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001100)={0x8, 0x100008b}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f00000012c0)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001340), 0x2, 0x141102) writev(r0, &(0x7f0000001380)=[{&(0x7f00000013c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) r1 = syz_open_dev$cec(&(0x7f0000001400), 0x0, 0x200) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x0, &(0x7f00000015c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open_tree(0xffffffffffffff9c, &(0x7f0000001600)='\x00', 0x89901) syz_mount_image$squashfs(&(0x7f00000016c0), &(0x7f0000001700)='./file0\x00', 0x0, &(0x7f0000001740)=ANY=[], 0x1, 0x1a3, &(0x7f0000001780)="$eJzs0L9rE2Ecx/H397nLL6FKVBwq2IDF80K1d6k6uBicIuTAwUUwaEjPpnhV0stgSwtdpCDV/gs6SB1V0ElEwbk4CA56Lt2kGYqDOEjkkieCf0OfF9x97vuBu/vytONOnAP+7K20qDJgcZBPCDYwIcNOqWG+0fMPnZvD4LKeN3Q+1zkeLy3faUZRuFi6WKL4XwH8HHT/qvglxxQFoYp82VtpNeVWQL/KgpoNKNYpP8Jq0HEfM26PcfQmFn1ngyuKjjh1ODTdzTMdLy2fmV9ozoVz4d1KZeaCd87zzqf7R6H3GnEfiuIJq7gBuYCCu0qmwYNt+wBTgrhtlVhS7pFtsLltnT451UO5u/QR3js9ct/sdkld4xT5G+nyNY4IT7ECJusUFDa356PQqyFX1Svx7c/2r4wiv2ZZZ1v3otn160p+Z7eqspsXf4eM41Mp+8ykR8NhPrCeMJlQS9hK2PnOhLxN/zI6V3stvb/Q03FO8CzL/Wa3u+hn4aM4AZX0ugRjg8+pwV5FeKff0cHX0YNhGIZhGIZhGIaxD/wNAAD//yMlYgQ=") 8.040422087s ago: executing program 0 (id=272): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x7c1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, 0x0) 6.720196732s ago: executing program 4 (id=274): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) 6.525396732s ago: executing program 4 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f0000002580)=""/195, 0xc3, 0x591f) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000002700)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000002740)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f00000027c0)=0x5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002800)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xfffffffe}}, 0xe8) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002940)='./proc\x00', 0x1ff) read(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000029c0), 0x42202) write$sndseq(r4, &(0x7f0000002ac0)=[{0x84, 0x75, 0x0, 0x0, @time={0x6, 0xff}, {}, {0x0, 0x81}, @raw32={[0x1ff, 0x0, 0x1]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000002b00)={0x137, @time={0x65757100, 0x316575}}) sendmmsg(r3, &(0x7f0000002b40), 0x800001d, 0x1c) 6.392206526s ago: executing program 3 (id=276): r0 = openat$dm_control(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000a40)={0x4, 0x0, 0x0, 0x1e8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@crypt={0x0, 0x2000, 0x0, 0xb0, 'crypt\x00', {'aes-cbc-plain64be', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram={'/dev/ram', 0x1}, 0x20, '0'}, ' 2 sector_size:4096 iv_large_sectors'}}]}) 6.387651586s ago: executing program 1 (id=277): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000080), 0x84000) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = mq_open(0x0, 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) io_setup(0x6, &(0x7f0000000540)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) 6.209681804s ago: executing program 3 (id=278): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./dev/mtdblock0\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/mtdblock0\x00', 0x8000, 0x0) close(r0) 5.929902183s ago: executing program 3 (id=279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.848857501s ago: executing program 2 (id=280): openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001100)={0x8, 0x100008b}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f00000012c0)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001340), 0x2, 0x141102) writev(r0, &(0x7f0000001380)=[{&(0x7f00000013c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$cec(&(0x7f0000001400), 0x0, 0x200) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x0, &(0x7f00000015c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open_tree(0xffffffffffffff9c, &(0x7f0000001600)='\x00', 0x89901) syz_mount_image$squashfs(&(0x7f00000016c0), &(0x7f0000001700)='./file0\x00', 0x0, &(0x7f0000001740)=ANY=[], 0x1, 0x1a3, &(0x7f0000001780)="$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") 5.597523237s ago: executing program 4 (id=281): syz_open_dev$loop(&(0x7f0000000140), 0xffffffff80000001, 0x1680a2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], 0x40}}, 0x0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000640), &(0x7f00000006c0)=0x6e, 0x0) bind$unix(r1, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/local\x00', 0x1bc) timer_create(0x0, &(0x7f00000007c0)={0x0, 0x33, 0x2, @thr={&(0x7f0000000800)="467de29de66f28a89f043bc6", &(0x7f0000000840)="c31a56a6d768f5b7f9258e80b4dfbe526ee33663fc1d9d89e2e9df7fdb72c3131fea2474dcd8e07b8db72bcb03c9063d07526c74"}}, &(0x7f0000000880)=0x0) timer_settime(r2, 0x1, &(0x7f00000008c0), &(0x7f0000000900)) r3 = openat$tun(0xffffff9c, &(0x7f0000000940), 0x0, 0x0) write$tun(r3, &(0x7f0000000f80)={@void, @val={0x2, 0x3, 0x6, 0x0, 0x9, 0x7}, @ipv6=@tipc_packet={0x8, 0x6, "8d72d0", 0x218, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x0, 0x23, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x3, 0x981, [0x4, 0x9, 0xb28, 0x8, 0x8, 0x2, 0x6]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0xd, 0x3, [0x4, 0x7827, 0x0]}}, @generic={0x33, 0x98, "15630ba6813003746524f74ea3f5b481c33a813da4ffcc7b1c6b95d48dc1022712bb6919771d4aa4f3965e70fa13dc5a3a80eefa585cb09f03f22832ce4f57c7a51e7a8644ac037357358f141e0384898c29606e218bf13cb8b1bfa8d03a41e4cd5dfe30c25bf597d63220876a11d24b757fe1480f9c949821e1de7e1c8f3e4dbc61e31108da495614f0457722a8d89bf732a544cd738dfd"}, @ra={0x5, 0x2, 0x10}, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0xffc0, [0x8000]}}, @enc_lim={0x4, 0x1, 0x6}, @padn]}, @srh={0x3c, 0xa, 0x4, 0x5, 0x3, 0x8, 0x50bb, [@remote, @empty, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], @name_distributor={{0x98, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x9, 0x0, 0x4e24, 0x4e21, 0x3, 0x4}, [{0x102, 0xf, 0xdc, 0x5, 0x6, 0x7ff, 0x2, 0x5}, {0x2, 0xffffffff, 0x4, 0x1, 0x9, 0x5, 0x8, 0x5}, {0x5, 0x200000, 0x3, 0x7fff, 0x80000001, 0x10000, 0x4}, {0x1af2, 0x0, 0xdf12, 0x1ff, 0xf9e0, 0x4, 0x8, 0x7fff}]}}}}, 0x24a) r4 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r4, &(0x7f0000000c00)='1\x00', 0x2) 5.096882318s ago: executing program 3 (id=282): openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001100)={0x8, 0x100008b}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f00000012c0)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001340), 0x2, 0x141102) writev(r0, &(0x7f0000001380)=[{&(0x7f00000013c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) r1 = syz_open_dev$cec(&(0x7f0000001400), 0x0, 0x200) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x0, &(0x7f00000015c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open_tree(0xffffffffffffff9c, &(0x7f0000001600)='\x00', 0x89901) syz_mount_image$squashfs(&(0x7f00000016c0), &(0x7f0000001700)='./file0\x00', 0x0, &(0x7f0000001740)=ANY=[], 0x1, 0x1a3, &(0x7f0000001780)="$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") 4.97431112s ago: executing program 2 (id=283): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1123102, 0x0) pipe2(&(0x7f0000000080), 0x84000) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_setup(0x6, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) 4.555837104s ago: executing program 4 (id=284): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x20002) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80804120, &(0x7f00000022c0)) 4.073944682s ago: executing program 3 (id=285): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004030000"], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 4.072730093s ago: executing program 2 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) getpid() syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)='./file7\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) madvise(0xffffffffffffffff, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x12, {0x2, 0x4e20, @rand_addr=0x64010101}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000400)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000440)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x58}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400000000000354, 0x42, 0x0) 3.965669934s ago: executing program 4 (id=287): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f0000000440)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000019440)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000019480)='./sys\x00', &(0x7f00000194c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r3, &(0x7f0000019540)=""/265, 0x109) 2.04178313s ago: executing program 4 (id=288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000380)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000003c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000540)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000600)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000002f00)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000002f40)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000002f80)=0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001640)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x9, 0x0, 0x7, 0x8}, {0x0, 0x0, 0x7, 0x4, 0x8}, 0x7, 0xa, 0x1062}}, @TCA_TBF_RTAB={0x404, 0x2, [0xca4, 0x101, 0x7, 0x7, 0x698, 0x0, 0x0, 0xfff, 0x6, 0x80, 0x7, 0x7, 0x8, 0x4, 0x100, 0x7fff, 0x0, 0x1000, 0x17d, 0xa, 0x9, 0x800, 0x0, 0x38, 0x7, 0x2, 0x1, 0xfffffff8, 0x80000001, 0x1, 0x40, 0x8, 0x5cf, 0x6, 0x401, 0x6, 0x7, 0x8, 0x1, 0x6be, 0x2, 0x7fffffff, 0x6, 0x3, 0x8, 0x9ce, 0x4, 0x9, 0x2, 0x80000000, 0x800, 0x80000000, 0x39, 0x8, 0x826, 0xe695, 0x400, 0x1, 0x6, 0x6, 0x9be, 0x9, 0x1d5, 0xffff, 0x6, 0x8be5, 0x3, 0x863, 0x6df, 0x1, 0xfc, 0x3, 0x4, 0xf, 0x8, 0x7, 0x8001, 0x4, 0x9, 0x8001, 0xf0, 0x58, 0x2, 0x1, 0xf54, 0x6, 0x100, 0x5, 0x7ff, 0x101, 0x3, 0x800, 0x7, 0xfffffffb, 0x5, 0x2, 0x80000009, 0x6, 0x9, 0xfffffff4, 0x6, 0xff2c, 0x9d, 0x5, 0x80, 0x2, 0x0, 0x4332, 0x8, 0x100, 0xce, 0x7fff, 0x2, 0x80000000, 0xf3ae, 0x2, 0x7, 0xfd, 0x6, 0xa2, 0x9, 0x9, 0xfffffff9, 0x4, 0x6, 0x3, 0xf94, 0x40, 0xd, 0x0, 0xb, 0xdae, 0x10001, 0x6, 0x6, 0x9, 0x10000, 0x6, 0xe3, 0x0, 0x4, 0x2, 0x1, 0x19370fbd, 0xf7, 0x7, 0x1, 0x8, 0x2, 0x3, 0x8, 0x9, 0xac, 0x200, 0x2, 0x751, 0xff, 0x9, 0x4, 0x2, 0x7, 0x140000, 0x8, 0x3, 0x7, 0x6, 0x2, 0x5, 0x14dd, 0xfffffb53, 0x2, 0x0, 0x1d, 0xd, 0x0, 0x401, 0x805, 0x3, 0x0, 0x101, 0x0, 0xe, 0x3, 0x7, 0x3, 0x8, 0x5, 0x8, 0xca7, 0x5, 0xffff, 0x6, 0x1, 0x2, 0x5, 0x9, 0xf3e, 0xe, 0xc, 0x958, 0x100, 0x40, 0x73aedffe, 0x800, 0xbe4, 0xfffffff9, 0x3, 0x8, 0xa5, 0x0, 0x3, 0x3, 0x8, 0x1, 0x3, 0x9, 0x5, 0x4, 0x10001, 0xecca, 0x81, 0x9, 0x5, 0xe2, 0xffff, 0x6, 0x4, 0x8, 0x5, 0xc5, 0x7, 0x9, 0x16, 0xfffffffc, 0x3, 0x5a, 