last executing test programs: 3m45.708530993s ago: executing program 0 (id=320): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x1e, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 3m44.310299751s ago: executing program 0 (id=322): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) poll(0x0, 0x0, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) close(0x3) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0xc, 0x24, 0x10}) writev(r1, &(0x7f0000001880)=[{&(0x7f0000000400)="941dbf494c4578aa64d81d4733e22ea6bed43118b1ed27a8c8aee9915c1d4fcafde76dcda2231734c51c3c1d2221f67ebe3c7a6a33eb976b8e385a94f70ec136de176e35ab9e30bda84959f7706e2e", 0x4f}, {0x0}, {&(0x7f0000000500)}, {0x0}], 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp\x00') preadv(r2, 0x0, 0x0, 0x8, 0xfff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) 3m34.036316004s ago: executing program 0 (id=337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000180)={0xb2, 0x5}) r1 = getpid() socket(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(0x0, r4, 0x2c, 0x1000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b40), r5) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, r6, 0x401, 0x70bd2d, 0x25dfdbfa}, 0x1c}, 0x1, 0x0, 0x0, 0x40012}, 0x40) 3m31.21658004s ago: executing program 0 (id=339): syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r0 = creat(&(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1ac) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x541b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', 0x0) r5 = io_uring_setup(0x37b0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000740)={0x0}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000300)={0x0}, 0x1) 3m29.677112057s ago: executing program 0 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x6) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) 3m28.364669785s ago: executing program 0 (id=345): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="5299"], 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100), 0x4) 3m11.17069302s ago: executing program 32 (id=345): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="5299"], 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100), 0x4) 2m8.512016412s ago: executing program 2 (id=445): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x6, 0x12000000) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x75df4819, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, &(0x7f0000000100)={{@_ha_fsid={[0xa, 0x200]}, {0xc, 0x17d, 0x3, 0x9f}}, {{[0x1, 0x9, 0xbaa, 0x6]}, 0x0, 0x1, 0x7, 0x0, &(0x7f00000000c0)=[{{@_ha_fsid={[0x4, 0x4]}, {0xa, 0x6, 0x6, 0x4}}, 0xb23, 0x0, '/dev/adsp1\x00'}]}}) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x4c80, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) rt_tgsigqueueinfo(0x0, 0x0, 0x34, &(0x7f0000000240)={0x15, 0x4, 0x1}) r4 = syz_ublk_setup_io_uring(0x48eb, 0x0, &(0x7f0000000040), &(0x7f0000000200), 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r4, 0x8000000) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r5, 0x118, 0x4, &(0x7f0000000540)=""/233, 0xe9) listen(0xffffffffffffffff, 0x10) 2m1.832390792s ago: executing program 2 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) truncate(&(0x7f00000005c0)='./bus\x00', 0x4000000000000001) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000002c0)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f5031323430333230b80624b589c15fe396a299a6913232313632365a303a3138303606035504030c2f43657274696669636174652076657269666963617428a2e0861e1ae90d412073656c662d74657374696e67206b65793083c388dab3fc74000067de5492f81059301306072a8648ce3d020106082a8648ce3d0a01070342000407e56b51775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c64e00305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfd1cb2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce55041ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb40220", 0x1c3, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ef) sendto(0xffffffffffffffff, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x234}, 0x1, 0x0, 0x0, 0x4}, 0xe49451cd56ccc099) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYRES16=r1, @ANYBLOB="040028bd7000fcdbdf2501000000080001000000", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x600, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) 2m0.846699184s ago: executing program 2 (id=454): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0xff, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 1m59.080539264s ago: executing program 2 (id=457): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan0\x00'}) syz_clone(0x85020300, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) shutdown(r0, 0x1) 1m56.488462447s ago: executing program 2 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) splice(r4, 0x0, r6, 0x0, 0x402000784853bb, 0x0) fcntl$setpipe(r5, 0x407, 0x10001) write$P9_RLOPEN(r5, &(0x7f0000000180)={0x18, 0xd, 0x2, {{0x30, 0x3, 0x7}, 0xe}}, 0x18) 1m54.013336848s ago: executing program 2 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) fsopen(0x0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) 1m36.26245069s ago: executing program 33 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) fsopen(0x0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) 39.173117612s ago: executing program 1 (id=547): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x6, 0x12000000) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x75df4819, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) rt_tgsigqueueinfo(0x0, 0x0, 0x34, &(0x7f0000000240)={0x15, 0x4, 0x1}) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r3 = syz_ublk_setup_io_uring(0x48eb, 0x0, &(0x7f0000000040), &(0x7f0000000200), 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r3, 0x8000000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r4, 0x118, 0x4, &(0x7f0000000540)=""/233, 0xe9) listen(0xffffffffffffffff, 0x10) 33.839972509s ago: executing program 1 (id=552): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 32.576864799s ago: executing program 1 (id=553): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12) 31.153746948s ago: executing program 1 (id=554): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, &(0x7f0000000040)={'virt_wifi0\x00', @random="a1a938559e11"}) ioctl(0xffffffffffffffff, 0x8b2d, 0x0) add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [0x4e22], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], 0x0, [], 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00', {}, {}, 0x29}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x6}, {0x1, 