last executing test programs: 14m55.747898318s ago: executing program 1 (id=838): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1539a, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000500)=[{0x1ceb, 0x5, 0x2000e, 0x6}, {0x3, 0x4, 0x3, 0x5}, {0x3, 0x3, 0x5, 0x5}], 0x10, 0x2}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 14m55.495654175s ago: executing program 1 (id=840): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 14m55.367103035s ago: executing program 1 (id=841): mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0x0, 0x0) write(r0, &(0x7f0000000000)="9eb1", 0x2) 14m54.01893761s ago: executing program 1 (id=847): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 14m53.929809859s ago: executing program 1 (id=848): timerfd_create(0x4, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socket$inet6(0xa, 0x2, 0x0) userfaultfd(0x80801) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r5, 0x0, 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r6, 0x3, 0x8) 14m51.80330615s ago: executing program 1 (id=850): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x14f8d, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000002c0)={r4, 0xa9ac}, &(0x7f0000000300)=0x8) 14m36.517186191s ago: executing program 32 (id=850): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x14f8d, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000002c0)={r4, 0xa9ac}, &(0x7f0000000300)=0x8) 11m36.34596536s ago: executing program 4 (id=1224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x8c, r1, 0x5, 0x0, 0x1, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x47, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x7, 0x0, {0x81, 0x3, 0x0, 0x9, 0x0, 0x1, 0x1, 0x2}, 0x400, 0x1bcd, 0xd}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x8, 0x2, "01fea25b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x8c}}, 0x0) 11m35.836538542s ago: executing program 4 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) timer_create(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/kallsyms\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 11m31.193993954s ago: executing program 4 (id=1233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) 11m29.492798269s ago: executing program 4 (id=1235): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x9, &(0x7f0000000200)=@framed={{}, [@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m14.677797262s ago: executing program 4 (id=1258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) 11m9.079794734s ago: executing program 4 (id=1261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/79, 0x4f) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 10m52.293288646s ago: executing program 33 (id=1261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/79, 0x4f) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 9m47.748328608s ago: executing program 2 (id=1367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 9m43.431580624s ago: executing program 2 (id=1368): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0xfc0, &(0x7f0000000480)={@broadcast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x3, 0x5, 0xfb2, 0x64, 0x0, 0x4, 0x6, 0x0, @local, @private=0xa010102, {[@lsrr={0x83, 0x3, 0x88}]}}, {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x423, 0x0, 0x1}, {"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"}}}}}}, 0x0) 9m42.827824353s ago: executing program 2 (id=1369): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @remote, 0x6}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x18, 0x0, &(0x7f0000000040)) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2450100140000fb727affa3f9d64600000029907800000000ffffffffb9e28c6a534377fa69774f78dc08ad38829b10638f777d8d26a58288f6513b4485b5653af705955e054433e53b0f94bc663f98deb244dcc384fa7e32b8c4ec45aa8ffede6e170ebe2372b4a1414f9e399c62919b26f6b1b37974bb8923f5d4643792e8adcc"], 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x25, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x5}]}, 0x10) write(r5, &(0x7f0000000000), 0x0) 9m36.363228586s ago: executing program 2 (id=1375): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 9m29.504250039s ago: executing program 2 (id=1380): timerfd_create(0x4, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socket$inet6(0xa, 0x2, 0x0) r3 = userfaultfd(0x80801) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r5, 0x0, 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r7, 0x3, 0x8) tee(r4, r7, 0x60000000000, 0x8) vmsplice(r6, &(0x7f0000000340)=[{&(0x7f0000000000)="b0", 0x1}], 0x1, 0x9) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_procfs(r0, &(0x7f0000000180)='net/netstat\x00') 9m26.205064511s ago: executing program 2 (id=1384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0xb4, 0x7, 0x3f, 0x64, @mcast1, @local, 0x40, 0x7800, 0x9, 0x5}}) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xdea2, 0x3400, 0x1, 0x15b}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r9 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r9, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r11, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x0) connect$unix(r10, &(0x7f0000000640)=@file={0x1}, 0x6e) 9m10.840376301s ago: executing program 34 (id=1384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0xb4, 0x7, 0x3f, 0x64, @mcast1, @local, 0x40, 0x7800, 0x9, 0x5}}) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xdea2, 0x3400, 0x1, 0x15b}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r9 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r9, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r11, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x0) connect$unix(r10, &(0x7f0000000640)=@file={0x1}, 0x6e) 5m52.564749838s ago: executing program 5 (id=1635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000183, 0x2, 0x7, 0xf2, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x8000b, 0x7, 0xfffffffffffffff8, 0x9, 0x4], 0x25000, 0x304}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x2}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000280)="eeebc6b9b02296e879f057b464cf29f2c6", 0x11}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(r3, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 5m40.617110397s ago: executing program 5 (id=1641): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 5m31.955393296s ago: executing program 5 (id=1651): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='mtd0\x00', 0xa) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, &(0x7f0000001980), 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4e21, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x20000000000e06}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x404d3, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x8}, 0x3504, 0x0, 0x2, 0x20}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 5m27.831831771s ago: executing program 5 (id=1654): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 5m26.824062943s ago: executing program 5 (id=1656): syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xf) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000200)="0d000000010001", 0x7) syz_open_dev$char_usb(0xc, 0xb4, 0x40) r2 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) preadv(r2, 0x0, 0x0, 0x13, 0xf7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) 5m22.040263035s ago: executing program 5 (id=1661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f00000016c0)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a", 0xb) 5m6.779649522s ago: executing program 35 (id=1661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f00000016c0)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a", 0xb) 22.132578169s ago: executing program 0 (id=1911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1a, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) 17.450985969s ago: executing program 0 (id=1914): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff8500007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0fe000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) 14.467394389s ago: executing program 3 (id=1918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x2000000000005, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) 11.365673905s ago: executing program 3 (id=1919): socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x501a4, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='scalable', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="a68770a2", 0x4, 0x24040001, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0xd}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write$6lowpan_control(r4, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000100)={0x18, r3}) recvmsg(r1, 0x0, 0x4002) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_ublk_setup_io_uring(0x26a0, &(0x7f0000000280)={0x0, 0xd50b, 0x100, 0x2, 0x27c}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0xb) shutdown(r0, 0x1) 9.992106445s ago: executing program 0 (id=1920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$int_in(r2, 0x5421, 0x0) listen(r2, 0x7) accept4(r2, 0x0, 0x0, 0x800) 8.978310163s ago: executing program 0 (id=1921): mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@empty, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x17, 0x68}]}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001f80)={{0xffffffffffffffff, 0x0, 0x100000, 0x0, 0x6, 0x0, 0x0}, 0x2, &(0x7f0000001e80)=[{0x3, 0x0, 0x0, 0x0, 0x0, 0x28}, {0x3, 0x4, 0x0, &(0x7f0000001e40)="5ae7d679b6", 0x5, 0xa}]}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) ioctl$SNDCTL_SEQ_GETINCOUNT(r6, 0x80045105, &(0x7f0000000180)) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20260, 0x202}, [@IFLA_BROADCAST={0xa, 0x2, @random="5dbd2f2b1672"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 7.91169318s ago: executing program 3 (id=1922): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='mtd0\x00', 0xa) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, &(0x7f0000001980), 0x0}) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4e21, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x20000000000e06}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x404d3, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x8}, 0x3504, 0x0, 0x2, 0x20}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000480)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_dump={0x32, 0x9, 0x6, 0x2a, "ad53a3712b67940eda0a0159c9030ecbb9013538fc898ae4948b99d24a3703d5de077c92c17fca16650d"}}) 2.726116105s ago: executing program 0 (id=1923): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000046000900000000000000000003"], 0x1c}, 0x1, 0x0, 0x0, 0x8000041}, 0x24000044) 2.716949627s ago: executing program 3 (id=1924): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x107800, 0x0) unlinkat(r1, &(0x7f0000000040)='./sys/class/rnbd-client/ctl/map_device\x00', 0x200) socket$nl_generic(0x10, 0x3, 0x10) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./sys/class/rnbd-client/ctl/map_device\x00', &(0x7f0000000280), 0x80000, &(0x7f0000000540)=ANY=[@ANYBLOB="14bb6a0d53e206000000000000000000", @ANYRES32, @ANYBLOB="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"]) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x40, r5, &(0x7f0000000200)='8', 0xfffffdb3, 0x10000000005971}]) msgsnd(0x0, &(0x7f0000000080)={0x3}, 0x8, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) write(r1, &(0x7f0000000180)="20e0995b99cd118978e66a2103a93588", 0x1) 1.513866692s ago: executing program 3 (id=1925): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000600)={&(0x7f0000000140), 0x10, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="04000000000000003218ce2500001700293eebec9828030b3f897af9404e1632c0620e04ceee319ef007ff30f5c165fb9839a0a34629b65925fe556182f6533a3c5b88c8784c7c952bb37959aa1f55d79bec5f19b67214c36c01f6b5083d70a154438ad43241de228f"], 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048840) 1.26728825s ago: executing program 3 (id=1926): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010001ffffff40460801100001010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000e40)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 0 (id=1927): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0000000085000000c0000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de8ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac5a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3f0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b251fb555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbce5e911453b9e35e5b2a0390ebeb084988880a7b07435188680ce166b8858f00876c191fd4df2c32440ddcce4410199080009ad86d35168a442cfb9d399172c436a744649c810ce30505348d6f7bc87f0c202ab626acfaf0c732a3536fd46796b1bb6a2217834db8066789735a67dc95c679d02e0eaf743911bde21ffe0b6ccda73dee5694020544392d0538a8075706b26b2680555bd5dd1b4e2f59275c02372ff99d5f1066d018016c43541c6374be429d483f513c84a7dc1aced670625a93082a9bfaa86b2aa73ada8945b088d9ec0aa549a8ec8e50060fcace5e89ee1ffc1dc0f8a87"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) syz_open_procfs(0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10001) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0xfffff1de, 0x2000000, 0x2f00, 0xfffffffffffffefc, &(0x7f0000000440)}, 0x28) kernel console output (not intermixed with test programs): 0 dead, 0 orphan) found. [ 730.697463][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 730.726766][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 730.753581][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 730.754563][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 730.755495][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 731.034498][ T5251] 8021q: adding VLAN 0 to HW filter on device eth11 [ 732.852791][ T5596] Bluetooth: hci0: command tx timeout [ 734.933988][ T5596] Bluetooth: hci0: command tx timeout [ 736.465439][T10574] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.465529][T10574] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.465635][T10574] bridge_slave_0: entered allmulticast mode [ 736.478871][T10574] bridge_slave_0: entered promiscuous mode [ 737.740413][ T5596] Bluetooth: hci0: command tx timeout [ 738.096341][T10574] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.096418][T10574] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.096542][T10574] bridge_slave_1: entered allmulticast mode [ 738.108480][T10574] bridge_slave_1: entered promiscuous mode [ 739.510663][T10574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.903410][ T5596] Bluetooth: hci0: command tx timeout [ 739.990278][T10574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.206512][ T67] bridge_slave_1: left allmulticast mode [ 740.206539][ T67] bridge_slave_1: left promiscuous mode [ 740.206705][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.241199][ T67] bridge_slave_0: left allmulticast mode [ 740.241221][ T67] bridge_slave_0: left promiscuous mode [ 740.241373][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.847845][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.887596][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.909014][ T67] bond0 (unregistering): Released all slaves [ 741.127833][T10574] team0: Port device team_slave_0 added [ 741.202091][T10574] team0: Port device team_slave_1 added [ 741.355966][ T67] hsr_slave_0: left promiscuous mode [ 741.380738][ T67] hsr_slave_1: left promiscuous mode [ 741.381423][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.385904][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.642984][T10768] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1513'. [ 743.935531][T10776] binder: 10775:10776 ioctl 4018620d 0 returned -22 [ 744.129220][ T67] team0 (unregistering): Port device team_slave_1 removed [ 744.218168][ T67] team0 (unregistering): Port device team_slave_0 removed [ 745.785013][T10790] binder: 10783:10790 ioctl c0306201 0 returned -14 [ 