0xffffff55, 0x7fff, 0x5, 0xffffff80, 0xc, 0x5, 0x5, 0x7ff, 0x20fd2724, 0x4, 0x6, 0x1, 0x4, 0x3ff, 0x4, 0x5, 0x4, 0x7ff, 0x5, 0xfffff001]}]}}]}, 0x45c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x2d4, 0x940c, 0x3002, 0x2d4, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x1, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x9, 0x80000000, '\x00', {0x3}}}}, {{@ipv6={@loopback, @private0, [0x0, 0x0, 0xffffff, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'veth0_to_team\x00', 'lo\x00', {0xff}, {}, 0x1, 0x3, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1, 0xc, 0x0, 'syz1\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendto(r6, &(0x7f0000000bc0)="68e4ff00300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000c40), 0x802, 0x0) write$uinput_user_dev(r7, &(0x7f0000000c80)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0x7ff, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x3, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x8, &(0x7f0000001ac0)=ANY=[@ANYBLOB], &(0x7f0000001d40)='GPL\x00'}, 0x94) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r7, &(0x7f0000001100)={'syz1\x00', {0x401, 0x9, 0xf02, 0x5}, 0x4f, [0xff, 0x1, 0x7, 0x9, 0x7fff, 0xffffff80, 0x66f, 0x4, 0x6, 0xf, 0x1, 0x3, 0xa, 0x8, 0x0, 0x1, 0xc0, 0xd6, 0x67fffe, 0x5, 0x3, 0xfffff800, 0x10, 0x8, 0xffff, 0x5, 0x3, 0xf, 0x2, 0x3, 0x5, 0x3, 0x80, 0x4, 0xff, 0x0, 0x81, 0x0, 0x21, 0x7, 0x40, 0x9, 0x81, 0x5, 0x4, 0xffffff81, 0xffffffff, 0x554, 0x9, 0x6, 0xffffffff, 0x2, 0x6790, 0x0, 0xc63, 0xb92, 0x9, 0x6, 0x800000, 0x0, 0xffffffff, 0xfff, 0x2, 0x9], [0xffffff7b, 0x0, 0x3f, 0xc8, 0x9, 0x10, 0x3, 0xff, 0x9, 0x2, 0xffffff4d, 0x4, 0x16e0, 0x2, 0x9517, 0x2, 0x100, 0x800, 0x3, 0x5, 0x29, 0x4, 0x7, 0xb21, 0x8, 0x1, 0xaaa, 0x6, 0xfff, 0xb, 0x8001, 0x3cbd, 0x5, 0x4, 0x7, 0x1, 0x5, 0x0, 0xa, 0x1d, 0x7, 0x1, 0x10001, 0x5, 0x3, 0x7, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x1, 0x81, 0x6, 0x35, 0x10000, 0x0, 0x6, 0x9, 0x1, 0x0, 0x2, 0x7fffffff, 0x3], [0x5, 0x20000, 0x6, 0xfffffffe, 0x6, 0x6, 0x9, 0x80, 0x0, 0xfffffffd, 0x6, 0x2, 0x8, 0x8, 0x5, 0x40, 0xf329, 0x9, 0xe, 0x8, 0x7, 0xfff, 0x1000, 0x4, 0x1, 0x6, 0x1, 0xfffffffd, 0xfffff001, 0x9, 0x6, 0xfffffb93, 0x10000, 0x7, 0x80000002, 0x1, 0x5, 0xd, 0x200000, 0x101, 0x75095896, 0x9d, 0x7, 0x2, 0x9, 0x7, 0xfffffffe, 0x0, 0x3, 0x6, 0x0, 0x41a5, 0xe7, 0x12, 0x9a, 0x8e, 0xfffff7f1, 0x800, 0x4, 0x1f4e, 0xecb, 0x40, 0x1000, 0xaaf], [0x4, 0x7, 0x6, 0x4ee3ae5c, 0x7f, 0x0, 0xf2c, 0x6, 0x9, 0x0, 0x9, 0x7, 0x2, 0x7f00000, 0xffff, 0x2, 0x3, 0xeb, 0x4, 0xfffffff7, 0x3, 0xfffffff8, 0x5, 0x9, 0x0, 0xd, 0x3, 0x5, 0x7, 0x1, 0x3, 0xe2, 0x101, 0xf, 0xa, 0x1, 0x3d9, 0xef9, 0x9, 0x9, 0xfffffffe, 0x88a1, 0x9f, 0xb, 0x7, 0x800, 0x1, 0xff, 0x80000000, 0x1, 0x81, 0x9, 0xffffffff, 0xc8000000, 0x10000, 0x6, 0x4, 0x4, 0x1, 0x400, 0x7, 0x23e1, 0x3, 0x8]}, 0x45c) sendmsg$nl_route_sched(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d61"], 0x5c}}, 0x0) setns(0xc9, 0x0) socket$kcm(0x10, 0x3, 0x10) 2.038223801s ago: executing program 0 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) syz_io_uring_setup(0xefd, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/filehandle\x00', 0x2, 0x0) write(r3, &(0x7f0000000680)='mydomain / 64\n', 0xe) mount(0x0, 0x0, &(0x7f0000000740)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x80) 1.114018745s ago: executing program 2 (id=290): ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000300)=0x8) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@ll={0x11, 0x2, 0x0, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, 0x0}, 0x20000010) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) 1.093427598s ago: executing program 3 (id=291): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="0000009c796f06ef0600"/27, @ANYBLOB='\x00'/14], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f00000003c0)=0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x0, 0x7f, 0x6, 0xffffffc2}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x8fb2, 0x10022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x10001) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x4000800) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000600)) msgctl$IPC_SET(0x0, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) 1.07149293s ago: executing program 1 (id=292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 677.73598ms ago: executing program 1 (id=293): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x1) close(r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0xe00) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) r2 = fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 577.194251ms ago: executing program 1 (id=294): syz_open_dev$loop(&(0x7f0000000140), 0xffffffff80000001, 0x1680a2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], 0x40}}, 0x0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000640), &(0x7f00000006c0)=0x6e, 0x0) bind$unix(r1, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/local\x00', 0x1bc) timer_create(0x0, &(0x7f00000007c0)={0x0, 0x33, 0x2, @thr={&(0x7f0000000800)="467de29de66f28a89f043bc6", &(0x7f0000000840)="c31a56a6d768f5b7f9258e80b4dfbe526ee33663fc1d9d89e2e9df7fdb72c3131fea2474dcd8e07b8db72bcb03c9063d07526c74"}}, &(0x7f0000000880)=0x0) timer_settime(r2, 0x1, &(0x7f00000008c0), &(0x7f0000000900)) r3 = openat$tun(0xffffff9c, &(0x7f0000000940), 0x0, 0x0) write$tun(r3, &(0x7f0000000f80)={@void, @val={0x2, 0x3, 0x6, 0x0, 0x9, 0x7}, @ipv6=@tipc_packet={0x8, 0x6, "8d72d0", 0x218, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x0, 0x23, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x3, 0x981, [0x4, 0x9, 0xb28, 0x8, 0x8, 0x2, 0x6]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0xd, 0x3, [0x4, 0x7827, 0x0]}}, @generic={0x33, 0x98, "15630ba6813003746524f74ea3f5b481c33a813da4ffcc7b1c6b95d48dc1022712bb6919771d4aa4f3965e70fa13dc5a3a80eefa585cb09f03f22832ce4f57c7a51e7a8644ac037357358f141e0384898c29606e218bf13cb8b1bfa8d03a41e4cd5dfe30c25bf597d63220876a11d24b757fe1480f9c949821e1de7e1c8f3e4dbc61e31108da495614f0457722a8d89bf732a544cd738dfd"}, @ra={0x5, 0x2, 0x10}, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0xffc0, [0x8000]}}, @enc_lim={0x4, 0x1, 0x6}, @padn]}, @srh={0x3c, 0xa, 0x4, 0x5, 0x3, 0x8, 0x50bb, [@remote, @empty, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], @name_distributor={{0x98, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x9, 0x0, 0x4e24, 0x4e21, 0x3, 0x4}, [{0x102, 0xf, 0xdc, 0x5, 0x6, 0x7ff, 0x2, 0x5}, {0x2, 0xffffffff, 0x4, 0x1, 0x9, 0x5, 0x8, 0x5}, {0x5, 0x200000, 0x3, 0x7fff, 0x80000001, 0x10000, 0x4}, {0x1af2, 0x0, 0xdf12, 0x1ff, 0xf9e0, 0x4, 0x8, 0x7fff}]}}}}, 0x24a) r4 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r4, &(0x7f0000000c00)='1\x00', 0x2) 419.141267ms ago: executing program 1 (id=295): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x20040000) 63.047513ms ago: executing program 0 (id=296): openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001100)={0x8, 0x100008b}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f00000012c0)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000001340), 0x2, 0x141102) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) r0 = syz_open_dev$cec(&(0x7f0000001400), 0x0, 0x200) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x0, &(0x7f00000015c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open_tree(0xffffffffffffff9c, &(0x7f0000001600)='\x00', 0x89901) syz_mount_image$squashfs(&(0x7f00000016c0), &(0x7f0000001700)='./file0\x00', 0x0, &(0x7f0000001740)=ANY=[], 0x1, 0x1a3, &(0x7f0000001780)="$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") 0s ago: executing program 1 (id=297): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1123102, 0x0) pipe2(&(0x7f0000000080), 0x84000) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_setup(0x6, &(0x7f0000000540)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 35.300530][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.310109][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. syzkaller login: [ 57.976910][ T4176] cgroup: Unknown subsys name 'net' [ 58.104594][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.336107][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.422697][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.426349][ T4189] rdma_rxe: rxe_register_device failed with error -23 [ 60.430954][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.444989][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.447114][ T4192] rdma_rxe: rxe_register_device failed with error -23 [ 60.466438][ T4191] rdma_rxe: rxe_register_device failed with error -23 [ 60.479392][ T4202] rdma_rxe: rxe_register_device failed with error -23 [ 60.483389][ T4192] rdma_rxe: failed to add rxe_eth0 [ 60.486636][ T4202] rdma_rxe: failed to add rxe_eth0 [ 60.500136][ T4189] rdma_rxe: failed to add rxe_eth0 [ 60.511858][ T4191] rdma_rxe: failed to add rxe_eth0 [ 60.696940][ T2303] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.695733][ T4190] infiniband rxe0: set active [ 60.708774][ T4190] infiniband rxe0: added rxe_eth0 [ 60.738400][ T4190] RDS/IB: rxe0: added [ 60.743044][ T4190] smc: adding ib device rxe0 with port count 1 [ 60.750159][ T4190] smc: ib device rxe0 port 1 has pnetid [ 60.773701][ T2303] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.786945][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.863039][ T4202] chnl_net:caif_netlink_parms(): no params data found [ 60.876890][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 60.945844][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.956015][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 60.985684][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.092659][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.140607][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.153430][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.162231][ T4202] device bridge_slave_0 entered promiscuous mode [ 61.220533][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.227618][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.235958][ T4202] device bridge_slave_1 entered promiscuous mode [ 61.259916][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.331673][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.359308][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.367719][ T4192] device bridge_slave_0 entered promiscuous mode [ 61.383221][ T4202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.395659][ T4202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.412889][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.420451][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.428304][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.436182][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.443449][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.452102][ T4191] device