last executing test programs: 6m37.645289416s ago: executing program 1 (id=99): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000380)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) syz_clone(0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pimreg0\x00', 0x8800}) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 6m30.141554703s ago: executing program 1 (id=111): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300, 0x10201}}}}}}, @IFLA_OPERSTATE={0x5, 0x10, 0xd}]}, 0x50}}, 0x4040004) 6m25.911377386s ago: executing program 1 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x6, 0x0, r1, 0x0, '\x00', 0x0, r2, 0xff070000, 0x2}, 0x50) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) getrlimit(0xc, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r5, @ANYRES16=r3], 0x18}}], 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x1c9e01) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x80045518, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) 6m24.758013797s ago: executing program 1 (id=121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000380)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) syz_clone(0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pimreg0\x00', 0x8800}) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 6m20.464884603s ago: executing program 1 (id=127): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xfffffdf8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000007c0)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40010) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r7, &(0x7f0000002600)=""/4081, 0xff1, 0xe) 6m17.273614228s ago: executing program 1 (id=134): r0 = syz_open_dev$loop(0x0, 0xb6, 0x40002) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) socket(0x200000000000011, 0x2, 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r4, &(0x7f0000004140)={0x2020}, 0x2020) epoll_create(0x9) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="0a000300010000", 0x7) 6m14.607047065s ago: executing program 0 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000700)={@multicast2, @local, @loopback}, 0xc) r5 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) 6m9.686675087s ago: executing program 0 (id=147): r0 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) read(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 6m8.235301589s ago: executing program 0 (id=149): wait4(0x0, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) timerfd_create(0x0, 0x0) timerfd_create(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 6m5.21476647s ago: executing program 0 (id=152): wait4(0x0, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) timerfd_create(0x0, 0x0) timerfd_create(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket(0x10, 0x803, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') 6m1.341458246s ago: executing program 32 (id=134): r0 = syz_open_dev$loop(0x0, 0xb6, 0x40002) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) socket(0x200000000000011, 0x2, 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r4, &(0x7f0000004140)={0x2020}, 0x2020) epoll_create(0x9) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="0a000300010000", 0x7) 6m1.278965182s ago: executing program 0 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000180)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48) 5m59.659941931s ago: executing program 0 (id=159): r0 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) read(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x17, 0x0, 0x8400, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r5, 0x0, 0x20000000}, 0x20) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 5m43.658215393s ago: executing program 33 (id=159): r0 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) read(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x17, 0x0, 0x8400, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r5, 0x0, 0x20000000}, 0x20) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 17.830687867s ago: executing program 2 (id=697): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40400c0) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) 16.308690654s ago: executing program 3 (id=700): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000700)={@multicast2, @local, @loopback}, 0xc) 14.689877835s ago: executing program 2 (id=702): socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001980)='+', 0x1}], 0x1}, 0x4044004) 13.860528201s ago: executing program 2 (id=705): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) move_pages(r1, 0x0, 0x0, &(0x7f0000000100)=[0x8], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) 12.656421559s ago: executing program 3 (id=707): socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000140)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x2, 0x0, 0x34524742, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3, 0x0, 0x2}}) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x5000, 0x1) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.07771745s ago: executing program 3 (id=709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) setrlimit(0xb, &(0x7f0000000000)={0x300000000000000, 0x5}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r4 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14d442, 0x4d) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0x10c6a) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) 7.245464879s ago: executing program 3 (id=710): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20004890) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000100)={{0xf9, 0x5}, 0x0, 0x8, 0x2, {0x5, 0x98}, 0x4, 0x13}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c018050}, 0x44014) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.922633541s ago: executing program 4 (id=711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) setrlimit(0xb, &(0x7f0000000000)={0x300000000000000, 0x5}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r4 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) memfd_create(0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14d442, 0x4d) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0x10c6a) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) 5.660735533s ago: executing program 4 (id=712): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb0ff}, [@ldst={0x4, 0x0, 0x0, 0x0, 0xb, 0x40, 0x1a7fbb}, @exit]}, &(0x7f0000000140)='syzkaller\x00', 0x1}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000200)=ANY=[@ANYBLOB='#syz1only\x00\x00'], &(0x7f0000000140)='./file0\x00', &(0x7f00000000e0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r2, &(0x7f0000002480)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000090000007b8af8a2b9ff00000000bfa20000deffffea674ede996384ec6c1bc3a6f4ff07020000f8ff8bbbf75fcbf2d8540578a75deff79ee7ffffb7c820db8853d876d952c184dd11a8b1e758236477022b6a5ff526f715118713328d259801c78debb5198904edcd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r2, &(0x7f0000000180)="aced9694", &(0x7f0000000580)=""/76, 0x4}, 0x20) syz_io_uring_setup(0x6303, &(0x7f0000000340)={0x0, 0x70bb, 0x1, 0x1, 0x3c7}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) write$6lowpan_enable(r1, &(0x7f00000002c0)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1c0) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) 5.470927745s ago: executing program 2 (id=713): socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001980)='+', 0x1}], 0x1}, 0x4044004) 3.229477906s ago: executing program 4 (id=714): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$setsig(r2, 0xa, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setparam(r1, &(0x7f00000006c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$RTC_AIE_ON(r5, 0x7001) r6 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(0x0, 0x623d, 0x2000001, 0x141031, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0xf20, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r7 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r7) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000001300)="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", 0x557, r6) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0x7, 0x3, {"ae49fb68b262d9130518ce6a2355f36a"}, 0x81, 0x3a, 0x2e6e}, @in={0x2, 0x4e24, @empty}}}, 0x118) 2.066875819s ago: executing program 4 (id=715): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3}, 0xc) 1.779002795s ago: executing program 4 (id=716): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.778711759s ago: executing program 2 (id=717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) 1.68724939s ago: executing program 4 (id=718): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x141401) fcntl$setstatus(r0, 0x4, 0x2000) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)="733aed564eb0d5dea1d992fd586a661540ba6720", 0x14) 1.528746375s ago: executing program 3 (id=719): pselect6(0x7e, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xa26}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/tracing/options/context-info\x00', 0x800, 0x0) read(r3, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000380)=@tipc, &(0x7f0000000400)=0x80) setns(0xc9, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4004014) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, 0x0) read$FUSE(r4, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x2b, 0xfffffffe, 0x24414809, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x8, 0x4}}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x13) 1.084069939s ago: executing program 2 (id=720): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @remote, 0x6}, 0x1c) 0s ago: executing program 3 (id=721): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) move_pages(r1, 0x0, 0x0, &(0x7f0000000100)=[0x8], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 75.310375][ T5572] cgroup: Unknown subsys name 'net' [ 75.552201][ T5572] cgroup: Unknown subsys name 'cpuset' [ 75.625886][ T5572] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.274415][ T5572] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.698175][ T4900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.725101][ T5593] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.736281][ T5593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.786458][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.792265][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.798426][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.802614][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.804616][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.805338][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.815889][ T5597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.824260][ T4900] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.825061][ T4900] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.843693][ T5601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.846367][ T5601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.854478][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.864003][ T5601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.865952][ T5601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.876789][ T5599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.881378][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.882387][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.021893][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.112530][ T5590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.114652][ T5590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.137167][ T5590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.139529][ T5590] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.867936][ T5601] Bluetooth: hci0: command tx timeout [ 81.946259][ T5601] Bluetooth: hci1: command tx timeout [ 82.105314][ T5601] Bluetooth: hci3: command tx timeout [ 82.186953][ T5601] Bluetooth: hci4: command tx timeout [ 82.265422][ T5601] Bluetooth: hci2: command tx timeout [ 82.625849][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.625993][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.626176][ T5583] bridge_slave_0: entered allmulticast mode [ 82.629247][ T5583] bridge_slave_0: entered promiscuous mode [ 82.652181][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.652299][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.652783][ T5584] bridge_slave_0: entered allmulticast mode [ 82.656259][ T5584] bridge_slave_0: entered promiscuous mode [ 82.685627][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.685747][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.685903][ T5585] bridge_slave_0: entered allmulticast mode [ 82.688579][ T5585] bridge_slave_0: entered promiscuous mode [ 82.694836][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.694954][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.696692][ T5583] bridge_slave_1: entered allmulticast mode [ 82.700363][ T5583] bridge_slave_1: entered promiscuous mode [ 82.704694][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.704815][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.706761][ T5587] bridge_slave_0: entered allmulticast mode [ 82.709361][ T5587] bridge_slave_0: entered promiscuous mode [ 82.720164][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.720282][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.720459][ T5584] bridge_slave_1: entered allmulticast mode [ 82.724265][ T5584] bridge_slave_1: entered promiscuous mode [ 82.747079][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.747200][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.747731][ T5585] bridge_slave_1: entered allmulticast mode [ 82.751505][ T5585] bridge_slave_1: entered promiscuous mode [ 82.779830][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.779957][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.780428][ T5587] bridge_slave_1: entered allmulticast mode [ 