746.397627][T10574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.397641][T10574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.397658][T10574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.411462][T10574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.411491][T10574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.411510][T10574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.889517][T10574] hsr_slave_0: entered promiscuous mode [ 746.900213][T10574] hsr_slave_1: entered promiscuous mode [ 746.900735][T10574] debugfs: 'hsr0' already exists in 'hsr' [ 746.900750][T10574] Cannot create hsr debugfs directory [ 750.421318][ T67] bridge_slave_1: left allmulticast mode [ 750.421344][ T67] bridge_slave_1: left promiscuous mode [ 750.421522][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.442177][ T67] bridge_slave_0: left allmulticast mode [ 750.442203][ T67] bridge_slave_0: left promiscuous mode [ 750.442356][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.531362][T10813] FAULT_INJECTION: forcing a failure. [ 750.531362][T10813] name failslab, interval 1, probability 0, space 0, times 0 [ 750.531387][T10813] CPU: 0 UID: 0 PID: 10813 Comm: syz.0.1523 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 750.531403][T10813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 750.531412][T10813] Call Trace: [ 750.531418][T10813] [ 750.531425][T10813] dump_stack_lvl+0xe8/0x150 [ 750.531452][T10813] should_fail_ex+0x46b/0x600 [ 750.531474][T10813] ? __d_alloc+0x37/0x6f0 [ 750.531492][T10813] should_failslab+0xa8/0x100 [ 750.531516][T10813] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 750.531537][T10813] ? __d_alloc+0x37/0x6f0 [ 750.531556][T10813] __d_alloc+0x37/0x6f0 [ 750.531575][T10813] d_alloc_pseudo+0x21/0xc0 [ 750.531592][T10813] alloc_path_pseudo+0x107/0x220 [ 750.531616][T10813] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 750.531637][T10813] ? rt_spin_lock+0x1e2/0x400 [ 750.531661][T10813] alloc_file_pseudo+0xa8/0x1e0 [ 750.531684][T10813] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 750.531707][T10813] ? alloc_fd+0x654/0x6d0 [ 750.531723][T10813] sock_alloc_file+0xb8/0x2f0 [ 750.531801][T10813] ? __sys_socket+0x12b/0x1b0 [ 750.531821][T10813] __sys_socket+0x13f/0x1b0 [ 750.531842][T10813] __x64_sys_socket+0x7a/0x90 [ 750.531863][T10813] do_syscall_64+0x166/0x520 [ 750.531883][T10813] ? trace_irq_disable+0x3b/0x140 [ 750.531902][T10813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.531917][T10813] ? clear_bhb_loop+0x70/0xc0 [ 750.531933][T10813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.531947][T10813] RIP: 0033:0x7fb284f7e159 [ 750.531960][T10813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.531973][T10813] RSP: 002b:00007fb2831d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 750.531988][T10813] RAX: ffffffffffffffda RBX: 00007fb285205fa0 RCX: 00007fb284f7e159 [ 750.531998][T10813] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 750.532007][T10813] RBP: 00007fb28501503b R08: 0000000000000000 R09: 0000000000000000 [ 750.532015][T10813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.532023][T10813] R13: 00007fb285206038 R14: 00007fb285205fa0 R15: 00007fffea3682a8 [ 750.532044][T10813] [ 750.834031][T10819] jffs2: notice: (10819) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 754.563583][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.563629][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.665960][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.784718][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.808869][ T67] bond0 (unregistering): Released all slaves [ 755.101546][T10831] mmap: syz.3.1528 (10831) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 760.552739][ T67] hsr_slave_0: left promiscuous mode [ 760.571806][ T67] hsr_slave_1: left promiscuous mode [ 760.572537][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.592563][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.169326][ T67] team0 (unregistering): Port device team_slave_1 removed [ 761.196482][ T67] team0 (unregistering): Port device team_slave_0 removed [ 762.472306][T10694] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.476858][T10694] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.488774][T10694] bridge_slave_0: entered allmulticast mode [ 762.507837][T10694] bridge_slave_0: entered promiscuous mode [ 762.532264][T10694] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.534238][T10694] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.534351][T10694] bridge_slave_1: entered allmulticast mode [ 762.549630][T10694] bridge_slave_1: entered promiscuous mode [ 762.918316][T10694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.945177][T10694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.140962][T10425] IPVS: starting estimator thread 0... [ 764.232799][T10899] IPVS: using max 13 ests per chain, 31200 per kthread [ 764.329406][ T5601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 764.367676][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 764.371246][ T5601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 764.373120][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 764.373826][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 765.013788][T10694] team0: Port device team_slave_0 added [ 765.029094][T10694] team0: Port device team_slave_1 added [ 765.407279][T10694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.407293][T10694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.407324][T10694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.418078][T10694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.418089][T10694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.418107][T10694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.624135][ T5690] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 765.782683][ T5690] usb 4-1: Using ep0 maxpacket: 32 [ 765.783252][ T5690] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 765.791835][ T5690] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 765.791852][ T5690] usb 4-1: config 0 has no interface number 0 [ 765.798506][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.798549][ T5690] usb 4-1: Product: syz [ 765.798558][ T5690] usb 4-1: Manufacturer: syz [ 765.798568][ T5690] usb 4-1: SerialNumber: syz [ 765.885693][ T5690] usb 4-1: config 0 descriptor?? [ 766.012116][T10694] hsr_slave_0: entered promiscuous mode [ 766.019123][T10694] hsr_slave_1: entered promiscuous mode [ 766.067132][T10694] debugfs: 'hsr0' already exists in 'hsr' [ 766.067151][T10694] Cannot create hsr debugfs directory [ 766.301502][ T5251] 8021q: adding VLAN 0 to HW filter on device eth12 [ 766.344077][ T5690] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 766.344102][ T5690] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 766.532779][ T5596] Bluetooth: hci1: command tx timeout [ 768.612697][ T5596] Bluetooth: hci1: command tx timeout [ 768.805546][ T5690] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 768.805749][ T5690] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 768.904139][ T5690] usb 4-1: USB disconnect, device number 4 [ 769.921655][ T3351] bridge_slave_1: left allmulticast mode [ 769.921680][ T3351] bridge_slave_1: left promiscuous mode [ 769.921847][ T3351] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.048276][ T3351] bridge_slave_0: left allmulticast mode [ 770.048300][ T3351] bridge_slave_0: left promiscuous mode [ 770.060653][ T3351] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.693615][ T5596] Bluetooth: hci1: command tx timeout [ 770.911949][ T3351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.982721][ T3351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.994817][ T3351] bond0 (unregistering): Released all slaves [ 771.241442][ T5251] 8021q: adding VLAN 0 to HW filter on device eth13 [ 771.740695][T10980] netlink: 'syz.5.1559': attribute type 11 has an invalid length. [ 772.772922][ T5596] Bluetooth: hci1: command tx timeout [ 775.049446][ T3351] hsr_slave_0: left promiscuous mode [ 775.051661][ T3351] hsr_slave_1: left promiscuous mode [ 775.052396][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.061885][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.335890][T10992] FAULT_INJECTION: forcing a failure. [ 775.335890][T10992] name failslab, interval 1, probability 0, space 0, times 0 [ 775.335915][T10992] CPU: 0 UID: 0 PID: 10992 Comm: syz.5.1562 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 775.335932][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 775.335942][T10992] Call Trace: [ 775.335947][T10992] [ 775.335955][T10992] dump_stack_lvl+0xe8/0x150 [ 775.335985][T10992] should_fail_ex+0x46b/0x600 [ 775.336008][T10992] ? sock_alloc_inode+0x2c/0x1a0 [ 775.336031][T10992] should_failslab+0xa8/0x100 [ 775.336057][T10992] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 775.336097][T10992] ? sock_alloc_inode+0x2c/0x1a0 [ 775.336119][T10992] ? __pfx_sock_alloc_inode+0x10/0x10 [ 775.336137][T10992] sock_alloc_inode+0x2c/0x1a0 [ 775.336156][T10992] ? __pfx_sock_alloc_inode+0x10/0x10 [ 775.336174][T10992] alloc_inode+0x6a/0x1b0 [ 775.336199][T10992] __sock_create+0x12d/0x9d0 [ 775.336226][T10992] __sys_socket+0xd6/0x1b0 [ 775.336248][T10992] __x64_sys_socket+0x7a/0x90 [ 775.336269][T10992] do_syscall_64+0x166/0x520 [ 775.336291][T10992] ? trace_irq_disable+0x3b/0x140 [ 775.336312][T10992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.336328][T10992] ? clear_bhb_loop+0x70/0xc0 [ 775.336345][T10992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.336360][T10992] RIP: 0033:0x7fab456de159 [ 775.336374][T10992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.336387][T10992] RSP: 002b:00007fab43936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 775.336403][T10992] RAX: ffffffffffffffda RBX: 00007fab45965fa0 RCX: 00007fab456de159 [ 775.336414][T10992] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 775.336423][T10992] RBP: 00007fab4577503b R08: 0000000000000000 R09: 0000000000000000 [ 775.336432][T10992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.336441][T10992] R13: 00007fab45966038 R14: 00007fab45965fa0 R15: 00007ffe80529b78 [ 775.336463][T10992] [ 775.336470][T10992] socket: no more sockets [ 775.567738][T10997] Bluetooth: MGMT ver 1.23 [ 777.890242][T11004] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 781.102541][ T3351] team0 (unregistering): Port device team_slave_1 removed [ 781.153282][ T3351] team0 (unregistering): Port device team_slave_0 removed [ 782.242692][ T5690] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 782.396055][ T5690] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 782.397030][ T5690] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 782.397046][ T5690] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.397059][ T5690] usb 4-1: config 0 has no interface number 0 [ 782.399783][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.399800][ T5690] usb 4-1: Product: syz [ 782.399810][ T5690] usb 4-1: Manufacturer: syz [ 782.399820][ T5690] usb 4-1: SerialNumber: syz [ 782.437295][ T5690] usb 4-1: config 0 descriptor?? [ 782.460941][ T5690] yurex 4-1:0.50: Could not find endpoints [ 783.038906][ T5690] usb 4-1: USB disconnect, device number 5 [ 784.120784][T10900] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.120916][T10900] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.121036][T10900] bridge_slave_0: entered allmulticast mode [ 784.133272][T10900] bridge_slave_0: entered promiscuous mode [ 784.151399][T10900] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.151472][T10900] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.151572][T10900] bridge_slave_1: entered allmulticast mode [ 784.164480][T10900] bridge_slave_1: entered promiscuous mode [ 787.783667][T10900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.973304][T10900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.555783][T10900] team0: Port device team_slave_0 added [ 789.620745][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 789.676462][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 789.679639][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 789.683387][ T5601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 789.683870][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 789.768370][T10900] team0: Port device team_slave_1 added [ 790.480155][T10900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.480169][T10900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.480187][T10900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.495544][T10900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.495555][T10900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.495573][T10900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.939791][T10900] hsr_slave_0: entered promiscuous mode [ 790.940619][T10900] hsr_slave_1: entered promiscuous mode [ 790.941181][T10900] debugfs: 'hsr0' already exists in 'hsr' [ 790.941198][T10900] Cannot create hsr debugfs directory [ 791.189463][ T5596] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 791.813145][ T5596] Bluetooth: hci4: command tx timeout [ 793.892831][ T5596] Bluetooth: hci4: command tx timeout [ 796.430766][ T5596] Bluetooth: hci4: command tx timeout [ 798.455735][ T5596] Bluetooth: hci4: command tx timeout [ 799.165864][ T5596] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 800.768992][T10900] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 800.948092][T10900] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 801.010563][T10900] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 801.160678][T10900] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 802.742398][T10900] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 802.785420][T10900] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 802.847503][T10900] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 802.883835][T10900] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 805.140240][ T5596] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 805.324531][ T182] bridge_slave_1: left allmulticast mode [ 805.324556][ T182] bridge_slave_1: left promiscuous mode [ 805.324722][ T182] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.576268][ T182] bridge_slave_0: left allmulticast mode [ 806.576293][ T182] bridge_slave_0: left promiscuous mode [ 806.576463][ T182] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.582965][ T182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.651040][ T182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.697106][ T182] bond0 (unregistering): Released all slaves [ 809.203425][ T182] hsr_slave_0: left promiscuous mode [ 809.216678][ T182] hsr_slave_1: left promiscuous mode [ 809.217438][ T182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.224265][ T182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.084396][T11209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 810.205802][ T182] team0 (unregistering): Port device team_slave_1 removed [ 810.276361][ T182] team0 (unregistering): Port device team_slave_0 removed [ 811.142921][T11076] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.143011][T11076] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.143123][T11076] bridge_slave_0: entered allmulticast mode [ 811.144874][T11076] bridge_slave_0: entered promiscuous mode [ 811.158515][T11076] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.158593][T11076] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.158691][T11076] bridge_slave_1: entered allmulticast mode [ 811.163818][T11076] bridge_slave_1: entered promiscuous mode [ 811.369681][T11076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.400701][T11076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.569881][T11076] team0: Port device team_slave_0 added [ 811.600843][T11076] team0: Port device team_slave_1 added [ 811.762300][T11224] netlink: 'syz.0.1609': attribute type 10 has an invalid length. [ 