last executing test programs: 14m13.592055341s ago: executing program 0 (id=41): mkdirat(0xffffffffffffff9c, 0x0, 0x173) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x4000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000000280)=""/102392, 0x18ff8) socket$inet(0x2, 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000019280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000192c0)={0x30, 0x0, &(0x7f0000019300)=[@acquire_done={0x40106309, 0x3}, @free_buffer, @release={0x40046306, 0x3}, @acquire]}) 14m11.911370638s ago: executing program 0 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000540)=""/4113, 0x1011) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000016c0)='dir0\x00', 0x80) mount(0x0, 0x0, &(0x7f0000001740)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001780)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r4, &(0x7f00000017c0)=""/4, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={0x0}, 0x1, 0x0, 0x0, 0x24004811}, 0x2c000010) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 14m6.817868159s ago: executing program 0 (id=50): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) syz_open_procfs$userns(r1, &(0x7f00000000c0)) 14m3.963764573s ago: executing program 0 (id=58): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff97ffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000900)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000940)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000980)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 14m2.283572433s ago: executing program 0 (id=61): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f00000002c0)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) sendmmsg(r0, &(0x7f0000000340), 0x3fffffffffffe3d, 0xf5) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f00000000c0)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000380)=0x2c6, 0x4) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040090) 13m51.085683815s ago: executing program 0 (id=72): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000d40)={'syzkaller0\x00', @random="2b0100004ec6"}) 13m34.383204867s ago: executing program 32 (id=72): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000d40)={'syzkaller0\x00', @random="2b0100004ec6"}) 11m14.329544096s ago: executing program 2 (id=344): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400"], 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900feefa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}}, 0x20008040) 11m13.760031686s ago: executing program 4 (id=346): openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000680), 0x2, 0x141102) gettid() ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) read$FUSE(r1, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='wwnn=0x1000000044001123,wwpn=0x2000000044001123', 0x2f) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123', 0x63) 11m12.751574355s ago: executing program 4 (id=347): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4014) 11m10.620017413s ago: executing program 2 (id=350): ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000580)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000d00)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000d40)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 11m9.964112258s ago: executing program 4 (id=351): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x28000003, 0x2000007, 0x30, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000880)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000940), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x29c9, 0x1, 0x13, r3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 11m9.925362562s ago: executing program 1 (id=352): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = gettid() sendmsg$AUDIT_SET(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x3e9, 0x20, 0x70bd25, 0x25dfdbfd, {0x0, 0x1, 0x0, r2, 0xfffff801, 0xb, 0x200, 0x5, 0x0, 0x8000003, 0x6}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x400c0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001280)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x80, 0x7a, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$nl_route(r3, 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000001380)={@private2}, &(0x7f00000013c0)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x10008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000980)=0x80080001, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'xfrm0\x00'}) sendto$packet(r5, &(0x7f0000000a00)="280320", 0x3, 0x400c010, 0x0, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x20002) 11m8.658147226s ago: executing program 4 (id=354): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000880)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r3, &(0x7f000000d000)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_PTRACER(0x59616d61, 0x0) epoll_create1(0x80000) rseq(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r4 = fanotify_init(0x40, 0x400) readv(r4, &(0x7f0000000380), 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='.\x00', 0xa880, 0x97) fanotify_mark(r4, 0x1, 0x40001019, r5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x1, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11m6.593926599s ago: executing program 4 (id=356): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000007c0)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000800)={0x3, &(0x7f0000000840)=[{0x28, 0x20, 0x0, 0xfffff034}, {0x50, 0x1, 0x0, 0x80000000}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newpolicy={0x13c, 0x13, 0x101, 0xfffffffd, 0x0, {{@in=@multicast1, @in6=@remote, 0x100, 0xb, 0x400, 0x9, 0xa}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x2, 0x1, 0x400000000000, 0x100}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x4, 0x2, 0x48, 0x4, 0xffff, 0x7}, {{@in6=@loopback, 0x4d4, 0x2b}, 0xa, @in=@multicast1, 0x8, 0x4, 0x0, 0x3, 0xfffffff9, 0x10400, 0xd9}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) 11m6.424835476s ago: executing program 1 (id=357): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r2, &(0x7f000000d000)=""/102392, 0x18ff8) rseq(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) fanotify_init(0x40, 0x400) 11m2.88905659s ago: executing program 1 (id=362): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(0x0, 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') connect$x25(r1, &(0x7f0000000600), 0x12) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd\x00', 0x8) mount(0x0, 0x0, &(0x7f00000006c0)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x1, 0x0) write(r3, 0x0, 0x0) 11m2.564014643s ago: executing program 4 (id=363): unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x1f02, 0x12) getsockopt(r0, 0x200000000114, 0x2716, 0x0, &(0x7f0000000240)) write$dsp(0xffffffffffffffff, 0x0, 0x0) 11m1.755047081s ago: executing program 2 (id=365): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000880)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000008c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r4, &(0x7f000000d000)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_PTRACER(0x59616d61, r2) epoll_create1(0x80000) rseq(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r5 = fanotify_init(0x40, 0x400) readv(r5, &(0x7f0000000380), 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='.\x00', 0xa880, 0x97) fanotify_mark(r5, 0x1, 0x40001019, r6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x1, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10m59.29161454s ago: executing program 1 (id=367): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000013c0)) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001400)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000014c0)=0xc0) 10m58.834881828s ago: executing program 2 (id=368): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) getpriority(0x2, r1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) timerfd_gettime(0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x28002) write$9p(0xffffffffffffffff, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000540)=[@release={0x40046306, 0x1}]}) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c40)={0x0, 0x0, 0x0}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x5, 0x80000000, 0x0, 0xe06, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0xc, 0x81}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f00000001c0)=[{0x9, 0x0, 0x3, 0xfffffffe}]}, 0x10) mount(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000340)) 10m58.789759095s ago: executing program 1 (id=369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, '\x00', "59fd4d7ba4efd381f62a75b2daaff4e321bccef0fe33f7926d750d72aac6ded4", "89a2f763"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) 10m58.523462212s ago: executing program 1 (id=370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x10}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000580), 0x56) sendmsg$kcm(r6, &(0x7f00000005c0)={&(0x7f0000000600)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)="27030200dc0f14000e0007000024c1020000ff3207c2fb7f00006e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 10m54.908401264s ago: executing program 2 (id=372): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000004c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@delchain={0xac, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x80, 0x2, [@TCA_BPF_ACT={0x7c, 0x1, [@m_bpf={0x4c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x21, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x20000080) socket(0x10, 0x803, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000cc0), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000d00), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000d40)={r0, 0x800, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x2, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded147e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd2bf35239d2", "4f000000dd9d9ac2f63a7ad700", [0x5, 0x800000]}}) r2 = dup(r1) read$FUSE(r2, &(0x7f0000000e80)={0x2020}, 0x67ec255e) 10m53.97987779s ago: executing program 2 (id=374): ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000580)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000d00)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000d40)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 10m45.8808874s ago: executing program 33 (id=363): unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x1f02, 0x12) getsockopt(r0, 0x200000000114, 0x2716, 0x0, &(0x7f0000000240)) write$dsp(0xffffffffffffffff, 0x0, 0x0) 10m41.904408612s ago: executing program 34 (id=370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x10}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000580), 0x56) sendmsg$kcm(r6, &(0x7f00000005c0)={&(0x7f0000000600)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)="27030200dc0f14000e0007000024c1020000ff3207c2fb7f00006e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 10m37.840322767s ago: executing program 35 (id=374): ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000580)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000d00)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000d40)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 10m3.670120963s ago: executing program 3 (id=407): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) socket(0x10, 0x803, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000cc0), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000d00), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000d40)={r0, 0x800, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x2, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded147e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd2bf35239d2", "4f000000dd9d9ac2f63a7ad700", [0x5, 0x800000]}}) r2 = dup(r1) read$FUSE(r2, &(0x7f0000000e80)={0x2020}, 0x67ec255e) 10m2.960529157s ago: executing program 3 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000002800)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000002840)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000002880)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000028c0)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000002900), 0xfa0) syz_clone3(&(0x7f0000002940)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f00000029c0)}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000002a00)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002a40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000002a80)='./config\x00', &(0x7f0000002ac0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002b00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002b40)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000002b80)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000002e40)='fd/3\x00') 10m2.643975835s ago: executing program 3 (id=409): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000002c40)=ANY=[@ANYBLOB="12010000020000082505a5a44000000001010902440001010000000904000003020600000524060000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x80404531, &(0x7f0000001980)=""/4084) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000001180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002b40)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) 9m59.303459202s ago: executing program 3 (id=410): add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$rxrpc(0x21, 0x2, 0x2) socket(0x1e, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141102) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000540), 0x0, 0x4a980) socket$inet(0x2b, 0x801, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 9m58.13954827s ago: executing program 3 (id=411): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000006c0)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r4, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x4e22, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000740)="a6", 0xffffff4c, 0x0, 0x0, 0x0) 9m57.10890971s ago: executing program 3 (id=412): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, 0x0, 0x4048043) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getrandom(&(0x7f0000001380)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 9m40.184118493s ago: executing program 36 (id=412): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, 0x0, 0x4048043) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getrandom(&(0x7f0000001380)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6m1.955702469s ago: executing program 6 (id=459): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000008c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r2, &(0x7f000000d000)=""/102392, 0x18ff8) rseq(0x0, 0x0, 0x0, 0x0) fanotify_init(0x40, 0x400) 5m54.835848879s ago: executing program 6 (id=471): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000880)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000008c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r4, &(0x7f000000d000)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_PTRACER(0x59616d61, r2) epoll_create1(0x80000) rseq(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r5 = fanotify_init(0x40, 0x400) readv(r5, &(0x7f0000000380), 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='.