82.783311][ T5587] bridge_slave_1: entered promiscuous mode [ 82.806205][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.806338][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.806821][ T5586] bridge_slave_0: entered allmulticast mode [ 82.809816][ T5586] bridge_slave_0: entered promiscuous mode [ 82.892566][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.892700][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.892863][ T5586] bridge_slave_1: entered allmulticast mode [ 82.894702][ T5586] bridge_slave_1: entered promiscuous mode [ 82.925103][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.950150][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.028497][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.031231][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.034250][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.039893][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.070282][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.087868][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.107466][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.163109][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.181496][ T5583] team0: Port device team_slave_0 added [ 83.197893][ T5584] team0: Port device team_slave_0 added [ 83.213506][ T5585] team0: Port device team_slave_0 added [ 83.219930][ T5583] team0: Port device team_slave_1 added [ 83.223121][ T5587] team0: Port device team_slave_0 added [ 83.230094][ T5584] team0: Port device team_slave_1 added [ 83.250307][ T5585] team0: Port device team_slave_1 added [ 83.279131][ T5587] team0: Port device team_slave_1 added [ 83.280776][ T5586] team0: Port device team_slave_0 added [ 83.335748][ T5586] team0: Port device team_slave_1 added [ 83.353111][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.353124][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.353149][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.358699][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.358715][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.358738][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.407539][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.407555][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.407579][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.410267][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.410282][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.410304][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.411541][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.411552][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.411575][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.413766][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.413779][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.413803][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.439301][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.439317][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.439340][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.510888][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.510906][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.510931][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.513833][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.513847][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.513871][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.591541][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.591559][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.591584][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.789871][ T5584] hsr_slave_0: entered promiscuous mode [ 83.791426][ T5584] hsr_slave_1: entered promiscuous mode [ 83.803886][ T5583] hsr_slave_0: entered promiscuous mode [ 83.805139][ T5583] hsr_slave_1: entered promiscuous mode [ 83.808215][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 83.808357][ T5583] Cannot create hsr debugfs directory [ 83.846228][ T5585] hsr_slave_0: entered promiscuous mode [ 83.848020][ T5585] hsr_slave_1: entered promiscuous mode [ 83.848541][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 83.848563][ T5585] Cannot create hsr debugfs directory [ 83.859054][ T5587] hsr_slave_0: entered promiscuous mode [ 83.861883][ T5587] hsr_slave_1: entered promiscuous mode [ 83.862901][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 83.862924][ T5587] Cannot create hsr debugfs directory [ 83.908615][ T5586] hsr_slave_0: entered promiscuous mode [ 83.909381][ T5586] hsr_slave_1: entered promiscuous mode [ 83.909894][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 83.909916][ T5586] Cannot create hsr debugfs directory [ 83.945377][ T5601] Bluetooth: hci0: command tx timeout [ 84.025304][ T5601] Bluetooth: hci1: command tx timeout [ 84.185394][ T5601] Bluetooth: hci3: command tx timeout [ 84.265797][ T5601] Bluetooth: hci4: command tx timeout [ 84.345764][ T5601] Bluetooth: hci2: command tx timeout [ 85.121547][ T5584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.171105][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.184254][ T5584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.220081][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.222972][ T5584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.259909][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.280920][ T5584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.321198][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.450309][ T5583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.480495][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.483860][ T5583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.504065][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.511077][ T5583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.540656][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.570741][ T5583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.599135][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.763471][ T5585] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.792319][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.808577][ T5585] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.831580][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.840303][ T5585] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.870480][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.896876][ T5585] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.938905][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.026500][ T5601] Bluetooth: hci0: command tx timeout [ 86.089711][ T5587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.105362][ T5601] Bluetooth: hci1: command tx timeout [ 86.123657][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.134838][ T5587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.185774][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.204824][ T5587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.248099][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.274977][ T5587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.277401][ T5601] Bluetooth: hci3: command tx timeout [ 86.308946][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.345878][ T5601] Bluetooth: hci4: command tx timeout [ 86.397846][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.425822][ T5601] Bluetooth: hci2: command tx timeout [ 86.474940][ T5586] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.499275][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.515421][ T5586] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.539921][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.556986][ T5586] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.592364][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.606940][ T5586] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.648304][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.658839][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.744927][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.745060][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.773264][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.841534][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.841667][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.886775][ T10] cfg80211: failed to load regulatory.db [ 87.011947][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.073619][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.073798][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.104760][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.139101][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.139194][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.230744][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.329013][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.333893][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.423145][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.439669][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.439788][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.590914][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.598743][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.682324][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.682450][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.754721][ T3415] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.754920][ T3415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.842393][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.921241][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.921449][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.013499][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.013791][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.106964][ T5601] Bluetooth: hci0: command tx timeout [ 88.195319][ T5601] Bluetooth: hci1: command tx timeout [ 88.305673][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.345366][ T5601] Bluetooth: hci3: command tx timeout [ 88.425365][ T5601] Bluetooth: hci4: command tx timeout [ 88.505441][ T5601] Bluetooth: hci2: command tx timeout [ 88.803456][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.921579][ T5584] veth0_vlan: entered promiscuous mode [ 89.043606][ T5584] veth1_vlan: entered promiscuous mode [ 89.220973][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.335156][ T5583] veth0_vlan: entered promiscuous mode [ 89.404301][ T5583] veth1_vlan: entered promiscuous mode [ 89.413562][ T5584] veth0_macvtap: entered promiscuous mode [ 89.465037][ T5584] veth1_macvtap: entered promiscuous mode [ 89.530398][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.593114][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.603505][ T5585] veth0_vlan: entered promiscuous mode [ 89.620617][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.648817][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.683856][ T5583] veth0_macvtap: entered promiscuous mode [ 89.733988][ T5585] veth1_vlan: entered promiscuous mode [ 89.750047][ T5583] veth1_macvtap: entered promiscuous mode [ 90.056233][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.133111][ T5587] veth0_vlan: entered promiscuous mode [ 90.163578][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.260796][ T5585] veth0_macvtap: entered promiscuous mode [ 90.268936][ T5587] veth1_vlan: entered promiscuous mode [ 90.334285][ T5585] veth1_macvtap: entered promiscuous mode [ 90.439093][ T3415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.439119][ T3415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.762921][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.781199][ T5586] veth0_vlan: entered promiscuous mode [ 90.819993][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.834058][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.834077][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.907201][ T5586] veth1_vlan: entered promiscuous mode [ 90.939741][ T5587] veth0_macvtap: entered promiscuous mode [ 90.974495][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.974510][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.008650][ T5587] veth1_macvtap: entered promiscuous mode [ 91.436589][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.436613][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.462721][ T5584] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.489056][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.590168][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.599576][ T5586] veth0_macvtap: entered promiscuous mode [ 92.810269][ T5586] veth1_macvtap: entered promiscuous mode [ 92.846794][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.846815][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.440627][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.569654][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.569675][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.601695][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.976168][ T210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.976192][ T210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.362284][ T93] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.581095][ T5801] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.768525][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.768551][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.999544][ T210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.999566][ T210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.999859][ T210] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.126583][ T1190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.137884][ T1190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.138594][ T1190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.138929][ T1190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.139120][ T1190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.668536][ T1190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.669085][ T1190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.743240][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.743260][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.743718][ T160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.743994][ T160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.744160][ T160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.744678][ T160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.160679][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.283276][ T5830] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 102.386587][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.404925][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.410571][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.524072][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.981208][ T1255] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 103.776742][ T1255] usb 5-1: not running at top speed; connect to a high speed hub [ 103.776908][ T1255] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 103.828403][ T1255] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.487624][ T1255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.737136][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.737407][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.261626][ T1255] usb 5-1: can't set config #1, error -71 [ 106.474153][ T1255] usb 5-1: USB disconnect, device number 2 [ 106.507272][ T5865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 107.145038][ T5865] vlan2: entered allmulticast mode [ 107.145068][ T5865] erspan0: entered allmulticast mode [ 109.615511][ T10] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 109.619052][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 109.984118][ T37] audit: type=1800 audit(1789477425.348:2): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.29" name="file1" dev="sda1" ino=2044 res=0 errno=0 [ 110.026426][ T10] usb 5-1: device descriptor read/64, error -32 [ 110.085228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.105224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.115221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.125230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.135214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.145219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.155216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.165243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.175221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.185231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.255976][ T5884] trusted_key: encrypted_key: insufficient parameters specified [ 111.429265][ T10] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 111.626788][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 111.626845][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 111.628663][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 111.763556][ T10] usb 5-1: string descriptor 0 read error: -22 [ 111.763682][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.025499][ T5897] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 117.148388][ T10] usb 5-1: USB disconnect, device number 4 [ 120.558167][ T5965] kAFS: No cell specified [ 121.707713][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.955268][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 121.956315][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.958131][ T9] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.958158][ T9] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 121.958182][ T9] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 1032, setting to 1024 [ 121.958207][ T9] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1024 [ 121.958230][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 121.961561][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.961587][ T9] usb 1-1: Product: syz [ 121.961600][ T9] usb 1-1: Manufacturer: syz [ 121.961614][ T9] usb 1-1: SerialNumber: syz [ 122.141942][ T5962] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.305797][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 123.565043][ T5723] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 124.030550][ T5723] usb 2-1: unable to get BOS descriptor or descriptor too short [ 124.030742][ T5723] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 124.199282][ T5723] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 124.597111][ T5723] usb 2-1: string descriptor 0 read error: -22 [ 124.597504][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.446900][ T10] usb 1-1: USB disconnect, device number 2 [ 126.448511][ T5723] usb 2-1: can't set config #1, error -71 [ 126.872736][ T5723] usb 2-1: USB disconnect, device number 2 [ 131.475353][ T9] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 131.670302][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 131.670360][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 131.673340][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 131.681579][ T9] usb 3-1: string descriptor 0 read error: -22 [ 131.681727][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.932228][ T6008] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.173453][ T6008] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 133.047487][ T9] usb 3-1: USB disconnect, device number 2 [ 133.110874][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.111273][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.305365][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 138.625325][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 138.626167][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.628192][ T10] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.628220][ T10] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 138.628244][ T10] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 1032, setting to 1024 [ 138.628267][ T10] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1024 [ 138.628286][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 138.632763][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.632788][ T10] usb 4-1: Product: syz [ 138.632801][ T10] usb 4-1: Manufacturer: syz [ 138.632815][ T10] usb 4-1: SerialNumber: syz [ 138.904791][ T6044] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 139.077977][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 140.288573][ T10] usb 4-1: USB disconnect, device number 2 [ 143.236494][ T6081] kvm [6080]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xee4d [ 143.241760][ T6081] kvm [6080]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4b4d [ 143.261045][ T6081] kvm [6080]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5a61 [ 143.264911][ T6081] kvm_intel: kvm [6080]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x9561 [ 143.273124][ T6081] kvm_intel: kvm [6080]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x7561 [ 146.110196][ T6100] trusted_key: encrypted_key: insufficient parameters specified [ 147.666692][ T5699] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 148.885278][ T5699] usb 3-1: Using ep0 maxpacket: 8 [ 148.888479][ T5699] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.889988][ T5699] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.890016][ T5699] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 148.890041][ T5699] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 1032, setting to 1024 [ 148.890067][ T5699] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1024 [ 148.890089][ T5699] usb 3-1: config 1 interface 0 has no altsetting 0 [ 148.893834][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.893859][ T5699] usb 3-1: Product: syz [ 148.893873][ T5699] usb 3-1: Manufacturer: syz [ 148.893887][ T5699] usb 3-1: SerialNumber: syz [ 149.227158][ T6109] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 149.318269][ T5699] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 153.267553][ T10] usb 3-1: USB disconnect, device number 3 [ 156.282314][ T6158] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 156.414552][ T6158] bond1 (unregistering): Released all slaves [ 158.141033][ T6184] zram0: detected capacity change from 0 to 8 [ 165.418562][ T6225] veth2: entered allmulticast mode [ 165.532251][ T6241] zram: Cannot change disksize for initialized device [ 173.770499][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 175.112192][ T6295] vlan2: entered allmulticast mode [ 175.112216][ T6295] erspan0: entered allmulticast mode [ 180.730517][ T6343] zram: Cannot change disksize for initialized device [ 184.338188][ T6374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.145'. [ 184.735322][ T6374] vlan2: entered allmulticast mode [ 190.904612][ T6401] zram: Cannot change disksize for initialized device [ 191.009652][ T6396] syz.3.151 (6396) used greatest stack depth: 17992 bytes left [ 191.591587][ T6406] netlink: 52 bytes leftover after parsing attributes in process `syz.4.155'. [ 194.275265][ T2177] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 194.356264][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.356330][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.743204][ T2177] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.743264][ T2177] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 194.749605][ T2177] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 194.774835][ T2177] usb 4-1: string descriptor 0 read error: -22 [ 194.774980][ T2177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.086081][ T6416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.293594][ T5590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.349149][ T5590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.374705][ T5590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.384793][ T5590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 195.391113][ T5590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 195.456021][ T6416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.556264][ T5590] Bluetooth: hci5: command tx timeout [ 200.567519][ T2177] usb 4-1: USB disconnect, device number 3 [ 207.263623][ T6457] zram: Cannot change disksize for initialized device [ 207.267536][ T5601] Bluetooth: hci5: command tx timeout [ 209.732510][ T4900] Bluetooth: hci0: command 0x0406 tx timeout [ 209.732550][ T4900] Bluetooth: hci5: command tx timeout [ 209.732572][ T4900] Bluetooth: hci4: command 0x0406 tx timeout [ 209.732596][ T4900] Bluetooth: hci2: command 0x0406 tx timeout [ 209.732619][ T4900] Bluetooth: hci3: command 0x0406 tx timeout [ 211.800003][ T5590] Bluetooth: hci5: command tx timeout [ 214.985662][ T5590] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 215.238916][ T5590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.470511][ T5590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.537058][ T5590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.587769][ T5590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.605896][ T5590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.923615][ T6505] zram: Cannot change disksize for initialized device [ 218.008849][ T5856] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.341934][ T5590] Bluetooth: hci1: command tx timeout [ 219.407648][ T6512] Zero length message leads to an empty skb [ 219.786238][ T5856] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.865327][ T5723] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 221.295393][ T5590] Bluetooth: hci1: command tx timeout [ 221.411012][ T5723] usb 5-1: unable to get BOS descriptor or descriptor too short [ 221.411072][ T5723] usb 5-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 221.413996][ T5723] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 221.467681][ T5723] usb 5-1: string descriptor 0 read error: -22 [ 221.467826][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.497252][ T6516] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 221.722488][ T6516] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 222.304296][ T5723] usb 5-1: USB disconnect, device number 5 [ 222.415736][ T5856] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.122990][ T5590] Bluetooth: hci1: command tx timeout [ 224.832390][ T5856] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.188131][ T5590] Bluetooth: hci1: command tx timeout [ 227.300925][ T6542] zram: Cannot change disksize for initialized device [ 229.021425][ T6563] netlink: 52 bytes leftover after parsing attributes in process `syz.3.190'. [ 230.412446][ T37] audit: type=1326 audit(1789478569.765:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6560 comm="syz.3.190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89a459e159 code=0x0 [ 230.488239][ T6566] netlink: 52 bytes leftover after parsing attributes in process `syz.4.191'. [ 231.050324][ T37] audit: type=1326 audit(1789478570.205:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6565 comm="syz.4.191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e189ce159 code=0x0 [ 236.060717][ T6575] netlink: 52 bytes leftover after parsing attributes in process `syz.2.194'. [ 238.651655][ T6584] zram: Cannot change disksize for initialized device [ 239.851738][ T5856] bridge_slave_1: left allmulticast mode [ 239.851976][ T5856] bridge_slave_1: left promiscuous mode [ 239.877549][ T6591] jffs2: notice: (6591) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 239.969111][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.158990][ T5856] bridge_slave_0: left allmulticast mode [ 241.159025][ T5856] bridge_slave_0: left promiscuous mode [ 241.159282][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.471741][ T6611] binder: 6608:6611 ioctl c0306201 0 returned -14 [ 243.734571][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.381105][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.427272][ T5856] bond0 (unregistering): Released all slaves [ 249.412578][ T6625] zram: Cannot change disksize for initialized device [ 251.154610][ T6635] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 251.356792][ T6643] binder: 6642:6643 ioctl c0306201 0 returned -14 [ 251.403470][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.403676][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.404281][ T6426] bridge_slave_0: entered allmulticast mode [ 251.413745][ T6426] bridge_slave_0: entered promiscuous mode [ 252.398314][ T6654] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 252.720169][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.720294][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.720494][ T6426] bridge_slave_1: entered allmulticast mode [ 252.790226][ T6426] bridge_slave_1: entered promiscuous mode [ 253.775301][ T5983] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 253.939435][ T5983] usb 5-1: unable to get BOS descriptor or descriptor too short [ 253.939496][ T5983] usb 5-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 253.942121][ T5983] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 253.993741][ T5983] usb 5-1: string descriptor 0 read error: -22 [ 253.993892][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.171262][ T6664] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.607341][ T6664] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 255.001719][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.019316][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.036748][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.042852][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.043551][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.816631][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.816743][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.033981][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 256.741417][ T6703] binder: 6699:6703 ioctl c0306201 0 returned -14 [ 257.145305][ T5590] Bluetooth: hci0: command tx timeout [ 260.912803][ T5590] Bluetooth: hci0: command tx timeout [ 261.252394][ T5983] usb 5-1: USB disconnect, device number 6 [ 261.349170][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 261.486434][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 261.660616][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.660721][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.660894][ T6482] bridge_slave_0: entered allmulticast mode [ 261.728304][ T6482] bridge_slave_0: entered promiscuous mode [ 261.781482][ T6713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.820916][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.821806][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.821988][ T6482] bridge_slave_1: entered allmulticast mode [ 261.844349][ T6482] bridge_slave_1: entered promiscuous mode [ 262.117598][ T5856] hsr_slave_0: left promiscuous mode [ 262.155303][ T5856] hsr_slave_1: left promiscuous mode [ 262.161183][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.161330][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.291696][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.291725][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.985302][ T5590] Bluetooth: hci0: command tx timeout [ 263.421321][ T5856] veth1_macvtap: left promiscuous mode [ 263.421623][ T5856] veth0_macvtap: left promiscuous mode [ 264.278497][ T5856] veth1_vlan: left promiscuous mode [ 264.299919][ T5856] veth0_vlan: left promiscuous mode [ 265.149533][ T5590] Bluetooth: hci0: command tx timeout [ 265.647293][ T5856] team0 (unregistering): Port device team_slave_1 removed [ 265.685775][ T5856] team0 (unregistering): Port device team_slave_0 removed [ 266.060716][ T6482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.052545][ T6482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.239913][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 268.240875][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 268.382617][ T6769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.403711][ T6482] team0: Port device team_slave_0 added [ 268.412605][ T5246] 8021q: adding VLAN 0 to HW filter on device eth2 [ 268.620491][ T6482] team0: Port device team_slave_1 added [ 268.740754][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.740771][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.740796][ T6482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.818968][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.818987][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.819012][ T6482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.918237][ T5599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.931314][ T5599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.948080][ T5599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.953870][ T5599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.971693][ T5599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.067339][ T5590] Bluetooth: hci5: command tx timeout [ 274.299272][ T6482] hsr_slave_0: entered promiscuous mode [ 274.414320][ T6482] hsr_slave_1: entered promiscuous mode [ 274.534007][ T6482] debugfs: 'hsr0' already exists in 'hsr' [ 274.534131][ T6482] Cannot create hsr debugfs directory [ 274.654079][ T5246] 8021q: adding VLAN 0 to HW filter on device eth3 [ 274.975312][ T5699] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 275.195983][ T5590] Bluetooth: hci5: command tx timeout [ 275.380270][ T5699] usb 5-1: unable to get BOS descriptor or descriptor too short [ 275.380335][ T5699] usb 5-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 275.382319][ T5699] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 275.415861][ T5699] usb 5-1: string descriptor 0 read error: -22 [ 275.415949][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.525668][ T6803] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 275.805273][ T6803] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 276.830512][ T10] usb 5-1: USB disconnect, device number 7 [ 277.227004][ T5590] Bluetooth: hci5: command tx timeout [ 279.315196][ T5590] Bluetooth: hci5: command tx timeout [ 280.490453][ T5246] 8021q: adding VLAN 0 to HW filter on device eth4 [ 280.926840][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.927006][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.927192][ T6678] bridge_slave_0: entered allmulticast mode [ 280.957479][ T6678] bridge_slave_0: entered promiscuous mode [ 281.938236][ T5856] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.974330][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.999228][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.999424][ T6678] bridge_slave_1: entered allmulticast mode [ 282.003616][ T6678] bridge_slave_1: entered promiscuous mode [ 283.203473][ T6678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.964886][ T6678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.593691][ T5856] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.638513][ T6678] team0: Port device team_slave_0 added [ 285.662027][ T6678] team0: Port device team_slave_1 added [ 285.695334][ T31] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 285.847017][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 285.847069][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 285.849341][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.849408][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.911081][ T6678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.911098][ T6678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.911118][ T6678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.941187][ T6678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.941205][ T6678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.941229][ T6678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.115696][ T31] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 288.082136][ T5856] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.123300][ T31] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 288.136294][ T31] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 288.136358][ T31] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 288.261883][ T31] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 288.283250][ T31] usb 4-1: USB disconnect, device number 4 [ 288.691381][ T6678] hsr_slave_0: entered promiscuous mode [ 288.694248][ T6678] hsr_slave_1: entered promiscuous mode [ 288.698913][ T6678] debugfs: 'hsr0' already exists in 'hsr' [ 288.698940][ T6678] Cannot create hsr debugfs directory [ 293.532529][ T5856] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.431508][ T6967] jffs2: notice: (6967) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 296.155170][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.155310][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.155520][ T6787] bridge_slave_0: entered allmulticast mode [ 296.161178][ T6787] bridge_slave_0: entered promiscuous mode [ 297.776833][ T6787] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.776960][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.777187][ T6787] bridge_slave_1: entered allmulticast mode [ 297.799546][ T6787] bridge_slave_1: entered promiscuous mode [ 299.224488][ T6787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.312445][ T6787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.680185][ T6787] team0: Port device team_slave_0 added [ 299.789049][ T5856] bridge_slave_1: left allmulticast mode [ 299.789086][ T5856] bridge_slave_1: left promiscuous mode [ 299.789802][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.028246][ T5856] bridge_slave_0: left allmulticast mode [ 300.028284][ T5856] bridge_slave_0: left promiscuous mode [ 300.028542][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.144890][ T6999] jffs2: notice: (6999) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 301.345355][ T5856] bridge_slave_1: left allmulticast mode [ 301.345392][ T5856] bridge_slave_1: left promiscuous mode [ 301.345636][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.447205][ T5856] bridge_slave_0: left allmulticast mode [ 301.447240][ T5856] bridge_slave_0: left promiscuous mode [ 301.447569][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.615522][ T5856] bridge_slave_1: left allmulticast mode [ 301.615546][ T5856] bridge_slave_1: left promiscuous mode [ 301.615705][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.706183][ T5856] bridge_slave_0: left allmulticast mode [ 301.706209][ T5856] bridge_slave_0: left promiscuous mode [ 301.706370][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.165897][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.245991][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.290727][ T5856] bond0 (unregistering): Released all slaves [ 302.314471][ T6824] syz.3.234 (6824) used greatest stack depth: 17224 bytes left [ 302.483603][ T5856] bond0 (unregistering): Released all slaves [ 302.926088][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.986864][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.019345][ T5856] bond0 (unregistering): Released all slaves [ 303.104863][ T6787] team0: Port device team_slave_1 added [ 304.736950][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.736967][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.736989][ T6787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.802478][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.802494][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.802514][ T6787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.378417][ T6787] hsr_slave_0: entered promiscuous mode [ 305.379851][ T6787] hsr_slave_1: entered promiscuous mode [ 305.380920][ T6787] debugfs: 'hsr0' already exists in 'hsr' [ 305.380946][ T6787] Cannot create hsr debugfs directory [ 305.636954][ T6678] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 306.180662][ T7038] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 306.488695][ T6678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 307.637832][ T7052] jffs2: notice: (7052) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 308.848427][ T6678] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 308.881731][ T6678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 309.252499][ T7074] jffs2: notice: (7074) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 310.184395][ T6678] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 310.664169][ T6678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 310.688625][ T5246] 8021q: adding VLAN 0 to HW filter on device eth5 [ 310.802251][ T6678] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 310.829612][ T6678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 312.538195][ T5856] hsr_slave_0: left promiscuous mode [ 312.588415][ T5856] hsr_slave_1: left promiscuous mode [ 312.591385][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.494201][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.844467][ T7119] jffs2: notice: (7119) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 314.156010][ T5856] hsr_slave_0: left promiscuous mode [ 314.445821][ T5856] hsr_slave_1: left promiscuous mode [ 314.447060][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.447084][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.686757][ T7126] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 315.594698][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.641385][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.649141][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.653710][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.654559][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.675400][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.675430][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.961188][ T5856] veth1_macvtap: left promiscuous mode [ 315.961297][ T5856] veth0_macvtap: left promiscuous mode [ 315.961551][ T5856] veth1_vlan: left promiscuous mode [ 315.961742][ T5856] veth0_vlan: left promiscuous mode [ 317.067586][ T7143] jffs2: notice: (7143) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 317.265301][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.265374][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.092986][ T5590] Bluetooth: hci1: command tx timeout [ 318.365719][ T5856] team0 (unregistering): Port device team_slave_1 removed [ 318.411909][ T5856] team0 (unregistering): Port device team_slave_0 removed [ 319.118444][ T5856] team0 (unregistering): Port device team_slave_1 removed [ 319.188469][ T5856] team0 (unregistering): Port device team_slave_0 removed [ 319.974992][ T7161] jffs2: notice: (7161) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 320.105228][ T5590] Bluetooth: hci1: command tx timeout [ 322.044425][ T7187] ======================================================= [ 322.044425][ T7187] WARNING: The mand mount option has been deprecated and [ 322.044425][ T7187] and is ignored by this kernel. Remove the mand [ 322.044425][ T7187] option from the mount to silence this warning. [ 322.044425][ T7187] ======================================================= [ 322.120597][ T7187] overlayfs: failed to clone lowerpath [ 322.884021][ T5590] Bluetooth: hci1: command tx timeout [ 325.256887][ T5599] Bluetooth: hci1: command tx timeout [ 327.305955][ T6787] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 327.552779][ T6787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 327.617231][ T6787] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 327.751251][ T6787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.771131][ T6787] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 327.939952][ T6787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 327.999098][ T6787] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.092539][ T6787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.032563][ T6787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.171136][ T6787] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.312406][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.312649][ T5818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.682083][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.682218][ T5827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.377090][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.377310][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.377517][ T7125] bridge_slave_0: entered allmulticast mode [ 331.388064][ T7125] bridge_slave_0: entered promiscuous mode [ 331.444826][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.444969][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.445171][ T7125] bridge_slave_1: entered allmulticast mode [ 331.502316][ T7125] bridge_slave_1: entered promiscuous mode [ 331.510901][ T5590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.557601][ T5590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.558911][ T5590] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.561325][ T5590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.570640][ T5590] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.996097][ T7310] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 332.089955][ T7310] bond1 (unregistering): Released all slaves [ 332.439622][ T7125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.046056][ T7125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.612540][ T7125] team0: Port device team_slave_0 added [ 333.683793][ T7125] team0: Port device team_slave_1 added [ 333.998636][ T5599] Bluetooth: hci0: command tx timeout [ 336.158498][ T5599] Bluetooth: hci0: command tx timeout [ 336.298614][ T7369] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 336.409648][ T5246] 8021q: adding VLAN 0 to HW filter on device eth6 [ 336.456348][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.456366][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.456388][ T7125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.512152][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.512170][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.512195][ T7125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.141157][ T7125] hsr_slave_0: entered promiscuous mode [ 338.142540][ T7125] hsr_slave_1: entered promiscuous mode [ 338.193784][ T5599] Bluetooth: hci0: command tx timeout [ 338.766326][ T7422] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 338.825350][ T7422] bond1 (unregistering): Released all slaves [ 340.285680][ T5599] Bluetooth: hci0: command tx timeout [ 341.527057][ T5594] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 341.685597][ T5594] usb 3-1: unable to get BOS descriptor or descriptor too short [ 341.685658][ T5594] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 341.688544][ T5594] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 341.723252][ T5594] usb 3-1: string descriptor 0 read error: -22 [ 341.723395][ T5594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.133096][ T7444] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.346802][ T7444] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.709514][ T5246] 8021q: adding VLAN 0 to HW filter on device eth7 [ 347.363313][ T5246] 8021q: adding VLAN 0 to HW filter on device eth8 [ 348.280496][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.280626][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.280827][ T7305] bridge_slave_0: entered allmulticast mode [ 348.321210][ T7305] bridge_slave_0: entered promiscuous mode [ 348.340372][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.344704][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.348136][ T7305] bridge_slave_1: entered allmulticast mode [ 348.352463][ T7305] bridge_slave_1: entered promiscuous mode [ 348.484201][ T5594] usb 3-1: USB disconnect, device number 4 [ 349.561729][ T7305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.582827][ T7305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.673283][ T7305] team0: Port device team_slave_0 added [ 349.678940][ T7305] team0: Port device team_slave_1 added [ 349.801769][ T7547] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 350.684597][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.684616][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.684638][ T7305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.687175][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.687191][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.687214][ T7305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.947090][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 352.049741][ T7305] hsr_slave_0: entered promiscuous mode [ 352.052265][ T7305] hsr_slave_1: entered promiscuous mode [ 352.072405][ T7305] debugfs: 'hsr0' already exists in 'hsr' [ 352.072434][ T7305] Cannot create hsr debugfs directory [ 352.142769][ T7576] jffs2: notice: (7576) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 353.864387][ T7588] jffs2: notice: (7588) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 354.413187][ T5856] bridge_slave_1: left allmulticast mode [ 354.413227][ T5856] bridge_slave_1: left promiscuous mode [ 354.413499][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.524489][ T5856] bridge_slave_0: left allmulticast mode [ 354.524527][ T5856] bridge_slave_0: left promiscuous mode [ 354.524787][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.673934][ T5856] bridge_slave_1: left allmulticast mode [ 354.673970][ T5856] bridge_slave_1: left promiscuous mode [ 354.674220][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.756084][ T5856] bridge_slave_0: left allmulticast mode [ 354.756118][ T5856] bridge_slave_0: left promiscuous mode [ 354.756355][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.556248][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.635241][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.836145][ T5856] bond0 (unregistering): Released all slaves [ 356.703332][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.824822][ T7620] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 357.685076][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.725006][ T5856] bond0 (unregistering): Released all slaves [ 358.021154][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 358.483036][ T7629] zram: Cannot change disksize for initialized device [ 359.381699][ T7125] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 359.604391][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.729950][ T7125] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 360.884069][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.134256][ T7661] netlink: 52 bytes leftover after parsing attributes in process `syz.3.394'. [ 362.665439][ T37] audit: type=1326 audit(1789479470.019:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7659 comm="syz.3.394" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89a459e159 code=0x0 [ 365.557470][ T7668] overlayfs: failed to clone lowerpath [ 366.161696][ T7125] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 366.339088][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.539260][ T5246] 8021q: adding VLAN 0 to HW filter on device eth11 [ 366.540120][ T7125] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 367.292009][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 367.632836][ T5856] hsr_slave_0: left promiscuous mode [ 368.243124][ T5856] hsr_slave_1: left promiscuous mode [ 368.661404][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.708943][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.252889][ T5856] hsr_slave_0: left promiscuous mode [ 370.292944][ T5856] hsr_slave_1: left promiscuous mode [ 370.294148][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.593604][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.732733][ T7711] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 374.812627][ T5590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.008899][ T7727] zram: Cannot change disksize for initialized device [ 375.503051][ T5590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.505564][ T5590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.555939][ T5590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.556777][ T5590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.876157][ T5856] team0 (unregistering): Port device team_slave_1 removed [ 375.913336][ T5856] team0 (unregistering): Port device team_slave_0 removed [ 376.283515][ T5856] team0 (unregistering): Port device team_slave_1 removed [ 376.323956][ T5856] team0 (unregistering): Port device team_slave_0 removed [ 377.718052][ T7125] kthread_run failed with err -4 [ 377.817438][ T5590] Bluetooth: hci5: command tx timeout [ 378.724990][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.725062][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.863296][ T5590] Bluetooth: hci5: command tx timeout [ 381.950776][ T5590] Bluetooth: hci5: command tx timeout [ 384.026283][ T5590] Bluetooth: hci5: command tx timeout [ 387.144521][ T7843] jffs2: notice: (7843) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 389.677530][ T7723] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.677671][ T7723] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.677872][ T7723] bridge_slave_0: entered allmulticast mode [ 389.680923][ T7723] bridge_slave_0: entered promiscuous mode [ 389.690468][ T7723] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.690829][ T7723] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.691024][ T7723] bridge_slave_1: entered allmulticast mode [ 389.693592][ T7723] bridge_slave_1: entered promiscuous mode [ 389.952470][ T7723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.994638][ T7723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.994740][ T7305] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 390.047105][ T7305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.273177][ T7305] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 391.316161][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 391.346261][ T7305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.351445][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 391.405804][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 391.420282][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 391.423996][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 391.859629][ T7723] team0: Port device team_slave_0 added [ 391.933685][ T7912] jffs2: notice: (7912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 393.470835][ T7723] team0: Port device team_slave_1 added [ 393.542920][ T5590] Bluetooth: hci1: command tx timeout [ 407.007894][ T5590] Bluetooth: hci1: command tx timeout [ 409.865542][ T5599] Bluetooth: hci1: command tx timeout [ 409.994522][ T7723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.994541][ T7723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.994564][ T7723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.009946][ T7723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.009959][ T7723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.009974][ T7723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.415856][ T7968] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 412.235338][ T5590] Bluetooth: hci1: command tx timeout [ 412.547485][ T7723] hsr_slave_0: entered promiscuous mode [ 412.564001][ T7723] hsr_slave_1: entered promiscuous mode [ 412.568078][ T7723] debugfs: 'hsr0' already exists in 'hsr' [ 412.568106][ T7723] Cannot create hsr debugfs directory [ 414.245746][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 416.938177][ T8002] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 422.728235][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 423.706386][ T5856] bridge_slave_1: left allmulticast mode [ 423.706413][ T5856] bridge_slave_1: left promiscuous mode [ 423.706583][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.917381][ T5856] bridge_slave_0: left allmulticast mode [ 423.917419][ T5856] bridge_slave_0: left promiscuous mode [ 423.950706][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.425071][ T8049] syz.2.471 uses obsolete (PF_INET,SOCK_PACKET) [ 424.583856][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.684260][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.757514][ T5856] bond0 (unregistering): Released all slaves [ 424.885205][ T8055] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 426.303306][ T5856] hsr_slave_0: left promiscuous mode [ 426.322834][ T5856] hsr_slave_1: left promiscuous mode [ 426.324843][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.347934][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.717429][ T5856] team0 (unregistering): Port device team_slave_1 removed [ 426.980988][ T5856] team0 (unregistering): Port device team_slave_0 removed [ 432.254368][ T7906] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.254581][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.254776][ T7906] bridge_slave_0: entered allmulticast mode [ 432.260443][ T7906] bridge_slave_0: entered promiscuous mode [ 432.392042][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 432.392080][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.484'. [ 432.533318][ T7906] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.533458][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.533652][ T7906] bridge_slave_1: entered allmulticast mode [ 432.536624][ T7906] bridge_slave_1: entered promiscuous mode [ 432.713816][ T8122] process 'syz.2.487' launched './file1' with NULL argv: empty string added [ 433.782619][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 433.829129][ T7906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.833127][ T1021] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.833183][ T1021] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.833215][ T1021] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.913558][ T7906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.394716][ T5983] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 435.556132][ T5983] usb 4-1: not running at top speed; connect to a high speed hub [ 435.556193][ T5983] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 435.557379][ T5983] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.557453][ T5983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.573608][ T7906] team0: Port device team_slave_0 added [ 435.596696][ T7906] team0: Port device team_slave_1 added [ 435.667479][ T5983] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 435.667554][ T5983] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 435.765108][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.765127][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.765151][ T7906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.867678][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.867692][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.867706][ T7906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.120278][ T5983] usb 4-1: USB disconnect, device number 5 [ 436.152625][ T7906] hsr_slave_0: entered promiscuous mode [ 436.170233][ T7906] hsr_slave_1: entered promiscuous mode [ 436.559089][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 436.588658][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 436.600022][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 436.608776][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 436.609563][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 438.399805][ T8140] netlink: 'syz.4.493': attribute type 2 has an invalid length. [ 438.928836][ T5590] Bluetooth: hci0: command tx timeout [ 440.134856][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.134927][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.465139][ T5590] Bluetooth: hci0: command tx timeout [ 442.733467][ T7365] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.542885][ T5590] Bluetooth: hci0: command tx timeout [ 445.623074][ T5590] Bluetooth: hci0: command tx timeout [ 446.437906][ T8230] netlink: 'syz.2.506': attribute type 2 has an invalid length. [ 449.287204][ T5856] bridge_slave_1: left allmulticast mode [ 449.287231][ T5856] bridge_slave_1: left promiscuous mode [ 449.287402][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.469209][ T5856] bridge_slave_0: left allmulticast mode [ 449.469237][ T5856] bridge_slave_0: left promiscuous mode [ 449.469409][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.660307][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'. [ 451.677435][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'. [ 451.956468][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.073446][ T5599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.127325][ T5599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 452.129560][ T5599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 452.131322][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.187565][ T5599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 452.201459][ T5599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 453.694546][ T5856] bond0 (unregistering): Released all slaves [ 453.852344][ T8275] tipc: Enabling of bearer rejected, failed to enable media [ 453.973600][ T8311] jffs2: notice: (8311) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 454.455461][ T5599] Bluetooth: hci5: command tx timeout [ 454.964409][ T1255] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 454.988148][ T8315] netlink: 'syz.2.519': attribute type 2 has an invalid length. [ 455.134719][ T1255] usb 4-1: not running at top speed; connect to a high speed hub [ 455.134773][ T1255] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 455.137196][ T1255] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.137264][ T1255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.247241][ T5856] hsr_slave_0: left promiscuous mode [ 455.248707][ T1255] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 455.277187][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.524'. [ 455.277226][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 455.307601][ T5856] hsr_slave_1: left promiscuous mode [ 455.309066][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.355612][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.400637][ T1255] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 455.401120][ T1255] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 455.424710][ T1255] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 455.425365][ T1255] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 455.494115][ T1255] usb 4-1: USB disconnect, device number 6 [ 457.286153][ T5599] Bluetooth: hci5: command tx timeout [ 457.993413][ T5856] team0 (unregistering): Port device team_slave_1 removed [ 458.044294][ T5856] team0 (unregistering): Port device team_slave_0 removed [ 458.920807][ T8145] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.920929][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.921115][ T8145] bridge_slave_0: entered allmulticast mode [ 458.925629][ T8145] bridge_slave_0: entered promiscuous mode [ 458.989287][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.989462][ T8145] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.989654][ T8145] bridge_slave_1: entered allmulticast mode [ 459.000936][ T8145] bridge_slave_1: entered promiscuous mode [ 459.099522][ T8355] netlink: 'syz.2.533': attribute type 2 has an invalid length. [ 459.462799][ T5599] Bluetooth: hci5: command tx timeout [ 459.622258][ T8145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.690447][ T8145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.002122][ T8386] netlink: 52 bytes leftover after parsing attributes in process `syz.4.538'. [ 460.942910][ T8390] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 461.869507][ T5599] Bluetooth: hci5: command tx timeout [ 464.736478][ T8145] team0: Port device team_slave_0 added [ 464.749181][ T8145] team0: Port device team_slave_1 added [ 465.141050][ T8145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.141068][ T8145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.141092][ T8145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.192702][ T8145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.192720][ T8145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.192746][ T8145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.549254][ T8145] hsr_slave_0: entered promiscuous mode [ 465.550520][ T8145] hsr_slave_1: entered promiscuous mode [ 465.551386][ T8145] debugfs: 'hsr0' already exists in 'hsr' [ 465.551410][ T8145] Cannot create hsr debugfs directory [ 466.162921][ T5856] bridge_slave_1: left allmulticast mode [ 466.162956][ T5856] bridge_slave_1: left promiscuous mode [ 466.163205][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.192774][ T5984] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 466.498909][ T5984] usb 4-1: unable to get BOS descriptor or descriptor too short [ 466.498970][ T5984] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 466.659186][ T5856] bridge_slave_0: left allmulticast mode [ 466.659221][ T5856] bridge_slave_0: left promiscuous mode [ 466.659462][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.660452][ T5984] usb 4-1: string descriptor 0 read error: -22 [ 466.660585][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.025178][ T5984] usb 4-1: USB disconnect, device number 7 [ 468.223355][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.313331][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.375554][ T5856] bond0 (unregistering): Released all slaves [ 469.247422][ T8456] netlink: 52 bytes leftover after parsing attributes in process `syz.3.554'. [ 470.865334][ T5856] hsr_slave_0: left promiscuous mode [ 471.113945][ T5856] hsr_slave_1: left promiscuous mode [ 471.115179][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.754526][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.900657][ T8477] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 472.918037][ T5856] team0 (unregistering): Port device team_slave_1 removed [ 472.946208][ T5856] team0 (unregistering): Port device team_slave_0 removed [ 473.616882][ T8299] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.617010][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.617215][ T8299] bridge_slave_0: entered allmulticast mode [ 473.652106][ T8299] bridge_slave_0: entered promiscuous mode [ 473.656660][ T8299] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.656791][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.656954][ T8299] bridge_slave_1: entered allmulticast mode [ 473.697606][ T8299] bridge_slave_1: entered promiscuous mode [ 474.312349][ T8299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.316246][ T8299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.367596][ T8504] netlink: 52 bytes leftover after parsing attributes in process `syz.4.567'. [ 474.647787][ T5699] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 476.007526][ T5699] usb 4-1: not running at top speed; connect to a high speed hub [ 476.007599][ T5699] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 476.014844][ T5699] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.014972][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.002159][ T5699] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 477.002387][ T5699] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 477.117638][ T5699] usb 4-1: USB disconnect, device number 8 [ 477.135271][ T8299] team0: Port device team_slave_0 added [ 477.170776][ T8299] team0: Port device team_slave_1 added [ 478.252194][ T8299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.252212][ T8299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.252236][ T8299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.317432][ T8299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.317452][ T8299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.317477][ T8299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.475127][ T8145] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 478.600488][ T8145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 478.623041][ T8145] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 478.764872][ T8145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.834065][ T8299] hsr_slave_0: entered promiscuous mode [ 478.835558][ T8299] hsr_slave_1: entered promiscuous mode [ 478.840146][ T8299] debugfs: 'hsr0' already exists in 'hsr' [ 478.840172][ T8299] Cannot create hsr debugfs directory [ 478.955145][ T5856] bridge_slave_1: left allmulticast mode [ 478.955172][ T5856] bridge_slave_1: left promiscuous mode [ 478.955346][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.368640][ T5856] bridge_slave_0: left allmulticast mode [ 479.368680][ T5856] bridge_slave_0: left promiscuous mode [ 479.371184][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.913538][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.949542][ T8545] netlink: 52 bytes leftover after parsing attributes in process `syz.4.578'. [ 480.203245][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.097528][ T5856] bond0 (unregistering): Released all slaves [ 482.030232][ T8145] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 482.068815][ T8145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 482.123745][ T8145] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 482.290521][ T8145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 483.793016][ T5856] hsr_slave_0: left promiscuous mode [ 483.832895][ T5856] hsr_slave_1: left promiscuous mode [ 