811.910226][T11220] netlink: 'syz.0.1609': attribute type 10 has an invalid length. [ 812.515607][T11224] team0: Port device dummy0 added [ 812.516468][T11076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.516479][T11076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.516498][T11076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.627838][ T5711] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 812.776953][T11220] team0: Port device dummy0 removed [ 812.793168][ T5711] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 812.796640][ T5711] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.796672][ T5711] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 812.796685][ T5711] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 812.802715][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 812.802731][ T5711] usb 6-1: Product: syz [ 812.802740][ T5711] usb 6-1: Manufacturer: syz [ 812.802750][ T5711] usb 6-1: SerialNumber: syz [ 812.838155][ T5711] usb 6-1: config 0 descriptor?? [ 812.884451][ T5711] radio-si470x 6-1:0.0: could not find interrupt in endpoint [ 812.884504][ T5711] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 812.884828][ T5711] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 812.992223][T11076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.992235][T11076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.992264][T11076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.210198][T10900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.369627][T11076] hsr_slave_0: entered promiscuous mode [ 813.378191][T11076] hsr_slave_1: entered promiscuous mode [ 813.382051][T11076] debugfs: 'hsr0' already exists in 'hsr' [ 813.382069][T11076] Cannot create hsr debugfs directory [ 816.981741][T10900] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.985557][ T5251] 8021q: adding VLAN 0 to HW filter on device eth13 [ 817.212422][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.212558][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.341148][ T182] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.350044][ T182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.781168][ T5711] usb 6-1: USB disconnect, device number 3 [ 819.014298][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.014343][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 821.807999][T11279] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 825.345078][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 825.379869][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 825.386644][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 825.390545][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 825.479462][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 827.732943][ T5596] Bluetooth: hci0: command tx timeout [ 829.818781][ T5596] Bluetooth: hci0: command tx timeout [ 832.454083][ T5596] Bluetooth: hci0: command tx timeout [ 833.734972][T11358] jffs2: notice: (11358) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 837.457310][ T5596] Bluetooth: hci0: command tx timeout [ 837.765885][T11076] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 837.864525][T11076] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 837.874277][T11076] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 838.033716][T11076] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 838.036688][T11076] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 838.067479][T11076] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 838.490462][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1632'. [ 838.875938][T11076] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 838.893296][ T9899] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 838.948422][T11076] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 839.245827][ T9899] usb 4-1: Using ep0 maxpacket: 8 [ 839.246342][ T9899] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 839.249023][ T9899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 839.249043][ T9899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024 [ 839.249070][ T9899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.579786][ T9899] usb 4-1: config 0 descriptor?? [ 839.994372][ T9899] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 840.363583][ T10] usb 4-1: USB disconnect, device number 6 [ 840.363692][ C0] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 848.019474][T11424] jffs2: notice: (11424) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 853.525828][ T5601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 853.543172][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 853.574905][ T5601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 853.575635][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 853.578202][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 855.737000][ T5596] Bluetooth: hci1: command tx timeout [ 857.332378][T11455] jffs2: notice: (11455) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 857.814100][ T5596] Bluetooth: hci1: command tx timeout [ 859.894448][ T5596] Bluetooth: hci1: command tx timeout [ 860.536607][ T164] bridge_slave_1: left allmulticast mode [ 860.536709][ T164] bridge_slave_1: left promiscuous mode [ 860.536893][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.622042][T11464] netlink: 'syz.0.1650': attribute type 10 has an invalid length. [ 860.659778][ T164] bridge_slave_0: left allmulticast mode [ 860.659803][ T164] bridge_slave_0: left promiscuous mode [ 860.659972][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.679245][T11466] netlink: 'syz.0.1650': attribute type 10 has an invalid length. [ 860.779391][T11468] jffs2: notice: (11468) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 864.537304][ T5596] Bluetooth: hci1: command tx timeout [ 865.779217][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.795288][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.801849][ T164] bond0 (unregistering): Released all slaves [ 865.909537][T11481] Bluetooth: MGMT ver 1.23 [ 869.162462][ T164] hsr_slave_0: left promiscuous mode [ 869.180141][ T164] hsr_slave_1: left promiscuous mode [ 869.180976][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.188976][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.244733][T11491] FAULT_INJECTION: forcing a failure. [ 869.244733][T11491] name failslab, interval 1, probability 0, space 0, times 0 [ 869.244760][T11491] CPU: 0 UID: 0 PID: 11491 Comm: syz.0.1658 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 869.244779][T11491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 869.244790][T11491] Call Trace: [ 869.244796][T11491] [ 869.244805][T11491] dump_stack_lvl+0xe8/0x150 [ 869.244842][T11491] should_fail_ex+0x46b/0x600 [ 869.244869][T11491] should_failslab+0xa8/0x100 [ 869.244898][T11491] __kmalloc_cache_noprof+0xa1/0x680 [ 869.244921][T11491] ? __mmu_notifier_register+0x33e/0x600 [ 869.244946][T11491] ? __mmu_notifier_register+0x33e/0x600 [ 869.244974][T11491] __mmu_notifier_register+0x33e/0x600 [ 869.245007][T11491] mmu_notifier_register+0x70/0x1d0 [ 869.245038][T11491] kvm_dev_ioctl+0x136a/0x17e0 [ 869.245096][T11491] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 869.245111][T11491] ? __fget_files+0x2a/0x420 [ 869.245131][T11491] ? bpf_lsm_file_ioctl+0x9/0x20 [ 869.245159][T11491] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 869.245176][T11491] __se_sys_ioctl+0xff/0x170 [ 869.245200][T11491] do_syscall_64+0x166/0x520 [ 869.245224][T11491] ? trace_irq_disable+0x3b/0x140 [ 869.245245][T11491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.245262][T11491] ? clear_bhb_loop+0x70/0xc0 [ 869.245281][T11491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.245298][T11491] RIP: 0033:0x7fb284f7e159 [ 869.245313][T11491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.245327][T11491] RSP: 002b:00007fb2831d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 869.245345][T11491] RAX: ffffffffffffffda RBX: 00007fb285205fa0 RCX: 00007fb284f7e159 [ 869.245357][T11491] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 869.245367][T11491] RBP: 00007fb28501503b R08: 0000000000000000 R09: 0000000000000000 [ 869.245377][T11491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.245387][T11491] R13: 00007fb285206038 R14: 00007fb285205fa0 R15: 00007fffea3682a8 [ 869.245413][T11491] [ 869.456262][T11496] jffs2: notice: (11496) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 875.862700][ T164] team0 (unregistering): Port device team_slave_1 removed [ 875.878636][ T164] team0 (unregistering): Port device team_slave_0 removed [ 876.799102][T11522] jffs2: notice: (11522) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 876.800587][T11309] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.800662][T11309] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.800770][T11309] bridge_slave_0: entered allmulticast mode [ 877.749945][T11309] bridge_slave_0: entered promiscuous mode [ 877.773875][T11309] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.773980][T11309] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.774077][T11309] bridge_slave_1: entered allmulticast mode [ 877.777670][T11309] bridge_slave_1: entered promiscuous mode [ 880.484321][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.484367][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.355851][ T5251] 8021q: adding VLAN 0 to HW filter on device eth13 [ 881.366139][T11309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.469737][T11309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.943606][T11309] team0: Port device team_slave_0 added [ 882.206221][T11309] team0: Port device team_slave_1 added [ 886.062409][T11549] jffs2: notice: (11549) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 886.484111][T11556] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 886.511226][T11556] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 886.534298][T11556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 886.537632][T11556] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 886.538125][T11556] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 886.728788][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 886.774264][ T5596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 886.781438][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 886.782157][ T5596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 886.785649][ T5596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 888.179021][ T5251] 8021q: adding VLAN 0 to HW filter on device eth14 [ 888.612750][T11556] Bluetooth: hci0: command tx timeout [ 888.698628][T11599] jffs2: notice: (11599) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 892.429128][T11556] Bluetooth: hci4: command tx timeout [ 892.435635][T11561] Bluetooth: hci0: command tx timeout [ 893.449917][T11613] loop0: detected capacity change from 0 to 4096 [ 894.031047][T11613] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 894.031066][T11613] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 894.031138][T11613] loop0: [ 894.453411][T11556] Bluetooth: hci4: command tx timeout [ 894.453438][T11556] Bluetooth: hci0: command tx timeout [ 894.550799][T11622] netlink: 'syz.0.1677': attribute type 10 has an invalid length. [ 894.633643][T11623] netlink: 'syz.0.1677': attribute type 10 has an invalid length. [ 895.139476][T11436] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.139552][T11436] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.139672][T11436] bridge_slave_0: entered allmulticast mode [ 895.163926][T11436] bridge_slave_0: entered promiscuous mode [ 895.234368][T11436] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.234444][T11436] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.234544][T11436] bridge_slave_1: entered allmulticast mode [ 895.240152][T11436] bridge_slave_1: entered promiscuous mode [ 895.568650][T11436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.621381][T11436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.616736][T11648] jffs2: notice: (11648) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 896.619133][T11561] Bluetooth: hci0: command tx timeout [ 896.619156][T11561] Bluetooth: hci4: command tx timeout [ 900.610635][T11561] Bluetooth: hci4: command tx timeout [ 901.718152][T11436] team0: Port device team_slave_0 added [ 902.195066][T11436] team0: Port device team_slave_1 added [ 906.383176][T11436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.383189][T11436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.383206][T11436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.388916][ T5251] 8021q: adding VLAN 0 to HW filter on device eth15 [ 906.466207][T11436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.466219][T11436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.466237][T11436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.684079][ T164] bridge_slave_1: left allmulticast mode [ 906.684103][ T164] bridge_slave_1: left promiscuous mode [ 906.684254][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.699412][ T164] bridge_slave_0: left allmulticast mode [ 906.699433][ T164] bridge_slave_0: left promiscuous mode [ 906.699590][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.407541][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.419701][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 907.431026][ T164] bond0 (unregistering): Released all slaves [ 907.833978][T11687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.929521][T11436] hsr_slave_0: entered promiscuous mode [ 907.933470][T11436] hsr_slave_1: entered promiscuous mode [ 907.934088][T11436] debugfs: 'hsr0' already exists in 'hsr' [ 907.934105][T11436] Cannot create hsr debugfs directory [ 907.984163][ T164] hsr_slave_0: left promiscuous mode [ 907.989707][ T164] hsr_slave_1: left promiscuous mode [ 907.990433][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.999165][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.610225][ T164] team0 (unregistering): Port device team_slave_1 removed [ 909.642855][ T164] team0 (unregistering): Port device team_slave_0 removed [ 914.637086][T11707] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 914.758429][T11561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 914.813902][T11561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 914.818262][T11561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 914.825079][T11561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 914.825645][T11561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 915.066565][T11559] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.066647][T11559] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.066772][T11559] bridge_slave_0: entered allmulticast mode [ 915.084496][T11559] bridge_slave_0: entered promiscuous mode [ 915.178450][T11559] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.178543][T11559] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.178661][T11559] bridge_slave_1: entered allmulticast mode [ 915.186339][T11559] bridge_slave_1: entered promiscuous mode [ 916.426332][T11559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.429698][T11555] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.429772][T11555] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.429868][T11555] bridge_slave_0: entered allmulticast mode [ 916.437433][T11555] bridge_slave_0: entered promiscuous mode [ 916.441863][T11750] Bluetooth: MGMT ver 1.23 [ 916.453752][T11559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.933343][T11561] Bluetooth: hci5: command tx timeout [ 917.380977][ T5893] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 917.684495][ T5893] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 917.685451][ T5893] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 917.685468][ T5893] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.685480][ T5893] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 