\x00', 0xa880, 0x97) fanotify_mark(r5, 0x1, 0x40001019, r6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x1, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m51.156657022s ago: executing program 6 (id=479): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc054) gettid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000800)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000880), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0x2, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x40810) recvfrom$inet(r0, &(0x7f0000000b40)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) capset(&(0x7f00000003c0)={0x20080522}, 0x0) mount(0x0, 0x0, 0x0, 0x3000096, 0x0) chroot(&(0x7f0000000780)='./file0\x00') 5m49.69830604s ago: executing program 6 (id=482): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "000000000000000000000000f600"}) 5m49.463594338s ago: executing program 6 (id=484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x280201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x26e8, 0x2, 0xffff1000, 0x1000, &(0x7f0000b03000/0x1000)=nil}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000008c0)={0x1, &(0x7f0000000900)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r5, &(0x7f00000003c0)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) close_range(r4, 0xffffffffffffffff, 0x0) 5m49.254562942s ago: executing program 6 (id=485): socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./nfsd\x00', &(0x7f0000000640)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='3', 0x1) 5m33.007233965s ago: executing program 37 (id=485): socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./nfsd\x00', &(0x7f0000000640)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='3', 0x1) 2m38.04376094s ago: executing program 7 (id=868): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="0600000003000040", 0x8) 2m37.796547489s ago: executing program 7 (id=869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0x4, &(0x7f00000009c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x27409}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 2m36.314162997s ago: executing program 7 (id=873): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000001840)="a6dc09dd", 0x4, 0x20000c4, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001900)=""/4084, 0xff4}], 0x1}, 0x4}], 0x1, 0x10022, 0x0) 2m36.175152161s ago: executing program 7 (id=874): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(0xffffffffffffffff) syz_open_dev$MSR(&(0x7f0000000140), 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)="95", 0x1}], 0x1) r4 = socket$inet(0x2, 0x2, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000280)) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c) pipe(&(0x7f0000000700)) 2m33.620815998s ago: executing program 7 (id=879): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) 2m33.202529657s ago: executing program 7 (id=883): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000001840)="a6dc09dd", 0x4, 0x20000c4, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001900)=""/4084, 0xff4}], 0x1}, 0x4}], 0x1, 0x10022, 0x0) 2m16.725076084s ago: executing program 38 (id=883): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000001840)="a6dc09dd", 0x4, 0x20000c4, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001900)=""/4084, 0xff4}], 0x1}, 0x4}], 0x1, 0x10022, 0x0) 5.911193553s ago: executing program 5 (id=1202): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x0) 4.828584553s ago: executing program 5 (id=1204): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000009c0)='pagemap\x00') pread64(r1, &(0x7f0000000a00)=""/102400, 0x19020, 0x1000000000) 4.355581345s ago: executing program 5 (id=1205): unshare(0x22020600) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f00000002c0)=[{r0, 0x617}, {r1, 0x22}], 0x2, 0x0, 0x0, 0x0) 4.131189999s ago: executing program 5 (id=1207): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file1\x00', 0x14b442, 0x82) pwritev2(r1, 0x0, 0x0, 0x5412, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0x0, 0x10, &(0x7f0000000e40), 0x237}, 0x48) 2.915696472s ago: executing program 9 (id=1208): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001a00010028bd70000000000002202003ff0100070002000008000300", @ANYRES32=r2], 0x34}}, 0xea5bc50b6199d77e) 2.748297062s ago: executing program 9 (id=1210): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="fff8bb56e28b25670bf0e4b2911bb1d1b10bf7d2b0875e5fd6a782f8626b08066cdbd930e3c00d4d0d574623d24c744255", 0x31}], 0x1, 0x0, 0x0, 0x20008000}}], 0x1, 0x8020) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a1081, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100003801000000000000") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 ', 0x49) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000800000000000000a0010000380100000100"/42) 2.097888845s ago: executing program 8 (id=1212): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x0) 1.855795409s ago: executing program 9 (id=1213): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000009c0)='pagemap\x00') pread64(r1, &(0x7f0000000a00)=""/102400, 0x19020, 0x1000000000) 1.589325784s ago: executing program 9 (id=1214): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000018c0)={'wlan0\x00'}) 1.066473673s ago: executing program 8 (id=1215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x4800) 911.789678ms ago: executing program 8 (id=1216): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) listen(r0, 0x1000027b) 878.303875ms ago: executing program 8 (id=1217): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af25, &(0x7f0000001bc0)=0x1) 764.956744ms ago: executing program 8 (id=1218): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f0000000340)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)="f0", 0x1}], 0x1}, 0x40054) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @local}}, 0xabb8, 0x67, 0xa4f, 0xc4, 0x28, 0xffffff89, 0xa9}, 0x9c) 514.140473ms ago: executing program 5 (id=1219): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2) 513.91954ms ago: executing program 9 (id=1220): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x92eda4082f935ab3}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setrlimit(0xe, &(0x7f0000000440)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)}, {0x0}], 0x2) sched_setscheduler(0x0, 0x0, &(0x7f0000000640)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000001940)=0x9, 0x4) bind$inet6(r1, &(0x7f0000001980)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000001a00)=[{&(0x7f0000001a40)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 460.205081ms ago: executing program 8 (id=1221): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000440)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) 111.262876ms ago: executing program 9 (id=1222): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000009c0)='pagemap\x00') pread64(r1, &(0x7f0000000a00)=""/102400, 0x19020, 0x1000000000) 0s ago: executing program 5 (id=1223): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x0) kernel console output (not intermixed with test programs): ge_slave_1: left allmulticast mode [ 497.564156][ T5940] bridge_slave_1: left promiscuous mode [ 497.564376][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.734396][ T5940] bridge_slave_0: left allmulticast mode [ 497.734412][ T5940] bridge_slave_0: left promiscuous mode [ 497.734577][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.979051][ T5940] bridge_slave_1: left allmulticast mode [ 497.979069][ T5940] bridge_slave_1: left promiscuous mode [ 497.979224][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.108121][ T5940] bridge_slave_0: left allmulticast mode [ 498.108138][ T5940] bridge_slave_0: left promiscuous mode [ 498.108288][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.342511][ T5940] bridge_slave_1: left allmulticast mode [ 498.342531][ T5940] bridge_slave_1: left promiscuous mode [ 498.342685][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.450054][ T5940] bridge_slave_0: left allmulticast mode [ 498.450071][ T5940] bridge_slave_0: left promiscuous mode [ 498.450226][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.684354][ T5940] bridge_slave_1: left allmulticast mode [ 498.684373][ T5940] bridge_slave_1: left promiscuous mode [ 498.684550][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.792663][ T5940] bridge_slave_0: left allmulticast mode [ 498.792681][ T5940] bridge_slave_0: left promiscuous mode [ 498.792849][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.048513][ T5940] bridge_slave_1: left allmulticast mode [ 499.048532][ T5940] bridge_slave_1: left promiscuous mode [ 499.048680][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.176818][ T5940] bridge_slave_0: left allmulticast mode [ 499.176835][ T5940] bridge_slave_0: left promiscuous mode [ 499.176984][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.411754][ T5940] bridge_slave_1: left allmulticast mode [ 499.411771][ T5940] bridge_slave_1: left promiscuous mode [ 499.411918][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.529322][ T5940] bridge_slave_0: left allmulticast mode [ 499.529339][ T5940] bridge_slave_0: left promiscuous mode [ 499.529487][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.666524][ T5940] pimreg3: left allmulticast mode [ 499.763711][ T5940] bridge_slave_1: left allmulticast mode [ 499.763730][ T5940] bridge_slave_1: left promiscuous mode [ 499.763883][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.893343][ T5940] bridge_slave_0: left allmulticast mode [ 499.895336][ T5940] bridge_slave_0: left promiscuous mode [ 499.895498][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.576460][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.661751][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.726673][ T5940] bond0 (unregistering): Released all slaves [ 501.121306][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.208519][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.271772][ T5940] bond0 (unregistering): Released all slaves [ 501.612694][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.622926][ C1] net_ratelimit: 15 callbacks suppressed [ 501.721249][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.784694][ T5940] bond0 (unregistering): Released all slaves [ 502.093661][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.179975][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.246801][ T5940] bond0 (unregistering): Released all slaves [ 502.852732][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.937912][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.961654][ T5940] bond0 (unregistering): Released all slaves [ 503.545580][ T5940] bond1 (unregistering): Released all slaves [ 503.910246][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.995779][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.060840][ T5940] bond0 (unregistering): Released all slaves [ 505.225159][ T8066] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 505.319137][ T8066] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.335700][ T8066] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 505.425624][ T8066] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.795694][ T8066] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 505.853506][ T8066] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.864841][ T5242] 8021q: adding VLAN 0 to HW filter on device eth21 [ 505.909966][ T8066] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 505.998525][ T8066] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 506.403378][ T8060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.969692][ T8060] veth0_vlan: entered promiscuous mode [ 508.008991][ T8066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.078997][ T8060] veth1_vlan: entered promiscuous mode [ 508.144713][ T8066] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.181063][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.181252][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.233357][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.233459][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.643332][ T8060] veth0_macvtap: entered promiscuous mode [ 508.835171][ T8060] veth1_macvtap: entered promiscuous mode [ 508.861945][ T8109] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 508.927455][ T8109] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 508.959117][ T8109] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 509.053909][ T8109] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.109587][ T8109] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 509.261456][ T8109] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.465011][ T8109] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 509.633101][ T8109] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.112966][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.340132][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.723980][ T8156] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 510.874452][ T8156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.913508][ T8156] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 511.014285][ T8156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 511.126396][ T8156] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 511.252525][ T8156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 511.400073][ T8156] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 511.576986][ T8156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.552591][ T8066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.736370][ C1] net_ratelimit: 36 callbacks suppressed [ 513.261472][ T5940] hsr_slave_0: left promiscuous mode [ 513.302751][ T5940] hsr_slave_1: left promiscuous mode [ 513.304139][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.326932][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.527797][ T5940] hsr_slave_0: left promiscuous mode [ 513.549269][ T5940] hsr_slave_1: left promiscuous mode [ 513.550116][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.604080][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.785092][ T5940] hsr_slave_0: left promiscuous mode [ 513.826398][ T5940] hsr_slave_1: left promiscuous mode [ 513.829585][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.851965][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.040916][ T5940] hsr_slave_0: left promiscuous mode [ 514.082880][ T5940] hsr_slave_1: left promiscuous mode [ 514.083754][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.105873][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.275172][ T5940] hsr_slave_0: left promiscuous mode [ 514.298530][ T5940] hsr_slave_1: left promiscuous mode [ 514.299818][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.329838][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.488942][ T5940] hsr_slave_0: left promiscuous mode [ 514.510307][ T5940] hsr_slave_1: left promiscuous mode [ 514.511205][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.511219][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.555353][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.555367][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.702767][ T5940] hsr_slave_0: left promiscuous mode [ 514.724014][ T5940] hsr_slave_1: left promiscuous mode [ 514.725385][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.767784][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.874017][ T5940] veth1_macvtap: left promiscuous mode [ 514.874115][ T5940] veth0_macvtap: left promiscuous mode [ 514.874260][ T5940] veth1_vlan: left promiscuous mode [ 514.874375][ T5940] veth0_vlan: left promiscuous mode [ 515.739969][ T5940] team0 (unregistering): Port device team_slave_1 removed [ 515.782800][ T5940] team0 (unregistering): Port device team_slave_0 removed [ 516.605361][ T5940] team0 (unregistering): Port device team_slave_1 removed [ 516.659276][ T5940] team0 (unregistering): Port device team_slave_0 removed [ 517.503156][ T5940] team0 (unregistering): Port device team_slave_1 removed [ 517.567553][ T5940] team0 (unregistering): Port device team_slave_0 removed [ 518.303735][ C1] net_ratelimit: 18 callbacks suppressed [ 518.425234][ T5940] team0 (unregistering): Port device team_slave_1 removed [ 518.497775][ T5940] team0 (unregistering): Port device team_slave_0 removed [ 519.299948][ T5940] team0 (unregistering): Port device team_slave_1 removed [ 519.362436][ T5940] team0 (unregistering): Port device team_slave_0 removed [ 520.270891][ T5940] team0 (unregistering): Port device team_slave_1 removed [ 520.335094][ T5940] team0 (unregistering): Port device team_slave_0 removed [ 521.126262][ T5940] team0 (unregistering): Port device team_slave_1 removed [ 521.180686][ T5940] team0 (unregistering): Port device team_slave_0 removed [ 521.546175][ T8303] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 521.624144][ T8303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 521.673746][ T8303] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 521.717238][ T8303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 521.734109][ T8303] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 521.736664][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.736680][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.826595][ T8303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 521.873977][ T8303] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 521.952462][ T8303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 522.203140][ T8109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.254736][ T182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.254751][ T182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.457750][ T8109] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.640043][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.640162][ T4192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.685271][ T8066] veth0_vlan: entered promiscuous mode [ 522.799724][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.800288][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.872637][ T8066] veth1_vlan: entered promiscuous mode [ 523.026472][ T8156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.141320][ T5586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 523.165377][ T5586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 523.179840][ T5586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 523.183328][ T5586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 523.186239][ T5586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 523.757064][ T8156] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.849943][ C1] net_ratelimit: 6 callbacks suppressed [ 523.886521][ T8066] veth0_macvtap: entered promiscuous mode [ 523.916708][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.918504][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.084284][ T8066] veth1_macvtap: entered promiscuous mode [ 524.140448][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.140584][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.291281][ T8303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.295532][ T5586] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 524.370020][ T5586] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 524.371540][ T5586] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 524.380639][ T5586] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 524.385566][ T5586] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 525.198057][ T8303] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.404613][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.404827][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.406798][ T8549] rxe_eth0 speed is unknown, defaulting to 1000 [ 525.559777][ T5590] Bluetooth: hci3: command tx timeout [ 526.136967][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.137095][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.586385][ T5590] Bluetooth: hci6: command tx timeout [ 526.870421][ T8561] rxe_eth0 speed is unknown, defaulting to 1000 [ 526.889629][ T8109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.782702][ T5586] Bluetooth: hci3: command tx timeout [ 527.808356][ T5586] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 527.894102][ T5586] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 527.904544][ T5586] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 527.909716][ T5586] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 