483.834209][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.876517][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.153050][ T8586] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 484.435350][ T5856] team0 (unregistering): Port device team_slave_1 removed [ 484.483486][ T5856] team0 (unregistering): Port device team_slave_0 removed [ 486.678296][ T8145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.921648][ T8608] netlink: 76 bytes leftover after parsing attributes in process `syz.2.595'. [ 486.938598][ T8145] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.050851][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.050987][ T3365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.750260][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.750413][ T5818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.308348][ T8299] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 492.214872][ T8299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 492.241208][ T8299] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 492.519524][ T8299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 492.533953][ T8299] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 492.563484][ T8299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 492.569486][ T8299] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 492.677362][ T8299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.063603][ T8299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.149706][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 494.149742][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.608'. [ 494.301897][ T8299] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.470158][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.496153][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.588324][ T8651] trusted_key: encrypted_key: insufficient parameters specified [ 494.605843][ T7365] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.605984][ T7365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.653967][ T7365] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.732876][ T3365] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.732930][ T3365] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.759785][ T3365] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.711567][ T8145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.803391][ T8695] trusted_key: encrypted_key: insufficient parameters specified [ 498.649614][ T5590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 498.690106][ T5590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 498.691212][ T5590] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 498.711326][ T5590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 498.712431][ T5590] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 499.187639][ T8299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.892761][ T5590] Bluetooth: hci0: command tx timeout [ 502.221841][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.221911][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.940503][ T5590] Bluetooth: hci0: command tx timeout [ 504.982776][ T5590] Bluetooth: hci0: command tx timeout [ 505.188015][ T8755] 9p: Bad value for 'wfdno' [ 505.870413][ T1255] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 506.055877][ T1255] usb 4-1: not running at top speed; connect to a high speed hub [ 506.055903][ T1255] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 506.056961][ T1255] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.057000][ T1255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.132435][ T1255] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 506.132503][ T1255] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 506.297983][ T8769] netlink: 20 bytes leftover after parsing attributes in process `syz.4.630'. [ 506.341307][ T1255] usb 4-1: USB disconnect, device number 9 [ 506.942909][ T8299] veth0_vlan: entered promiscuous mode [ 507.073738][ T5590] Bluetooth: hci0: command tx timeout [ 507.959577][ T8299] veth1_vlan: entered promiscuous mode [ 508.959610][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.959720][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.960185][ T8711] bridge_slave_0: entered allmulticast mode [ 508.989493][ T8711] bridge_slave_0: entered promiscuous mode [ 509.013096][ T8807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.640'. [ 509.080288][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.080518][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.080701][ T8711] bridge_slave_1: entered allmulticast mode [ 509.084028][ T8711] bridge_slave_1: entered promiscuous mode [ 509.170863][ T8299] veth0_macvtap: entered promiscuous mode [ 509.338987][ T8711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.393920][ T8711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.394987][ T8299] veth1_macvtap: entered promiscuous mode [ 511.125714][ T8711] team0: Port device team_slave_0 added [ 511.138539][ T8823] kAFS: No cell specified [ 511.224823][ T8711] team0: Port device team_slave_1 added [ 511.512967][ T48] bridge_slave_1: left allmulticast mode [ 511.512992][ T48] bridge_slave_1: left promiscuous mode [ 511.513194][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.523666][ T48] bridge_slave_0: left allmulticast mode [ 512.523691][ T48] bridge_slave_0: left promiscuous mode [ 512.523847][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.604424][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 513.658177][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 513.659653][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 513.667935][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 513.668822][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 514.083698][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.193470][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.351597][ T48] bond0 (unregistering): Released all slaves [ 515.588455][ T8838] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 515.608349][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.608368][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.608389][ T8711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.677125][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.677143][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.677168][ T8711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.712802][ T5599] Bluetooth: hci1: command tx timeout [ 516.060462][ T8711] hsr_slave_0: entered promiscuous mode [ 516.099009][ T8711] hsr_slave_1: entered promiscuous mode [ 517.274376][ T48] hsr_slave_0: left promiscuous mode [ 517.297515][ T48] hsr_slave_1: left promiscuous mode [ 517.298962][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.337526][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.085974][ T5599] Bluetooth: hci1: command tx timeout [ 518.925115][ T8875] jffs2: notice: (8875) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 518.926996][ T8876] kAFS: No cell specified [ 520.102759][ T5599] Bluetooth: hci1: command tx timeout [ 520.229541][ T8890] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 521.293461][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.664'. [ 521.380087][ T48] team0 (unregistering): Port device team_slave_1 removed [ 521.483491][ T48] team0 (unregistering): Port device team_slave_0 removed [ 522.106722][ T8899] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 522.246158][ T5599] Bluetooth: hci1: command tx timeout [ 523.032751][ T8903] jffs2: notice: (8903) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 524.574777][ T8918] jffs2: notice: (8918) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 525.745568][ T8924] kAFS: No cell specified [ 525.998893][ T8931] jffs2: notice: (8931) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 527.447311][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 527.568608][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 528.470140][ T8963] kvm [8962]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000000080 [ 528.472137][ T8963] kvm [8962]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000000080 [ 528.487001][ T8963] kvm [8962]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800000000000 [ 528.488821][ T8963] kvm [8962]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000000080 [ 528.489959][ T8963] kvm [8962]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000080 [ 528.490029][ T8963] kvm [8962]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 528.493809][ T8963] kvm [8962]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 528.493881][ T8963] kvm [8962]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 528.496970][ T8963] kvm [8962]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800000000000 [ 528.498421][ T8963] kvm [8962]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffff000000000080 [ 528.758675][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 528.870730][ T8972] jffs2: notice: (8972) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 530.403008][ T8981] kAFS: No cell specified [ 534.113591][ T8843] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.115309][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.115510][ T8843] bridge_slave_0: entered allmulticast mode [ 534.135106][ T8843] bridge_slave_0: entered promiscuous mode [ 534.149254][ T8843] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.149471][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.149664][ T8843] bridge_slave_1: entered allmulticast mode [ 534.163608][ T8843] bridge_slave_1: entered promiscuous mode [ 534.386007][ T9033] kAFS: No cell specified [ 535.587152][ T8843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.596160][ T8843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.750529][ T9055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.701'. [ 537.750570][ T9055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.701'. [ 539.072301][ T8843] team0: Port device team_slave_0 added [ 539.197470][ T9055] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 539.372110][ T9055] geneve1: entered promiscuous mode [ 539.401298][ T8843] team0: Port device team_slave_1 added [ 539.656899][ T9065] kAFS: No cell specified [ 544.958707][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.958725][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.958749][ T8843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.535904][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.535922][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.535948][ T8843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.811033][ T8843] hsr_slave_0: entered promiscuous mode [ 548.830803][ T8843] hsr_slave_1: entered promiscuous mode [ 548.831807][ T8843] debugfs: 'hsr0' already exists in 'hsr' [ 548.831833][ T8843] Cannot create hsr debugfs directory [ 550.440184][ T8711] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 550.480753][ T9133] kAFS: No cell specified [ 550.523466][ T8711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 550.575709][ T8711] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 550.642721][ T8711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 550.669467][ T8711] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 550.951841][ T8711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 551.929323][ T8711] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 552.007252][ T8711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 552.616377][ T9165] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 553.193070][ T48] bridge_slave_1: left allmulticast mode [ 553.193107][ T48] bridge_slave_1: left promiscuous mode [ 553.193380][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.104365][ T9172] syz.2.720 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 554.104405][ T9172] CPU: 0 UID: 0 PID: 9172 Comm: syz.2.720 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 554.104417][ T9172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.104429][ T9172] Call Trace: [ 554.104433][ T9172] [ 554.104439][ T9172] dump_stack_lvl+0xe8/0x150 [ 554.104541][ T9172] dump_header+0xd3/0x4b0 [ 554.104564][ T9172] oom_kill_process+0x3ab/0x9e0 [ 554.104595][ T9172] out_of_memory+0x1064/0x1480 [ 554.104618][ T9172] ? __pfx_out_of_memory+0x10/0x10 [ 554.104633][ T9172] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 554.104755][ T9172] ? _mutex_lock_killable+0x152/0x1d0 [ 554.104771][ T9172] ? try_charge_memcg+0xcc3/0x16f0 [ 554.104799][ T9172] try_charge_memcg+0xd82/0x16f0 [ 554.104813][ T9172] ? __lock_acquire+0x747/0x2de0 [ 554.104848][ T9172] ? __pfx_try_charge_memcg+0x10/0x10 [ 554.104874][ T9172] ? charge_memcg+0x47/0x310 [ 554.104890][ T9172] charge_memcg+0x1dd/0x310 [ 554.104906][ T9172] __mem_cgroup_charge+0x25/0x80 [ 554.104920][ T9172] shmem_get_folio_gfp+0x81a/0x1c40 [ 554.104946][ T9172] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 554.104961][ T9172] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 554.104990][ T9172] shmem_write_begin+0x166/0x320 [ 554.105006][ T9172] generic_perform_write+0x2ad/0x8b0 [ 554.105024][ T9172] ? __pfx_generic_perform_write+0x10/0x10 [ 554.105036][ T9172] ? generic_write_checks_count+0x426/0x530 [ 554.105053][ T9172] ? file_update_time_flags+0x2db/0x450 [ 554.105072][ T9172] shmem_file_write_iter+0xfb/0x120 [ 554.105088][ T9172] __kernel_write_iter+0x453/0x8f0 [ 554.105103][ T9172] ? __pfx___kernel_write_iter+0x10/0x10 [ 554.105118][ T9172] ? __asan_memset+0x22/0x50 [ 554.105130][ T9172] ? iov_iter_bvec+0xb8/0x180 [ 554.105166][ T9172] dump_user_range+0xc1c/0x12c0 [ 554.105201][ T9172] ? __pfx_dump_user_range+0x10/0x10 [ 554.105219][ T9172] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 554.105239][ T9172] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 554.105251][ T9172] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 554.105269][ T9172] ? elf_core_dump+0x2a8f/0x3a90 [ 554.105288][ T9172] elf_core_dump+0x3485/0x3a90 [ 554.105313][ T9172] ? __pfx_elf_core_dump+0x10/0x10 [ 554.105326][ T9172] ? __lock_acquire+0x747/0x2de0 [ 554.105340][ T9172] ? arch_do_signal_or_restart+0xbb/0x860 [ 554.105391][ T9172] ? lock_acquire+0x115/0x350 [ 554.105404][ T9172] ? 