917.685510][ T5893] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.686892][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 917.686907][ T5893] usb 1-1: Product: syz [ 917.686916][ T5893] usb 1-1: Manufacturer: syz [ 917.741362][ T5893] cdc_wdm 1-1:1.0: skipping garbage [ 917.741375][ T5893] cdc_wdm 1-1:1.0: skipping garbage [ 917.741755][ T164] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.802033][ T5893] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 917.802048][ T5893] cdc_wdm 1-1:1.0: Unknown control protocol [ 918.107010][T11555] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.107200][T11555] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.130113][T11555] bridge_slave_1: entered allmulticast mode [ 918.138156][T11555] bridge_slave_1: entered promiscuous mode [ 918.546560][T11770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.547483][T11770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.614256][ T5251] 8021q: adding VLAN 0 to HW filter on device eth16 [ 919.012782][T11561] Bluetooth: hci5: command tx timeout [ 919.112878][T11559] team0: Port device team_slave_0 added [ 919.137878][T11555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.167408][T11559] team0: Port device team_slave_1 added [ 919.196541][T11555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.364547][ T164] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.035433][ T5893] usb 1-1: USB disconnect, device number 7 [ 921.052642][T11559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.052653][T11559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.052670][T11559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.072304][T11555] team0: Port device team_slave_0 added [ 921.075889][T11559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.075901][T11559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.075918][T11559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.094577][T11561] Bluetooth: hci5: command tx timeout [ 921.411195][ T164] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.508162][T11555] team0: Port device team_slave_1 added [ 921.960453][ T164] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.027590][T11555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.027602][T11555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.027619][T11555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.100837][T11555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.100849][T11555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.100867][T11555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.165352][T11806] jffs2: notice: (11806) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 924.145195][T11559] hsr_slave_0: entered promiscuous mode [ 924.149011][T11559] hsr_slave_1: entered promiscuous mode [ 924.151066][T11559] debugfs: 'hsr0' already exists in 'hsr' [ 924.151083][T11559] Cannot create hsr debugfs directory [ 925.874907][T11561] Bluetooth: hci5: command tx timeout [ 926.295193][T11555] hsr_slave_0: entered promiscuous mode [ 926.300138][T11555] hsr_slave_1: entered promiscuous mode [ 926.303865][T11555] debugfs: 'hsr0' already exists in 'hsr' [ 926.303883][T11555] Cannot create hsr debugfs directory [ 933.548150][ T164] bridge_slave_1: left allmulticast mode [ 933.548175][ T164] bridge_slave_1: left promiscuous mode [ 933.548336][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.602063][ T164] bridge_slave_0: left allmulticast mode [ 933.602088][ T164] bridge_slave_0: left promiscuous mode [ 933.602242][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.853911][ T164] bridge_slave_1: left allmulticast mode [ 933.853948][ T164] bridge_slave_1: left promiscuous mode [ 933.854096][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.909568][ T164] bridge_slave_0: left allmulticast mode [ 933.909592][ T164] bridge_slave_0: left promiscuous mode [ 933.909739][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.995838][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.053606][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.086107][ T164] bond0 (unregistering): Released all slaves [ 937.352245][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.366554][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.368344][ T164] bond0 (unregistering): Released all slaves [ 937.639187][ T5251] 8021q: adding VLAN 0 to HW filter on device eth17 [ 941.896874][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.896964][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.480871][T11878] jffs2: notice: (11878) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 948.238112][ T164] hsr_slave_0: left promiscuous mode [ 948.280561][T11556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 948.318954][T11556] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 948.320993][T11556] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 948.324110][T11556] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 948.326540][T11556] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 948.415377][ T164] hsr_slave_1: left promiscuous mode [ 948.416137][ T164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 948.416154][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 948.470086][ T164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 948.470112][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 948.647189][ T164] veth1_macvtap: left promiscuous mode [ 948.702935][ T164] veth0_macvtap: left promiscuous mode [ 948.703131][ T164] veth1_vlan: left promiscuous mode [ 948.703250][ T164] veth0_vlan: left promiscuous mode [ 949.054885][T11561] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 949.077324][T11561] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 949.091338][T11561] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 949.092014][T11561] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 949.092467][T11561] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 951.234721][T11919] jffs2: notice: (11919) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 951.241346][T11556] Bluetooth: hci1: command tx timeout [ 951.241894][T11556] Bluetooth: hci6: command tx timeout [ 955.102023][T11561] Bluetooth: hci6: command tx timeout [ 955.102048][T11561] Bluetooth: hci1: command tx timeout [ 955.116121][ T164] team0 (unregistering): Port device team_slave_1 removed [ 955.159327][ T164] team0 (unregistering): Port device team_slave_0 removed [ 955.359357][ T164] team0 (unregistering): Port device team_slave_1 removed [ 955.377324][ T164] team0 (unregistering): Port device team_slave_0 removed [ 955.865583][ T5251] 8021q: adding VLAN 0 to HW filter on device eth18 [ 955.871682][T11712] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.881238][T11712] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.881349][T11712] bridge_slave_0: entered allmulticast mode [ 955.904545][T11712] bridge_slave_0: entered promiscuous mode [ 955.929559][T11712] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.929654][T11712] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.929772][T11712] bridge_slave_1: entered allmulticast mode [ 955.962173][T11712] bridge_slave_1: entered promiscuous mode [ 956.425786][T11712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.457146][T11712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.173196][T11556] Bluetooth: hci1: command tx timeout [ 957.173218][T11556] Bluetooth: hci6: command tx timeout [ 957.674138][T11957] FAULT_INJECTION: forcing a failure. [ 957.674138][T11957] name failslab, interval 1, probability 0, space 0, times 0 [ 957.674163][T11957] CPU: 0 UID: 0 PID: 11957 Comm: syz.0.1727 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 957.674180][T11957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 957.674189][T11957] Call Trace: [ 957.674195][T11957] [ 957.674201][T11957] dump_stack_lvl+0xe8/0x150 [ 957.674231][T11957] should_fail_ex+0x46b/0x600 [ 957.674253][T11957] ? __d_alloc+0x37/0x6f0 [ 957.674271][T11957] should_failslab+0xa8/0x100 [ 957.674305][T11957] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 957.674327][T11957] ? __d_alloc+0x37/0x6f0 [ 957.674353][T11957] __d_alloc+0x37/0x6f0 [ 957.674373][T11957] d_alloc_pseudo+0x21/0xc0 [ 957.674390][T11957] alloc_path_pseudo+0x107/0x220 [ 957.674414][T11957] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 957.674435][T11957] ? rt_spin_lock+0x1e2/0x400 [ 957.674459][T11957] alloc_file_pseudo+0xa8/0x1e0 [ 957.674482][T11957] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 957.674506][T11957] ? alloc_fd+0x654/0x6d0 [ 957.674521][T11957] sock_alloc_file+0xb8/0x2f0 [ 957.674540][T11957] ? __sys_socket+0x12b/0x1b0 [ 957.674560][T11957] __sys_socket+0x13f/0x1b0 [ 957.674580][T11957] __x64_sys_socket+0x7a/0x90 [ 957.674600][T11957] do_syscall_64+0x166/0x520 [ 957.674619][T11957] ? trace_irq_disable+0x3b/0x140 [ 957.674638][T11957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.674653][T11957] ? clear_bhb_loop+0x70/0xc0 [ 957.674669][T11957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.674683][T11957] RIP: 0033:0x7fb284f7e159 [ 957.674695][T11957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.674708][T11957] RSP: 002b:00007fb2831b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 957.674723][T11957] RAX: ffffffffffffffda RBX: 00007fb285206090 RCX: 00007fb284f7e159 [ 957.674734][T11957] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 957.674742][T11957] RBP: 00007fb28501503b R08: 0000000000000000 R09: 0000000000000000 [ 957.674750][T11957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.674759][T11957] R13: 00007fb285206128 R14: 00007fb285206090 R15: 00007fffea3682a8 [ 957.674780][T11957] [ 957.829440][T11712] team0: Port device team_slave_0 added [ 958.253488][T11712] team0: Port device team_slave_1 added [ 958.989315][T11712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.989327][T11712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.989345][T11712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.081641][T11712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.081654][T11712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.081672][T11712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.253849][T11561] Bluetooth: hci6: command tx timeout [ 959.253872][T11561] Bluetooth: hci1: command tx timeout [ 959.536756][T11987] jffs2: notice: (11987) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 965.553476][T11712] hsr_slave_0: entered promiscuous mode [ 965.554324][T11712] hsr_slave_1: entered promiscuous mode [ 965.756699][T12005] FAULT_INJECTION: forcing a failure. [ 965.756699][T12005] name fail_futex, interval 1, probability 0, space 0, times 0 [ 965.756725][T12005] CPU: 0 UID: 0 PID: 12005 Comm: syz.0.1736 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 965.756742][T12005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 965.756751][T12005] Call Trace: [ 965.756757][T12005] [ 965.756765][T12005] dump_stack_lvl+0xe8/0x150 [ 965.756791][T12005] should_fail_ex+0x46b/0x600 [ 965.756815][T12005] get_futex_key+0x1b4/0x1580 [ 965.756837][T12005] ? rcu_is_watching+0x16/0xb0 [ 965.756868][T12005] ? __pfx_get_futex_key+0x10/0x10 [ 965.756891][T12005] ? update_se+0x90/0xef0 [ 965.756946][T12005] futex_wait_setup+0x4a/0x590 [ 965.756968][T12005] ? __futex_wait+0xe1/0x410 [ 965.756989][T12005] __futex_wait+0x161/0x410 [ 965.757010][T12005] ? __pfx___futex_wait+0x10/0x10 [ 965.757031][T12005] ? __pfx_futex_wake_mark+0x10/0x10 [ 965.757052][T12005] ? try_to_wake_up+0x887/0x1430 [ 965.757077][T12005] futex_wait+0x121/0x390 [ 965.757099][T12005] ? __pfx_futex_wait+0x10/0x10 [ 965.757134][T12005] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 965.757158][T12005] do_futex+0x3e7/0x4e0 [ 965.757176][T12005] ? __pfx_do_futex+0x10/0x10 [ 965.757190][T12005] ? __sys_bind+0x371/0x410 [ 965.757215][T12005] __se_sys_futex+0x3a8/0x450 [ 965.757233][T12005] ? __pfx___se_sys_futex+0x10/0x10 [ 965.757247][T12005] ? rcu_is_watching+0x16/0xb0 [ 965.757273][T12005] ? __x64_sys_futex+0x21/0xf0 [ 965.757289][T12005] do_syscall_64+0x166/0x520 [ 965.757310][T12005] ? trace_irq_disable+0x3b/0x140 [ 965.757343][T12005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.757357][T12005] ? clear_bhb_loop+0x70/0xc0 [ 965.757374][T12005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.757387][T12005] RIP: 0033:0x7fb284f7e159 [ 965.757400][T12005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.757412][T12005] RSP: 002b:00007fb2831d60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 965.757428][T12005] RAX: ffffffffffffffda RBX: 00007fb285205fa8 RCX: 00007fb284f7e159 [ 965.757438][T12005] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb285205fa8 [ 965.757447][T12005] RBP: 00007fb285205fa0 R08: 0000000000000000 R09: 0000000000000000 [ 965.757455][T12005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.757464][T12005] R13: 00007fb285206038 R14: 00007fffea3681c0 R15: 00007fffea3682a8 [ 965.757485][T12005] [ 965.918244][ T5251] 8021q: adding VLAN 0 to HW filter on device eth19 [ 965.950546][ T164] IPVS: stop unused estimator thread 0... [ 971.052608][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 971.357767][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 971.577285][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.577326][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.126096][ T10] usb 1-1: can't set config #1, error -71 [ 974.159210][ T10] usb 1-1: USB disconnect, device number 8 [ 975.217824][T12046] jffs2: notice: (12046) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 979.155271][T11561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 979.188953][T11561] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 979.191459][T11561] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 979.194698][T11561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 979.199379][T11561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 981.337394][T11556] Bluetooth: hci0: command tx timeout [ 983.181547][T11895] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.181625][T11895] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.181946][T11895] bridge_slave_0: entered allmulticast mode [ 983.537708][T11556] Bluetooth: hci0: command tx timeout [ 983.569315][T11895] bridge_slave_0: entered promiscuous mode [ 983.636866][T11895] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.636947][T11895] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.637063][T11895] bridge_slave_1: entered allmulticast mode [ 983.651741][T11895] bridge_slave_1: entered promiscuous mode [ 983.907858][ T5251] 8021q: adding VLAN 0 to HW filter on device eth20 [ 984.110623][T11907] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.111418][T11907] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.111530][T11907] bridge_slave_0: entered allmulticast mode [ 984.114290][T11907] bridge_slave_0: entered promiscuous mode [ 984.128759][T11895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.136943][T11907] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.137017][T11907] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.137138][T11907] bridge_slave_1: entered allmulticast mode [ 984.145444][T11907] bridge_slave_1: entered promiscuous mode [ 984.166223][T11895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.415088][T11907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.427462][T11895] team0: Port device team_slave_0 added [ 984.543489][T11907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.548197][T11895] team0: Port device team_slave_1 added [ 984.818551][T11907] team0: Port device team_slave_0 added [ 984.839174][T11895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.839186][T11895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.839203][T11895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.861943][ T164] bridge_slave_1: left allmulticast mode [ 984.861965][ T164] bridge_slave_1: left promiscuous mode [ 