527.919137][ T5586] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 528.835232][ T5586] Bluetooth: hci6: command tx timeout [ 529.406548][ C1] net_ratelimit: 136 callbacks suppressed [ 529.702309][ T8549] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.702740][ T8549] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.702932][ T8549] bridge_slave_0: entered allmulticast mode [ 529.706575][ T8549] bridge_slave_0: entered promiscuous mode [ 529.838845][ T8549] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.838961][ T8549] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.839174][ T8549] bridge_slave_1: entered allmulticast mode [ 529.873826][ T8549] bridge_slave_1: entered promiscuous mode [ 530.006284][ T5586] Bluetooth: hci3: command tx timeout [ 530.177824][ T5586] Bluetooth: hci0: command tx timeout [ 530.463448][ T8549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.525601][ T8549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.552644][ T8156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.049900][ T5586] Bluetooth: hci6: command tx timeout [ 531.105576][ T8616] rxe_eth0 speed is unknown, defaulting to 1000 [ 531.226534][ T8549] team0: Port device team_slave_0 added [ 531.226810][ T4192] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.228986][ T175] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.229025][ T175] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.229057][ T175] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.249542][ T8549] team0: Port device team_slave_1 added [ 531.679382][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.679392][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.679417][ T8549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.956161][ T5590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 532.016811][ T5590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 532.018379][ T8303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.019620][ T5590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 532.020742][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.020751][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.020779][ T8549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.034230][ T5590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 532.040671][ T5590] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 532.228213][ T5586] Bluetooth: hci3: command tx timeout [ 532.410240][ T5590] Bluetooth: hci0: command tx timeout [ 533.133467][ T8549] hsr_slave_0: entered promiscuous mode [ 533.142858][ T8549] hsr_slave_1: entered promiscuous mode [ 533.254807][ T5590] Bluetooth: hci6: command tx timeout [ 533.309880][ T8561] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.310557][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.310750][ T8561] bridge_slave_0: entered allmulticast mode [ 533.317286][ T8561] bridge_slave_0: entered promiscuous mode [ 533.465559][ T8561] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.465702][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.465918][ T8561] bridge_slave_1: entered allmulticast mode [ 533.479075][ T8561] bridge_slave_1: entered promiscuous mode [ 533.824788][ T8561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.904192][ T8561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.919125][ T8688] rxe_eth0 speed is unknown, defaulting to 1000 [ 534.302661][ T8561] team0: Port device team_slave_0 added [ 534.312391][ T5242] 8021q: adding VLAN 0 to HW filter on device eth22 [ 534.415500][ T8561] team0: Port device team_slave_1 added [ 534.450547][ T5590] Bluetooth: hci2: command tx timeout [ 534.639701][ T5590] Bluetooth: hci0: command tx timeout [ 534.906325][ T8561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.906332][ T8561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.906345][ T8561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.974590][ C1] net_ratelimit: 65 callbacks suppressed [ 535.094823][ T8561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.094833][ T8561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.094857][ T8561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.903412][ T5242] 8021q: adding VLAN 0 to HW filter on device eth23 [ 536.231835][ T8303] veth0_vlan: entered promiscuous mode [ 536.482173][ T8549] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.667551][ T8561] hsr_slave_0: entered promiscuous mode [ 536.671240][ T8561] hsr_slave_1: entered promiscuous mode [ 536.673214][ T5590] Bluetooth: hci2: command tx timeout [ 536.692345][ T8561] debugfs: 'hsr0' already exists in 'hsr' [ 536.692366][ T8561] Cannot create hsr debugfs directory [ 536.854853][ T5590] Bluetooth: hci0: command tx timeout [ 537.398918][ T8549] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.491506][ T5242] 8021q: adding VLAN 0 to HW filter on device eth24 [ 537.819750][ T8303] veth1_vlan: entered promiscuous mode [ 538.167233][ T8549] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.709873][ T8549] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.896190][ T5590] Bluetooth: hci2: command tx timeout [ 538.938831][ T8616] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.938920][ T8616] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.939085][ T8616] bridge_slave_0: entered allmulticast mode [ 538.970360][ T8616] bridge_slave_0: entered promiscuous mode [ 539.097209][ T8616] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.097345][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.097557][ T8616] bridge_slave_1: entered allmulticast mode [ 539.122625][ T8616] bridge_slave_1: entered promiscuous mode [ 539.343833][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 539.343896][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 539.715324][ T8616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.807355][ T8616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.183537][ T8616] team0: Port device team_slave_0 added [ 540.252122][ T8616] team0: Port device team_slave_1 added [ 540.261348][ T8303] veth0_macvtap: entered promiscuous mode [ 540.520074][ C0] net_ratelimit: 13 callbacks suppressed [ 540.576300][ T8303] veth1_macvtap: entered promiscuous mode [ 540.594421][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.594432][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.594461][ T8616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.689717][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.689731][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.689756][ T8616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.118766][ T5590] Bluetooth: hci2: command tx timeout [ 541.145983][ T8549] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 541.189452][ T8549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.228066][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.228187][ T8688] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.228341][ T8688] bridge_slave_0: entered allmulticast mode [ 541.229842][ T8688] bridge_slave_0: entered promiscuous mode [ 541.264893][ T8549] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 541.297766][ T8549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.307486][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.307553][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.307681][ T8688] bridge_slave_1: entered allmulticast mode [ 541.309244][ T8688] bridge_slave_1: entered promiscuous mode [ 541.751531][ T8549] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 541.800031][ T8549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 541.907802][ T8549] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 541.944525][ T8549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 542.222449][ T8616] hsr_slave_0: entered promiscuous mode [ 542.223935][ T8616] hsr_slave_1: entered promiscuous mode [ 542.224939][ T8616] debugfs: 'hsr0' already exists in 'hsr' [ 542.224960][ T8616] Cannot create hsr debugfs directory [ 542.453423][ T8688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.531812][ T8303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.534269][ T8688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.105219][ T8303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.119563][ T8688] team0: Port device team_slave_0 added [ 543.212543][ T8688] team0: Port device team_slave_1 added [ 543.816585][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.816596][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.816618][ T8688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.924041][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.924051][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.924076][ T8688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.322230][ T8688] hsr_slave_0: entered promiscuous mode [ 545.340852][ T8688] hsr_slave_1: entered promiscuous mode [ 545.346277][ T8688] debugfs: 'hsr0' already exists in 'hsr' [ 545.346297][ T8688] Cannot create hsr debugfs directory [ 546.023967][ T5940] bridge_slave_1: left allmulticast mode [ 546.023985][ T5940] bridge_slave_1: left promiscuous mode [ 546.024184][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.076834][ C1] net_ratelimit: 50 callbacks suppressed [ 546.166124][ T5940] bridge_slave_0: left allmulticast mode [ 546.166151][ T5940] bridge_slave_0: left promiscuous mode [ 546.166405][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.440754][ T5940] bridge_slave_1: left allmulticast mode [ 546.440781][ T5940] bridge_slave_1: left promiscuous mode [ 546.441012][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.549068][ T5940] bridge_slave_0: left allmulticast mode [ 546.549086][ T5940] bridge_slave_0: left promiscuous mode [ 546.549236][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.761200][ T5940] bridge_slave_1: left allmulticast mode [ 546.761218][ T5940] bridge_slave_1: left promiscuous mode [ 546.761366][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.902610][ T5940] bridge_slave_0: left allmulticast mode [ 546.902628][ T5940] bridge_slave_0: left promiscuous mode [ 546.902772][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.117392][ T5940] bridge_slave_1: left allmulticast mode [ 547.117411][ T5940] bridge_slave_1: left promiscuous mode [ 547.117572][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.223100][ T5940] bridge_slave_0: left allmulticast mode [ 547.223117][ T5940] bridge_slave_0: left promiscuous mode [ 547.223266][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.375313][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.440569][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.483272][ T5940] bond0 (unregistering): Released all slaves [ 549.069844][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.156494][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.180305][ T5940] bond0 (unregistering): Released all slaves [ 549.742913][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.807018][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.832453][ T5940] bond0 (unregistering): Released all slaves [ 550.416027][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.501841][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.524679][ T5940] bond0 (unregistering): Released all slaves [ 551.061887][ T5586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 551.095914][ T5586] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 551.105973][ T5586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 551.117195][ T5586] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 551.118347][ T5586] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 551.554988][ T8561] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 551.658914][ C1] net_ratelimit: 14 callbacks suppressed [ 551.665083][ T8561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 551.759076][ T8561] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 551.846184][ T8561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 552.200501][ T8561] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 552.247433][ T8561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 552.791789][ T8561] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 552.823675][ T8561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 553.429030][ T5586] Bluetooth: hci4: command tx timeout [ 553.716759][ T8837] rxe_eth0 speed is unknown, defaulting to 1000 [ 553.813248][ T8549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.072794][ T8549] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.322339][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.322476][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.838319][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.838428][ T5794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.653264][ T5586] Bluetooth: hci4: command tx timeout [ 557.190328][ C1] net_ratelimit: 56 callbacks suppressed [ 557.395094][ T8561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.791309][ T5940] hsr_slave_0: left promiscuous mode [ 557.831669][ T5940] hsr_slave_1: left promiscuous mode [ 557.832611][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.854113][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.874397][ T5586] Bluetooth: hci4: command tx timeout [ 558.036198][ T5940] hsr_slave_0: left promiscuous mode [ 558.067081][ T5940] hsr_slave_1: left promiscuous mode [ 558.068064][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.122115][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.258998][ T5940] hsr_slave_0: left promiscuous mode [ 558.281951][ T5940] hsr_slave_1: left promiscuous mode [ 558.283299][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.334990][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.494373][ T5940] hsr_slave_0: left promiscuous mode [ 558.536837][ T5940] hsr_slave_1: left promiscuous mode [ 558.537828][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.537842][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.561150][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.561167][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.772280][ T5940] veth1_macvtap: left promiscuous mode [ 558.772347][ T5940] veth0_macvtap: left promiscuous mode [ 558.772500][ T5940] veth1_vlan: left promiscuous mode [ 558.772636][ T5940] veth0_vlan: left promiscuous mode [ 558.804447][ T5940] veth1_macvtap: left promiscuous mode [ 558.804509][ T5940] veth0_macvtap: left promiscuous mode [ 558.804665][ T5940] veth1_vlan: left promiscuous mode [ 558.804775][ T5940] veth0_vlan: left promiscuous mode [ 559.798490][ T5940] team0 (unregistering): Port device team_slave_1 removed [ 559.873348][ T5940] team0 (unregistering): Port device team_slave_0 removed [ 560.097013][ T5586] Bluetooth: hci4: command tx timeout [ 560.728103][ T5940] team0 (unregistering): Port device team_slave_1 removed [ 560.770873][ T5940] team0 (unregistering): Port device team_slave_0 removed [ 561.734390][ T5940] team0 (unregistering): Port device team_slave_1 removed [ 561.796672][ T5940] team0 (unregistering): Port device team_slave_0 removed [ 562.758683][ T5940] team0 (unregistering): Port device team_slave_1 removed [ 562.822587][ T5940] team0 (unregistering): Port device team_slave_0 removed [ 563.089020][ C1] net_ratelimit: 12 callbacks suppressed [ 563.386028][ T8561] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.792140][ T8837] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.792267][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.792504][ T8837] bridge_slave_0: entered allmulticast mode [ 563.795452][ T8837] bridge_slave_0: entered promiscuous mode [ 563.828854][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.829043][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.836645][ T8837] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.836762][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.837493][ T8837] bridge_slave_1: entered allmulticast mode [ 563.840240][ T8837] bridge_slave_1: entered promiscuous mode [ 564.025365][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.025473][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.092499][ T8837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.292145][ T8837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.612796][ T8837] team0: Port device team_slave_0 added [ 564.624527][ T8549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.647931][ T8837] team0: Port device team_slave_1 added [ 565.171946][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.171955][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.171975][ T8837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.190068][ T8616] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 565.307862][ T8616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 565.336810][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.336821][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.336846][ T8837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.337422][ T8616] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 565.385593][ T8616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 565.430900][ T8616] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 565.565211][ T8616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 565.598543][ T8616] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 565.659496][ T8616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 566.408171][ T8837] hsr_slave_0: entered promiscuous mode [ 566.411944][ T8837] hsr_slave_1: entered promiscuous mode [ 566.415486][ T8837] debugfs: 'hsr0' already exists in 'hsr' [ 566.415507][ T8837] Cannot create hsr debugfs directory [ 567.129251][ T8688] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 567.198981][ T8688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 567.271743][ T8688] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 567.341930][ T8688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 567.466008][ T8688] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 567.522001][ T8688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 567.568413][ T8688] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 567.608908][ T8688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 567.762766][ T8549] veth0_vlan: entered promiscuous mode [ 568.067464][ T8549] veth1_vlan: entered promiscuous mode [ 568.647241][ C1] net_ratelimit: 35 callbacks suppressed [ 568.784342][ T8561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.033792][ T8549] veth0_macvtap: entered promiscuous mode [ 569.079170][ T8616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.085155][ T8549] veth1_macvtap: entered promiscuous mode [ 569.726072][ T8549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.730604][ T8616] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.140966][ T8549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.147848][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.149624][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.162178][ T8688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.193138][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.193393][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.692765][ T8688] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.921530][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.925443][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.069302][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.069402][ T5794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.277316][ T8561] veth0_vlan: entered promiscuous mode [ 571.606368][ T5940] bridge_slave_1: left allmulticast mode [ 571.606386][ T5940] bridge_slave_1: left promiscuous mode [ 571.606555][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.727888][ T5940] bridge_slave_0: left allmulticast mode [ 571.727905][ T5940] bridge_slave_0: left promiscuous mode [ 571.728051][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.579354][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.668675][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.712824][ T5940] bond0 (unregistering): Released all slaves [ 572.790782][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.790795][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.814325][ T8561] veth1_vlan: entered promiscuous mode [ 573.475115][ T5794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.475132][ T5794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.063910][ T8837] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 574.119462][ T8837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 574.157435][ T8837] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 574.202536][ C1] net_ratelimit: 59 callbacks suppressed [ 574.277024][ T8837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 574.312692][ T8837] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 574.608234][ T8837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 574.619321][ T9040] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.870371][ T5940] hsr_slave_0: left promiscuous mode [ 576.040668][ T5940] hsr_slave_1: left promiscuous mode [ 576.066107][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.066134][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.207645][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.207668][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.780057][ T5940] veth1_macvtap: left promiscuous mode [ 576.780127][ T5940] veth0_macvtap: left promiscuous mode [ 576.780271][ T5940] veth1_vlan: left promiscuous mode [ 576.780375][ T5940] veth0_vlan: left promiscuous mode [ 577.731689][ T5940] team0 (unregistering): Port device team_slave_1 removed [ 577.786618][ T5940] team0 (unregistering): Port device team_slave_0 removed [ 578.158010][ T8837] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 578.233765][ T8837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 578.244054][ T8561] veth0_macvtap: entered promiscuous mode [ 578.324480][ T8561] veth1_macvtap: entered promiscuous mode [ 578.553032][ T8616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.620828][ T8561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.655175][ T8561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.788685][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.752628][ T4192] net_ratelimit: 37 callbacks suppressed [ 581.436630][ T5938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.436646][ T5938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.512452][ T8837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.645897][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.645912][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.692109][ T8688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.713542][ T8616] veth0_vlan: entered promiscuous mode [ 581.719894][ T8837] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.767756][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.767979][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.816713][ T8616] veth1_vlan: entered promiscuous mode [ 581.846838][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.846977][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.041619][ T8616] veth0_macvtap: entered promiscuous mode [ 582.108942][ T8616] veth1_macvtap: entered promiscuous mode [ 582.290108][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.348496][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.810232][ T8688] veth0_vlan: entered promiscuous mode [ 583.152682][ T8688] veth1_vlan: entered promiscuous mode [ 583.576038][ T5938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.576051][ T5938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.963834][ T8688] veth0_macvtap: entered promiscuous mode [ 583.971540][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.971556][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.061787][ T8688] veth1_macvtap: entered promiscuous mode [ 584.077852][ T1190] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.321667][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.445976][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.491633][ T9111] syzkaller0: entered promiscuous mode [ 584.491651][ T9111] syzkaller0: entered allmulticast mode [ 585.401586][ C1] net_ratelimit: 108 callbacks suppressed [ 585.562171][ T8837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.532120][ T5940] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.556560][ T5940] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.802840][ T5822] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.804066][ T5822] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.804107][ T5822] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.804143][ T5822] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.804179][ T5822] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.804213][ T5822] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.804247][ T5822] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.804282][ T5822] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.804316][ T5822] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.804351][ T5822] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.804385][ T5822] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.804419][ T5822] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.376473][ T5822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.377842][ T5822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.254849][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.254866][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.640298][ T8837] veth0_vlan: entered promiscuous mode [ 589.773925][ T8837] veth1_vlan: entered promiscuous mode [ 590.260889][ T8837] veth0_macvtap: entered promiscuous mode [ 590.437006][ T8837] veth1_macvtap: entered promiscuous mode [ 591.621450][ C1] net_ratelimit: 182 callbacks suppressed [ 592.029285][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.205780][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.343466][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.344002][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.344457][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.509487][ T182] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.129675][ T9188] input: syz1 as /devices/virtual/input/input9 [ 596.210333][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.210346][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.704647][ T8969] net_ratelimit: 233 callbacks suppressed [ 598.404952][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.404969][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.526834][ T9204] netlink: 'syz.6.434': attribute type 1 has an invalid length. [ 598.902784][ T9209] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 603.440251][ C0] net_ratelimit: 628 callbacks suppressed [ 604.995616][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 604.995683][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 606.511600][ T9256] FAULT_INJECTION: forcing a failure. [ 606.511600][ T9256] name failslab, interval 1, probability 0, space 0, times 0 [ 606.511656][ T9256] CPU: 0 UID: 0 PID: 9256 Comm: syz.8.445 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 606.511684][ T9256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 606.511704][ T9256] Call Trace: [ 606.511788][ T9256] [ 606.511835][ T9256] dump_stack_lvl+0xe8/0x150 [ 606.511936][ T9256] should_fail_ex+0x46b/0x600 [ 606.511973][ T9256] should_failslab+0xa8/0x100 [ 606.511998][ T9256] __kmalloc_cache_noprof+0xa1/0x680 [ 606.512025][ T9256] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 606.512088][ T9256] ? shrinker_alloc+0x59/0xbc0 [ 606.512109][ T9256] ? shrinker_alloc+0x59/0xbc0 [ 606.512137][ T9256] shrinker_alloc+0x59/0xbc0 [ 606.512162][ T9256] ? __rt_spin_lock_init+0x3e/0x50 [ 606.512198][ T9256] sget_fc+0xe92/0x1a80 [ 606.512233][ T9256] ? __pfx_set_anon_super_fc+0x10/0x10 [ 606.512262][ T9256] ? __pfx_sget_fc+0x10/0x10 [ 606.512292][ T9256] ? rcu_is_watching+0x16/0xb0 [ 606.512312][ T9256] ? cap_capable+0x123/0x460 [ 606.512339][ T9256] ? __pfx_bpf_fill_super+0x10/0x10 [ 606.512367][ T9256] get_tree_nodev+0x2a/0x150 [ 606.512395][ T9256] vfs_get_tree+0x92/0x2a0 [ 606.512423][ T9256] vfs_cmd_create+0xa2/0x200 [ 606.512446][ T9256] __se_sys_fsconfig+0x6bf/0x810 [ 606.512472][ T9256] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 606.512494][ T9256] ? rcu_is_watching+0x16/0xb0 [ 606.512521][ T9256] ? __x64_sys_fsconfig+0x20/0xc0 [ 606.512543][ T9256] do_syscall_64+0x166/0x520 [ 606.512569][ T9256] ? trace_irq_disable+0x3b/0x140 [ 606.512594][ T9256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.512614][ T9256] ? clear_bhb_loop+0x70/0xc0 [ 606.512638][ T9256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.512664][ T9256] RIP: 0033:0x7fb246c0e559 [ 606.512717][ T9256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.512734][ T9256] RSP: 002b:00007fb244e66028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 606.512790][ T9256] RAX: ffffffffffffffda RBX: 00007fb246e95fa0 RCX: 00007fb246c0e559 [ 606.512805][ T9256] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 606.512816][ T9256] RBP: 00007fb246ca5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 606.512827][ T9256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.512838][ T9256] R13: 00007fb246e96038 R14: 00007fb246e95fa0 R15: 00007ffce91d4be8 [ 606.512870][ T9256] [ 608.842868][ C1] net_ratelimit: 70 callbacks suppressed [ 610.764075][ T9289] netlink: 'syz.6.451': attribute type 10 has an invalid length. [ 611.188319][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.395772][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.622973][ T9289] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.623080][ T9289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.630310][ T9289] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.630474][ T9289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.711276][ T9300] netlink: 16 bytes leftover after parsing attributes in process `syz.7.455'. [ 611.769300][ T9289] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 611.838677][ T9305] netlink: 168 bytes leftover after parsing attributes in process `syz.7.455'. [ 612.212976][ T9309] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 614.309694][ C0] net_ratelimit: 199 callbacks suppressed [ 616.948333][ T30] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 617.236351][ T30] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 617.237825][ T30] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.237866][ T30] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 617.237887][ T30] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 617.237911][ T30] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 617.237967][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.629145][ T9345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.317927][ T30] gud 9-1:1.0: Unexpected status OK for failed transfer [ 618.317955][ T30] gud 9-1:1.0: Failed to get connectors (error=-32) [ 618.317976][ T30] gud 9-1:1.0: probe with driver gud failed with error -32 [ 618.683510][ T30] usb 9-1: USB disconnect, device number 2 [ 618.799808][ T9354] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 620.024920][ C0] net_ratelimit: 398 callbacks suppressed [ 621.387781][ T9367] Illegal XDP return value 4294967274 on prog (id 16) dev syz_tun, expect packet loss! [ 623.984404][ T9387] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 625.495971][ C0] net_ratelimit: 161 callbacks suppressed [ 625.634870][ T9405] sctp: [Deprecated]: syz.9.483 (pid 9405) Use of int in maxseg socket option. [ 625.634870][ T9405] Use struct sctp_assoc_value instead [ 628.071597][ T9419] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 630.637517][ T9431] netlink: 12 bytes leftover after parsing attributes in process `syz.9.491'. [ 630.856317][ T9431] bond1: entered promiscuous mode [ 630.856951][ T9431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 630.980636][ T4192] net_ratelimit: 94 callbacks suppressed [ 631.479856][ T6028] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 631.716130][ T6028] usb 10-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 631.719264][ T6028] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.719276][ T6028] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 631.719336][ T6028] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 631.719350][ T6028] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 631.719379][ T6028] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.956454][ T6028] usb 10-1: interface 2 not found [ 632.244256][ T6028] usb 10-1: USB disconnect, device number 2 [ 636.778671][ C1] net_ratelimit: 101 callbacks suppressed [ 637.092279][ T9472] FAULT_INJECTION: forcing a failure. [ 637.092279][ T9472] name failslab, interval 1, probability 0, space 0, times 0 [ 637.092301][ T9472] CPU: 1 UID: 0 PID: 9472 Comm: syz.9.501 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 637.092313][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 637.092320][ T9472] Call Trace: [ 637.092325][ T9472] [ 637.092330][ T9472] dump_stack_lvl+0xe8/0x150 [ 637.092349][ T9472] should_fail_ex+0x46b/0x600 [ 637.092369][ T9472] should_failslab+0xa8/0x100 [ 637.092380][ T9472] ? __seq_open_private+0x7d/0x1a0 [ 637.092392][ T9472] kmem_cache_alloc_noprof+0x9e/0x690 [ 637.092406][ T9472] ? __seq_open_private+0x7d/0x1a0 [ 637.092421][ T9472] __seq_open_private+0x7d/0x1a0 [ 637.092433][ T9472] pid_maps_open+0x2c/0xd0 [ 637.092446][ T9472] ? __pfx_pid_maps_open+0x10/0x10 [ 637.092457][ T9472] do_dentry_open+0x849/0x1420 [ 637.092476][ T9472] vfs_open+0x3b/0x350 [ 637.092485][ T9472] ? path_openat+0x16a9/0x20a0 [ 637.092500][ T9472] path_openat+0x16c4/0x20a0 [ 637.092522][ T9472] do_file_open+0x23e/0x4a0 [ 637.092538][ T9472] ? __pfx_do_file_open+0x10/0x10 [ 637.092556][ T9472] ? __pfx_kfree_link+0x10/0x10 [ 637.092575][ T9472] ? alloc_fd+0x654/0x6d0 [ 637.092600][ T9472] do_sys_openat2+0x115/0x200 [ 637.092611][ T9472] ? __se_sys_futex+0x3a8/0x450 [ 637.092622][ T9472] ? __pfx_do_sys_openat2+0x10/0x10 [ 637.092636][ T9472] ? rcu_is_watching+0x16/0xb0 [ 637.092649][ T9472] __x64_sys_openat+0x138/0x170 [ 637.092663][ T9472] do_syscall_64+0x166/0x520 [ 637.092678][ T9472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.092688][ T9472] ? clear_bhb_loop+0x70/0xc0 [ 637.092701][ T9472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.092711][ T9472] RIP: 0033:0x7f24cbcced8e [ 637.092723][ T9472] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 637.092731][ T9472] RSP: 002b:00007f24c9f65ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 637.092743][ T9472] RAX: ffffffffffffffda RBX: 00007f24c9f666c0 RCX: 00007f24cbcced8e [ 637.092750][ T9472] RDX: 0000000000000002 RSI: 00007f24c9f65f90 RDI: ffffffffffffff9c [ 637.092757][ T9472] RBP: 00007f24cbda5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 637.092763][ T9472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.092769][ T9472] R13: 00007f24cbf96038 R14: 00007f24cbf95fa0 R15: 00007ffcd9ef1b18 [ 637.092785][ T9472] [ 642.422584][ C1] net_ratelimit: 84 callbacks suppressed [ 645.214168][ T5590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 645.279609][ T5590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 645.309028][ T5590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 645.342423][ T5590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 645.367001][ T5590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 647.203726][ T9534] TCP: TCP_TX_DELAY enabled [ 647.637144][ T5586] Bluetooth: hci1: command tx timeout [ 648.065338][ C0] net_ratelimit: 118 callbacks suppressed [ 649.564530][ T5727] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 649.740152][ T5727] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 649.755316][ T5727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 649.755330][ T5727] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 649.755361][ T5727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.846929][ T5727] usb 6-1: config 0 descriptor?? [ 649.856288][ T9552] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 649.859906][ T5586] Bluetooth: hci1: command tx timeout [ 650.438438][ T9521] rxe_eth0 speed is unknown, defaulting to 1000 [ 651.039904][ T5727] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 651.117022][ T9552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.181313][ T9552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.233272][ T5727] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0003/input/input11 [ 651.697969][ T9552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.800963][ T9552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.091774][ T5586] Bluetooth: hci1: command tx timeout [ 652.918954][ T9552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.972534][ T9552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.025937][ T9552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.054692][ T9552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.149562][ T5727] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.20 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 653.377682][ T5881] usb 6-1: USB disconnect, device number 2 [ 653.535837][ C0] net_ratelimit: 137 callbacks suppressed [ 654.459439][ T5586] Bluetooth: hci1: command tx timeout [ 656.201838][ T12] IPVS: starting estimator thread 0... [ 656.282091][ T9582] fido_id[9582]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 656.309409][ T9592] IPVS: using max 11 ests per chain, 26400 per kthread [ 656.699965][ T9585] Bluetooth: hci3: command 0x0406 tx timeout [ 656.700009][ T9585] Bluetooth: hci6: command 0x0406 tx timeout [ 659.168779][ T9610] netlink: 68 bytes leftover after parsing attributes in process `syz.5.538'. [ 659.263527][ C1] net_ratelimit: 45 callbacks suppressed [ 662.513070][ T5590] Bluetooth: hci0: command 0x0406 tx timeout [ 663.345684][ T5881] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 664.674070][ T5881] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 664.702523][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 664.702549][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 664.702699][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.343954][ C1] net_ratelimit: 42 callbacks suppressed [ 666.277494][ T5881] usb 6-1: config 0 descriptor?? [ 667.289857][ T5881] usb 6-1: can't set config #0, error -71 [ 667.294529][ T5881] usb 6-1: USB disconnect, device number 3 [ 667.470442][ T5586] Bluetooth: hci2: command 0x0406 tx timeout [ 667.820599][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.823489][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.823654][ T9521] bridge_slave_0: entered allmulticast mode [ 667.831801][ T9521] bridge_slave_0: entered promiscuous mode [ 667.860493][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.868136][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.996350][ T9521] bridge_slave_1: entered allmulticast mode [ 668.032727][ T9521] bridge_slave_1: entered promiscuous mode [ 669.245916][ T9521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.275588][ T9521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.556952][ T9521] team0: Port device team_slave_0 added [ 670.581845][ T9521] team0: Port device team_slave_1 added [ 670.756767][ C1] net_ratelimit: 79 callbacks suppressed [ 670.760284][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 670.760346][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 671.860637][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.860648][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.860672][ T9521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.919654][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.919664][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.919689][ T9521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.250482][ T9521] hsr_slave_0: entered promiscuous mode [ 674.281418][ T9521] hsr_slave_1: entered promiscuous mode [ 674.295228][ T9521] debugfs: 'hsr0' already exists in 'hsr' [ 674.295250][ T9521] Cannot create hsr debugfs directory [ 676.191706][ T12] net_ratelimit: 70 callbacks suppressed [ 679.834231][ T6028] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 681.032022][ T6028] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 681.034204][ T6028] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 681.034229][ T6028] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 681.034253][ T6028] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 681.034273][ T6028] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 681.034328][ T6028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.246917][ T6028] usb 9-1: config 0 descriptor?? [ 681.577814][ T12] net_ratelimit: 77 callbacks suppressed [ 682.695311][ T6028] usbhid 9-1:0.0: can't add hid device: -71 [ 682.742646][ T6028] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 682.809290][ T6028] usb 9-1: USB disconnect, device number 3 [ 685.024401][ T5586] Bluetooth: hci4: command 0x0406 tx timeout [ 687.047414][ C0] net_ratelimit: 39 callbacks suppressed [ 690.393281][ T9848] fuse: Bad value for 'fd' [ 691.783016][ T6028] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 691.997070][ T6028] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 692.000452][ T6028] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 692.000474][ T6028] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 692.000496][ T6028] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 692.000515][ T6028] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 692.000578][ T6028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.010364][ T6028] usb 9-1: config 0 descriptor?? [ 692.503023][ T6028] usbhid 9-1:0.0: can't add hid device: -71 [ 692.503168][ T6028] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 692.541277][ T6028] usb 9-1: USB disconnect, device number 4 [ 692.871141][ C1] net_ratelimit: 104 callbacks suppressed [ 693.124165][ T9521] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 693.184881][ T9521] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 693.186227][ T9521] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 693.491830][ T9521] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 693.497979][ T9521] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 694.566373][ T9521] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.568393][ T9521] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 695.881900][ T9521] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 697.125509][ T9521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.286483][ T9521] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.385164][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.385274][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.510934][ T9413] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.511005][ T9413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.121141][ T5587] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 698.503502][ C1] net_ratelimit: 48 callbacks suppressed [ 699.157274][ T5587] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 699.175519][ T5587] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 699.175544][ T5587] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 699.175567][ T5587] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 699.175587][ T5587] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 699.175643][ T5587] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.426228][ T5587] usb 6-1: config 0 descriptor?? [ 700.683275][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 700.699026][ T5587] usbhid 6-1:0.0: can't add hid device: -71 [ 700.699165][ T5587] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 700.819861][ T5587] usb 6-1: USB disconnect, device number 4 [ 702.200731][ T9965] Bluetooth: MGMT ver 1.23 [ 703.921164][ T9054] net_ratelimit: 45 callbacks suppressed [ 704.402040][ T9521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.487017][ T5590] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 704.561696][ T5590] Bluetooth: hci0: command 0x0406 tx timeout [ 704.755828][ T9521] veth0_vlan: entered promiscuous mode [ 704.813168][ T9521] veth1_vlan: entered promiscuous mode [ 704.857133][ T9521] veth0_macvtap: entered promiscuous mode [ 704.910298][ T9521] veth1_macvtap: entered promiscuous mode [ 705.023597][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.123501][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.203029][ T6084] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.204607][ T6084] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.204630][ T6084] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.204648][ T6084] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.387859][T10015] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 705.864679][ T5587] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 706.618619][ T5587] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 706.630233][ T5587] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 706.630257][ T5587] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 706.630281][ T5587] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 706.630300][ T5587] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 706.630355][ T5587] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.861623][ T5587] usb 9-1: config 0 descriptor?? [ 707.359263][ T5587] usbhid 9-1:0.0: can't add hid device: -71 [ 707.359408][ T5587] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 707.589896][ T5586] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 707.636160][ T5587] usb 9-1: USB disconnect, device number 5 [ 707.678569][ T5586] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 707.901159][ T5586] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 708.547833][ T5586] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 708.569235][ T5586] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 709.616708][ C0] net_ratelimit: 236 callbacks suppressed [ 710.984168][ T5590] Bluetooth: hci5: command tx timeout [ 711.255842][T10078] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 712.709170][T10098] FAULT_INJECTION: forcing a failure. [ 712.709170][T10098] name fail_futex, interval 1, probability 0, space 0, times 1 [ 712.709203][T10098] CPU: 0 UID: 0 PID: 10098 Comm: syz.5.636 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 712.709224][T10098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 712.709236][T10098] Call Trace: [ 712.709244][T10098] [ 712.709253][T10098] dump_stack_lvl+0xe8/0x150 [ 712.709288][T10098] should_fail_ex+0x46b/0x600 [ 712.709323][T10098] get_futex_key+0x1b4/0x1580 [ 712.709364][T10098] ? __pfx_get_futex_key+0x10/0x10 [ 712.709391][T10098] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 712.709438][T10098] futex_wake+0x119/0x600 [ 712.709469][T10098] ? __pfx_futex_wake+0x10/0x10 [ 712.709493][T10098] ? rt_spin_unlock+0x159/0x200 [ 712.709528][T10098] do_futex+0x458/0x4e0 [ 712.709553][T10098] ? __pfx_do_futex+0x10/0x10 [ 712.709582][T10098] __se_sys_futex+0x3a8/0x450 [ 712.709609][T10098] ? __pfx___se_sys_futex+0x10/0x10 [ 712.709638][T10098] ? __x64_sys_futex+0x21/0xf0 [ 712.709661][T10098] do_syscall_64+0x166/0x520 [ 712.709689][T10098] ? trace_irq_disable+0x3b/0x140 [ 712.709714][T10098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.709734][T10098] ? clear_bhb_loop+0x70/0xc0 [ 712.709757][T10098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.709776][T10098] RIP: 0033:0x7f05d340e559 [ 712.709796][T10098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.709812][T10098] RSP: 002b:00007f05d16660e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 712.709838][T10098] RAX: ffffffffffffffda RBX: 00007f05d3695fa8 RCX: 00007f05d340e559 [ 712.709853][T10098] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f05d3695fac [ 712.709867][T10098] RBP: 00007f05d3695fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 712.709881][T10098] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 712.709893][T10098] R13: 00007f05d3696038 R14: 00007ffc0ba7c160 R15: 00007ffc0ba7c248 [ 712.709928][T10098] [ 713.207078][ T5590] Bluetooth: hci5: command tx timeout [ 713.326691][ T9413] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.734726][T10025] rxe_eth0 speed is unknown, defaulting to 1000 [ 713.918803][T10120] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 715.103676][ T5940] net_ratelimit: 137 callbacks suppressed [ 715.430849][ T5590] Bluetooth: hci5: command tx timeout [ 715.484179][ T9413] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.663024][ T5590] Bluetooth: hci5: command tx timeout [ 718.339069][T10164] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 720.372801][ T9413] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.454511][ T9904] net_ratelimit: 79 callbacks suppressed [ 722.459538][ T9413] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.037104][T10220] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 724.937913][T10214] netlink: 20 bytes leftover after parsing attributes in process `syz.5.662'. [ 726.072116][ T5944] net_ratelimit: 92 callbacks suppressed [ 727.061102][T10267] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 728.161905][ T9413] bridge_slave_1: left allmulticast mode [ 728.161923][ T9413] bridge_slave_1: left promiscuous mode [ 728.162085][ T9413] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.398122][ T9413] bridge_slave_0: left allmulticast mode [ 728.398151][ T9413] bridge_slave_0: left promiscuous mode [ 728.400073][ T9413] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.704127][ T97] net_ratelimit: 96 callbacks suppressed [ 731.745133][ T9413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.895759][ T9413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.956755][ T9413] bond0 (unregistering): Released all slaves [ 732.634096][ T6028] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 733.018662][ T6028] usb 9-1: device descriptor read/64, error -71 [ 733.285921][ T6028] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 733.435451][ T6028] usb 9-1: device descriptor read/64, error -71 [ 733.637629][ T6028] usb usb9-port1: attempt power cycle [ 734.066157][ T6028] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 734.099868][ T6028] usb 9-1: device descriptor read/8, error -71 [ 734.375990][ T6028] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 734.408828][ T6028] usb 9-1: device descriptor read/8, error -71 [ 734.443465][T10025] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.443673][T10025] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.444269][T10025] bridge_slave_0: entered allmulticast mode [ 734.526410][ T6028] usb usb9-port1: unable to enumerate USB device [ 734.541543][T10025] bridge_slave_0: entered promiscuous mode [ 734.547749][T10381] jffs2: notice: (10381) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 734.612621][T10025] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.614419][T10025] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.616752][T10025] bridge_slave_1: entered allmulticast mode [ 734.690651][T10025] bridge_slave_1: entered promiscuous mode [ 736.189106][ T9413] hsr_slave_0: left promiscuous mode [ 736.301780][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 736.301816][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 736.714606][ T9413] hsr_slave_1: left promiscuous mode [ 736.732264][ T9413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.732288][ T9413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.148870][ C1] net_ratelimit: 87 callbacks suppressed [ 737.157912][ T9413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.157933][ T9413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.468571][ T9413] veth1_macvtap: left promiscuous mode [ 737.468679][ T9413] veth0_macvtap: left promiscuous mode [ 737.468936][ T9413] veth1_vlan: left promiscuous mode [ 737.469113][ T9413] veth0_vlan: left promiscuous mode [ 738.719975][T10428] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 741.494887][ T9413] team0 (unregistering): Port device team_slave_1 removed [ 741.582193][ T9413] team0 (unregistering): Port device team_slave_0 removed [ 741.936709][T10438] ip6erspan0: entered allmulticast mode [ 742.384732][T10025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.441863][T10025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.789365][T10025] team0: Port device team_slave_0 added [ 742.811482][T10025] team0: Port device team_slave_1 added [ 743.042248][ C1] net_ratelimit: 217 callbacks suppressed [ 743.572475][T10025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.572486][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.572525][T10025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.601594][T10025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.601604][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.601628][T10025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.228450][T10025] hsr_slave_0: entered promiscuous mode [ 744.229417][T10025] hsr_slave_1: entered promiscuous mode [ 744.237470][T10025] debugfs: 'hsr0' already exists in 'hsr' [ 744.237483][T10025] Cannot create hsr debugfs directory [ 746.096871][T10485] ip6erspan0: entered allmulticast mode [ 746.326811][T10488] FAULT_INJECTION: forcing a failure. [ 746.326811][T10488] name failslab, interval 1, probability 0, space 0, times 0 [ 746.326830][T10488] CPU: 0 UID: 0 PID: 10488 Comm: syz.5.734 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 