last executing test programs: 16.858301148s ago: executing program 0 (id=1): mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) 12.52006033s ago: executing program 2 (id=3): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 12.350156345s ago: executing program 1 (id=7): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x20000000000000f3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.790056699s ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000003}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0), 0x4) 10.468644808s ago: executing program 1 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffffffffffd4a, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040f0}, 0x4890) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0xfffffffc, 0x40}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000018c0)=ANY=[@ANYBLOB="a0ff50845168cfc93f385fd6"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000230300000000000000000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a000000000000000100000000000000000000000001000000000000020000e6230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r5 = socket$key(0xf, 0x3, 0x2) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 2', 0x1b) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="5daa000000000000611010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000002d0007012bbd7000fedbdf25077c1000080001800400dd80040003803f0002"], 0x60}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3, 0x4, 0x10002, 0xfffffffffffffffb, 0x2}, {0x1, 0x3, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0x0, 0xa4}}, 0xe8) write(r6, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x3, 0x8, 0x0, 0x400, 0x0, 0x7e, 0xe7, 0x5, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x4, 0x0, 0x82000045, [0x2, 0x9]}}) 10.032250808s ago: executing program 4 (id=5): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 9.477100833s ago: executing program 0 (id=9): r0 = syz_init_net_socket$llc(0x1a, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create(0xb398) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r5 = open(&(0x7f0000000280)='./bus\x00', 0x8000, 0x52) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0xfd, 0x0, 0x42}, 0x10) bind$alg(r0, 0x0, 0x0) 6.308495807s ago: executing program 0 (id=10): socket$packet(0x11, 0x2, 0x300) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x8442, 0x0) chdir(&(0x7f0000000140)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x90ff, 0x61, 0x14, 0x98}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45) write$FUSE_LSEEK(r1, &(0x7f0000002700)={0x4e, 0x7ffffffffffffffa, 0x0, {0xff}}, 0x18) 6.226001779s ago: executing program 3 (id=11): mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) 6.224112573s ago: executing program 4 (id=12): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000003}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0), 0x4) 5.84560469s ago: executing program 2 (id=13): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x89) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x2c626000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @mcast2, 0x4}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='high-speed\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') openat(r3, 0x0, 0x60003, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r5, 0x5514) 4.730824734s ago: executing program 1 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='usb3503 0x08\n\x00', 0xd) 4.711917125s ago: executing program 2 (id=15): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10e) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004400)="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", 0x2000, &(0x7f0000004340)={&(0x7f00000003c0)={0x50, 0x0, 0x8000000000000001, {0x7, 0x2d, 0x6, 0x495a802, 0x6, 0x7fc, 0x87aa8, 0x6, 0x0, 0x0, 0x10, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 4.399457623s ago: executing program 4 (id=16): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x20000000000000f3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.432790857s ago: executing program 1 (id=17): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000000)="fc0000004800071fab092504090007000aab60000a0000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade017", 0x74) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x110000) close(r4) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000000280)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12102) 2.881426077s ago: executing program 4 (id=18): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000000000003ff, 0x0) read$msr(r2, &(0x7f0000019680)=""/102376, 0x18fe8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4080) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r6, &(0x7f0000000340)="c4b3b2b6e7abb932778df3797cd1adcf94f50226ef395cb41ac6a441e9a81766f15457eae2bb83a7c9d00a8ac90ce7d8b4da35549b9d6efd6e063d5c2f1e969fb1fa75b8013d096230aaa4977f304369f099dd3392770900000000000000c6b9a9cffb631aeeef5977b964283260b5d71c42f0759be1bc9cea9f62d25905c21555fc98042de82fba194b00a60dcab8e8957400d5652f721127518112b59ac85f8424ca123e", 0xa5) write$dsp(r6, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x4000000) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.965084434s ago: executing program 1 (id=19): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 76.935107ms ago: executing program 1 (id=20): r0 = memfd_create(0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x0, 0x7}) fsmount(r2, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setns(0xc9, 0x0) r6 = gettid() ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x40, r3, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x4d}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x68}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1c}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000084) 0s ago: executing program 2 (id=21): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x6, &(0x7f0000000140)=[{0x9, 0x81, 0x2, 0x5}, {0x8, 0xd5, 0xfc, 0xf}, {0x240, 0x4, 0x0, 0x26}, {0x9, 0x8, 0x2, 0x8}, {0x450, 0xd7, 0x3d, 0xfffff001}, {0xe2cb, 0x5, 0xf, 0x1}]}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4024587b, &(0x7f0000001a40)={{r3, &(0x7f0000000440)='/dev/nullb0\x00', 0x4000, &(0x7f0000000480)={@_ha_fsid={[0xffffffc0, 0xe557]}, {0x7f, 0x737, 0x3, 0x261}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1}, 0x1, &(0x7f00000019c0)=[{0x3, 0x4, 0x0, 0x0, 0x0, 0x8}]}) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) r4 = signalfd4(r0, &(0x7f0000000040)={[0x9de]}, 0x8, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000540)={r5, &(0x7f0000000000), 0x0}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x6, 0x285b, 0x0, 'queue1\x00', 0x3}) write(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. [ 84.921530][ T5585] cgroup: Unknown subsys name 'net' [ 85.142956][ T5585] cgroup: Unknown subsys name 'cpuset' [ 85.197795][ T5585] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.124424][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.108728][ T9] cfg80211: failed to load regulatory.db [ 89.864579][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.873871][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.880967][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.888269][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.893689][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.198625][ T4915] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.215513][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.225669][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.238206][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.240634][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.241650][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.259548][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.264596][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.302314][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.321836][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.453035][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.461880][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.486118][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.491335][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.511578][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.515931][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.533108][ T5599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.541945][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.543877][ T5599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.564141][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.019008][ T5613] Bluetooth: hci0: command tx timeout [ 92.440517][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.441834][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.442036][ T5598] bridge_slave_0: entered allmulticast mode [ 92.444743][ T5598] bridge_slave_0: entered promiscuous mode [ 92.498150][ T59] Bluetooth: hci1: command tx timeout [ 92.501419][ T5613] Bluetooth: hci2: command tx timeout [ 92.513798][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.513992][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.514186][ T5598] bridge_slave_1: entered allmulticast mode [ 92.520389][ T5598] bridge_slave_1: entered promiscuous mode [ 92.577023][ T59] Bluetooth: hci3: command tx timeout [ 92.658525][ T59] Bluetooth: hci4: command tx timeout [ 92.701867][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.791347][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.943940][ T5598] team0: Port device team_slave_0 added [ 92.986324][ T5598] team0: Port device team_slave_1 added [ 93.156084][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.156327][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.156841][ T5607] bridge_slave_0: entered allmulticast mode [ 93.160684][ T5607] bridge_slave_0: entered promiscuous mode [ 93.220417][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.220595][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.220765][ T5607] bridge_slave_1: entered allmulticast mode [ 93.223511][ T5607] bridge_slave_1: entered promiscuous mode [ 93.265892][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.265954][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.265980][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.340234][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.341743][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.341772][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.430375][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.483237][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.514516][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.515519][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.515683][ T5605] bridge_slave_0: entered allmulticast mode [ 93.520733][ T5605] bridge_slave_0: entered promiscuous mode [ 93.545027][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.545273][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.545790][ T5606] bridge_slave_0: entered allmulticast mode [ 93.549190][ T5606] bridge_slave_0: entered promiscuous mode [ 93.573613][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.573797][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.573964][ T5604] bridge_slave_0: entered allmulticast mode [ 93.576624][ T5604] bridge_slave_0: entered promiscuous mode [ 93.583501][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.583626][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.583784][ T5605] bridge_slave_1: entered allmulticast mode [ 93.588162][ T5605] bridge_slave_1: entered promiscuous mode [ 93.609982][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.610115][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.610610][ T5606] bridge_slave_1: entered allmulticast mode [ 93.614498][ T5606] bridge_slave_1: entered promiscuous mode [ 93.641422][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.641552][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.641726][ T5604] bridge_slave_1: entered allmulticast mode [ 93.645969][ T5604] bridge_slave_1: entered promiscuous mode [ 93.675125][ T5607] team0: Port device team_slave_0 added [ 93.700735][ T5598] hsr_slave_0: entered promiscuous mode [ 93.703996][ T5598] hsr_slave_1: entered promiscuous mode [ 93.740383][ T5607] team0: Port device team_slave_1 added [ 93.775438][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.798180][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.804192][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.812464][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.849391][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.852847][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.873712][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.873778][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.873805][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.941933][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.942058][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.942082][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.003983][ T5605] team0: Port device team_slave_0 added [ 94.034380][ T5606] team0: Port device team_slave_0 added [ 94.038774][ T5604] team0: Port device team_slave_0 added [ 94.042637][ T5605] team0: Port device team_slave_1 added [ 94.059453][ T5606] team0: Port device team_slave_1 added [ 94.062585][ T5604] team0: Port device team_slave_1 added [ 94.097016][ T59] Bluetooth: hci0: command tx timeout [ 94.546702][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.547805][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.547835][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.578171][ T5613] Bluetooth: hci2: command tx timeout [ 94.578282][ T59] Bluetooth: hci1: command tx timeout [ 94.595535][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.595565][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.595589][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.601160][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.601178][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.601201][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.603070][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.603083][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.603106][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.657015][ T59] Bluetooth: hci3: command tx timeout [ 94.736970][ T59] Bluetooth: hci4: command tx timeout [ 94.752610][ T5607] hsr_slave_0: entered promiscuous mode [ 94.753968][ T5607] hsr_slave_1: entered promiscuous mode [ 94.755551][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 94.755659][ T5607] Cannot create hsr debugfs directory [ 94.771114][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.771132][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.771156][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.773882][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.773897][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.773921][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.095243][ T5605] hsr_slave_0: entered promiscuous mode [ 95.096643][ T5605] hsr_slave_1: entered promiscuous mode [ 95.100700][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 95.100728][ T5605] Cannot create hsr debugfs directory [ 95.134092][ T5606] hsr_slave_0: entered promiscuous mode [ 95.139996][ T5606] hsr_slave_1: entered promiscuous mode [ 95.141039][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 95.141064][ T5606] Cannot create hsr debugfs directory [ 95.152734][ T5604] hsr_slave_0: entered promiscuous mode [ 95.154097][ T5604] hsr_slave_1: entered promiscuous mode [ 95.155527][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 95.155551][ T5604] Cannot create hsr debugfs directory [ 95.652252][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.699120][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.741576][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.780663][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.839652][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.882004][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.940254][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.981341][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.170175][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.177225][ T59] Bluetooth: hci0: command tx timeout [ 96.202240][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.210510][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.241449][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.254545][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.284218][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.306797][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.351688][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.551999][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.594528][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.609102][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.635147][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.647122][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.657696][ T59] Bluetooth: hci1: command tx timeout [ 96.657767][ T5613] Bluetooth: hci2: command tx timeout [ 96.694866][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.734681][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.748809][ T59] Bluetooth: hci3: command tx timeout [ 96.761292][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.817578][ T59] Bluetooth: hci4: command tx timeout [ 96.905760][ T5604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.941230][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.953471][ T5604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.983741][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.998613][ T5604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.041495][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.064111][ T5604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.090928][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.159097][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.289770][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.330988][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.350694][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.385863][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.399808][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.401015][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.441660][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.452226][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.492921][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.536833][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.540085][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.595937][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.596247][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.658196][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.792897][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.863737][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.863974][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.887703][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.924334][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.924878][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.031441][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.125480][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.145782][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.165892][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.216202][ T1455] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.224590][ T1455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.257062][ T59] Bluetooth: hci0: command tx timeout [ 98.345111][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.390572][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.393466][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.405993][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.477376][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.477573][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.634863][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.684074][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.688407][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.750100][ T59] Bluetooth: hci1: command tx timeout [ 98.750176][ T59] Bluetooth: hci2: command tx timeout [ 98.817286][ T5613] Bluetooth: hci3: command tx timeout [ 98.819480][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.819690][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.897064][ T5613] Bluetooth: hci4: command tx timeout [ 99.351925][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.962673][ T5598] veth0_vlan: entered promiscuous mode [ 100.048898][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.071964][ T5598] veth1_vlan: entered promiscuous mode [ 100.250489][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.425293][ T5598] veth0_macvtap: entered promiscuous mode [ 100.471017][ T5598] veth1_macvtap: entered promiscuous mode [ 100.503218][ T5607] veth0_vlan: entered promiscuous mode [ 100.589941][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.593286][ T5607] veth1_vlan: entered promiscuous mode [ 100.631068][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.633814][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.680654][ T5606] veth0_vlan: entered promiscuous mode [ 100.718807][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.779973][ T5606] veth1_vlan: entered promiscuous mode [ 101.088055][ T5607] veth0_macvtap: entered promiscuous mode [ 101.175387][ T5607] veth1_macvtap: entered promiscuous mode [ 101.288174][ T5606] veth0_macvtap: entered promiscuous mode [ 101.311659][ T123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.325568][ T123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.333448][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.376693][ T5605] veth0_vlan: entered promiscuous mode [ 101.396308][ T5606] veth1_macvtap: entered promiscuous mode [ 101.421621][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.491454][ T5604] veth0_vlan: entered promiscuous mode [ 101.506018][ T5605] veth1_vlan: entered promiscuous mode [ 101.524574][ T3115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.534147][ T3115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.566458][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.689394][ T5604] veth1_vlan: entered promiscuous mode [ 101.706091][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.105637][ T5598] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.165341][ T5605] veth0_macvtap: entered promiscuous mode [ 102.390417][ T5605] veth1_macvtap: entered promiscuous mode [ 102.442102][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.450641][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.662944][ T5604] veth0_macvtap: entered promiscuous mode [ 102.759765][ T5604] veth1_macvtap: entered promiscuous mode [ 102.847585][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.887922][ T1455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.887987][ T1455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.913722][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.225898][ T1455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.226003][ T1455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.243844][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.408918][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.962356][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.986729][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.124242][ T1832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.124361][ T1832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.181512][ T1439] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.384282][ T5800] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 106.389901][ T5800] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 106.533353][ T3116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.593226][ T1455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.593319][ T1455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.818321][ T33] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.834976][ T33] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.835023][ T33] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.835056][ T33] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.835088][ T33] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.835122][ T33] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.835153][ T33] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.835187][ T33] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.835219][ T33] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.835251][ T33] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.835283][ T33] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.835324][ T33] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.835356][ T33] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.835388][ T33] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.835421][ T33] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.835454][ T33] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.267261][ T1834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.267450][ T1834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.930029][ T3116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.940025][ T3116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.087280][ T3115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.187082][ T33] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.108584][ T5811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'. [ 109.349344][ T5816] netlink: 59 bytes leftover after parsing attributes in process `syz.1.8'. [ 