984.862113][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.870967][ T164] bridge_slave_0: left allmulticast mode [ 984.870987][ T164] bridge_slave_0: left promiscuous mode [ 984.871137][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.940924][ T164] bridge_slave_1: left allmulticast mode [ 984.940949][ T164] bridge_slave_1: left promiscuous mode [ 984.941105][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.890538][ T164] bridge_slave_0: left allmulticast mode [ 985.890563][ T164] bridge_slave_0: left promiscuous mode [ 985.890706][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.109252][T11561] Bluetooth: hci0: command tx timeout [ 986.331537][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.338632][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.341893][ T164] bond0 (unregistering): Released all slaves [ 986.570295][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.590379][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.599823][ T164] bond0 (unregistering): Released all slaves [ 986.628969][T11907] team0: Port device team_slave_1 added [ 986.684951][T11895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.684963][T11895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.684981][T11895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.133063][T11556] Bluetooth: hci0: command tx timeout [ 989.912161][T11907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.912174][T11907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.912191][T11907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.978386][T11907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.978399][T11907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.978416][T11907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.173432][T12116] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 990.191452][T12116] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 990.310087][ T164] hsr_slave_0: left promiscuous mode [ 990.310657][ T164] hsr_slave_1: left promiscuous mode [ 990.311318][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.311832][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.312441][ T164] hsr_slave_0: left promiscuous mode [ 990.317114][ T164] hsr_slave_1: left promiscuous mode [ 990.319267][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.319829][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.929605][ T164] team0 (unregistering): Port device team_slave_1 removed [ 990.983502][ T164] team0 (unregistering): Port device team_slave_0 removed [ 992.630079][T12133] jffs2: notice: (12133) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 992.802425][ T164] team0 (unregistering): Port device team_slave_1 removed [ 992.988713][ T164] team0 (unregistering): Port device team_slave_0 removed [ 993.354183][T11895] hsr_slave_0: entered promiscuous mode [ 993.356186][T11895] hsr_slave_1: entered promiscuous mode [ 993.361082][T11895] debugfs: 'hsr0' already exists in 'hsr' [ 993.361100][T11895] Cannot create hsr debugfs directory [ 993.569683][T11907] hsr_slave_0: entered promiscuous mode [ 993.595733][T11907] hsr_slave_1: entered promiscuous mode [ 993.623841][T11907] debugfs: 'hsr0' already exists in 'hsr' [ 993.623931][T11907] Cannot create hsr debugfs directory [ 996.531073][ T164] bridge_slave_1: left allmulticast mode [ 996.531103][ T164] bridge_slave_1: left promiscuous mode [ 996.531283][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.550411][ T164] bridge_slave_0: left allmulticast mode [ 996.550437][ T164] bridge_slave_0: left promiscuous mode [ 996.550615][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.627262][ T164] bridge_slave_1: left allmulticast mode [ 996.627287][ T164] bridge_slave_1: left promiscuous mode [ 996.627435][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.632342][ T164] bridge_slave_0: left allmulticast mode [ 996.632363][ T164] bridge_slave_0: left promiscuous mode [ 996.632505][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.926530][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.934181][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.940534][ T164] bond0 (unregistering): Released all slaves [ 997.245477][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.266005][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 997.272015][ T164] bond0 (unregistering): Released all slaves [ 997.387688][ T5251] 8021q: adding VLAN 0 to HW filter on device eth21 [ 997.639238][ T164] hsr_slave_0: left promiscuous mode [ 997.640037][ T164] hsr_slave_1: left promiscuous mode [ 997.640961][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.644451][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.671175][ T164] hsr_slave_0: left promiscuous mode [ 997.674590][ T164] hsr_slave_1: left promiscuous mode [ 997.675893][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.692146][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 998.128329][ T164] team0 (unregistering): Port device team_slave_1 removed [ 998.157142][ T164] team0 (unregistering): Port device team_slave_0 removed [ 1002.254123][ T164] team0 (unregistering): Port device team_slave_1 removed [ 1002.343645][ T164] team0 (unregistering): Port device team_slave_0 removed [ 1003.352143][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.352191][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1008.167998][T12054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.168076][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.168186][T12054] bridge_slave_0: entered allmulticast mode [ 1008.186185][T12054] bridge_slave_0: entered promiscuous mode [ 1008.259732][T12054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.259812][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.259924][T12054] bridge_slave_1: entered allmulticast mode [ 1008.353691][T12054] bridge_slave_1: entered promiscuous mode [ 1009.313463][T12054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.480162][T11561] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1009.522442][T11561] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1009.554472][T11561] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1009.555282][T11561] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1009.557247][T11561] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1009.902410][T12054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.226198][T11556] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1010.260746][T11556] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1010.268258][T11556] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1010.271552][T11556] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1010.272286][T11556] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1010.281152][T12054] team0: Port device team_slave_0 added [ 1010.521224][T12054] team0: Port device team_slave_1 added [ 1010.895557][T12054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.895571][T12054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.895588][T12054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.912612][T12054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.912623][T12054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.912642][T12054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.324158][T12054] hsr_slave_0: entered promiscuous mode [ 1011.324956][T12054] hsr_slave_1: entered promiscuous mode [ 1012.777037][T11556] Bluetooth: hci4: command tx timeout [ 1012.777551][T11556] Bluetooth: hci5: command tx timeout [ 1013.121787][ T5251] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1014.853146][T11556] Bluetooth: hci4: command tx timeout [ 1014.853171][T11556] Bluetooth: hci5: command tx timeout [ 1016.937286][T11556] Bluetooth: hci4: command tx timeout [ 1016.937309][T11556] Bluetooth: hci5: command tx timeout [ 1017.266540][ T7820] bridge_slave_1: left allmulticast mode [ 1017.266566][ T7820] bridge_slave_1: left promiscuous mode [ 1017.266739][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.268555][ T7820] bridge_slave_0: left allmulticast mode [ 1017.268575][ T7820] bridge_slave_0: left promiscuous mode [ 1017.268710][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.434814][ T5690] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1017.495960][ T7820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.498439][ T7820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.501643][ T7820] bond0 (unregistering): Released all slaves [ 1017.603240][ T5690] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1017.604144][ T5690] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.604183][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.740649][ T5690] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 1017.740882][ T5690] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 1017.740928][ T5690] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 1017.758605][ T5690] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 1017.758662][ T5690] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 1017.812682][ T5690] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1017.821178][ T5690] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 1017.825207][ T5690] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 1017.992208][ T7820] hsr_slave_0: left promiscuous mode [ 1018.011745][ T5690] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1018.031804][ T5690] usb 4-1: USB disconnect, device number 7 [ 1018.044414][ T7820] hsr_slave_1: left promiscuous mode [ 1018.045250][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.070986][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.140239][ T5690] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1018.292402][ T5690] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1018.322068][ T5690] keyspan 4-1:1.0: device disconnected [ 1019.590298][T11556] Bluetooth: hci4: command tx timeout [ 1019.590322][T11556] Bluetooth: hci5: command tx timeout [ 1019.992622][ T5690] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1020.080508][ T7820] team0 (unregistering): Port device team_slave_1 removed [ 1020.117150][ T7820] team0 (unregistering): Port device team_slave_0 removed [ 1020.145966][ T5690] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1020.147071][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.442854][ T5690] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 1020.675430][ T5690] usb 4-1: USB disconnect, device number 8 [ 1021.001653][ T5251] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1021.577009][T12308] FAULT_INJECTION: forcing a failure. [ 1021.577009][T12308] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.577035][T12308] CPU: 0 UID: 0 PID: 12308 Comm: syz.3.1795 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1021.577052][T12308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1021.577062][T12308] Call Trace: [ 1021.577068][T12308] [ 1021.577074][T12308] dump_stack_lvl+0xe8/0x150 [ 1021.577104][T12308] should_fail_ex+0x46b/0x600 [ 1021.577127][T12308] ? __d_alloc+0x37/0x6f0 [ 1021.577146][T12308] should_failslab+0xa8/0x100 [ 1021.577171][T12308] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1021.577194][T12308] ? __d_alloc+0x37/0x6f0 [ 1021.577214][T12308] __d_alloc+0x37/0x6f0 [ 1021.577235][T12308] d_alloc_pseudo+0x21/0xc0 [ 1021.577253][T12308] alloc_path_pseudo+0x107/0x220 [ 1021.577278][T12308] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 1021.577300][T12308] ? rt_spin_lock+0x1e2/0x400 [ 1021.577325][T12308] alloc_file_pseudo+0xa8/0x1e0 [ 1021.577350][T12308] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1021.577375][T12308] ? alloc_fd+0x654/0x6d0 [ 1021.577391][T12308] sock_alloc_file+0xb8/0x2f0 [ 1021.577410][T12308] ? __sys_socket+0x12b/0x1b0 [ 1021.577432][T12308] __sys_socket+0x13f/0x1b0 [ 1021.577454][T12308] __x64_sys_socket+0x7a/0x90 [ 1021.577475][T12308] do_syscall_64+0x166/0x520 [ 1021.577496][T12308] ? trace_irq_disable+0x3b/0x140 [ 1021.577516][T12308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.577532][T12308] ? clear_bhb_loop+0x70/0xc0 [ 1021.577554][T12308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.577568][T12308] RIP: 0033:0x7fc8ff4de159 [ 1021.577582][T12308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.577595][T12308] RSP: 002b:00007fc8fd736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1021.577611][T12308] RAX: ffffffffffffffda RBX: 00007fc8ff765fa0 RCX: 00007fc8ff4de159 [ 1021.577622][T12308] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1021.577631][T12308] RBP: 00007fc8ff57503b R08: 0000000000000000 R09: 0000000000000000 [ 1021.577640][T12308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1021.577649][T12308] R13: 00007fc8ff766038 R14: 00007fc8ff765fa0 R15: 00007ffce60081c8 [ 1021.577671][T12308] [ 1025.204757][ T5690] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1025.719563][ T7820] bridge_slave_1: left allmulticast mode [ 1025.719587][ T7820] bridge_slave_1: left promiscuous mode [ 1025.719737][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.721783][ T7820] bridge_slave_0: left allmulticast mode [ 1025.721803][ T7820] bridge_slave_0: left promiscuous mode [ 1025.721947][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.822591][ T5690] usb 1-1: device descriptor read/64, error -71 [ 1025.831822][ T7820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.843231][ T7820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.844923][ T7820] bond0 (unregistering): Released all slaves [ 1025.852888][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1026.033143][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1026.034152][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.082639][ T5690] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1026.226811][ T7820] hsr_slave_0: left promiscuous mode [ 1026.227529][ T7820] hsr_slave_1: left promiscuous mode [ 1026.228455][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.229132][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.249661][ T5690] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1026.253255][ T5690] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.253288][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.287238][ T5690] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 1026.287408][ T5690] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 1026.287451][ T5690] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 1026.298290][ T5690] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 1026.298344][ T5690] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 1026.306391][ T10] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 1026.311020][ T5690] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1026.357752][ T5690] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 1026.357817][ T5690] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 1026.396653][ T5690] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1026.526291][ T5893] usb 1-1: USB disconnect, device number 10 [ 1026.535634][ T10] usb 4-1: USB disconnect, device number 9 [ 1026.537164][ T5893] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1026.620651][ T5893] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1026.621153][ T5893] keyspan 1-1:1.0: device disconnected [ 1026.811083][ T7820] team0 (unregistering): Port device team_slave_1 removed [ 1026.825163][ T7820] team0 (unregistering): Port device team_slave_0 removed [ 1027.381656][T12340] loop0: detected capacity change from 0 to 4096 [ 1028.881930][T12360] jffs2: notice: (12360) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1033.115266][ T5893] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1033.158724][T12224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.158800][T12224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.158903][T12224] bridge_slave_0: entered allmulticast mode [ 1033.162621][T12224] bridge_slave_0: entered promiscuous mode [ 