bridge_slave_0 entered promiscuous mode [ 61.459493][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.466559][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.474628][ T4192] device bridge_slave_1 entered promiscuous mode [ 61.494054][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.501230][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.509201][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.520254][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.527614][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.536442][ T4191] device bridge_slave_1 entered promiscuous mode [ 61.572382][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.582215][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.594639][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.607344][ T4202] team0: Port device team_slave_0 added [ 61.632432][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.651123][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.665210][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.685606][ T4202] team0: Port device team_slave_1 added [ 61.695932][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.777726][ T4191] team0: Port device team_slave_0 added [ 61.790963][ T4192] team0: Port device team_slave_0 added [ 61.799697][ T4189] team0: Port device team_slave_0 added [ 61.810412][ T4189] team0: Port device team_slave_1 added [ 61.816914][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.824271][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.851024][ T4202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.866575][ T4191] team0: Port device team_slave_1 added [ 61.883817][ T4192] team0: Port device team_slave_1 added [ 61.911485][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.918458][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.944672][ T4202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.992481][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.019446][ T3854] infiniband rxe0: set active [ 62.024713][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.031866][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.058310][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.070666][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.077716][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.104900][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.124907][ T4202] device hsr_slave_0 entered promiscuous mode [ 62.132280][ T4202] device hsr_slave_1 entered promiscuous mode [ 62.140287][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.147238][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.174267][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.186425][ T4178] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.190948][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.199816][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.226266][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.237782][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.244905][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.270929][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.286150][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.293265][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.319519][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.359088][ T4192] device hsr_slave_0 entered promiscuous mode [ 62.365874][ T4192] device hsr_slave_1 entered promiscuous mode [ 62.372974][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.380983][ T4192] Cannot create hsr debugfs directory [ 62.390409][ T4178] Bluetooth: hci1: command 0x0409 tx timeout [ 62.405243][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.412272][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.419050][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.427593][ T4189] Cannot create hsr debugfs directory [ 62.466967][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 62.469383][ T3521] Bluetooth: hci2: command 0x0409 tx timeout [ 62.493531][ T3521] Bluetooth: hci0: command 0x0409 tx timeout [ 62.539374][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 62.576611][ T4191] device hsr_slave_0 entered promiscuous mode [ 62.583744][ T4191] device hsr_slave_1 entered promiscuous mode [ 62.590719][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.598304][ T4191] Cannot create hsr debugfs directory [ 62.704400][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 62.814672][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.822023][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.830168][ T4190] device bridge_slave_0 entered promiscuous mode [ 62.841512][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.848669][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.856594][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.881242][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.892610][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.924559][ T4190] team0: Port device team_slave_0 added [ 62.932769][ T4190] team0: Port device team_slave_1 added [ 62.955932][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.963225][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.989363][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.008607][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.018893][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.026075][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.053125][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.065366][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.082716][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.092910][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.132365][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.146163][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.163181][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.177483][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.185184][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.192159][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.200155][ T4190] Cannot create hsr debugfs directory [ 63.210563][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.271449][ T4202] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.285122][ T4202] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.296028][ T4202] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.320435][ T4202] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.388164][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.427631][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.437832][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.456630][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.466675][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.478492][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.505970][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.515292][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.524849][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.532103][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.542552][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.571794][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.580486][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.589163][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.600585][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.607815][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.616735][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.629992][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.641147][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.675149][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.685458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.695966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.706319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.723913][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.731585][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.748240][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.756043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.764175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.772985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.782326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.790609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.806813][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.815776][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.829958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.838486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.861056][ T4202] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.876750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.886654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.896104][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.903233][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.912751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.922015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.931739][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.938833][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.946900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.955295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.963237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.972088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.996027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.004786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.014194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.023774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.032518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.042141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.051240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.060606][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.067663][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.075486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.084525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.094112][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.101364][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.109110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.118083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.152443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.163149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.173038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.184721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.194101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.203455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.213911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.223724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.232407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.258758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.268631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.278987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.288677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.311368][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.327994][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.336475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.346261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.374915][ T4202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.390123][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.398086][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.407383][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.426122][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.450397][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.459796][ T4271] Bluetooth: hci1: command 0x041b tx timeout [ 64.476167][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.495170][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.525418][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.534147][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.541283][ T4278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.568131][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.580880][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 64.588390][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.596481][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 64.608345][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.616184][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 64.628169][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.637387][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 64.642807][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.652739][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.661789][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.668838][ T4278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.676499][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.685069][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.698148][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.727365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.736999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.754685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.764636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.785907][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.803885][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.816162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.825270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.833089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.841112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.848753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.856676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.867056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.875781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.884606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.893477][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.900794][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.908670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.922811][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.942635][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.954914][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.965893][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.978408][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.987523][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.994659][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.007538][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.019867][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.048424][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.057079][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.065693][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.074772][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.084374][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.093594][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.103170][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.112916][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.121931][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.131077][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.140540][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.149127][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.158983][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.173695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.190073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.256000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.270436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.284677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.294223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.304063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.313911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.330713][ T4202] device veth0_vlan entered promiscuous mode [ 65.342751][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.365992][ T4202] device veth1_vlan entered promiscuous mode [ 65.375461][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.385531][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.394692][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.404361][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.416593][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.433849][ T4189] device veth0_vlan entered promiscuous mode [ 65.448403][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.457659][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.506007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.514973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.528648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.536888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.545512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.556125][ T4189] device veth1_vlan entered promiscuous mode [ 65.568707][ T4202] device veth0_macvtap entered promiscuous mode [ 65.580887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.588893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.597584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.609809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.620470][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.633427][ T4192] device veth0_vlan entered promiscuous mode [ 65.647862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.656464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.682577][ T4202] device veth1_macvtap entered promiscuous mode [ 65.696996][ T4192] device veth1_vlan entered promiscuous mode [ 65.722210][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.731647][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.741777][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.753329][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.761965][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.775189][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.789852][ T4189] device veth0_macvtap entered promiscuous mode [ 65.822106][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.831942][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.845321][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.853926][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.862427][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.873709][ T4189] device veth1_macvtap entered promiscuous mode [ 65.891128][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.906075][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.917956][ T4192] device veth0_macvtap entered promiscuous mode [ 65.942717][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.953982][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.966228][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.973939][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.984151][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.993253][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.002929][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.012754][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.022545][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.033534][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.042225][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.051757][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.063579][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.074278][ T4192] device veth1_macvtap entered promiscuous mode [ 66.086302][ T4191] device veth0_vlan entered promiscuous mode [ 66.095226][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.104066][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.112534][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.120620][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.128547][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.138689][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.157527][ T4202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.166817][ T4202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.182529][ T4202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.193488][ T4202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.207458][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.219035][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.232354][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.245909][ T4191] device veth1_vlan entered promiscuous mode [ 66.261791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.273974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.286975][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.297848][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.307716][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.317752][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.338656][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.350838][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.362176][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.373003][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.384947][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.405946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.415267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.424826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.433725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.454184][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.466454][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.478079][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.489225][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.500842][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.525648][ T4190] device veth0_vlan entered promiscuous mode [ 66.533388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.544245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.552719][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 66.553588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.568027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.576805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.585381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.599191][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.608231][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.622326][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 66.630824][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 66.642125][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.661270][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.670343][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.680047][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.701326][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 66.703700][ T4191] device veth0_macvtap entered promiscuous mode [ 66.715384][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 66.754080][ T4190] device veth1_vlan entered promiscuous mode [ 66.774649][ T1485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.787539][ T1485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.805488][ T4191] device veth1_macvtap entered promiscuous mode [ 66.823833][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.832423][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.841457][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.850696][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.860477][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.906275][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.920124][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.933638][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.944683][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.955938][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.966734][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.981078][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.003206][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.017237][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.027013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.038267][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.048538][ T4190] device veth0_macvtap entered promiscuous mode [ 67.057795][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.058127][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.069587][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.080427][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.093838][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.105998][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.116345][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.127046][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.140219][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.166436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.176893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.195747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.208731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.222015][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.229758][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.237877][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.238774][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.248229][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.264886][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.277990][ T4190] device veth1_macvtap entered promiscuous mode [ 67.308913][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.355356][ T1485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.377182][ T1485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.406030][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.423665][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.437364][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.451425][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.464645][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.476168][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.486530][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.497299][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.509164][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.521445][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.529930][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.538682][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.551977][ T1485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.564395][ T1485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.599758][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.607642][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.620997][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.636906][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.647106][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.663280][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.674603][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.690865][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.701454][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.713353][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.731681][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.746306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.757693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.785089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.794798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.863990][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.865871][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.885043][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.889914][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.902890][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.912567][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.938344][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.946246][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.972901][ T4320] FAULT_INJECTION: forcing a failure. [ 67.972901][ T4320] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 67.976995][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.988261][ T4320] CPU: 0 PID: 4320 Comm: syz.3.4 Not tainted syzkaller #0 [ 68.002803][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 68.013477][ T4320] Call Trace: [ 68.016883][ T4320] [ 68.019908][ T4320] dump_stack_lvl+0x188/0x250 [ 68.024614][ T4320] ? show_regs_print_info+0x20/0x20 [ 68.029813][ T4320] ? load_image+0x410/0x410 [ 68.034624][ T4320] ? __lock_acquire+0x7d40/0x7d40 [ 68.039652][ T4320] ? __lock_acquire+0x7d40/0x7d40 [ 68.044690][ T4320] should_fail+0x383/0x4b0 [ 68.049242][ T4320] prepare_alloc_pages+0x1e3/0x5b0 [ 68.054663][ T4320] __alloc_pages+0x11b/0x480 [ 68.060445][ T4320] ? unwind_get_return_address+0x49/0x80 [ 68.066133][ T4320] ? zone_statistics+0x170/0x170 [ 68.071174][ T4320] ? alloc_pages+0x452/0x560 [ 68.075871][ T4320] stack_depot_save+0x356/0x460 [ 68.080896][ T4320] __kasan_kmalloc+0xc6/0xe0 [ 68.085502][ T4320] ? __kasan_kmalloc+0xaf/0xe0 [ 68.090258][ T4320] ? gfs2_meta_init_fs_context+0x50/0x2a0 [ 68.096005][ T4320] ? alloc_fs_context+0x628/0x7d0 [ 68.101040][ T4320] ? __se_sys_fsopen+0x111/0x320 [ 68.106074][ T4320] ? do_syscall_64+0x4c/0xa0 [ 68.110744][ T4320] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.116902][ T4320] gfs2_meta_init_fs_context+0x50/0x2a0 [ 68.122442][ T4320] alloc_fs_context+0x628/0x7d0 [ 68.127289][ T4320] __se_sys_fsopen+0x111/0x320 [ 68.132049][ T4320] do_syscall_64+0x4c/0xa0 [ 68.136465][ T4320] ? clear_bhb_loop+0x30/0x80 [ 68.141131][ T4320] ? clear_bhb_loop+0x30/0x80 [ 68.145813][ T4320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.151711][ T4320] RIP: 0033:0x7f03a54d7559 [ 68.156139][ T4320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.175940][ T4320] RSP: 002b:00007f03a372e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 68.184547][ T4320] RAX: ffffffffffffffda RBX: 00007f03a575dfa0 RCX: 00007f03a54d7559 [ 68.192849][ T4320] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000200 [ 68.201242][ T4320] RBP: 00007f03a556eb20 R08: 0000000000000000 R09: 0000000000000000 [ 68.209251][ T4320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.217231][ T4320] R13: 00007f03a575e038 R14: 00007f03a575dfa0 R15: 00007ffe962de558 [ 68.225215][ T4320] [ 68.295956][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.404434][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.414679][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.443843][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.468178][ T1485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.510138][ T1485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.580286][ T4330] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 68.622547][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 68.631638][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.699777][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 68.963592][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 69.050790][ T4335] Zero length message leads to an empty skb [ 69.077464][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 69.104598][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 69.476663][ T4349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8'. [ 69.687181][ T4350] ======================================================= [ 69.687181][ T4350] WARNING: The mand mount option has been deprecated and [ 69.687181][ T4350] and is ignored by this kernel. Remove the mand [ 69.687181][ T4350] option from the mount to silence this warning. [ 69.687181][ T4350] ======================================================= [ 71.264557][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.271170][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.494727][ T4363] device syzkaller0 entered promiscuous mode [ 72.717381][ T4366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 72.859841][ T4266] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.934815][ T4370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15'. [ 72.974771][ T4267] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.254540][ T4266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 73.254619][ T4266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 73.254641][ T4266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 73.439752][ T4266] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 73.449846][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.467974][ T4266] usb 2-1: Product: syz [ 73.476411][ T4266] usb 2-1: Manufacturer: syz [ 73.481477][ T4266] usb 2-1: SerialNumber: syz [ 73.505141][ T4266] usb 2-1: config 0 descriptor?? [ 73.578960][ T4399] device-mapper: clone: Destination device (ram4) discard unsupported: Disabling discard passdown. [ 73.745085][ T4417] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 73.839314][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.859304][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.869295][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.879287][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.889282][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.899276][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.909278][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.919299][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.929292][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.549288][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.764210][ T4266] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 79.999126][ T4431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30'. [ 80.024099][ T4266] usb 2-1: USB disconnect, device number 2 [ 80.122628][ T4438] FAULT_INJECTION: forcing a failure. [ 80.122628][ T4438] name failslab, interval 1, probability 0, space 0, times 1 [ 80.224206][ T4438] CPU: 0 PID: 4438 Comm: syz.4.31 Not tainted syzkaller #0 [ 80.231458][ T4438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 80.241630][ T4438] Call Trace: [ 80.244929][ T4438] [ 80.247862][ T4438] dump_stack_lvl+0x188/0x250 [ 80.252563][ T4438] ? show_regs_print_info+0x20/0x20 [ 80.257767][ T4438] ? load_image+0x410/0x410 [ 80.262276][ T4438] ? __might_sleep+0xf0/0xf0 [ 80.266873][ T4438] ? __lock_acquire+0x7d40/0x7d40 [ 80.271920][ T4438] should_fail+0x383/0x4b0 [ 80.276353][ T4438] should_failslab+0x5/0x20 [ 80.280860][ T4438] slab_pre_alloc_hook+0x51/0xc0 [ 80.285808][ T4438] kmem_cache_alloc_node+0x47/0x2c0 [ 80.291013][ T4438] ? __alloc_skb+0xf4/0x750 [ 80.295529][ T4438] __alloc_skb+0xf4/0x750 [ 80.299874][ T4438] alloc_uevent_skb+0x7d/0x230 [ 80.304652][ T4438] kobject_uevent_net_broadcast+0x2e6/0x530 [ 80.310558][ T4438] kobject_uevent_env+0x550/0x890 [ 80.315623][ T4438] ? dummy_udc_set_speed+0xd0/0xd0 [ 80.320747][ T4438] udc_bind_to_driver+0x4d5/0x5f0 [ 80.326055][ T4438] usb_gadget_probe_driver+0x1fb/0x380 [ 80.331532][ T4438] raw_ioctl+0x115e/0x3750 [ 80.335971][ T4438] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 80.341611][ T4438] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 80.347076][ T4438] ? make_qualifier+0x3b0/0x3b0 [ 80.351979][ T4438] ? bpf_lsm_file_ioctl+0x5/0x10 [ 80.356917][ T4438] ? security_file_ioctl+0x7c/0xa0 [ 80.362034][ T4438] ? make_qualifier+0x3b0/0x3b0 [ 80.366893][ T4438] __se_sys_ioctl+0xfa/0x170 [ 80.371528][ T4438] do_syscall_64+0x4c/0xa0 [ 80.375965][ T4438] ? clear_bhb_loop+0x30/0x80 [ 80.380649][ T4438] ? clear_bhb_loop+0x30/0x80 [ 80.385336][ T4438] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.391234][ T4438] RIP: 0033:0x7ff1e08dd1eb [ 80.395657][ T4438] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 80.415268][ T4438] RSP: 002b:00007ff1deb31f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.423702][ T4438] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007ff1e08dd1eb [ 80.431767][ T4438] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 80.439740][ T4438] RBP: 00007ff1deb32fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 80.447714][ T4438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.455692][ T4438] R13: 0000200000000280 R14: 0000000000000005 R15: 0000000000000000 [ 80.463685][ T4438] [ 80.751997][ T4372] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.774103][ T4444] gadgetfs: bound to dummy_udc driver [ 80.973123][ T4205] Bluetooth: Wrong link type (-22) [ 80.999378][ T4372] usb 5-1: device descriptor read/64, error -71 [ 81.127533][ T4470] device-mapper: table: table load rejected: including non-request-stackable devices [ 81.138266][ T4470] device-mapper: table: unable to determine table type [ 81.165619][ T4473] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.189662][ T4284] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 81.229331][ C0] gadgetfs: connected [ 81.234481][ T4284] gadgetfs: disconnected [ 81.279472][ T4372] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.293241][ T4479] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 81.489504][ T4372] usb 5-1: device descriptor read/64, error -71 [ 81.527778][ T13] cfg80211: failed to load regulatory.db [ 81.660915][ T4372] usb usb5-port1: attempt power cycle [ 82.109475][ T4372] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.569426][ T4372] usb 5-1: device descriptor read/8, error -71 [ 83.001946][ T4485] overlayfs: overlapping lowerdir path [ 83.181865][ T4487] loop1: detected capacity change from 0 to 8 [ 85.180941][ T4497] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 85.553920][ T4513] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 85.755448][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.876092][ T4523] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 86.119644][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.163263][ T13] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.228743][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.349117][ T13] usb 1-1: config 0 descriptor?? [ 86.752518][ T13] usbhid 1-1:0.0: can't add hid device: -71 [ 87.805805][ T13] usbhid: probe of 1-1:0.0 failed with error -71 [ 87.818912][ T13] usb 1-1: USB disconnect, device number 3 [ 89.422974][ T4269] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 89.519094][ T4269] Bluetooth: hci1: Injecting HCI hardware error event [ 89.527557][ T4200] Bluetooth: hci1: hardware error 0x00 [ 89.799908][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.371077][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.506555][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.697140][ T4559] netlink: 'syz.1.69': attribute type 1 has an invalid length. [ 90.720704][ T4559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.69'. [ 90.789535][ T2303] Bluetooth: hci5: command 0x1003 tx timeout [ 90.796902][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 91.294274][ T4568] syz.1.71 (4568) used greatest stack depth: 18608 bytes left [ 91.461275][ T4578] overlayfs: overlapping lowerdir path [ 91.520385][ T4579] loop1: detected capacity change from 0 to 8 [ 92.860939][ T1485] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 92.890046][ T4489] Bluetooth: hci5: command 0x1001 tx timeout [ 92.896287][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 93.375397][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 93.394744][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 93.411382][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 93.459354][ T2303] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.695927][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 93.720376][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 93.779505][ T2303] usb 1-1: Using ep0 maxpacket: 8 [ 93.791339][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 93.810052][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 93.899578][ T2303] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 93.908702][ T2303] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.933077][ T4610] overlayfs: overlapping lowerdir path [ 93.985737][ T4611] loop4: detected capacity change from 0 to 8 [ 95.228598][ T2303] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.239375][ T2303] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.249748][ T2303] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.263183][ T2303] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.272579][ T2303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.287143][ T1109] Bluetooth: hci5: command 0x1009 tx timeout [ 95.539645][ T2303] usb 1-1: GET_CAPABILITIES returned 0 [ 95.545271][ T2303] usbtmc 1-1:16.0: can't read capabilities [ 96.471040][ T4638] overlayfs: overlapping lowerdir path [ 96.526425][ T4639] loop4: detected capacity change from 0 to 8 [ 97.799158][ T4489] usb 1-1: USB disconnect, device number 4 [ 98.002613][ T4594] Bluetooth: hci0: Invalid link key type 20 for 66:55:44:33:22:11 [ 98.809454][ T4284] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.910110][ T4676] loop0: detected capacity change from 0 to 1 [ 99.179429][ T4284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 100.324469][ T4676] ldm_validate_privheads(): Disk read failed. [ 100.406083][ T4676] loop0: [ 100.570748][ T4676] loop0: partition table partially beyond EOD, truncated [ 101.108534][ T4687] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.342659][ T4284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 101.352571][ T4284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 101.367156][ T4284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 101.419673][ T4284] usb 4-1: string descriptor 0 read error: -71 [ 101.436926][ T4284] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 101.454556][ T4284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.470041][ T4284] usb 4-1: config 0 descriptor?? [ 101.489530][ T4284] usb 4-1: can't set config #0, error -71 [ 101.502337][ T4284] usb 4-1: USB disconnect, device number 2 [ 102.081565][ T4708] FAULT_INJECTION: forcing a failure. [ 102.081565][ T4708] name failslab, interval 1, probability 0, space 0, times 0 [ 102.122543][ T4708] CPU: 0 PID: 4708 Comm: syz.2.120 Not tainted syzkaller #0 [ 102.129849][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.139910][ T4708] Call Trace: [ 102.143198][ T4708] [ 102.146167][ T4708] dump_stack_lvl+0x188/0x250 [ 102.150864][ T4708] ? show_regs_print_info+0x20/0x20 [ 102.156858][ T4708] ? load_image+0x410/0x410 [ 102.161768][ T4708] ? __might_sleep+0xf0/0xf0 [ 102.166385][ T4708] ? __lock_acquire+0x7d40/0x7d40 [ 102.171434][ T4708] should_fail+0x383/0x4b0 [ 102.175875][ T4708] should_failslab+0x5/0x20 [ 102.180399][ T4708] slab_pre_alloc_hook+0x51/0xc0 [ 102.185354][ T4708] kmem_cache_alloc_trace+0x47/0x290 [ 102.190654][ T4708] ? qrtr_endpoint_register+0x7c/0x4e0 [ 102.196230][ T4708] qrtr_endpoint_register+0x7c/0x4e0 [ 102.201542][ T4708] qrtr_tun_open+0x133/0x1b0 [ 102.206141][ T4708] ? qrtr_tun_poll+0xd0/0xd0 [ 102.211181][ T4708] misc_open+0x31f/0x390 [ 102.215444][ T4708] chrdev_open+0x585/0x5f0 [ 102.219876][ T4708] ? cd_forget+0x160/0x160 [ 102.224316][ T4708] ? fsnotify_perm+0x3a7/0x560 [ 102.229094][ T4708] ? cd_forget+0x160/0x160 [ 102.233524][ T4708] do_dentry_open+0x7f7/0xf90 [ 102.238218][ T4708] ? vfs_open+0x2b/0x80 [ 102.242385][ T4708] path_openat+0x2718/0x2fb0 [ 102.247004][ T4708] ? __kasan_slab_alloc+0xa9/0xc0 [ 102.252043][ T4708] ? do_filp_open+0x400/0x400 [ 102.256749][ T4708] do_filp_open+0x1df/0x400 [ 102.261262][ T4708] ? vfs_tmpfile+0x300/0x300 [ 102.265874][ T4708] ? _raw_spin_unlock+0x24/0x40 [ 102.270733][ T4708] ? alloc_fd+0x59e/0x650 [ 102.275084][ T4708] do_sys_openat2+0x14b/0x500 [ 102.279771][ T4708] ? __lock_acquire+0x7d40/0x7d40 [ 102.284812][ T4708] ? do_sys_open+0xe0/0xe0 [ 102.289241][ T4708] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 102.295230][ T4708] ? lock_chain_count+0x20/0x20 [ 102.300193][ T4708] __x64_sys_openat+0x135/0x160 [ 102.305066][ T4708] do_syscall_64+0x4c/0xa0 [ 102.309500][ T4708] ? clear_bhb_loop+0x30/0x80 [ 102.314194][ T4708] ? clear_bhb_loop+0x30/0x80 [ 102.318884][ T4708] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.324787][ T4708] RIP: 0033:0x7f4c7a98a559 [ 102.329214][ T4708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.348905][ T4708] RSP: 002b:00007f4c78be1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.357400][ T4708] RAX: ffffffffffffffda RBX: 00007f4c7ac10fa0 RCX: 00007f4c7a98a559 [ 102.365378][ T4708] RDX: 0000000000101002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 102.373348][ T4708] RBP: 00007f4c7aa21b20 R08: 0000000000000000 R09: 0000000000000000 [ 102.381324][ T4708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.389286][ T4708] R13: 00007f4c7ac11038 R14: 00007f4c7ac10fa0 R15: 00007ffd3e5b6e78 [ 102.397255][ T4708] [ 103.063480][ T4722] FAULT_INJECTION: forcing a failure. [ 103.063480][ T4722] name failslab, interval 1, probability 0, space 0, times 0 [ 103.094882][ T4722] CPU: 0 PID: 4722 Comm: syz.0.123 Not tainted syzkaller #0 [ 103.102213][ T4722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.112288][ T4722] Call Trace: [ 103.115576][ T4722] [ 103.118510][ T4722] dump_stack_lvl+0x188/0x250 [ 103.123269][ T4722] ? show_regs_print_info+0x20/0x20 [ 103.128623][ T4722] ? load_image+0x410/0x410 [ 103.133232][ T4722] ? __might_sleep+0xf0/0xf0 [ 103.137824][ T4722] ? __lock_acquire+0x7d40/0x7d40 [ 103.142847][ T4722] should_fail+0x383/0x4b0 [ 103.147268][ T4722] should_failslab+0x5/0x20 [ 103.151763][ T4722] slab_pre_alloc_hook+0x51/0xc0 [ 103.156695][ T4722] ? __kernfs_new_node+0xa8/0x6b0 [ 103.161715][ T4722] __kmalloc_track_caller+0x69/0x330 [ 103.166989][ T4722] ? __kernfs_new_node+0xa8/0x6b0 [ 103.172011][ T4722] kstrdup_const+0x51/0x90 [ 103.176420][ T4722] __kernfs_new_node+0xa8/0x6b0 [ 103.181263][ T4722] ? kernfs_new_node+0x250/0x250 [ 103.186193][ T4722] ? kernfs_setattr+0x21d/0x310 [ 103.191038][ T4722] ? __lock_acquire+0x7d40/0x7d40 [ 103.196051][ T4722] ? pvclock_gtod_unregister_notifier+0x40/0x40 [ 103.202285][ T4722] ? __kernfs_iattrs+0x96/0x2e0 [ 103.207126][ T4722] ? rcu_is_watching+0x11/0xa0 [ 103.211879][ T4722] kernfs_new_node+0x148/0x250 [ 103.216636][ T4722] __kernfs_create_file+0x47/0x2e0 [ 103.221744][ T4722] cgroup_addrm_files+0xac3/0x1020 [ 103.226857][ T4722] ? rcu_lock_release+0x20/0x20 [ 103.231697][ T4722] ? __lock_acquire+0x7d40/0x7d40 [ 103.236709][ T4722] ? ktime_get_real_ts64+0x111/0x440 [ 103.241978][ T4722] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 103.248214][ T4722] ? kernfs_setattr+0x21d/0x310 [ 103.253057][ T4722] ? rcu_is_watching+0x11/0xa0 [ 103.257818][ T4722] ? up_write+0x1b6/0x410 [ 103.262138][ T4722] css_populate_dir+0x1cd/0x350 [ 103.266980][ T4722] cgroup_mkdir+0xc9f/0xeb0 [ 103.271479][ T4722] ? css_task_iter_end+0x280/0x280 [ 103.276766][ T4722] ? do_raw_spin_unlock+0x11d/0x230 [ 103.282040][ T4722] ? kernfs_iop_permission+0x22d/0x310 [ 103.287489][ T4722] ? css_task_iter_end+0x280/0x280 [ 103.292587][ T4722] kernfs_iop_mkdir+0x23d/0x3d0 [ 103.297433][ T4722] vfs_mkdir+0x386/0x570 [ 103.301672][ T4722] do_mkdirat+0x1dd/0x5c0 [ 103.305992][ T4722] ? vfs_mkdir+0x570/0x570 [ 103.310402][ T4722] __x64_sys_mkdirat+0x85/0x90 [ 103.315155][ T4722] do_syscall_64+0x4c/0xa0 [ 103.319664][ T4722] ? clear_bhb_loop+0x30/0x80 [ 103.324379][ T4722] ? clear_bhb_loop+0x30/0x80 [ 103.329059][ T4722] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.335037][ T4722] RIP: 0033:0x7fdaf31d3559 [ 103.339457][ T4722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.359080][ T4722] RSP: 002b:00007fdaf142a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 103.367613][ T4722] RAX: ffffffffffffffda RBX: 00007fdaf3459fa0 RCX: 00007fdaf31d3559 [ 103.375596][ T4722] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 103.383644][ T4722] RBP: 00007fdaf326ab20 R08: 0000000000000000 R09: 0000000000000000 [ 103.391706][ T4722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.399724][ T4722] R13: 00007fdaf345a038 R14: 00007fdaf3459fa0 R15: 00007fffc869c608 [ 103.407718][ T4722] [ 103.436719][ T4722] cgroup: cgroup_addrm_files: failed to add notify_on_release, err=-12 [ 103.456151][ T4727] netlink: 16 bytes leftover after parsing attributes in process `syz.4.129'. [ 103.565320][ T26] audit: type=1326 audit(1792768291.100:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.126" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d4b75559 code=0x7ffc0000 [ 103.597343][ T4730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.129'.               [ 105.237380][ T4776] FAULT_INJECTION: forcing a failure. [ 105.237380][ T4776] name failslab, interval 1, probability 0, space 0, times 0 [ 105.251439][ T4773] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 105.291020][ T4776] CPU: 1 PID: 4776 Comm: syz.1.142 Not tainted syzkaller #0 [ 105.299342][ T4776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.309406][ T4776] Call Trace: [ 105.312710][ T4776] [ 105.315654][ T4776] dump_stack_lvl+0x188/0x250 [ 105.320357][ T4776] ? show_regs_print_info+0x20/0x20 [ 105.325622][ T4776] ? load_image+0x410/0x410 [ 105.330217][ T4776] ? __might_sleep+0xf0/0xf0 [ 105.334808][ T4776] ? __lock_acquire+0x7d40/0x7d40 [ 105.339820][ T4776] should_fail+0x383/0x4b0 [ 105.344228][ T4776] should_failslab+0x5/0x20 [ 105.348716][ T4776] slab_pre_alloc_hook+0x51/0xc0 [ 105.353637][ T4776] ? security_file_alloc+0x30/0x110 [ 105.358820][ T4776] kmem_cache_alloc+0x3d/0x280 [ 105.363673][ T4776] ? rcu_is_watching+0x11/0xa0 [ 105.368459][ T4776] security_file_alloc+0x30/0x110 [ 105.373498][ T4776] __alloc_file+0xc2/0x240 [ 105.377921][ T4776] alloc_empty_file+0x90/0x180 [ 105.382837][ T4776] alloc_file+0x5c/0x510 [ 105.387070][ T4776] ? do_raw_spin_unlock+0x11d/0x230 [ 105.392269][ T4776] alloc_file_pseudo+0x180/0x200 [ 105.397198][ T4776] ? alloc_empty_file_noaccount+0x80/0x80 [ 105.402924][ T4776] ? _raw_spin_unlock+0x24/0x40 [ 105.408571][ T4776] __anon_inode_getfd+0x26b/0x3d0 [ 105.413598][ T4776] ? anon_inode_getfd+0x40/0x40 [ 105.418462][ T4776] ? vfs_submount+0xb0/0xb0 [ 105.422981][ T4776] fscontext_create_fd+0x27/0x50 [ 105.427912][ T4776] __se_sys_fspick+0x364/0x410 [ 105.432687][ T4776] ? __x64_sys_fspick+0x80/0x80 [ 105.437544][ T4776] ? lockdep_hardirqs_on+0x94/0x140 [ 105.442838][ T4776] do_syscall_64+0x4c/0xa0 [ 105.447262][ T4776] ? clear_bhb_loop+0x30/0x80 [ 105.451944][ T4776] ? clear_bhb_loop+0x30/0x80 [ 105.456617][ T4776] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.462502][ T4776] RIP: 0033:0x7fd7d4b75559 [ 105.466904][ T4776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.486498][ T4776] RSP: 002b:00007fd7d2dcc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 105.495091][ T4776] RAX: ffffffffffffffda RBX: 00007fd7d4dfbfa0 RCX: 00007fd7d4b75559 [ 105.503046][ T4776] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 105.511209][ T4776] RBP: 00007fd7d4c0cb20 R08: 0000000000000000 R09: 0000000000000000 [ 105.519174][ T4776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.527138][ T4776] R13: 00007fd7d4dfc038 R14: 00007fd7d4dfbfa0 R15: 00007ffef8fd7c98 [ 105.535109][ T4776] syzkaller syzkaller login: [ 105.596060][ T4785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 110.603569][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 111.149040][ T4834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.203757][ T4834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.293694][ T4846] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.566763][ T4834] bond0 (unregistering): Released all slaves [ 111.969393][ T4372] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.399740][ T4372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.423775][ T4372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.445957][ T4372] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.462009][ T4372] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.471758][ T4372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.815082][ T4372] usb 1-1: config 0 descriptor?? [ 114.849541][ T4372] usb 1-1: can't set config #0, error -71 [ 114.870094][ T4372] usb 1-1: USB disconnect, device number 5 [ 114.907619][ T4872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 115.479503][ T4891] Invalid ELF header magic: != ELF [ 116.103963][ T4909] device-mapper: table: 248:2: clone: Invalid region size [ 116.112302][ T4909] device-mapper: ioctl: error adding target to table [ 116.354821][ T4916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 118.058266][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 118.075231][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 118.093452][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 118.371297][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 118.524982][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 118.579932][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 118.630813][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 123.645942][ T5015] overlayfs: overlapping lowerdir path [ 123.661494][ T5015] loop2: detected capacity change from 0 to 8 [ 127.102540][ T26] audit: type=1800 audit(1792768314.690:3): pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.223" name="memory_backed" dev="configfs" ino=35382 res=0 errno=0 [ 127.360583][ T26] audit: type=1800 audit(1792768314.750:4): pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.223" name="zoned" dev="configfs" ino=35383 res=0 errno=0 [ 127.383953][ T26] audit: type=1800 audit(1792768314.930:5): pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.223" name="power" dev="configfs" ino=35389 res=0 errno=0 [ 128.354892][ T5055] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 129.665182][ T26] audit: type=1800 audit(1792768317.250:6): pid=5075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.239" name="memory_backed" dev="configfs" ino=35498 res=0 errno=0 [ 129.725610][ T26] audit: type=1800 audit(1792768317.250:7): pid=5075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.239" name="zoned" dev="configfs" ino=35499 res=0 errno=0 [ 129.816887][ T26] audit: type=1800 audit(1792768317.290:8): pid=5075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.239" name="power" dev="configfs" ino=35504 res=0 errno=0 [ 