109.636911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.646905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.656961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.666921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.676911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.686906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.696906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.706901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.716901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.726908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.965326][ T5840] usb3503 0-0008: unknown mode is requested [ 114.965356][ T5840] usb3503 0-0008: usb3503_probe: probed in standby mode [ 114.966568][ T5840] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 116.578785][ T1587] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.312095][ T1587] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 118.935219][ T1587] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 118.939721][ T1587] usb 3-1: can't read configurations, error -71 [ 119.244251][ T27] [ 119.246645][ T27] ====================================================== [ 119.253680][ T27] WARNING: possible circular locking dependency detected [ 119.260718][ T27] syzkaller #0 Not tainted [ 119.265124][ T27] ------------------------------------------------------ [ 119.272217][ T27] migration/1/27 is trying to acquire lock: [ 119.278102][ T27] ffff8880b8740998 (_T->lock){....}-{2:2}, at: rt_spin_trylock+0x56/0x2b0 [ 119.286624][ T27] [ 119.286624][ T27] but task is already holding lock: [ 119.294002][ T27] ffff88801f300b00 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 119.303483][ T27] [ 119.303483][ T27] which lock already depends on the new lock. [ 119.303483][ T27] [ 119.313892][ T27] [ 119.313892][ T27] the existing dependency chain (in reverse order) is: [ 119.322920][ T27] [ 119.322920][ T27] -> #1 (&p->pi_lock){-...}-{2:2}: [ 119.330224][ T27] _raw_spin_lock+0x2e/0x40 [ 119.335356][ T27] rtlock_slowlock_locked+0x1ec/0x3c20 [ 119.341333][ T27] rt_spin_lock+0x165/0x400 [ 119.346380][ T27] finish_wait+0xbe/0x1e0 [ 119.351226][ T27] synchronize_rcu_expedited+0x63e/0x770 [ 119.357403][ T27] try_check_zero+0x2c1/0x4c0 [ 119.362619][ T27] process_srcu+0x328/0x16f0 [ 119.367743][ T27] process_scheduled_works+0xc3d/0x1630 [ 119.373825][ T27] worker_thread+0xa47/0xfb0 [ 119.378938][ T27] kthread+0x38b/0x470 [ 119.383520][ T27] ret_from_fork+0x514/0xb70 [ 119.388648][ T27] ret_from_fork_asm+0x1a/0x30 [ 119.393923][ T27] [ 119.393923][ T27] -> #0 (_T->lock){....}-{2:2}: [ 119.400975][ T27] __lock_acquire+0x164c/0x2de0 [ 119.406363][ T27] lock_acquire+0x115/0x350 [ 119.411409][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 119.417142][ T27] rt_spin_trylock+0x56/0x2b0 [ 119.422351][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 119.427753][ T27] kvfree_call_rcu+0xa4/0x430 [ 119.432949][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 119.438935][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 119.445373][ T27] select_fallback_rq+0x11e/0x200 [ 119.450936][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 119.456856][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 119.462423][ T27] smpboot_thread_fn+0x565/0xa70 [ 119.467880][ T27] kthread+0x38b/0x470 [ 119.472555][ T27] ret_from_fork+0x514/0xb70 [ 119.477679][ T27] ret_from_fork_asm+0x1a/0x30 [ 119.482955][ T27] [ 119.482955][ T27] other info that might help us debug this: [ 119.482955][ T27] [ 119.493185][ T27] Possible unsafe locking scenario: [ 119.493185][ T27] [ 119.500652][ T27] CPU0 CPU1 [ 119.506024][ T27] ---- ---- [ 119.511421][ T27] lock(&p->pi_lock); [ 119.515506][ T27] lock(_T->lock); [ 119.521827][ T27] lock(&p->pi_lock); [ 119.528421][ T27] lock(_T->lock); [ 119.532227][ T27] [ 119.532227][ T27] *** DEADLOCK *** [ 119.532227][ T27] [ 119.540376][ T27] locks held by migration/1/27: 2, last CPU#1: [ 119.546522][ T27] #0: ffff88801f300b00 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 119.556460][ T27] #1: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: cpuset_cpus_allowed_fallback+0x22/0x370 [ 119.566978][ T27] [ 119.566978][ T27] stack backtrace: [ 119.572863][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.582574][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.592629][ T27] Stopper: __balance_push_cpu_stop+0x0/0x410 <- balance_push+0x28d/0x4f0 [ 119.601043][ T27] Call Trace: [ 119.604325][ T27] [ 119.607254][ T27] dump_stack_lvl+0xe8/0x150 [ 119.611855][ T27] print_circular_bug+0x2e2/0x300 [ 119.616908][ T27] check_noncircular+0x12f/0x150 [ 119.621870][ T27] __lock_acquire+0x164c/0x2de0 [ 119.626908][ T27] ? __asan_memset+0x22/0x50 [ 119.631497][ T27] ? __enqueue_entity+0x30a/0xc60 [ 119.636515][ T27] lock_acquire+0x115/0x350 [ 119.641022][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 119.645865][ T27] ? enqueue_task_fair+0x1560/0x1b60 [ 119.651167][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 119.656380][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 119.661237][ T27] rt_spin_trylock+0x56/0x2b0 [ 119.665905][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 119.670781][ T27] kvfree_call_rcu+0xa4/0x430 [ 119.675540][ T27] ? do_raw_spin_unlock+0xf5/0x200 [ 119.680680][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 119.686054][ T27] ? __pfx_set_cpus_allowed_force+0x10/0x10 [ 119.691962][ T27] ? cpuset_cpus_allowed_fallback+0x22/0x370 [ 119.697941][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 119.703835][ T27] select_fallback_rq+0x11e/0x200 [ 119.708853][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 119.714827][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 119.720191][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.725492][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 119.731464][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 119.736488][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 119.741594][ T27] smpboot_thread_fn+0x565/0xa70 [ 119.746538][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 119.751560][ T27] kthread+0x38b/0x470 [ 119.755620][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 119.761087][ T27] ? __pfx_kthread+0x10/0x10 [ 119.765671][ T27] ret_from_fork+0x514/0xb70 [ 119.770257][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 119.775358][ T27] ? __switch_to+0xc89/0x1420 [ 119.780042][ T27] ? __pfx_kthread+0x10/0x10 [ 119.784630][ T27] ret_from_fork_asm+0x1a/0x30 [ 119.789405][ T27] [ 119.792524][ T27] process 5827 (syz.3.11) no longer affine to cpu1