1033.180874][T12224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.180997][T12224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.181094][T12224] bridge_slave_1: entered allmulticast mode [ 1033.188589][T12224] bridge_slave_1: entered promiscuous mode [ 1033.265300][ T5893] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1033.266212][ T5893] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.266243][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.286294][ T5893] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 1033.286465][ T5893] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 1033.286508][ T5893] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 1033.318389][ T5893] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 1033.319986][ T5893] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 1033.346127][ T5893] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1033.352901][ T5893] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 1033.352955][ T5893] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 1033.356029][ T5251] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1033.367064][T12238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.367137][T12238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.367240][T12238] bridge_slave_0: entered allmulticast mode [ 1033.373890][ T5690] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1033.403446][T12238] bridge_slave_0: entered promiscuous mode [ 1033.405570][ T5893] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1033.441124][T12224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.477026][T12238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.477100][T12238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.477203][T12238] bridge_slave_1: entered allmulticast mode [ 1033.480398][T12238] bridge_slave_1: entered promiscuous mode [ 1033.495957][T12224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.496132][T12054] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1033.512368][T12054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1033.567489][ T5690] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1033.573686][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.618861][ T5893] usb 4-1: USB disconnect, device number 10 [ 1033.836526][ T5893] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1033.853267][ T5690] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1033.883484][T12054] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1033.906579][ T5893] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1033.907096][ T5893] keyspan 4-1:1.0: device disconnected [ 1033.952959][T12054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1034.065975][ T5690] usb 1-1: USB disconnect, device number 11 [ 1034.129908][T12054] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1034.231540][T12054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1034.290503][T12238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.296492][T12224] team0: Port device team_slave_0 added [ 1034.296643][T12054] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1034.313339][T12054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1034.323881][T12238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.329817][T12224] team0: Port device team_slave_1 added [ 1034.467461][T12238] team0: Port device team_slave_0 added [ 1034.470076][T12224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.470087][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.470104][T12224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.477217][T12238] team0: Port device team_slave_1 added [ 1034.479945][T12224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.479955][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.479973][T12224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.589554][T12238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.589568][T12238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.589586][T12238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.598345][T12238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.598356][T12238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.598373][T12238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.011158][T12224] hsr_slave_0: entered promiscuous mode [ 1035.027652][T12224] hsr_slave_1: entered promiscuous mode [ 1035.033294][T12224] debugfs: 'hsr0' already exists in 'hsr' [ 1035.033313][T12224] Cannot create hsr debugfs directory [ 1035.149231][T12238] hsr_slave_0: entered promiscuous mode [ 1035.155658][T12238] hsr_slave_1: entered promiscuous mode [ 1035.159368][T12238] debugfs: 'hsr0' already exists in 'hsr' [ 1035.159387][T12238] Cannot create hsr debugfs directory [ 1036.106249][T12428] jffs2: notice: (12428) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1036.458381][T11556] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1036.490084][T11556] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1036.497953][T11556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1036.510152][T11556] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1036.516603][T11556] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1038.402315][T12444] jffs2: notice: (12444) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1042.079215][T11556] Bluetooth: hci0: command tx timeout [ 1044.133467][T11556] Bluetooth: hci0: command tx timeout [ 1045.522567][ T5690] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1045.693290][ T5690] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1045.694364][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.927704][ T5690] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1046.047297][T12224] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1046.052073][T12224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1046.141358][T12224] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1046.151338][ T10] usb 1-1: USB disconnect, device number 12 [ 1046.193264][T12224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1046.216777][T11556] Bluetooth: hci0: command tx timeout [ 1046.223831][T12224] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1046.281912][T12224] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1046.717103][T12224] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1046.751517][T12224] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1046.976062][T12506] jffs2: notice: (12506) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1048.483064][T11556] Bluetooth: hci0: command tx timeout [ 1049.208588][T12238] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1049.212153][T12238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1049.339249][T12238] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1049.346655][T12238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1049.384692][T12238] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1049.427972][T12238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1049.634855][T12238] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1049.665321][T12238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1050.101494][ T7820] bridge_slave_1: left allmulticast mode [ 1050.101520][ T7820] bridge_slave_1: left promiscuous mode [ 1050.101689][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.122115][ T7820] bridge_slave_0: left allmulticast mode [ 1050.122136][ T7820] bridge_slave_0: left promiscuous mode [ 1050.129440][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.263324][ T5690] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1050.413083][ T5690] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1050.414029][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.965527][ T5690] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1051.148928][ T5690] usb 1-1: USB disconnect, device number 13 [ 1051.162156][ T7820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.237260][ T7820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.358345][ T7820] bond0 (unregistering): Released all slaves [ 1051.607098][ T7820] hsr_slave_0: left promiscuous mode [ 1051.619738][ T7820] hsr_slave_1: left promiscuous mode [ 1051.620481][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.631498][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.564220][T12561] netlink: 'syz.3.1832': attribute type 4 has an invalid length. [ 1052.778056][ T7820] team0 (unregistering): Port device team_slave_1 removed [ 1052.791653][ T7820] team0 (unregistering): Port device team_slave_0 removed [ 1053.158590][T11561] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 1054.795101][T12224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.841579][T12432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.841657][T12432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.841765][T12432] bridge_slave_0: entered allmulticast mode [ 1054.847573][T12432] bridge_slave_0: entered promiscuous mode [ 1054.871186][T12432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.871260][T12432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.871356][T12432] bridge_slave_1: entered allmulticast mode [ 1054.876278][T12432] bridge_slave_1: entered promiscuous mode [ 1055.063394][T12432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.088105][T12432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.276110][T12224] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.291179][T12432] team0: Port device team_slave_0 added [ 1055.306493][T12432] team0: Port device team_slave_1 added [ 1055.508158][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.508664][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.522593][T12432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.522604][T12432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.522622][T12432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.525489][T12432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.525498][T12432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.525516][T12432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.587763][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.587982][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.754618][T12238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.784942][T12432] hsr_slave_0: entered promiscuous mode [ 1055.790539][T12432] hsr_slave_1: entered promiscuous mode [ 1056.034299][T12584] jffs2: notice: (12584) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1058.024979][T12238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.002291][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.002398][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.193870][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.193959][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.605331][ T5251] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1062.339769][T12615] netlink: 'syz.3.1841': attribute type 4 has an invalid length. [ 1064.775627][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.775673][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.662440][T11561] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1065.689375][T12238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.703198][T12224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.011936][T12668] jffs2: notice: (12668) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1069.961258][T12432] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1070.782212][T12432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1070.802283][T12432] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1070.858382][T12432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1070.863438][T12432] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1070.943165][T12432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1070.958059][T12432] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1071.096104][T12432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1071.678214][T12432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.722088][T11556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1071.826639][T11556] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1071.829937][T11556] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1071.836556][T11556] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1071.837867][T11556] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1072.869762][T12693] netlink: 'syz.3.1849': attribute type 4 has an invalid length. [ 1072.873191][T12432] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.985738][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.985818][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.191001][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.191082][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.517803][T11556] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1073.564365][T11556] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1073.569608][T11556] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1073.573076][T11556] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1073.574848][T11556] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1075.183630][T11561] Bluetooth: hci1: command tx timeout [ 1075.732855][T11561] Bluetooth: hci6: command tx timeout [ 1077.604341][T11561] Bluetooth: hci1: command tx timeout [ 1077.812860][T11561] Bluetooth: hci6: command tx timeout [ 1078.941128][T11561] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 1079.656613][T11561] Bluetooth: hci1: command tx timeout [ 1079.892593][T11561] Bluetooth: hci6: command tx timeout [ 1080.885939][T12778] jffs2: notice: (12778) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1084.560513][T11556] Bluetooth: hci6: command tx timeout [ 1084.560577][T11561] Bluetooth: hci1: command tx timeout [ 1084.595896][T12432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1085.952742][T12789] netlink: 'syz.3.1857': attribute type 4 has an invalid length. [ 1087.202688][ T7820] bridge_slave_1: left allmulticast mode [ 1087.202714][ T7820] bridge_slave_1: left promiscuous mode [ 1087.202872][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.320721][ T7820] bridge_slave_0: left allmulticast mode [ 1087.320747][ T7820] bridge_slave_0: left promiscuous mode [ 1087.320927][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.612657][T11561] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1093.658921][ T7820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.669331][ T7820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.684820][ T7820] bond0 (unregistering): Released all slaves [ 1094.070545][ T7820] hsr_slave_0: left promiscuous mode [ 1094.082609][ T7820] hsr_slave_1: left promiscuous mode [ 1094.083341][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.091824][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.687024][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1863'. [ 1094.687042][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1863'. [ 1095.247101][T12851] jffs2: notice: (12851) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1099.000298][ T7820] team0 (unregistering): Port device team_slave_1 removed [ 1099.026509][ T7820] team0 (unregistering): Port device team_slave_0 removed [ 1101.131625][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1101.171077][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1101.180573][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1101.203460][ T5601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1101.203973][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1101.427503][T12688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.427586][T12688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.427692][T12688] bridge_slave_0: entered allmulticast mode [ 1101.441341][T12688] bridge_slave_0: entered promiscuous mode [ 1101.583869][T12688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.583946][T12688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.584046][T12688] bridge_slave_1: entered allmulticast mode [ 1101.587824][T12688] bridge_slave_1: entered promiscuous mode [ 1102.511077][T12880] netlink: 'syz.3.1865': attribute type 4 has an invalid length. [ 1102.622275][T12701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.622352][T12701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.622581][T12701] bridge_slave_0: entered allmulticast mode [ 1102.649171][T12701] bridge_slave_0: entered promiscuous mode [ 1102.714875][T12701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.714958][T12701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.715058][T12701] bridge_slave_1: entered allmulticast mode [ 1102.716631][T12701] bridge_slave_1: entered promiscuous mode [ 1102.837227][T12688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.094957][T12688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.127843][T12701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.196267][T12701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.346356][T11561] Bluetooth: hci4: command tx timeout [ 1103.461438][T12688] team0: Port device team_slave_0 added [ 1103.530048][T12701] team0: Port device team_slave_0 added [ 1103.549090][T12688] team0: Port device team_slave_1 added [ 1103.557657][T12701] team0: Port device team_slave_1 added [ 1105.616336][T11561] Bluetooth: hci4: command tx timeout [ 1107.653751][T11561] Bluetooth: hci4: command tx timeout [ 1108.653454][T12688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.653468][T12688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.653486][T12688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.940887][T12701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.940900][T12701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.940917][T12701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.941757][T12688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.941766][T12688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.941784][T12688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.943351][ T5251] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1109.158577][T12701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.158591][T12701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.158609][T12701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.460169][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1871'. [ 1109.460187][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1871'. [ 1109.736734][T11561] Bluetooth: hci4: command tx timeout [ 1110.015945][T12923] jffs2: notice: (12923) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1111.975156][T12688] hsr_slave_0: entered promiscuous mode [ 1111.980363][T12688] hsr_slave_1: entered promiscuous mode [ 1111.982370][T12688] debugfs: 'hsr0' already exists in 'hsr' [ 1111.982387][T12688] Cannot create hsr debugfs directory [ 1112.984244][T12701] hsr_slave_0: entered promiscuous mode [ 1112.985022][T12701] hsr_slave_1: entered promiscuous mode [ 1112.989005][T12701] debugfs: 'hsr0' already exists in 'hsr' [ 1112.989021][T12701] Cannot create hsr debugfs directory [ 1113.966177][T11561] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1122.918531][ T5251] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1126.318889][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.318940][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.487021][T12979] jffs2: notice: (12979) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1130.268305][T11561] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 1132.196742][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1132.231826][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1132.240789][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1132.245100][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1132.246494][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1134.452543][ T5601] Bluetooth: hci0: command tx timeout [ 1136.532593][ T5601] Bluetooth: hci0: command tx timeout [ 1138.256323][T11561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1138.298227][T11561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1138.301964][T11561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1138.325784][T11561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1138.326546][T11561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1139.571565][T12872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.571714][T12872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.571831][T12872] bridge_slave_0: entered allmulticast mode [ 1139.579016][T12872] bridge_slave_0: entered promiscuous mode [ 1139.583853][T12872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.583958][T12872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.584062][T12872] bridge_slave_1: entered allmulticast mode [ 1139.588569][T12872] bridge_slave_1: entered promiscuous mode [ 1139.862508][T11561] Bluetooth: hci0: command tx timeout [ 1140.109135][T12872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.114634][ T5251] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1140.154106][T12872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.206595][ T7820] bridge_slave_1: left allmulticast mode [ 1140.206621][ T7820] bridge_slave_1: left promiscuous mode [ 1140.206793][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.269465][ T7820] bridge_slave_0: left allmulticast mode [ 1140.269488][ T7820] bridge_slave_0: left promiscuous mode [ 1140.269644][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.372683][T11561] Bluetooth: hci5: command tx timeout [ 1140.420046][ T7820] bridge_slave_1: left allmulticast mode [ 1140.420070][ T7820] bridge_slave_1: left promiscuous mode [ 1140.420217][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.447340][ T7820] bridge_slave_0: left allmulticast mode [ 1140.447363][ T7820] bridge_slave_0: left promiscuous mode [ 1140.447509][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.270428][T13040] jffs2: notice: (13040) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1141.405588][ T7820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1141.408279][ T7820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1141.410165][ T7820] bond0 (unregistering): Released all slaves [ 1141.663988][ T7820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1141.666737][ T7820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1141.669259][ T7820] bond0 (unregistering): Released all slaves [ 1141.902152][T11561] Bluetooth: hci0: command tx timeout [ 1142.474568][T11561] Bluetooth: hci5: command tx timeout [ 1142.908106][T11561] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1143.106802][T12872] team0: Port device team_slave_0 added [ 1143.130103][T13058] jffs2: notice: (13058) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1144.107229][ T7820] hsr_slave_0: left promiscuous mode [ 1144.119630][ T7820] hsr_slave_1: left promiscuous mode [ 1144.120347][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.124203][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.109413][ T7820] hsr_slave_0: left promiscuous mode [ 1146.110020][ T7820] hsr_slave_1: left promiscuous mode [ 1146.117865][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.907626][T11561] Bluetooth: hci5: command tx timeout [ 1146.937089][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.267198][ T7820] team0 (unregistering): Port device team_slave_1 removed [ 1147.284480][ T7820] team0 (unregistering): Port device team_slave_0 removed [ 1147.591622][ T7820] team0 (unregistering): Port device team_slave_1 removed [ 1147.605915][ T7820] team0 (unregistering): Port device team_slave_0 removed [ 1147.795019][T12872] team0: Port device team_slave_1 added [ 1149.465499][T11561] Bluetooth: hci5: command tx timeout [ 1149.621629][T12872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.621644][T12872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.621665][T12872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.644545][T12872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.644557][T12872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.644574][T12872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1152.169588][T12872] hsr_slave_0: entered promiscuous mode [ 1152.178648][T12872] hsr_slave_1: entered promiscuous mode [ 1153.493355][T13084] jffs2: notice: (13084) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1153.599712][ T7820] bridge_slave_1: left allmulticast mode [ 1153.599736][ T7820] bridge_slave_1: left promiscuous mode [ 1153.599902][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.640865][ T7820] bridge_slave_0: left allmulticast mode [ 1153.640888][ T7820] bridge_slave_0: left promiscuous mode [ 1153.641042][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.754664][T11561] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 1158.309820][ T7820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.343823][ T7820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.351918][ T7820] bond0 (unregistering): Released all slaves [ 1163.478366][ T3351] IPVS: starting estimator thread 0... [ 1163.582577][T13120] IPVS: using max 13 ests per chain, 31200 per kthread [ 1163.730568][ T7820] hsr_slave_0: left promiscuous mode [ 1163.731135][ T7820] hsr_slave_1: left promiscuous mode [ 1163.731838][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.742048][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.258239][ T7820] team0 (unregistering): Port device team_slave_1 removed [ 1164.306405][ T7820] team0 (unregistering): Port device team_slave_0 removed [ 1166.401169][ T5601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1166.469521][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1166.471961][ T5601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1166.519117][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1166.519638][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1167.287461][ T5601] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1167.658650][T13177] jffs2: notice: (13177) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1168.104464][T12994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.104539][T12994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.104648][T12994] bridge_slave_0: entered allmulticast mode [ 1168.112230][T12994] bridge_slave_0: entered promiscuous mode [ 1168.157559][ T7820] bridge_slave_1: left allmulticast mode [ 1168.157581][ T7820] bridge_slave_1: left promiscuous mode [ 1168.157738][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.159746][ T7820] bridge_slave_0: left allmulticast mode [ 1168.159764][ T7820] bridge_slave_0: left promiscuous mode [ 1168.159900][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.216653][ T7820] bridge_slave_1: left allmulticast mode [ 1168.216678][ T7820] bridge_slave_1: left promiscuous mode [ 1168.216839][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.229819][ T7820] bridge_slave_0: left allmulticast mode [ 1168.229841][ T7820] bridge_slave_0: left promiscuous mode [ 1168.229982][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.612609][ T5601] Bluetooth: hci1: command tx timeout [ 1169.143294][T13190] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1169.184198][ T7820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.226176][ T7820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.230525][ T7820] bond0 (unregistering): Released all slaves [ 1169.611818][ T7820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.624364][ T7820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.630144][ T7820] bond0 (unregistering): Released all slaves [ 1169.646423][T12994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.646497][T12994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.646614][T12994] bridge_slave_1: entered allmulticast mode [ 1169.651939][T12994] bridge_slave_1: entered promiscuous mode [ 1170.568093][T13026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.568171][T13026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.568296][T13026] bridge_slave_0: entered allmulticast mode [ 1170.576683][T13026] bridge_slave_0: entered promiscuous mode [ 1170.639286][T12994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1170.670205][T13026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.670285][T13026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.670404][T13026] bridge_slave_1: entered allmulticast mode [ 1170.674663][T13026] bridge_slave_1: entered promiscuous mode [ 1170.677852][T12994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.692566][ T5601] Bluetooth: hci1: command tx timeout [ 1170.752915][ T7820] hsr_slave_0: left promiscuous mode [ 1170.755588][ T7820] hsr_slave_1: left promiscuous mode [ 1170.756288][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.761244][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1170.781581][ T7820] hsr_slave_0: left promiscuous mode [ 1170.782346][ T7820] hsr_slave_1: left promiscuous mode [ 1170.783848][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.836326][ T7820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.661954][ T5601] Bluetooth: hci1: command tx timeout [ 1175.877977][ T7820] team0 (unregistering): Port device team_slave_1 removed [ 1175.898306][ T7820] team0 (unregistering): Port device team_slave_0 removed [ 1176.237493][ T7820] team0 (unregistering): Port device team_slave_1 removed [ 1176.250911][ T7820] team0 (unregistering): Port device team_slave_0 removed [ 1176.641483][T12994] team0: Port device team_slave_0 added [ 1176.661305][T13026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.679089][T12994] team0: Port device team_slave_1 added [ 1176.721143][T13026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.561180][T12994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.561194][T12994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.561212][T12994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.577883][T13026] team0: Port device team_slave_0 added [ 1177.579954][T12994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.579964][T12994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.579982][T12994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.625698][T13026] team0: Port device team_slave_1 added [ 1177.733102][T11561] Bluetooth: hci1: command tx timeout [ 1178.028287][T13026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1178.028301][T13026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.028318][T13026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1178.117847][T13026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.117860][T13026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.117877][T13026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.181128][T12994] hsr_slave_0: entered promiscuous mode [ 1179.134049][T12994] hsr_slave_1: entered promiscuous mode [ 1179.408818][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 1179.409355][T13224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1179.441317][T13224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.202189][T13026] hsr_slave_0: entered promiscuous mode [ 1181.222387][T13026] hsr_slave_1: entered promiscuous mode [ 1181.223521][T13026] debugfs: 'hsr0' already exists in 'hsr' [ 1181.223552][T13026] Cannot create hsr debugfs directory [ 1181.402567][ T5690] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1181.553079][ T5690] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1181.554116][ T5690] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.554148][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.602273][ T5690] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 1181.604332][ T5690] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 1181.604381][ T5690] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 1181.616453][ T5690] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 1181.616512][ T5690] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 