132.703569][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.720209][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.753249][ T5113] overlayfs: overlapping lowerdir path [ 132.808022][ T5114] loop0: detected capacity change from 0 to 8 [ 134.251682][ T5108] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 134.368517][ T26] audit: type=1800 audit(1792768321.950:9): pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.251" name="memory_backed" dev="configfs" ino=36399 res=0 errno=0 [ 134.449959][ T26] audit: type=1800 audit(1792768321.950:10): pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.251" name="zoned" dev="configfs" ino=36400 res=0 errno=0 [ 134.559347][ T26] audit: type=1800 audit(1792768321.970:11): pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.251" name="power" dev="configfs" ino=36405 res=0 errno=0 [ 135.730173][ T5136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.764856][ T5136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.277089][ T5136] bond0 (unregistering): Released all slaves [ 137.801757][ T5173] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 137.960304][ T5177] loop0: detected capacity change from 0 to 8 [ 138.019144][ T26] audit: type=1800 audit(1792768325.600:12): pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.266" name="memory_backed" dev="configfs" ino=36510 res=0 errno=0 [ 138.187190][ T5167] overlayfs: overlapping lowerdir path [ 138.192823][ T26] audit: type=1800 audit(1792768325.650:13): pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.266" name="zoned" dev="configfs" ino=36511 res=0 errno=0 [ 138.216631][ T26] audit: type=1800 audit(1792768325.720:14): pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.266" name="power" dev="configfs" ino=35582 res=0 errno=0 [ 140.794519][ T5225] overlayfs: overlapping lowerdir path [ 140.822897][ T5225] loop2: detected capacity change from 0 to 8 [ 140.840792][ T5222] device syzkaller0 entered promiscuous mode [ 140.880190][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.665749][ T5230] overlayfs: overlapping lowerdir path [ 141.772505][ T5230] loop3: detected capacity change from 0 to 8 [ 142.348387][ T5233] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 144.431504][ T5248] sched: RT throttling activated [ 144.448865][ T5244] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 145.581698][ T5258] device syzkaller0 entered promiscuous mode [ 145.605573][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.272737][ T5272] input: syz0 as /devices/virtual/input/input5 [ 146.525363][ T5272] netlink: 220 bytes leftover after parsing attributes in process `syz.4.288'. [ 146.542980][ T5279] overlayfs: overlapping lowerdir path [ 146.549894][ T5272] tc_dump_action: action bad kind [ 146.594608][ T5283] loop0: detected capacity change from 0 to 8 [ 146.620355][ T4267] [ 146.622709][ T4267] ====================================================== [ 146.629714][ T4267] WARNING: possible circular locking dependency detected [ 146.636732][ T4267] syzkaller #0 Not tainted [ 146.641149][ T4267] ------------------------------------------------------ [ 146.648155][ T4267] kworker/0:5/4267 is trying to acquire lock: [ 146.654204][ T4267] ffff88807e4b1028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 146.665254][ T4267] [ 146.665254][ T4267] but task is already holding lock: [ 146.672610][ T4267] ffffffff8e4f5a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 146.681659][ T4267] [ 146.681659][ T4267] which lock already depends on the new lock. [ 146.681659][ T4267] [ 146.692187][ T4267] [ 146.692187][ T4267] the existing dependency chain (in reverse order) is: [ 146.701195][ T4267] [ 146.701195][ T4267] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 146.709197][ T4267] __mutex_lock_common+0x1e5/0x2400 [ 146.714922][ T4267] mutex_lock_nested+0x17/0x20 [ 146.720213][ T4267] rfkill_register+0x2f/0x970 [ 146.725422][ T4267] hci_register_dev+0x459/0x980 [ 146.730813][ T4267] vhci_create_device+0x32e/0x5c0 [ 146.736478][ T4267] vhci_write+0x389/0x440 [ 146.741335][ T4267] vfs_write+0x748/0xd70 [ 146.746100][ T4267] ksys_write+0x153/0x260 [ 146.750946][ T4267] do_syscall_64+0x4c/0xa0 [ 146.755878][ T4267] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.762291][ T4267] [ 146.762291][ T4267] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 146.770110][ T4267] __mutex_lock_common+0x1e5/0x2400 [ 146.775840][ T4267] mutex_lock_nested+0x17/0x20 [ 146.781126][ T4267] vhci_send_frame+0x88/0x100 [ 146.786322][ T4267] hci_send_frame+0x1a9/0x2e0 [ 146.791521][ T4267] hci_tx_work+0x9b5/0x16d0 [ 146.796542][ T4267] process_one_work+0x867/0xff0 [ 146.801915][ T4267] worker_thread+0xad7/0x12a0 [ 146.807157][ T4267] kthread+0x42e/0x520 [ 146.811742][ T4267] ret_from_fork+0x1f/0x30 [ 146.816681][ T4267] [ 146.816681][ T4267] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 146.825887][ T4267] __flush_work+0x116/0x210 [ 146.830915][ T4267] hci_dev_do_close+0x201/0x1020 [ 146.836372][ T4267] hci_error_reset+0x101/0x2c0 [ 146.841659][ T4267] process_one_work+0x867/0xff0 [ 146.847208][ T4267] worker_thread+0xad7/0x12a0 [ 146.852418][ T4267] kthread+0x42e/0x520 [ 146.857015][ T4267] ret_from_fork+0x1f/0x30 [ 146.861961][ T4267] [ 146.861961][ T4267] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 146.869614][ T4267] __mutex_lock_common+0x1e5/0x2400 [ 146.875343][ T4267] mutex_lock_nested+0x17/0x20 [ 146.880640][ T4267] bg_scan_update+0x44/0x3b0 [ 146.885756][ T4267] process_one_work+0x867/0xff0 [ 146.891153][ T4267] worker_thread+0xad7/0x12a0 [ 146.896383][ T4267] kthread+0x42e/0x520 [ 146.900976][ T4267] ret_from_fork+0x1f/0x30 [ 146.905919][ T4267] [ 146.905919][ T4267] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 146.915735][ T4267] __lock_acquire+0x38f7/0x7d40 [ 146.921121][ T4267] lock_acquire+0x19f/0x400 [ 146.926153][ T4267] __flush_work+0x116/0x210 [ 146.931178][ T4267] __cancel_work_timer+0x3f4/0x560 [ 146.936811][ T4267] hci_request_cancel_all+0xcc/0x300 [ 146.942620][ T4267] hci_dev_do_close+0x4e/0x1020 [ 146.947992][ T4267] hci_rfkill_set_block+0x101/0x180 [ 146.953715][ T4267] rfkill_set_block+0x1c1/0x3c0 [ 146.959092][ T4267] rfkill_epo+0x75/0x170 [ 146.963853][ T4267] rfkill_op_handler+0x76/0x220 [ 146.969228][ T4267] process_one_work+0x867/0xff0 [ 146.974601][ T4267] worker_thread+0xad7/0x12a0 [ 146.979806][ T4267] kthread+0x42e/0x520 [ 146.984409][ T4267] ret_from_fork+0x1f/0x30 [ 146.989345][ T4267] [ 146.989345][ T4267] other info that might help us debug this: [ 146.989345][ T4267] [ 146.999580][ T4267] Chain exists of: [ 146.999580][ T4267] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 146.999580][ T4267] [ 147.015311][ T4267] Possible unsafe locking scenario: [ 147.015311][ T4267] [ 147.022766][ T4267] CPU0 CPU1 [ 147.028134][ T4267] ---- ---- [ 147.033521][ T4267] lock(rfkill_global_mutex); [ 147.038292][ T4267] lock(&data->open_mutex); [ 147.045407][ T4267] lock(rfkill_global_mutex); [ 147.052692][ T4267] lock((work_completion)(&hdev->bg_scan_update)); [ 147.059370][ T4267] [ 147.059370][ T4267] *** DEADLOCK *** [ 147.059370][ T4267] [ 147.067508][ T4267] 3 locks held by kworker/0:5/4267: [ 147.072699][ T4267] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 147.082972][ T4267] #1: ffffc900030efd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 147.093251][ T4267] #2: ffffffff8e4f5a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 147.102763][ T4267] [ 147.102763][ T4267] stack backtrace: [ 147.108648][ T4267] CPU: 0 PID: 4267 Comm: kworker/0:5 Not tainted syzkaller #0 [ 147.116113][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 147.126166][ T4267] Workqueue: events rfkill_op_handler [ 147.131548][ T4267] Call Trace: [ 147.134837][ T4267] [ 147.137768][ T4267] dump_stack_lvl+0x188/0x250 [ 147.142451][ T4267] ? load_image+0x410/0x410 [ 147.144164][ T5301] device syzkaller0 entered promiscuous mode [ 147.146957][ T4267] ? show_regs_print_info+0x20/0x20 [ 147.146984][ T4267] ? print_circular_bug+0x12b/0x1a0 [ 147.158992][ T5301] netlink: 92 bytes leftover after parsing attributes in process `syz.3.300'. [ 147.163349][ T4267] check_noncircular+0x2f8/0x400 [ 147.163374][ T4267] ? print_deadlock_bug+0x5d0/0x5d0 [ 147.163387][ T4267] ? lockdep_lock+0xf1/0x1f0 [ 147.163403][ T4267] ? __lock_acquire+0x12df/0x7d40 [ 147.163420][ T4267] ? mark_lock+0x94/0x320 [ 147.163432][ T4267] ? _find_first_zero_bit+0xd1/0xf0 [ 147.201434][ T4267] __lock_acquire+0x38f7/0x7d40 [ 147.206316][ T4267] ? verify_lock_unused+0x140/0x140 [ 147.211520][ T4267] ? mark_lock+0x94/0x320 [ 147.215854][ T4267] ? verify_lock_unused+0x140/0x140 [ 147.221056][ T4267] ? mark_lock+0x94/0x320 [ 147.225531][ T4267] lock_acquire+0x19f/0x400 [ 147.230040][ T4267] ? __flush_work+0xfa/0x210 [ 147.234645][ T4267] ? __lock_acquire+0x7d40/0x7d40 [ 147.239684][ T4267] ? read_lock_is_recursive+0x10/0x10 [ 147.245063][ T4267] ? start_flush_work+0x784/0x830 [ 147.250103][ T4267] __flush_work+0x116/0x210 [ 147.254616][ T4267] ? __flush_work+0xfa/0x210 [ 147.259218][ T4267] ? flush_work+0x20/0x20 [ 147.263553][ T4267] ? try_to_grab_pending+0xfb/0x820 [ 147.268754][ T4267] ? mark_lock+0x94/0x320 [ 147.273087][ T4267] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 147.279075][ T4267] ? lock_chain_count+0x20/0x20 [ 147.283931][ T4267] ? mark_lock+0x94/0x320 [ 147.288263][ T4267] ? __cancel_work_timer+0x36a/0x560 [ 147.293559][ T4267] __cancel_work_timer+0x3f4/0x560 [ 147.298672][ T4267] ? cancel_work_sync+0x20/0x20 [ 147.303526][ T4267] ? __cancel_work+0x1f9/0x2e0 [ 147.308291][ T4267] ? lockdep_hardirqs_on+0x94/0x140 [ 147.313513][ T4267] ? __cancel_work+0x27b/0x2e0 [ 147.318329][ T4267] ? cancel_work+0x20/0x20 [ 147.322748][ T4267] ? __rwlock_init+0x140/0x140 [ 147.327518][ T4267] hci_request_cancel_all+0xcc/0x300 [ 147.332814][ T4267] hci_dev_do_close+0x4e/0x1020 [ 147.337672][ T4267] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 147.343573][ T4267] ? _raw_spin_unlock+0x40/0x40 [ 147.348428][ T4267] hci_rfkill_set_block+0x101/0x180 [ 147.353630][ T4267] ? rcu_lock_release+0x20/0x20 [ 147.358488][ T4267] rfkill_set_block+0x1c1/0x3c0 [ 147.363490][ T4267] rfkill_epo+0x75/0x170 [ 147.367738][ T4267] rfkill_op_handler+0x76/0x220 [ 147.372590][ T4267] process_one_work+0x867/0xff0 [ 147.377450][ T4267] ? worker_detach_from_pool+0x240/0x240 [ 147.383086][ T4267] ? lockdep_hardirqs_off+0x70/0x100 [ 147.388372][ T4267] ? _raw_spin_lock_irq+0xb7/0xf0 [ 147.393442][ T4267] ? _raw_spin_lock_irqsave+0x100/0x100 [ 147.398991][ T4267] ? wq_worker_running+0x97/0x170 [ 147.404020][ T4267] worker_thread+0xad7/0x12a0 [ 147.408705][ T4267] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 147.414607][ T4267] kthread+0x42e/0x520 [ 147.418679][ T4267] ? rcu_lock_release+0x20/0x20 [ 147.423535][ T4267] ? kthread_blkcg+0xd0/0xd0 [ 147.428134][ T4267] ret_from_fork+0x1f/0x30 [ 147.432559][ T4267]