0xffffffffff600000 [ 554.105434][ T9172] coredump_write+0x129c/0x1970 [ 554.105457][ T9172] ? __pfx_coredump_write+0x10/0x10 [ 554.105481][ T9172] ? unshare_files+0xab/0x140 [ 554.105509][ T9172] vfs_coredump+0x376a/0x4520 [ 554.105535][ T9172] ? __pfx_vfs_coredump+0x10/0x10 [ 554.105550][ T9172] ? is_bpf_text_address+0x26/0x2b0 [ 554.105579][ T9172] ? __lock_acquire+0x747/0x2de0 [ 554.105595][ T9172] ? __lock_acquire+0x747/0x2de0 [ 554.105616][ T9172] ? lock_acquire+0x115/0x350 [ 554.105632][ T9172] ? lock_acquire+0x115/0x350 [ 554.105649][ T9172] ? is_bpf_text_address+0x26/0x2b0 [ 554.105666][ T9172] ? is_bpf_text_address+0x292/0x2b0 [ 554.105680][ T9172] ? is_bpf_text_address+0x26/0x2b0 [ 554.105696][ T9172] ? kernel_text_address+0xa5/0xe0 [ 554.105712][ T9172] ? __kernel_text_address+0xd/0x30 [ 554.105723][ T9172] ? unwind_get_return_address+0x4d/0x90 [ 554.105739][ T9172] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 554.105751][ T9172] ? arch_stack_walk+0xfb/0x150 [ 554.105772][ T9172] ? __lock_acquire+0x747/0x2de0 [ 554.105785][ T9172] ? __lock_acquire+0x660/0x2de0 [ 554.105800][ T9172] ? kasan_save_track+0x4f/0x80 [ 554.105812][ T9172] ? kasan_save_track+0x3e/0x80 [ 554.105824][ T9172] ? kasan_save_free_info+0x40/0x50 [ 554.105834][ T9172] ? __kasan_slab_free+0x5c/0x80 [ 554.105846][ T9172] ? kmem_cache_free+0x187/0x6d0 [ 554.105859][ T9172] ? get_signal+0x9e8/0x12c0 [ 554.105874][ T9172] ? arch_do_signal_or_restart+0xbb/0x860 [ 554.105887][ T9172] ? irqentry_exit+0x2ba/0x910 [ 554.105941][ T9172] ? asm_exc_page_fault+0x26/0x30 [ 554.105968][ T9172] ? do_raw_spin_lock+0x12b/0x2f0 [ 554.105986][ T9172] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 554.106008][ T9172] ? proc_coredump_connector+0x187/0x4e0 [ 554.106090][ T9172] ? rt_spin_unlock+0x159/0x200 [ 554.106104][ T9172] ? rt_spin_unlock+0x165/0x200 [ 554.106116][ T9172] get_signal+0x1095/0x12c0 [ 554.106141][ T9172] arch_do_signal_or_restart+0xbb/0x860 [ 554.106158][ T9172] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 554.106185][ T9172] irqentry_exit+0x2ba/0x910 [ 554.106197][ T9172] ? trace_irq_disable+0x3b/0x140 [ 554.106219][ T9172] asm_exc_page_fault+0x26/0x30 [ 554.106232][ T9172] RIP: 0033:0x7fe05cf9e161 [ 554.106243][ T9172] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 554.106252][ T9172] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 554.106265][ T9172] RAX: 0000000000000000 RBX: 00007fe05d226090 RCX: 00007fe05cf9e159 [ 554.106272][ T9172] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 554.106279][ T9172] RBP: 00007fe05d03503b R08: 0000000000000000 R09: 0000000000000000 [ 554.106285][ T9172] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 554.106291][ T9172] R13: 00007fe05d226128 R14: 00007fe05d226090 R15: 00007fff68231a98 [ 554.106308][ T9172] [ 554.106312][ T9172] memory: usage 307200kB, limit 307200kB, failcnt 30255 [ 554.106320][ T9172] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 554.106326][ T9172] kmem: usage 2892kB, limit 9007199254740988kB, failcnt 0 [ 554.106333][ T9172] Memory cgroup stats for /syz2: [ 554.106861][ T9172] cache 311119872 [ 554.106868][ T9172] rss 491520 [ 554.106871][ T9172] shmem 311070720 [ 554.106875][ T9172] mapped_file 181567488 [ 554.106878][ T9172] dirty 0 [ 554.106881][ T9172] writeback 0 [ 554.106885][ T9172] workingset_refault_anon 3 [ 554.106889][ T9172] workingset_refault_file 32 [ 554.106892][ T9172] swap 127995904 [ 554.106896][ T9172] swapcached 128090112 [ 554.106899][ T9172] pgpgin 626280 [ 554.106902][ T9172] pgpgout 550203 [ 554.106906][ T9172] pgfault 315215 [ 554.106909][ T9172] pgmajfault 6 [ 554.106912][ T9172] inactive_anon 311504896 [ 554.106916][ T9172] active_anon 57344 [ 554.106919][ T9172] inactive_file 49152 [ 554.106923][ T9172] active_file 0 [ 554.106926][ T9172] unevictable 0 [ 554.106930][ T9172] hierarchical_memory_limit 314572800 [ 554.106933][ T9172] hierarchical_memsw_limit 9223372036854771712 [ 554.106937][ T9172] total_cache 311119872 [ 554.106941][ T9172] total_rss 491520 [ 554.106944][ T9172] total_shmem 311070720 [ 554.106948][ T9172] total_mapped_file 181567488 [ 554.106951][ T9172] total_dirty 0 [ 554.106955][ T9172] total_writeback 0 [ 554.106958][ T9172] total_workingset_refault_anon 3 [ 554.106962][ T9172] total_workingset_refault_file 32 [ 554.106965][ T9172] total_swap 127995904 [ 554.106969][ T9172] total_swapcached 128090112 [ 554.106972][ T9172] total_pgpgin 626280 [ 554.106976][ T9172] total_pgpgout 550203 [ 554.106979][ T9172] total_pgfault 315215 [ 554.106983][ T9172] total_pgmajfault 6 [ 554.106986][ T9172] total_inactive_anon 311504896 [ 554.106990][ T9172] total_active_anon 57344 [ 554.106994][ T9172] total_inactive_file 49152 [ 554.106997][ T9172] total_active_file 0 [ 554.107001][ T9172] total_unevictable 0 [ 554.107004][ T9172] anon_cost 18862 [ 554.107008][ T9172] file_cost 41 [ 554.107012][ T9172] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.648,pid=8841,uid=0 [ 554.107290][ T9172] Memory cgroup out of memory: Killed process 8841 (syz.2.648) total-vm:202608kB, anon-rss:1276kB, file-rss:20548kB, shmem-rss:85320kB, UID:0 pgtables:284kB oom_score_adj:0 [ 658.982566][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 659.727593][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16/2:b..l P5587/1:b..l [ 659.736440][ C0] rcu: (detected by 0, t=10577 jiffies, g=30689, q=479 ncpus=2) [ 659.744167][ C0] task:syz-executor state:R running task stack:21176 pid:5587 tgid:5587 ppid:5580 task_flags:0x440140 flags:0x00080000 [ 659.757627][ C0] Call Trace: [ 659.760897][ C0] [ 659.763813][ C0] __schedule+0x16d9/0x5700 [ 659.768327][ C0] ? __pfx___schedule+0x10/0x10 [ 659.773171][ C0] preempt_schedule_irq+0x4b/0x90 [ 659.778185][ C0] irqentry_exit+0x14f/0x910 [ 659.782757][ C0] ? trace_irq_disable+0x3b/0x140 [ 659.787766][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 659.793728][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 659.799002][ C0] Code: ff ff ff e8 20 41 b5 09 f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 52 7c 03 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 87 3a 13 [ 659.818591][ C0] RSP: 0018:ffffc90004c4f5b8 EFLAGS: 00000286 [ 659.824645][ C0] RAX: a7762ab27cd80a00 RBX: 0000000000000000 RCX: 0000000000000046 [ 659.832599][ C0] RDX: 000000006ee3a646 RSI: ffffffff8dadc061 RDI: ffffffff8bcc2e80 [ 659.840551][ C0] RBP: ffff888037983e80 R08: ffffffff8b59895c R09: 0000000000000000 [ 659.848586][ C0] R10: dffffc0000000000 R11: fffffbfff1f640d0 R12: ffffffff8e1c3c80 [ 659.856541][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 659.864502][ C0] ? rt_spin_trylock+0x10c/0x2b0 [ 659.869436][ C0] rt_spin_trylock+0x128/0x2b0 [ 659.874181][ C0] ? rt_spin_trylock+0x10c/0x2b0 [ 659.879142][ C0] try_charge_memcg+0x277/0x16f0 [ 659.884068][ C0] ? __lock_acquire+0x747/0x2de0 [ 659.888997][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 659.894352][ C0] ? percpu_ref_tryget+0x15/0x180 [ 659.899363][ C0] ? charge_memcg+0x47/0x310 [ 659.903939][ C0] charge_memcg+0x1dd/0x310 [ 659.908433][ C0] __mem_cgroup_charge+0x25/0x80 [ 659.913355][ C0] filemap_add_folio+0x199/0x610 [ 659.918281][ C0] page_cache_ra_unbounded+0x3bb/0x8f0 [ 659.923732][ C0] page_cache_ra_order+0x2c1/0x4a0 [ 659.928825][ C0] filemap_fault+0x741/0x13c0 [ 659.933510][ C0] ? __pfx_filemap_fault+0x10/0x10 [ 659.938605][ C0] ? lock_acquire+0x115/0x350 [ 659.943273][ C0] __do_fault+0x138/0x2a0 [ 659.947628][ C0] do_pte_missing+0x1828/0x28f0 [ 659.952487][ C0] ? handle_mm_fault+0xeb/0x28c0 [ 659.957437][ C0] handle_mm_fault+0xf64/0x28c0 [ 659.962275][ C0] ? handle_mm_fault+0xeb/0x28c0 [ 659.967235][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 659.972500][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 659.977715][ C0] do_user_addr_fault+0xa4f/0x1340 [ 659.982818][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 659.988188][ C0] exc_page_fault+0x6a/0xc0 [ 659.992681][ C0] asm_exc_page_fault+0x26/0x30 [ 659.997515][ C0] RIP: 0033:0x7fe05ce6c014 [ 660.001912][ C0] RSP: 002b:00007fff68231e00 EFLAGS: 00010206 [ 660.007957][ C0] RAX: 0000001b31824000 RBX: 00000000000002ba RCX: 0000000000087028 [ 660.015908][ C0] RDX: 0000000008908280 RSI: 00007fff68231e90 RDI: 0000000000000001 [ 660.023863][ C0] RBP: 00007fff68231e3c R08: 0000000020abc2d2 R09: 3fffffffffffffff [ 660.031819][ C0] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 660.039863][ C0] R13: 00000000000927c0 R14: 0000000000086ff9 R15: 00007fff68231e90 [ 660.047844][ C0] [ 660.050904][ C0] task:ktimers/0 state:R running task stack:23976 pid:16 tgid:16 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 660.064457][ C0] Call Trace: [ 660.067727][ C0] [ 660.070664][ C0] __schedule+0x16d9/0x5700 [ 660.075171][ C0] ? __pfx___schedule+0x10/0x10 [ 660.080013][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 660.085808][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 660.091171][ C0] preempt_schedule_common+0x7f/0xd0 [ 660.096442][ C0] preempt_schedule_thunk+0x16/0x40 [ 660.101629][ C0] rt_mutex_slowunlock+0x6d3/0xa30 [ 660.106730][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 660.112364][ C0] ? __run_timer_base+0x708/0x9b0 [ 660.117390][ C0] rt_spin_unlock+0x10f/0x200 [ 660.122069][ C0] __run_timer_base+0x708/0x9b0 [ 660.126914][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 660.132272][ C0] ? lock_acquire+0x115/0x350 [ 660.136964][ C0] run_timer_softirq+0xb7/0x170 [ 660.141805][ C0] handle_softirqs+0x1da/0x6d0 [ 660.146564][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 660.151585][ C0] run_ktimerd+0x6a/0x100 [ 660.156026][ C0] smpboot_thread_fn+0x565/0xa70 [ 660.160962][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 660.165980][ C0] kthread+0x38b/0x470 [ 660.170048][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 660.175510][ C0] ? __pfx_kthread+0x10/0x10 [ 660.180090][ C0] ret_from_fork+0x514/0xb70 [ 660.184663][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 660.189757][ C0] ? __switch_to+0xc89/0x1420 [ 660.194451][ C0] ? __pfx_kthread+0x10/0x10 [ 660.199023][ C0] ret_from_fork_asm+0x1a/0x30 [ 660.203778][ C0] [ 660.206794][ C0] rcu: rcu_preempt kthread starved for 10512 jiffies! g30689 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 660.217786][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 660.227737][ C0] rcu: RCU grace-period kthread stack dump: [ 660.233607][ C0] task:rcu_preempt state:R running task stack:27784 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 660.247064][ C0] Call Trace: [ 660.250329][ C0] [ 660.253266][ C0] __schedule+0x16d9/0x5700 [ 660.257772][ C0] ? __pfx___schedule+0x10/0x10 [ 660.262619][ C0] ? lock_acquire+0x115/0x350 [ 660.267281][ C0] ? schedule+0x90/0x2b0 [ 660.271504][ C0] schedule+0x164/0x2b0 [ 660.275651][ C0] schedule_timeout+0x152/0x2c0 [ 660.280485][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 660.285837][ C0] ? __pfx_process_timeout+0x10/0x10 [ 660.291107][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 660.296897][ C0] ? prepare_to_swait_event+0x322/0x350 [ 660.302546][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 660.307406][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 660.313217][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 660.319095][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 660.324364][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 660.330188][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 660.334761][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 660.339937][ C0] ? __kthread_parkme+0x71/0x1f0 [ 660.344855][ C0] ? __kthread_parkme+0x199/0x1f0 [ 660.349863][ C0] kthread+0x38b/0x470 [ 660.353915][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 660.359090][ C0] ? __pfx_kthread+0x10/0x10 [ 660.363655][ C0] ret_from_fork+0x514/0xb70 [ 660.368223][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 660.373309][ C0] ? __switch_to+0xc89/0x1420 [ 660.377973][ C0] ? __pfx_kthread+0x10/0x10 [ 660.382542][ C0] ret_from_fork_asm+0x1a/0x30 [ 660.387310][ C0] [ 660.390330][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 660.396660][ C0] Sending NMI from CPU 0 to CPUs 1: [ 660.401883][ C1] NMI backtrace for cpu 1 [ 660.401904][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 660.401936][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 660.401946][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 660.401974][ C1] Code: 3c 5b 02 e9 93 d8 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 7c 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 660.401988][ C1] RSP: 0018:ffffc900001d7e40 EFLAGS: 00000246 [ 660.402005][ C1] RAX: 0000000000663f55 RBX: ffffffff819a837c RCX: 8000000000000001 [ 660.402017][ C1] RDX: 0000000000000001 RSI: ffffffff8d8696bf RDI: ffffffff8bcc2e80 [ 660.402029][ C1] RBP: ffffc900001d7f10 R08: ffff8880b8733e9b R09: 1ffff110170e67d3 [ 660.402042][ C1] R10: dffffc0000000000 R11: ffffed10170e67d4 R12: 0000000000000000 [ 660.402054][ C1] R13: 1ffff110039d3000 R14: 1ffff9200003afd0 R15: dffffc0000000000 [ 660.402067][ C1] FS: 0000000000000000(0000) GS:ffff888125ccb000(0000) knlGS:0000000000000000 [ 660.402081][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 660.402093][ C1] CR2: 00005555625ef4e8 CR3: 00000000449fe000 CR4: 00000000003526f0 [ 660.402108][ C1] Call Trace: [ 660.402116][ C1] [ 660.402123][ C1] default_idle+0x9/0x20 [ 660.402138][ C1] default_idle_call+0x72/0xb0 [ 660.402153][ C1] do_idle+0x1cc/0x540 [ 660.402177][ C1] ? __pfx_do_idle+0x10/0x10 [ 660.402203][ C1] cpu_startup_entry+0x43/0x60 [ 660.402224][ C1] start_secondary+0x101/0x110 [ 660.402240][ C1] common_startup_64+0x13e/0x157 [ 660.402271][ C1]