746.326842][T10488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 746.326849][T10488] Call Trace: [ 746.326854][T10488] [ 746.326860][T10488] dump_stack_lvl+0xe8/0x150 [ 746.326879][T10488] should_fail_ex+0x46b/0x600 [ 746.326899][T10488] should_failslab+0xa8/0x100 [ 746.326912][T10488] __kmalloc_cache_noprof+0xa1/0x680 [ 746.326927][T10488] ? io_uring_alloc_task_context+0xa2/0x6c0 [ 746.326938][T10488] ? io_uring_alloc_task_context+0xa2/0x6c0 [ 746.326952][T10488] io_uring_alloc_task_context+0xa2/0x6c0 [ 746.326965][T10488] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 746.326976][T10488] ? futex_private_hash_put+0x132/0x160 [ 746.326995][T10488] __io_uring_add_tctx_node+0x48d/0x630 [ 746.327010][T10488] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 746.327020][T10488] ? __fget_files+0x2a/0x420 [ 746.327034][T10488] ? __fget_files+0x2a/0x420 [ 746.327048][T10488] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 746.327060][T10488] __se_sys_io_uring_enter+0x18c9/0x1bb0 [ 746.327081][T10488] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 746.327097][T10488] ? rcu_is_watching+0x16/0xb0 [ 746.327110][T10488] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 746.327123][T10488] do_syscall_64+0x166/0x520 [ 746.327145][T10488] ? trace_irq_disable+0x3b/0x140 [ 746.327159][T10488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.327169][T10488] ? clear_bhb_loop+0x70/0xc0 [ 746.327182][T10488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.327192][T10488] RIP: 0033:0x7f05d340e559 [ 746.327204][T10488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.327213][T10488] RSP: 002b:00007f05d15e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 746.327224][T10488] RAX: ffffffffffffffda RBX: 00007f05d3696180 RCX: 00007f05d340e559 [ 746.327231][T10488] RDX: 0000000000000020 RSI: 0000000000000020 RDI: 0000000000000003 [ 746.327238][T10488] RBP: 00007f05d34a5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 746.327244][T10488] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 746.327250][T10488] R13: 00007f05d3696218 R14: 00007f05d3696180 R15: 00007ffc0ba7c248 [ 746.327266][T10488] [ 748.598967][ C0] net_ratelimit: 84 callbacks suppressed [ 750.653347][ T5242] 8021q: adding VLAN 0 to HW filter on device eth1 [ 751.694510][T10525] ip6erspan0: entered allmulticast mode [ 753.347355][ T5590] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 754.156029][ C0] net_ratelimit: 112 callbacks suppressed [ 754.969166][ T9222] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 755.196281][ T9222] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 755.197414][ T9222] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 755.197427][ T9222] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 755.197440][ T9222] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 755.197451][ T9222] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 755.197482][ T9222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.273936][ T9222] usb 6-1: config 0 descriptor?? [ 756.048204][ T9222] usbhid 6-1:0.0: can't add hid device: -71 [ 756.048359][ T9222] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 756.091950][ T9222] usb 6-1: USB disconnect, device number 5 [ 758.763837][ T5590] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 759.904162][ C1] net_ratelimit: 278 callbacks suppressed [ 760.684032][T10608] netlink: 20 bytes leftover after parsing attributes in process `syz.9.769'. [ 760.684052][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.9.769'. [ 762.790947][T10025] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 763.846265][T10025] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 763.847269][T10025] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 764.040398][T10025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 764.056334][ T5590] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 764.056969][T10025] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 765.242721][T10025] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 765.283683][T10025] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 765.351775][T10025] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 765.622741][ C0] net_ratelimit: 169 callbacks suppressed [ 766.253552][T10025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.411814][T10025] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.450909][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.451122][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.511555][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.511656][ T5822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.005308][T10678] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 769.425435][ T5590] Bluetooth: hci4: unexpected event for opcode 0x0c1b [ 771.260581][T10701] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 771.776563][ C1] net_ratelimit: 108 callbacks suppressed [ 773.282204][ T5586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 773.348519][ T5586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 773.351702][ T5586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 773.357488][ T5586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 773.371232][ T5586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 776.090153][ T5586] Bluetooth: hci1: command tx timeout [ 776.298549][ T5586] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 777.325707][ C1] net_ratelimit: 109 callbacks suppressed [ 778.264190][ T5586] Bluetooth: hci1: command tx timeout [ 779.126570][T10714] rxe_eth0 speed is unknown, defaulting to 1000 [ 781.219655][ T5586] Bluetooth: hci1: command tx timeout [ 781.766863][ T5586] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 782.802198][ C0] net_ratelimit: 119 callbacks suppressed [ 783.392801][ T5586] Bluetooth: hci1: command tx timeout [ 788.180191][ C1] net_ratelimit: 56 callbacks suppressed [ 790.077767][T10714] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.080717][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.080926][T10714] bridge_slave_0: entered allmulticast mode [ 790.085551][T10714] bridge_slave_0: entered promiscuous mode [ 790.322500][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.360387][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.362232][T10714] bridge_slave_1: entered allmulticast mode [ 790.376259][T10714] bridge_slave_1: entered promiscuous mode [ 791.192780][T10851] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 791.898003][T10714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.914418][T10714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.170928][ T9412] bridge_slave_1: left allmulticast mode [ 793.170957][ T9412] bridge_slave_1: left promiscuous mode [ 793.171278][ T9412] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.373797][ T9412] bridge_slave_0: left allmulticast mode [ 793.391278][ T9412] bridge_slave_0: left promiscuous mode [ 793.391562][ T9412] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.648624][ C0] net_ratelimit: 53 callbacks suppressed [ 797.479304][ T9412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.604000][ T9412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.683176][ T9412] bond0 (unregistering): Released all slaves [ 799.037357][ C1] net_ratelimit: 47 callbacks suppressed [ 800.094711][T10714] team0: Port device team_slave_0 added [ 800.105757][ T5719] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 800.165086][T10714] team0: Port device team_slave_1 added [ 801.214352][ T5719] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 801.227386][ T5719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 801.227411][ T5719] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 801.227468][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.271710][ T5719] usb 6-1: config 0 descriptor?? [ 801.272800][T10900] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 801.459151][T10714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.459162][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.459186][T10714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.461454][T10714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.461465][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.461489][T10714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.947659][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 801.947721][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 802.011017][ T5719] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 802.093671][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.118190][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.324153][ T5719] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0004/input/input12 [ 803.940511][T10714] hsr_slave_0: entered promiscuous mode [ 803.956937][T10714] hsr_slave_1: entered promiscuous mode [ 803.977381][T10714] debugfs: 'hsr0' already exists in 'hsr' [ 803.977402][T10714] Cannot create hsr debugfs directory [ 804.447219][ C1] net_ratelimit: 43 callbacks suppressed [ 804.585456][ T5719] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.20 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 806.012012][ T9412] hsr_slave_0: left promiscuous mode [ 806.076159][ T9412] hsr_slave_1: left promiscuous mode [ 806.077520][ T9412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.311183][ T5719] usb 6-1: USB disconnect, device number 6 [ 806.325486][ T9412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.407510][ C1] net_ratelimit: 48 callbacks suppressed [ 812.269559][ T5719] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 812.438627][ T5719] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 812.440395][ T5719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 812.440420][ T5719] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 812.440477][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.511344][ T5719] usb 6-1: config 0 descriptor?? [ 812.526963][T10967] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 812.776275][ T9412] team0 (unregistering): Port device team_slave_1 removed [ 813.109509][ T5719] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 813.145372][ T5719] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0005/input/input13 [ 813.168171][ T9412] team0 (unregistering): Port device team_slave_0 removed [ 813.274247][T10967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.278109][T10967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.778843][T10967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.823239][T10967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.992819][T10967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.014227][T10967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.076957][T10967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.113220][ T5719] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.20 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 814.142447][T10967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.232098][ T5242] 8021q: adding VLAN 0 to HW filter on device eth2 [ 815.390287][ T5719] usb 6-1: USB disconnect, device number 7 [ 815.963936][ C1] net_ratelimit: 64 callbacks suppressed [ 819.124527][T11038] ip6erspan0: entered allmulticast mode [ 819.326416][T11044] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 820.953656][ T5242] 8021q: adding VLAN 0 to HW filter on device eth1 [ 821.354141][ T8939] net_ratelimit: 57 callbacks suppressed [ 826.991841][ C1] net_ratelimit: 43 callbacks suppressed [ 827.180984][T11107] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 828.926509][T10714] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 829.223879][T10714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 829.232802][T10714] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 830.359495][T10714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 830.369306][T10714] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 830.546055][T10714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 830.552476][T10714] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 830.652844][T10714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 832.290418][T11158] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 832.361391][T10714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.412453][T10714] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.432181][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.432380][ T5938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.531098][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.531228][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.719676][ T1190] net_ratelimit: 48 callbacks suppressed [ 834.410859][T11188] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 835.406560][T11192] block nbd5: shutting down sockets [ 837.716049][T11219] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 837.940082][ T5590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 837.990916][ T5590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 838.120315][ T5590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 838.157288][ T5590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 838.190163][ T5590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 838.191506][ C1] net_ratelimit: 48 callbacks suppressed [ 840.029819][T11240] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 841.966228][ T5586] Bluetooth: hci5: command tx timeout [ 842.066838][ T5590] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 842.126729][ T5590] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 842.141938][ T5590] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 842.159579][ T5590] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 842.161123][ T5590] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 843.662339][ T97] net_ratelimit: 59 callbacks suppressed [ 844.176589][ T5590] Bluetooth: hci5: command tx timeout [ 845.371953][ T5590] Bluetooth: hci7: command tx timeout [ 845.637980][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.9.925'. [ 845.696083][T11299] netlink: 48 bytes leftover after parsing attributes in process `syz.9.925'. [ 846.398900][ T5590] Bluetooth: hci5: command tx timeout [ 847.606619][ T5590] Bluetooth: hci7: command tx timeout [ 848.620781][ T5590] Bluetooth: hci5: command tx timeout [ 849.892515][ T8939] net_ratelimit: 96 callbacks suppressed [ 849.988259][ T5590] Bluetooth: hci7: command tx timeout [ 850.865842][T11345] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 851.636837][T11222] rxe_eth0 speed is unknown, defaulting to 1000 [ 852.625189][ T5590] Bluetooth: hci7: command tx timeout [ 852.998434][T11359] warning: `syz.8.935' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 853.111890][T11246] rxe_eth0 speed is unknown, defaulting to 1000 [ 855.198954][T11375] batadv_slave_0: entered promiscuous mode [ 855.266539][T11378] batadv_slave_0: left promiscuous mode [ 855.289441][ C0] net_ratelimit: 84 callbacks suppressed [ 855.620177][ T5590] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 860.138531][ T5590] Bluetooth: hci6: unexpected event for opcode 0x0c1b [ 860.770843][ C1] net_ratelimit: 161 callbacks suppressed [ 861.767037][ T12] bridge_slave_1: left allmulticast mode [ 861.767065][ T12] bridge_slave_1: left promiscuous mode [ 861.767342][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.001331][ T12] bridge_slave_0: left allmulticast mode [ 862.001360][ T12] bridge_slave_0: left promiscuous mode [ 862.001600][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.145598][ C1] net_ratelimit: 583 callbacks suppressed [ 866.949600][T11468] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 868.561677][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 868.561739][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 868.952255][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.055796][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 869.107303][ T12] bond0 (unregistering): Released all slaves [ 870.860165][T11222] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.860363][T11222] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.860579][T11222] bridge_slave_0: entered allmulticast mode [ 870.969287][T11222] bridge_slave_0: entered promiscuous mode [ 871.199840][T11222] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.200083][T11222] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.200317][T11222] bridge_slave_1: entered allmulticast mode [ 871.252332][T11222] bridge_slave_1: entered promiscuous mode [ 871.702397][ C0] net_ratelimit: 60 callbacks suppressed [ 872.069407][T11222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.319959][ T12] hsr_slave_0: left promiscuous mode [ 872.587961][ T12] hsr_slave_1: left promiscuous mode [ 872.596799][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.855840][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.994213][ T12] team0 (unregistering): Port device team_slave_1 removed [ 874.128545][T11523] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 874.922762][ T12] team0 (unregistering): Port device team_slave_0 removed [ 875.504280][T11222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.658776][T11246] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.658897][T11246] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.659110][T11246] bridge_slave_0: entered allmulticast mode [ 875.672779][T11246] bridge_slave_0: entered promiscuous mode [ 876.640536][T11246] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.641948][T11246] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.642191][T11246] bridge_slave_1: entered allmulticast mode [ 876.648173][T11246] bridge_slave_1: entered promiscuous mode [ 877.068226][T11222] team0: Port device team_slave_0 added [ 877.124627][T11222] team0: Port device team_slave_1 added [ 877.128447][T11246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.173858][ C1] net_ratelimit: 80 callbacks suppressed [ 877.201026][T11246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.379380][T11222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.379392][T11222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.379416][T11222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.383803][T11222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.383814][T11222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.383838][T11222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.425788][ T5242] 8021q: adding VLAN 0 to HW filter on device eth1 [ 878.428999][T11246] team0: Port device team_slave_0 added [ 878.461784][T11246] team0: Port device team_slave_1 added [ 879.028548][T11560] bond0: option mode: unable to set because the bond device has slaves [ 879.115263][T11246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.115274][T11246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.115297][T11246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.203771][T11222] hsr_slave_0: entered promiscuous mode [ 879.210413][T11222] hsr_slave_1: entered promiscuous mode [ 879.211559][T11222] debugfs: 'hsr0' already exists in 'hsr' [ 879.211580][T11222] Cannot create hsr debugfs directory [ 879.219827][T11246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.219838][T11246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.219862][T11246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.329472][T11246] hsr_slave_0: entered promiscuous mode [ 881.341862][T11246] hsr_slave_1: entered promiscuous mode [ 881.345288][T11246] debugfs: 'hsr0' already exists in 'hsr' [ 881.345310][T11246] Cannot create hsr debugfs directory [ 882.645106][ T175] net_ratelimit: 40 callbacks suppressed [ 882.845316][T11597] syz_tun: entered allmulticast mode [ 882.898788][ T5242] 8021q: adding VLAN 0 to HW filter on device eth2 [ 885.044085][T11621] FAULT_INJECTION: forcing a failure. [ 885.044085][T11621] name failslab, interval 1, probability 0, space 0, times 0 [ 885.044118][T11621] CPU: 1 UID: 0 PID: 11621 Comm: syz.9.1005 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 885.044142][T11621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 885.044154][T11621] Call Trace: [ 885.044163][T11621] [ 885.044173][T11621] dump_stack_lvl+0xe8/0x150 [ 885.044208][T11621] should_fail_ex+0x46b/0x600 [ 885.044244][T11621] should_failslab+0xa8/0x100 [ 885.044268][T11621] __kvmalloc_node_noprof+0x176/0x890 [ 885.044292][T11621] ? v4l2_ctrl_handler_init_class+0x1a1/0x2c0 [ 885.044320][T11621] ? v4l2_ctrl_handler_init_class+0x1a1/0x2c0 [ 885.044354][T11621] v4l2_ctrl_handler_init_class+0x1a1/0x2c0 [ 885.044386][T11621] vicodec_open+0x1f2/0xbf0 [ 885.044423][T11621] v4l2_open+0x1bf/0x3a0 [ 885.044449][T11621] chrdev_open+0x4dc/0x600 [ 885.044471][T11621] ? __pfx_chrdev_open+0x10/0x10 [ 885.044500][T11621] ? __pfx_chrdev_open+0x10/0x10 [ 885.044518][T11621] do_dentry_open+0x849/0x1420 [ 885.044557][T11621] vfs_open+0x3b/0x350 [ 885.044576][T11621] ? path_openat+0x16a9/0x20a0 [ 885.044604][T11621] path_openat+0x16c4/0x20a0 [ 885.044648][T11621] do_file_open+0x23e/0x4a0 [ 885.044678][T11621] ? __pfx_do_file_open+0x10/0x10 [ 885.044725][T11621] ? alloc_fd+0x654/0x6d0 [ 885.044756][T11621] do_sys_openat2+0x115/0x200 [ 885.044780][T11621] ? __pfx_do_sys_openat2+0x10/0x10 [ 885.044802][T11621] ? exc_page_fault+0x6a/0xc0 [ 885.044831][T11621] ? do_user_addr_fault+0xc4c/0x1340 [ 885.044856][T11621] __x64_sys_openat+0x138/0x170 [ 885.044883][T11621] do_syscall_64+0x166/0x520 [ 885.044908][T11621] ? trace_irq_disable+0x3b/0x140 [ 885.044931][T11621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.044951][T11621] ? clear_bhb_loop+0x70/0xc0 [ 885.044974][T11621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.044992][T11621] RIP: 0033:0x7f24cbcced8e [ 885.045010][T11621] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 885.045027][T11621] RSP: 002b:00007f24c9f65b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 885.045048][T11621] RAX: ffffffffffffffda RBX: 00007f24c9f666c0 RCX: 00007f24cbcced8e [ 885.045063][T11621] RDX: 0000000000000002 RSI: 00007f24c9f65c00 RDI: ffffffffffffff9c [ 885.045077][T11621] RBP: 00007f24c9f65c00 R08: 0000000000000000 R09: 0000000000000000 [ 885.045090][T11621] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 885.045103][T11621] R13: 00007f24cbf96038 R14: 00007f24cbf95fa0 R15: 00007ffcd9ef1b18 [ 885.045136][T11621] [ 886.478277][T11648] bridge_slave_0: left allmulticast mode [ 886.478303][T11648] bridge_slave_0: left promiscuous mode [ 886.478571][T11648] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.727036][T11659] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 887.032179][T11648] bridge_slave_1: left allmulticast mode [ 887.032194][T11648] bridge_slave_1: left promiscuous mode [ 887.034391][T11648] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.252047][T11648] bond0: (slave bond_slave_0): Releasing backup interface [ 887.337147][T11648] bond0: (slave bond_slave_1): Releasing backup interface [ 887.438444][T11648] team0: Port device team_slave_0 removed [ 887.483275][T11648] team0: Port device team_slave_1 removed [ 887.484343][T11648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.484364][T11648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.507478][ T9251] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 887.590861][T11648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.590883][T11648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.671476][T11650] team0: Mode changed to "loadbalance" [ 887.673508][T11651] vlan0: entered promiscuous mode [ 887.710228][ T9251] usb 6-1: Using ep0 maxpacket: 32 [ 887.712537][ T9251] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 887.716531][ T9251] usb 6-1: too many endpoints for config 1 interface 0 altsetting 127: 196, using maximum allowed: 30 [ 887.716572][ T9251] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x1 has invalid maxpacket 1024 [ 887.716597][ T9251] usb 6-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 196 [ 887.716622][ T9251] usb 6-1: config 1 interface 0 has no altsetting 0 [ 887.719393][ T9251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.719413][ T9251] usb 6-1: Product: 蹿ﯷ⨅뵒捓雞䮼貞ힴ醢塃蛬鞣ﮓ蛰൨บ俽輼患씸몐劖댾⑝龶ᓪूᣦ헂袈偅䐝ᚤꡍꔘ陟퐵ꁞ⬣皊ͯ⮝얍㽏쐵Ꚁ뜔趡蹞ൄ聓Ｃ鶐䊱晓猳ۍ繗꺱뉘餚⫑卦꣧ꯈ﹙뛙ꭁ摑ﱛ躔皣ⱧỾ큾揨袢㻎乛ࢍ뭊若鄑㭞傭軭Ì珄ő纪੓鬎邮紐呚棑憽쉯Ḟꟈ䒺퍍 [ 887.719438][ T9251] usb 6-1: Manufacturer: ᰊ [ 887.719451][ T9251] usb 6-1: SerialNumber: 卶핬旟ꊪ袧䱙Ꭱ硥氋줠㯑娎醫턉꿒羵䒃㿘輻뀀잰웣庄 [ 888.201866][ C0] net_ratelimit: 64 callbacks suppressed [ 888.362953][T11667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 888.671085][T11651] team0: Port device vlan0 added [ 888.703146][T11653] tipc: Started in network mode [ 888.703172][T11653] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 888.714471][T11653] tipc: Enabled bearer , priority 0 [ 889.416075][ T9251] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 127 proto 1 vid 0x04B8 pid 0x0202 [ 889.439658][ T9251] usb 6-1: USB disconnect, device number 8 [ 889.799694][ T9251] usblp0: removed [ 890.574108][ T9251] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 890.739861][ T9251] usb 6-1: not running at top speed; connect to a high speed hub [ 890.739896][ T9251] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 890.741667][ T9251] usb 6-1: too many endpoints for config 1 interface 0 altsetting 127: 196, using maximum allowed: 30 [ 890.741720][ T9251] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 890.741734][ T9251] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 890.741751][ T9251] usb 6-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 196 [ 890.741765][ T9251] usb 6-1: config 1 interface 0 has no altsetting 0 [ 890.836239][ T9251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.836258][ T9251] usb 6-1: Product: syz [ 890.836271][ T9251] usb 6-1: Manufacturer: syz [ 890.836285][ T9251] usb 6-1: SerialNumber: syz [ 893.576735][ T9056] net_ratelimit: 55 callbacks suppressed [ 893.745793][ T9251] usb 6-1: can't set config #1, error -71 [ 893.763820][ T9251] usb 6-1: USB disconnect, device number 9 [ 894.183403][ T9222] tipc: Node number set to 11578026 [ 894.333137][T11720] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 895.905082][T11742] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 897.365086][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1038'. [ 899.068769][ T8967] net_ratelimit: 52 callbacks suppressed [ 899.674239][T11785] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 904.626873][ T5586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 904.689822][ T5586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 904.704439][ T5586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 904.721971][ T5586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 904.745634][ T5586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 904.858678][ T5590] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 904.958890][ C1] net_ratelimit: 43 callbacks suppressed [ 904.997876][ T9585] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 905.059187][ T9585] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 905.062685][ T9585] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 905.074321][ T9585] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 905.303883][T11835] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 907.279989][ T9585] Bluetooth: hci1: command tx timeout [ 907.459855][ T9585] Bluetooth: hci8: command tx timeout [ 908.669555][T11861] jffs2: notice: (11861) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 908.900299][T11862] overlayfs: overlapping lowerdir path [ 909.488340][ T9585] Bluetooth: hci1: command tx timeout [ 909.660002][ T9585] Bluetooth: hci8: command tx timeout [ 910.344674][ C0] net_ratelimit: 126 callbacks suppressed [ 911.735977][ T9585] Bluetooth: hci1: command tx timeout [ 911.809257][T11915] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 911.881879][ T9585] Bluetooth: hci8: command tx timeout [ 912.997335][T11825] rxe_eth0 speed is unknown, defaulting to 1000 [ 913.828814][T11961] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 913.940114][ T9585] Bluetooth: hci1: command tx timeout [ 914.127339][ T9585] Bluetooth: hci8: command tx timeout [ 915.130739][T11978] netlink: 'syz.5.1085': attribute type 1 has an invalid length. [ 915.256601][T11982] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1085'. [ 916.091194][T11978] bond1: entered promiscuous mode [ 916.091579][T11978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 916.118888][T11982] bond1: entered allmulticast mode [ 916.122441][T11829] rxe_eth0 speed is unknown, defaulting to 1000 [ 916.158500][ T9413] net_ratelimit: 116 callbacks suppressed [ 916.572061][ T9585] Bluetooth: hci4: unexpected event for opcode 0x0c1b [ 919.080041][ T5794] bridge_slave_1: left allmulticast mode [ 919.080071][ T5794] bridge_slave_1: left promiscuous mode [ 919.080340][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.103616][ T5794] bridge_slave_0: left allmulticast mode [ 920.103643][ T5794] bridge_slave_0: left promiscuous mode [ 920.103909][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.094512][ T5794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.223412][ T5794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.304290][ T5794] bond0 (unregistering): Released all slaves [ 921.633339][ C0] net_ratelimit: 107 callbacks suppressed [ 924.177644][T12083] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 926.040983][ T5794] hsr_slave_0: left promiscuous mode [ 926.084136][ T5794] hsr_slave_1: left promiscuous mode [ 926.085557][ T5794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.138049][ T5794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.109560][ T175] net_ratelimit: 56 callbacks suppressed [ 927.252080][ T5794] team0 (unregistering): Port device team_slave_1 removed [ 927.527672][ T5794] team0 (unregistering): Port device team_slave_0 removed [ 928.432537][T12103] lo speed is unknown, defaulting to 1000 [ 928.620511][T12142] netlink: 'syz.9.1112': attribute type 8 has an invalid length. [ 929.140437][T12103] lo speed is unknown, defaulting to 1000 [ 929.215446][T12103] lo speed is unknown, defaulting to 1000 [ 929.293805][T12103] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 929.293839][T12103] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 929.293875][T12103] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 929.511830][T12103] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 930.892845][T12103] lo speed is unknown, defaulting to 1000 [ 931.088886][T12103] lo speed is unknown, defaulting to 1000 [ 931.102804][T12103] lo speed is unknown, defaulting to 1000 [ 931.122386][T12103] lo speed is unknown, defaulting to 1000 [ 931.141044][T12103] lo speed is unknown, defaulting to 1000 [ 931.215633][T12103] lo speed is unknown, defaulting to 1000 [ 931.218336][T12103] lo speed is unknown, defaulting to 1000 [ 931.220882][T12103] lo speed is unknown, defaulting to 1000 [ 932.484635][ C0] net_ratelimit: 48 callbacks suppressed [ 933.607967][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.608028][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.970084][T11825] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.970214][T11825] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.970429][T11825] bridge_slave_0: entered allmulticast mode [ 933.985193][T11825] bridge_slave_0: entered promiscuous mode [ 934.254769][T11825] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.254890][T11825] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.255094][T11825] bridge_slave_1: entered allmulticast mode [ 934.292965][T11825] bridge_slave_1: entered promiscuous mode [ 934.851984][T11829] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.852106][T11829] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.852308][T11829] bridge_slave_0: entered allmulticast mode [ 934.883964][T12234] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 934.902067][T11829] bridge_slave_0: entered promiscuous mode [ 935.310543][T11829] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.310675][T11829] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.310903][T11829] bridge_slave_1: entered allmulticast mode [ 935.344222][T11829] bridge_slave_1: entered promiscuous mode [ 935.393583][T11825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.633531][T11825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.971117][T11829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.181814][T11829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.495715][T11825] team0: Port device team_slave_0 added [ 937.754390][T12269] netlink: 'syz.5.1135': attribute type 3 has an invalid length. [ 937.843184][T11825] team0: Port device team_slave_1 added [ 938.182809][ C1] net_ratelimit: 48 callbacks suppressed [ 938.336689][T12274] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 939.143208][T11829] team0: Port device team_slave_0 added [ 940.776513][T11829] team0: Port device team_slave_1 added [ 940.814479][T11825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.814490][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.814514][T11825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.111941][T11825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.111952][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.111976][T11825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.679945][T11829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.679956][T11829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.679980][T11829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.793498][T11829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.793509][T11829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.793534][T11829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.510095][T11825] hsr_slave_0: entered promiscuous mode [ 943.516647][T11825] hsr_slave_1: entered promiscuous mode [ 943.517731][T11825] debugfs: 'hsr0' already exists in 'hsr' [ 943.517751][T11825] Cannot create hsr debugfs directory [ 943.553076][ T1190] net_ratelimit: 62 callbacks suppressed [ 943.796230][T11829] hsr_slave_0: entered promiscuous mode [ 943.798324][T11829] hsr_slave_1: entered promiscuous mode [ 943.799402][T11829] debugfs: 'hsr0' already exists in 'hsr' [ 943.799422][T11829] Cannot create hsr debugfs directory [ 947.584487][ T5794] bridge_slave_1: left allmulticast mode [ 947.584514][ T5794] bridge_slave_1: left promiscuous mode [ 947.584770][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.933228][ T5794] bridge_slave_0: left allmulticast mode [ 947.933244][ T5794] bridge_slave_0: left promiscuous mode [ 947.933398][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.468141][ T5794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.536651][ T5794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.581677][ T5794] bond0 (unregistering): Released all slaves [ 949.004725][T12403] net_ratelimit: 139 callbacks suppressed [ 949.383656][T12408] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 951.757498][T12423] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 951.762625][ T5794] hsr_slave_0: left promiscuous mode [ 951.805165][ T5794] hsr_slave_1: left promiscuous mode [ 951.806536][ T5794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.860926][ T5794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.087751][ C1] net_ratelimit: 148 callbacks suppressed [ 955.289469][ T5794] team0 (unregistering): Port device team_slave_1 removed [ 955.365854][ T5794] team0 (unregistering): Port device team_slave_0 removed [ 955.622287][T12451] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 958.154854][ T5242] 8021q: adding VLAN 0 to HW filter on device eth1 [ 960.737598][ C0] net_ratelimit: 52 callbacks suppressed [ 