1181.625008][ T5690] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1181.639358][ T5690] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 1181.639416][ T5690] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 1181.646948][ T5690] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1181.964255][ T5690] usb 1-1: USB disconnect, device number 14 [ 1182.023174][ T5690] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1182.041015][ T5690] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1182.052681][ T5690] keyspan 1-1:1.0: device disconnected [ 1183.790957][T13244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1183.849001][T13147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.849134][T13147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.849243][T13147] bridge_slave_0: entered allmulticast mode [ 1183.860598][T13147] bridge_slave_0: entered promiscuous mode [ 1183.897231][T13147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.897304][T13147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.897406][T13147] bridge_slave_1: entered allmulticast mode [ 1183.901925][T13147] bridge_slave_1: entered promiscuous mode [ 1184.151672][T13147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.318217][T13147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.567446][T13147] team0: Port device team_slave_0 added [ 1184.652022][T13147] team0: Port device team_slave_1 added [ 1184.653894][T12994] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1184.693505][T12994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1184.768119][T12994] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1186.759410][T12994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1187.733702][T12994] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1188.423455][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1188.423501][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1189.619165][T12994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1189.779539][T13147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.779552][T13147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.779570][T13147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.780804][T12994] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1189.822065][T12994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1189.842796][T13147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.842806][T13147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.842824][T13147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.975861][ T5251] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1191.333520][T13147] hsr_slave_0: entered promiscuous mode [ 1191.338616][T13147] hsr_slave_1: entered promiscuous mode [ 1191.339169][T13147] debugfs: 'hsr0' already exists in 'hsr' [ 1191.339186][T13147] Cannot create hsr debugfs directory [ 1191.512544][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1191.539294][T13026] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1191.547239][T13026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1191.569503][T13026] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1191.579640][T13026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1191.655903][T13026] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1191.668972][ T10] usb 4-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 1191.669916][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1191.669935][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1191.671894][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.671909][ T10] usb 4-1: Product: syz [ 1191.671919][ T10] usb 4-1: Manufacturer: syz [ 1191.671928][ T10] usb 4-1: SerialNumber: syz [ 1191.824234][T13026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1191.907374][T13026] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1191.951668][T13026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1191.995448][ T10] kaweth 4-1:1.0: Firmware present in device. [ 1192.151319][ T10] kaweth 4-1:1.0: Statistics collection: 0 [ 1192.151335][ T10] kaweth 4-1:1.0: Multicast filter limit: 0 [ 1192.151345][ T10] kaweth 4-1:1.0: MTU: 0 [ 1192.151354][ T10] kaweth 4-1:1.0: Read MAC address 00:00:00:00:00:00 [ 1199.727103][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1200.708652][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1200.712347][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1200.713150][ T5601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1200.714868][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1207.718946][ T5251] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1222.752259][T13303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.753957][T13303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.754602][T13303] bridge_slave_0: entered allmulticast mode [ 1222.756237][T13303] bridge_slave_0: entered promiscuous mode [ 1222.759157][ T5251] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1223.712295][T13303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.712746][T13303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.712908][T13303] bridge_slave_1: entered allmulticast mode [ 1223.732090][T13303] bridge_slave_1: entered promiscuous mode [ 1225.718382][T13303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.732220][T13303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.718050][T13303] team0: Port device team_slave_0 added [ 1226.733224][T13303] team0: Port device team_slave_1 added [ 1227.728687][T13303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.728701][T13303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.728718][T13303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.732434][T13303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.732444][T13303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.732461][T13303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.733326][T13303] hsr_slave_0: entered promiscuous mode [ 1229.735877][T13303] hsr_slave_1: entered promiscuous mode [ 1229.737888][T13303] debugfs: 'hsr0' already exists in 'hsr' [ 1229.737905][T13303] Cannot create hsr debugfs directory [ 1238.733498][ T5251] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1299.702391][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1316.397810][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13296 [ 1316.405183][ C0] rcu: (detected by 0, t=10502 jiffies, g=124345, q=9697 ncpus=1) [ 1316.413070][ C0] task:syz.0.1927 state:R running task stack:24584 pid:13296 tgid:13295 ppid:5593 task_flags:0x400140 flags:0x00080000 [ 1316.426541][ C0] Call Trace: [ 1316.429836][ C0] [ 1316.432672][ C0] sched_show_task+0x4aa/0x5f0 [ 1316.437454][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 1316.442745][ C0] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 1316.447942][ C0] ? wq_watchdog_touch+0xf9/0x160 [ 1316.452962][ C0] print_other_cpu_stall+0xfbf/0x1350 [ 1316.458323][ C0] ? notifier_call_chain+0x1a5/0x3d0 [ 1316.463602][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1316.469401][ C0] ? __timekeeping_advance+0xe58/0x1370 [ 1316.474988][ C0] rcu_sched_clock_irq+0x9fe/0x10e0 [ 1316.480204][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1316.485865][ C0] ? rcu_is_watching+0x16/0xb0 [ 1316.490635][ C0] ? trace_softirq_raise+0x3b/0x130 [ 1316.495831][ C0] update_process_times+0x234/0x2d0 [ 1316.501029][ C0] tick_nohz_handler+0x38f/0x6b0 [ 1316.505993][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1316.511461][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1316.516583][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1316.522045][ C0] __hrtimer_run_queues+0x3a0/0xaf0 [ 1316.527255][ C0] hrtimer_interrupt+0x4c2/0xa80 [ 1316.532207][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1316.538209][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1316.543843][ C0] [ 1316.546770][ C0] [ 1316.549703][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1316.555695][ C0] RIP: 0010:lock_release+0x2e1/0x3c0 [ 1316.561005][ C0] Code: 8f 03 11 00 00 00 00 eb b5 e8 8b 0e b5 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 c3 49 03 11 48 3b 44 24 28 75 48 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 68 0b 13 [ 1316.580605][ C0] RSP: 0000:ffffc90004c4f7b0 EFLAGS: 00000282 [ 1316.586680][ C0] RAX: 83b4957e823cdb00 RBX: 0000000000000287 RCX: 0000000000000046 [ 1316.594650][ C0] RDX: 00000000fa6b1771 RSI: ffffffff8dadc061 RDI: ffffffff8bcc2e80 [ 1316.602615][ C0] RBP: ffff888026894ac0 R08: ffffffff8188d41d R09: 0000000000000000 [ 1316.610582][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 1316.618567][ C0] R13: 0000000000000002 R14: ffffffff8e059500 R15: ffff888026893e80 [ 1316.626544][ C0] ? __local_bh_disable_ip+0x3d/0x420 [ 1316.631938][ C0] ? bpf_test_run+0x1d1/0x830 [ 1316.636686][ C0] __local_bh_enable_ip+0x97/0x2b0 [ 1316.641799][ C0] ? bpf_test_run+0x1d1/0x830 [ 1316.646469][ C0] bpf_test_run+0x3a8/0x830 [ 1316.650983][ C0] ? __pfx_bpf_test_run+0x10/0x10 [ 1316.656024][ C0] ? slab_build_skb+0x4f/0x400 [ 1316.660793][ C0] ? __kasan_krealloc+0xec/0x110 [ 1316.665740][ C0] ? bpf_prog_test_run_skb+0x903/0x2230 [ 1316.671282][ C0] ? convert___skb_to_skb+0x3d/0x5b0 [ 1316.676567][ C0] bpf_prog_test_run_skb+0xe35/0x2230 [ 1316.681968][ C0] ? __fget_files+0x3a8/0x420 [ 1316.686646][ C0] ? __fget_files+0x2a/0x420 [ 1316.691235][ C0] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1316.697036][ C0] bpf_prog_test_run+0x2cb/0x340 [ 1316.701999][ C0] __sys_bpf+0xa22/0xd90 [ 1316.706248][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 1316.711027][ C0] ? do_futex+0x3e7/0x4e0 [ 1316.715371][ C0] ? rcu_is_watching+0x16/0xb0 [ 1316.720141][ C0] __x64_sys_bpf+0xba/0xd0 [ 1316.724555][ C0] do_syscall_64+0x166/0x520 [ 1316.729165][ C0] ? trace_irq_disable+0x3b/0x140 [ 1316.734224][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.740287][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1316.744993][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.750885][ C0] RIP: 0033:0x7fb284f7e159 [ 1316.755295][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.774889][ C0] RSP: 002b:00007fb2831d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1316.783293][ C0] RAX: ffffffffffffffda RBX: 00007fb285205fa0 RCX: 00007fb284f7e159 [ 1316.791272][ C0] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 1316.799263][ C0] RBP: 00007fb28501503b R08: 0000000000000000 R09: 0000000000000000 [ 1316.807226][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1316.815194][ C0] R13: 00007fb285206038 R14: 00007fb285205fa0 R15: 00007fffea3682a8 [ 1316.823176][ C0] [ 1316.826194][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g124345 f0x0 RCU_GP_WAIT_FQS(5) ->state=I [ 1316.838246][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=56338 [ 1316.846138][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g124345 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=0 [ 1316.857253][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1316.867238][ C0] rcu: RCU grace-period kthread stack dump: [ 1316.873125][ C0] task:rcu_preempt state:I stack:27688 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1316.885041][ C0] Call Trace: [ 1316.888335][ C0] [ 1316.891272][ C0] __schedule+0x16d9/0x5700 [ 1316.895788][ C0] ? __lock_acquire+0x747/0x2de0 [ 1316.900744][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1316.905854][ C0] ? __pfx___schedule+0x10/0x10 [ 1316.910696][ C0] ? lock_acquire+0x115/0x350 [ 1316.915369][ C0] ? schedule+0x90/0x2b0 [ 1316.919609][ C0] schedule+0x164/0x2b0 [ 1316.923757][ C0] schedule_timeout+0x152/0x2c0 [ 1316.928613][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1316.933991][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1316.939275][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1316.945083][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1316.950627][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1316.955495][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1316.960778][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1316.965986][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1316.971800][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1316.976394][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1316.981586][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1316.986516][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1316.991541][ C0] kthread+0x38b/0x470 [ 1316.995602][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1317.000789][ C0] ? __pfx_kthread+0x10/0x10 [ 1317.005393][ C0] ret_from_fork+0x514/0xb70 [ 1317.009989][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1317.015087][ C0] ? __switch_to+0xc89/0x1420 [ 1317.019798][ C0] ? __pfx_kthread+0x10/0x10 [ 1317.024382][ C0] ret_from_fork_asm+0x1a/0x30 [ 1317.029147][ C0] [ 1317.032154][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1317.038465][ C0] CPU: 0 UID: 0 PID: 13296 Comm: syz.0.1927 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1317.048367][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1317.058444][ C0] RIP: 0010:lock_release+0x2e1/0x3c0 [ 1317.063726][ C0] Code: 8f 03 11 00 00 00 00 eb b5 e8 8b 0e b5 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 c3 49 03 11 48 3b 44 24 28 75 48 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 68 0b 13 [ 1317.083324][ C0] RSP: 0000:ffffc90004c4f7b0 EFLAGS: 00000282 [ 1317.089401][ C0] RAX: 83b4957e823cdb00 RBX: 0000000000000287 RCX: 0000000000000046 [ 1317.097395][ C0] RDX: 00000000fa6b1771 RSI: ffffffff8dadc061 RDI: ffffffff8bcc2e80 [ 1317.105370][ C0] RBP: ffff888026894ac0 R08: ffffffff8188d41d R09: 0000000000000000 [ 1317.113331][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 1317.121308][ C0] R13: 0000000000000002 R14: ffffffff8e059500 R15: ffff888026893e80 [ 1317.129274][ C0] FS: 00007fb2831d66c0(0000) GS:ffff888125bcb000(0000) knlGS:0000000000000000 [ 1317.138197][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1317.144768][ C0] CR2: 00007ffcbb28ef52 CR3: 000000003cbb0000 CR4: 00000000003526f0 [ 1317.152733][ C0] Call Trace: [ 1317.156019][ C0] [ 1317.158950][ C0] ? bpf_test_run+0x1d1/0x830 [ 1317.163620][ C0] __local_bh_enable_ip+0x97/0x2b0 [ 1317.168724][ C0] ? bpf_test_run+0x1d1/0x830 [ 1317.173391][ C0] bpf_test_run+0x3a8/0x830 [ 1317.177900][ C0] ? __pfx_bpf_test_run+0x10/0x10 [ 1317.182927][ C0] ? slab_build_skb+0x4f/0x400 [ 1317.187697][ C0] ? __kasan_krealloc+0xec/0x110 [ 1317.192635][ C0] ? bpf_prog_test_run_skb+0x903/0x2230 [ 1317.198170][ C0] ? convert___skb_to_skb+0x3d/0x5b0 [ 1317.203465][ C0] bpf_prog_test_run_skb+0xe35/0x2230 [ 1317.208852][ C0] ? __fget_files+0x3a8/0x420 [ 1317.213536][ C0] ? __fget_files+0x2a/0x420 [ 1317.218123][ C0] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1317.223919][ C0] bpf_prog_test_run+0x2cb/0x340 [ 1317.228858][ C0] __sys_bpf+0xa22/0xd90 [ 1317.233120][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 1317.237878][ C0] ? do_futex+0x3e7/0x4e0 [ 1317.242214][ C0] ? rcu_is_watching+0x16/0xb0 [ 1317.247003][ C0] __x64_sys_bpf+0xba/0xd0 [ 1317.251436][ C0] do_syscall_64+0x166/0x520 [ 1317.256029][ C0] ? trace_irq_disable+0x3b/0x140 [ 1317.261046][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.267114][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1317.271801][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.277700][ C0] RIP: 0033:0x7fb284f7e159 [ 1317.282108][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.301705][ C0] RSP: 002b:00007fb2831d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1317.310110][ C0] RAX: ffffffffffffffda RBX: 00007fb285205fa0 RCX: 00007fb284f7e159 [ 1317.318075][ C0] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 1317.326036][ C0] RBP: 00007fb28501503b R08: 0000000000000000 R09: 0000000000000000 [ 1317.333996][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1317.341957][ C0] R13: 00007fb285206038 R14: 00007fb285205fa0 R15: 00007fffea3682a8 [ 1317.349934][ C0]