963.525132][T12538] ieee802154 phy0 wpan0: encryption failed: -22 [ 964.031325][T11825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 964.077820][T11825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 964.079689][T11825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 964.379054][T11825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 964.418171][T11825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 964.673150][T11825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 964.674225][T11825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 964.952019][T11825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 965.555695][T12581] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 966.180598][ C0] net_ratelimit: 51 callbacks suppressed [ 967.239628][T12585] FAULT_INJECTION: forcing a failure. [ 967.239628][T12585] name failslab, interval 1, probability 0, space 0, times 0 [ 967.239665][T12585] CPU: 0 UID: 0 PID: 12585 Comm: syz.9.1198 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 967.239687][T12585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 967.239698][T12585] Call Trace: [ 967.239706][T12585] [ 967.239715][T12585] dump_stack_lvl+0xe8/0x150 [ 967.239747][T12585] should_fail_ex+0x46b/0x600 [ 967.239780][T12585] should_failslab+0xa8/0x100 [ 967.239803][T12585] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 967.239833][T12585] ? fib_rules_register+0x2f/0x410 [ 967.239860][T12585] ? fib_rules_register+0x2f/0x410 [ 967.239895][T12585] kmemdup_noprof+0x2b/0x70 [ 967.239920][T12585] fib_rules_register+0x2f/0x410 [ 967.239946][T12585] ? fib_notifier_ops_register+0x15b/0x230 [ 967.239977][T12585] ip6mr_net_init+0x1f1/0x6b0 [ 967.240007][T12585] ? inet6_net_init+0x4ff/0x8c0 [ 967.240032][T12585] ? __pfx_ip6mr_net_init+0x10/0x10 [ 967.240063][T12585] ? ac6_proc_init+0x59/0x70 [ 967.240096][T12585] ops_init+0x35d/0x5d0 [ 967.240129][T12585] setup_net+0x118/0x350 [ 967.240159][T12585] ? __pfx_setup_net+0x10/0x10 [ 967.240184][T12585] ? __ns_common_init+0x2fc/0x4a0 [ 967.240216][T12585] copy_net_ns+0x53b/0x780 [ 967.240243][T12585] create_new_namespaces+0x3f0/0x6b0 [ 967.240272][T12585] ? security_capable+0x7e/0x2c0 [ 967.240301][T12585] unshare_nsproxy_namespaces+0x149/0x190 [ 967.240331][T12585] ksys_unshare+0x5d8/0x970 [ 967.240365][T12585] ? __pfx_ksys_unshare+0x10/0x10 [ 967.240392][T12585] ? rcu_is_watching+0x16/0xb0 [ 967.240423][T12585] __x64_sys_unshare+0x38/0x50 [ 967.240450][T12585] do_syscall_64+0x166/0x520 [ 967.240476][T12585] ? trace_irq_disable+0x3b/0x140 [ 967.240501][T12585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.240521][T12585] ? clear_bhb_loop+0x70/0xc0 [ 967.240546][T12585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.240565][T12585] RIP: 0033:0x7f24cbd0e559 [ 967.240584][T12585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.240601][T12585] RSP: 002b:00007f24c9f66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 967.240623][T12585] RAX: ffffffffffffffda RBX: 00007f24cbf95fa0 RCX: 00007f24cbd0e559 [ 967.240639][T12585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 967.240652][T12585] RBP: 00007f24cbda5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 967.240664][T12585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.240677][T12585] R13: 00007f24cbf96038 R14: 00007f24cbf95fa0 R15: 00007ffcd9ef1b18 [ 967.240710][T12585] [ 968.054157][T11829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 968.209702][T11829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 968.752515][T11829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 969.075675][T11829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 969.660349][ T8840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 969.697158][ T8840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 969.704169][ T8840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 969.710419][ T8840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 969.712665][ T8840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 970.003031][ T8840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 970.079926][ T8840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 970.081892][ T8840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 970.113095][ T8840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 970.137434][ T8840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 971.621016][ C0] net_ratelimit: 58 callbacks suppressed [ 972.051481][T12627] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1208'. [ 972.151367][ T9585] Bluetooth: hci7: command tx timeout [ 972.553916][ T9585] Bluetooth: hci5: command tx timeout [ 972.898829][T12633] device-mapper: table: 248:1: mirror: Invalid offset (-EINVAL) [ 972.898850][T12633] device-mapper: ioctl: error adding target to table [ 974.377170][ T9585] Bluetooth: hci7: command tx timeout [ 974.718606][ T9585] Bluetooth: hci5: command tx timeout [ 974.768396][T12601] rxe_eth0 speed is unknown, defaulting to 1000 [ 974.963218][T12600] procname=platform_labels mode=644 proc_handler=mpls_platform_labels data=ffff88803d66ac80 [ 974.963248][T12600] procname=ip_ttl_propagate mode=644 proc_handler=proc_dointvec_minmax data=ffff88803d66ce90 [ 974.963268][T12600] procname=default_ttl mode=644 proc_handler=proc_dointvec_minmax data=ffff88803d66ce94 [ 974.969741][T12675] kcov: kcov_start: t = ffff888040033e80, size = 524288, area = ffffc9001bcce000 [ 974.969983][T12675] sctp: sctp_init_sock: sk:ffff888033f6dc00 [ 974.970479][T12675] sctp: sctp_setsockopt: sk:ffff888033f6dc00, optname:26 [ 974.972317][ C0] wireguard: wg1: Handshake for peer 91 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 5) [ 974.972783][ T38] INFO: task syz-executor:8616 blocked for more than 143 seconds. [ 974.972801][ T38] Not tainted syzkaller #0 [ 974.972811][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 974.972821][ T38] task:syz-executor state:D stack:22152 pid:8616 tgid:8616 ppid:1 task_flags:0x400140 flags:0x00080002 [ 974.972866][ T38] Call Trace: [ 974.972873][ T38] [ 974.972887][ T38] __schedule+0x16d9/0x5700 [ 974.972942][ T38] ? __pfx___schedule+0x10/0x10 [ 974.972983][ T38] rt_mutex_schedule+0x76/0xf0 [ 974.973008][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 974.973040][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 974.973063][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 974.973087][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 974.973110][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 974.973148][ T38] ? nfsd_shutdown_threads+0x4e/0xd0 [ 974.973175][ T38] ? nfsd_shutdown_threads+0x4e/0xd0 [ 974.973192][ T38] mutex_lock_nested+0x168/0x1d0 [ 974.973219][ T38] nfsd_shutdown_threads+0x4e/0xd0 [ 974.973239][ T38] nfsd_umount+0x41/0x60 [ 974.973261][ T38] deactivate_locked_super+0xbe/0x110 [ 974.973286][ T38] cleanup_mnt+0x204/0x2a0 [ 974.973315][ T38] task_work_run+0x1d9/0x270 [ 974.973340][ T38] ? __pfx_task_work_run+0x10/0x10 [ 974.973372][ T38] exit_to_user_mode_loop+0x204/0x770 [ 974.973398][ T38] ? rcu_is_watching+0x16/0xb0 [ 974.973421][ T38] do_syscall_64+0x328/0x520 [ 974.973446][ T38] ? trace_irq_disable+0x3b/0x140 [ 974.973470][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.973490][ T38] ? clear_bhb_loop+0x70/0xc0 [ 974.973513][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.973532][ T38] RIP: 0033:0x7f28a202f797 [ 974.973550][ T38] RSP: 002b:00007ffe54409848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 974.973577][ T38] RAX: 0000000000000000 RBX: 00007f28a20c4efb RCX: 00007f28a202f797 [ 974.973590][ T38] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe54409900 [ 974.973602][ T38] RBP: 00007ffe54409900 R08: 00007ffe5440a900 R09: 00000000ffffffff [ 974.973615][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5440a990 [ 974.973628][ T38] R13: 00007f28a20c4efb R14: 00000000000bd5c8 R15: 00007ffe5440a9d0 [ 974.973660][ T38] [ 974.973727][ T38] [ 974.973727][ T38] Showing all locks held in the system: [ 974.973816][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 974.973870][ T38] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 974.973974][ T38] locks held by kworker/u8:3/57: 4, last CPU#1: [ 974.973988][ T38] #0: ffff888038fd8938 ((wq_completion)wg-kex-wg1#15){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 974.974074][ T38] #1: ffffc9000123fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 974.974135][ T38] #2: ffff8880275217b8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 974.974187][ T38] #3: ffff88802a6e9038 (_T->lock){....}-{2:2}, at: __local_bh_disable_ip+0x3d/0x420 [ 974.974237][ T38] locks held by kworker/u8:6/175: 7, on CPU#0: [ 974.974271][ T38] #0: ffff88801beb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 974.974315][ T38] #1: ffffc9000411fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 974.974361][ T38] #2: ffffffff905c8200 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 974.974407][ T38] #3: ffff888050520160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 974.974454][ T38] #4: ffff8880264b8310 (&devlink->lock_key#26){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 974.974504][ T38] #5: ffffffff905d6a38 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 974.974548][ T38] #6: ffff8880608f1060 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5bb/0x2130 [ 974.974619][ T38] locks held by syslogd/4929: 2, last CPU#0: [ 974.974632][ T38] #0: ffff888036f09df0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 974.974678][ T38] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 974.974727][ T38] locks held by getty/5334: 2, on CPU#0: [ 974.974740][ T38] #0: ffff8880381060a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 974.974790][ T38] #1: ffffc900044d32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 974.974840][ T38] locks held by syz-executor/8616: 2, on CPU#0: [ 974.974853][ T38] #0: ffff88802b9fe0e0 (&type->s_umount_key#69){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 974.974904][ T38] #1: ffffffff8f4f88b8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 974.974953][ T38] locks held by syz.6.485/9414: 3, on CPU#1: [ 974.974967][ T38] #0: ffff88803daa9b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 974.975013][ T38] #1: ffff888039b72510 (sb_writers#20){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 974.975075][ T38] #2: ffffffff8f4f88b8 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 974.975121][ T38] locks held by syz-executor/12600: 2, on CPU#1: [ 974.975134][ T38] #0: ffffffff905c8200 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 974.975181][ T38] #1: ffffffff905d6a38 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x8b/0x290 [ 974.975231][ T38] locks held by syz-executor/12601: 5, last CPU#1: [ 974.975245][ T38] #0: ffffffff905c8200 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 974.975290][ T38] #1: ffffffff903203e0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 974.975337][ T38] #2: ffffffff90320620 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 974.975383][ T38] #3: ffff88805f4e9208 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 974.975430][ T38] #4: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 974.975477][ T38] locks held by syz.5.1204/12612: 1, last CPU#1: [ 974.975490][ T38] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 974.975534][ T38] locks held by syz.8.1221/12666: 2, on CPU#0: [ 974.975547][ T38] #0: ffff8880390d0028 (&hdev->srcu){.+.+}-{0:0}, at: __hci_dev_get+0x103/0x270 [ 974.975600][ T38] #1: ffff8880390d0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_reset+0x145/0x350 [ 974.975649][ T38] [ 974.975655][ T38] ============================================= [ 974.975655][ T38] [ 974.975671][ T38] NMI backtrace for cpu 0 [ 974.975685][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 974.975706][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 974.975717][ T38] Call Trace: [ 974.975724][ T38] [ 974.975732][ T38] dump_stack_lvl+0xe8/0x150 [ 974.975760][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 974.975783][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 974.975805][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 974.975830][ T38] sys_info+0x135/0x170 [ 974.975849][ T38] watchdog+0xfd7/0x1030 [ 974.975881][ T38] ? watchdog+0x1c7/0x1030 [ 974.975911][ T38] kthread+0x38b/0x470 [ 974.975931][ T38] ? __pfx_watchdog+0x10/0x10 [ 974.975953][ T38] ? __pfx_kthread+0x10/0x10 [ 974.975974][ T38] ret_from_fork+0x514/0xb70 [ 974.975996][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 974.976015][ T38] ? __switch_to+0xc89/0x1420 [ 974.976043][ T38] ? __pfx_kthread+0x10/0x10 [ 974.976063][ T38] ret_from_fork_asm+0x1a/0x30 [ 974.976097][ T38] [ 974.976105][ T38] Sending NMI from CPU 0 to CPUs 1: [ 974.976135][ C1] NMI backtrace for cpu 1 [ 974.976148][ C1] CPU: 1 UID: 0 PID: 12601 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 974.976167][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 974.976176][ C1] RIP: 0010:match_held_lock+0x0/0x120 [ 974.976200][ C1] Code: 67 48 0f b9 3a 90 31 db 48 89 d8 5b 41 5e 41 5f c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 57 41 56 53 bb 01 00 00 00 48 39 77 10 0f 84 c6 00 00 00 0f b7 [ 974.976213][ C1] RSP: 0018:ffffc90005a3f4e0 EFLAGS: 00000087 [ 974.976228][ C1] RAX: 0000000000000006 RBX: ffff88801e3aaba8 RCX: 0000000000000046 [ 974.976240][ C1] RDX: 0000000000000000 RSI: ffffffff8f1c3d00 RDI: ffff88801e3aaba8 [ 974.976251][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 974.976261][ C1] R10: dffffc0000000000 R11: fffffbfff2164770 R12: 0000000000000246 [ 974.976273][ C1] R13: ffff88801e3a9f40 R14: ffffffff8f1c3d00 R15: 0000000000000002 [ 974.976285][ C1] FS: 0000555578748500(0000) GS:ffff888124abb000(0000) knlGS:0000000000000000 [ 974.976299][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 974.976311][ C1] CR2: 00007f05d345bc40 CR3: 0000000060126000 CR4: 00000000003526f0 [ 974.976326][ C1] Call Trace: [ 974.976332][ C1] [ 974.976338][ C1] lock_is_held_type+0x89/0x150 [ 974.976359][ C1] ? kernfs_root+0x1c/0x230 [ 974.976381][ C1] kernfs_root+0xf6/0x230 [ 974.976401][ C1] kernfs_activate_one+0xd4/0x340 [ 974.976418][ C1] kernfs_add_one+0x55c/0x6f0 [ 974.976441][ C1] __kernfs_create_file+0x22b/0x2e0 [ 974.976459][ C1] sysfs_add_file_mode_ns+0x237/0x300 [ 974.976480][ C1] internal_create_group+0x679/0x1180 [ 974.976505][ C1] ? kobject_add+0x163/0x240 [ 974.976521][ C1] ? rcu_is_watching+0x16/0xb0 [ 974.976536][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 974.976558][ C1] ? __kmalloc_noprof+0x43e/0x790 [ 974.976583][ C1] sysfs_create_groups+0x59/0x120 [ 974.976604][ C1] ib_setup_port_attrs+0xfd8/0x2420 [ 974.976636][ C1] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 974.976655][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 974.976676][ C1] ? rt_mutex_slowunlock+0x219/0x460 [ 974.976695][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 974.976716][ C1] ? kobject_put+0x50f/0x550 [ 974.976733][ C1] ? device_add+0x6f6/0xb80 [ 974.976752][ C1] add_one_compat_dev+0x446/0x650 [ 974.976771][ C1] rdma_dev_init_net+0x243/0x2f0 [ 974.976789][ C1] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 974.976806][ C1] ? __kmalloc_noprof+0x43e/0x790 [ 974.976828][ C1] ? ops_init+0x7b/0x5d0 [ 974.976849][ C1] ops_init+0x35d/0x5d0 [ 974.976870][ C1] setup_net+0x118/0x350 [ 974.976888][ C1] ? __pfx_setup_net+0x10/0x10 [ 974.976906][ C1] ? __ns_common_init+0x2fc/0x4a0 [ 974.976929][ C1] copy_net_ns+0x53b/0x780 [ 974.976947][ C1] create_new_namespaces+0x3f0/0x6b0 [ 974.976969][ C1] ? security_capable+0x7e/0x2c0 [ 974.976989][ C1] unshare_nsproxy_namespaces+0x149/0x190 [ 974.977012][ C1] ksys_unshare+0x5d8/0x970 [ 974.977036][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 974.977069][ C1] __x64_sys_unshare+0x38/0x50 [ 974.977090][ C1] do_syscall_64+0x166/0x520 [ 974.977111][ C1] ? trace_irq_disable+0x3b/0x140 [ 974.977131][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.977147][ C1] ? clear_bhb_loop+0x70/0xc0 [ 974.977165][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.977180][ C1] RIP: 0033:0x7f770668f827 [ 974.977194][ C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.977207][ C1] RSP: 002b:00007ffedf372178 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 974.977223][ C1] RAX: ffffffffffffffda RBX: 00007f7706915f40 RCX: 00007f770668f827 [ 974.977235][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 974.977245][ C1] RBP: 00007f77069167b8 R08: 0000000000000000 R09: 0000000000000000 [ 974.977256][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 974.977267][ C1] R13: 0000000000000003 R14: 00007ffedf3723b8 R15: 0000000000000000 [ 974.977285][ C1] [ 974.978137][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 976.173323][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 976.182939][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 976.192982][ T38] Call Trace: [ 976.196250][ T38] [ 976.199178][ T38] vpanic+0x56d/0xa60 [ 976.203151][ T38] ? __pfx_vpanic+0x10/0x10 [ 976.207644][ T38] ? console_srcu_read_unlock+0x3a/0x60 [ 976.213194][ T38] panic+0xc5/0xd0 [ 976.216898][ T38] ? __pfx_panic+0x10/0x10 [ 976.221301][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 976.226316][ T38] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 976.232457][ T38] watchdog+0x1030/0x1030 [ 976.236786][ T38] ? watchdog+0x1c7/0x1030 [ 976.241223][ T38] kthread+0x38b/0x470 [ 976.245277][ T38] ? __pfx_watchdog+0x10/0x10 [ 976.249940][ T38] ? __pfx_kthread+0x10/0x10 [ 976.254514][ T38] ret_from_fork+0x514/0xb70 [ 976.259092][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 976.264188][ T38] ? __switch_to+0xc89/0x1420 [ 976.268854][ T38] ? __pfx_kthread+0x10/0x10 [ 976.273469][ T38] ret_from_fork_asm+0x1a/0x30 [ 976.278227][ T38] [ 976.281500][ T38] Kernel Offset: disabled [ 976.285814][ T38] Rebooting in 86400 seconds..