0x3, 0x3}, {0x2, 0x3, 0x2}, 0x9, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) memfd_create(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x10008050}, 0x800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) 29.852633594s ago: executing program 1 (id=556): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x6, 0x12000000) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x75df4819, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) rt_tgsigqueueinfo(0x0, 0x0, 0x34, &(0x7f0000000240)={0x15, 0x4, 0x1}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r3 = syz_ublk_setup_io_uring(0x48eb, 0x0, 0x0, &(0x7f0000000200), 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r3, 0x8000000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r4, 0x118, 0x4, &(0x7f0000000540)=""/233, 0xe9) listen(0xffffffffffffffff, 0x10) 26.325867298s ago: executing program 1 (id=560): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010200000008ac0540123c00010203010902"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES64, @ANYBLOB='.'], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x3, @local, 'macsec0\x00'}}, 0x1e) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r5 = syz_io_uring_setup(0x27c9, &(0x7f0000000540)={0x0, 0x4fde, 0x3000, 0x2, 0xb}, &(0x7f0000000140), &(0x7f0000000100), &(0x7f00000000c0)) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = syz_io_uring_setup(0x51f7, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x3, 0x195}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000140)=[0x0, 0x7fff], 0x2) 11.675981757s ago: executing program 4 (id=576): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4) 10.389187486s ago: executing program 34 (id=560): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010200000008ac0540123c00010203010902"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES64, @ANYBLOB='.'], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x3, @local, 'macsec0\x00'}}, 0x1e) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r5 = syz_io_uring_setup(0x27c9, &(0x7f0000000540)={0x0, 0x4fde, 0x3000, 0x2, 0xb}, &(0x7f0000000140), &(0x7f0000000100), &(0x7f00000000c0)) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = syz_io_uring_setup(0x51f7, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x3, 0x195}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000140)=[0x0, 0x7fff], 0x2) 10.214675628s ago: executing program 4 (id=579): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x1, 0x942) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r3, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r3}) 4.761655539s ago: executing program 4 (id=581): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003240), 0x0, 0x4000800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Yy\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000500), &(0x7f0000000800)=r0}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) unshare(0x20000400) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_create(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x29, 0x32}], 0x10}}], 0x1, 0x4000000) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 3.082630739s ago: executing program 4 (id=583): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) listen(0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.182732456s ago: executing program 3 (id=584): close(0xffffffffffffffff) setns(0xc9, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) close(r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000540)="43210098") r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) listen(r4, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r5, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x200}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000000c0)={0x0, 0x2, 0x101, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r5, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x4000007, 0x10, 0x4, 0x2, 0x1, 0xba, 0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) 1.288796776s ago: executing program 3 (id=585): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) poll(&(0x7f0000000040), 0x0, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) close(0x3) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x8841, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0xc, 0x24, 0x10}) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000400)="941dbf494c4578aa64d81d4733e22ea6bed43118b1ed27a8c8aee9915c1d4fcafde76dcda2231734c51c3c1d2221f67ebe3c7a6a33eb976b8e385a94f70ec136de176e35ab9e30bda84959f7706e2e", 0x4f}, {0x0}, {&(0x7f0000000500)="5c21f6572604c9051d8de66eaa5964b715fcf181d43a6b6a8b10c3c560efa96b684d4b8ab391d31807125ddbd938d9a9b8f2cc37d30dd2ee92d9cf6ed199e697b5d0146a24291de0fff5347973ecb0531befca461224831e33145b6f8aa58583d7a60ba399052cf495163ba0831197ec7d1449524e088c8a5552eaaac7746a2b0ba7da9d94255af7b4ada74b3e195a9fb1dad8d1c9489d7128c6b8a15a57d953dc4689ce1be16372dea51803f7b10fcadb40c0641c638c583b77afaa30e5255f", 0xc0}, {&(0x7f00000018c0)="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", 0xfdd}], 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/225, 0xe1}], 0x1, 0x8, 0xfff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) 1.102493214s ago: executing program 3 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) truncate(&(0x7f00000005c0)='./bus\x00', 0x4000000000000001) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000002c0)="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", 0x1c3, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ef) sendto(0xffffffffffffffff, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x234}, 0x1, 0x0, 0x0, 0x4}, 0xe49451cd56ccc099) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x600, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) 893.789035ms ago: executing program 3 (id=587): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x20363159, 0x5, 0x0, [{0xffffffff}, {}, {}, {}, {0x0, 0x40}], 0xff}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffec5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = fanotify_init(0x10, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40) mount_setattr(0xffffffffffffffff, &(0x7f00000020c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8900, &(0x7f00000005c0)={0x0, 0x1, 0x80000}, 0x4d) fanotify_mark(r3, 0x101, 0x48000028, 0xffffffffffffffff, 0x0) fanotify_mark(r3, 0x102, 0x40001043, 0xffffffffffffffff, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000640), 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 892.725471ms ago: executing program 4 (id=588): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x17d}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000a00)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836670706d8805eb8fb9df7231e2e643ecb223f032a1ae299327d7156236f0edc44c4c268168596acd7c225338921f9e7b97e55fd594eaa95067216139c", 0xa9}], 0x1) write(r0, 0x0, 0x0) 296.614701ms ago: executing program 3 (id=589): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 209.240776ms ago: executing program 3 (id=590): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x1, 0x942) link(0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r2, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r2}) 0s ago: executing program 4 (id=591): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(r0, &(0x7f0000000200)='nfsd 127.0.0.1 999999999 test\n', 0x1e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. [ 91.475503][ T5575] cgroup: Unknown subsys name 'net' [ 91.738839][ T5575] cgroup: Unknown subsys name 'cpuset' [ 91.791138][ T5575] cgroup: Unknown subsys name 'rlimit' [ 91.907188][ T1655] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 93.775595][ T5575] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.485842][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.541758][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.549764][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.583600][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.587965][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.637124][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.640221][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.640806][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.659694][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.669789][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.680366][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.681810][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.687811][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.689727][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.692064][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.694599][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.695683][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.701183][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.708279][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.717208][ T4904] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.734471][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.746573][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.747895][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.761218][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.765565][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.021974][ T4904] Bluetooth: hci2: command tx timeout [ 99.026526][ T4904] Bluetooth: hci0: command tx timeout [ 99.026763][ T4904] Bluetooth: hci1: command tx timeout [ 99.100651][ T5602] Bluetooth: hci3: command tx timeout [ 99.105045][ T4904] Bluetooth: hci4: command tx timeout [ 99.463422][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.464542][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.465002][ T5590] bridge_slave_0: entered allmulticast mode [ 99.479185][ T5590] bridge_slave_0: entered promiscuous mode [ 99.540771][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.542074][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.542500][ T5590] bridge_slave_1: entered allmulticast mode [ 99.549580][ T5590] bridge_slave_1: entered promiscuous mode [ 99.583223][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.583547][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.583980][ T5593] bridge_slave_0: entered allmulticast mode [ 99.590387][ T5593] bridge_slave_0: entered promiscuous mode [ 99.660336][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.664787][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.665281][ T5593] bridge_slave_1: entered allmulticast mode [ 99.681729][ T5593] bridge_slave_1: entered promiscuous mode [ 99.768814][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.770852][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.771221][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.771655][ T5592] bridge_slave_0: entered allmulticast mode [ 99.782338][ T5592] bridge_slave_0: entered promiscuous mode [ 99.789350][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.792692][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.800304][ T5591] bridge_slave_0: entered allmulticast mode [ 99.809989][ T5591] bridge_slave_0: entered promiscuous mode [ 99.902965][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.903736][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.904130][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.906342][ T5592] bridge_slave_1: entered allmulticast mode [ 99.915515][ T5592] bridge_slave_1: entered promiscuous mode [ 99.919007][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.919303][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.922768][ T5591] bridge_slave_1: entered allmulticast mode [ 99.929471][ T5591] bridge_slave_1: entered promiscuous mode [ 99.965004][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.975382][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.975771][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.986127][ T5589] bridge_slave_0: entered allmulticast mode [ 99.993420][ T5589] bridge_slave_0: entered promiscuous mode [ 100.050143][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.059748][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.060132][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.065751][ T5589] bridge_slave_1: entered allmulticast mode [ 100.074032][ T5589] bridge_slave_1: entered promiscuous mode [ 100.162517][ T5590] team0: Port device team_slave_0 added [ 100.170863][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.183847][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.228750][ T5590] team0: Port device team_slave_1 added [ 100.237124][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.246960][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.254312][ T5593] team0: Port device team_slave_0 added [ 100.264226][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.323647][ T5593] team0: Port device team_slave_1 added [ 100.330258][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.415078][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.415159][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.415245][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.436314][ T5592] team0: Port device team_slave_0 added [ 100.455490][ T5591] team0: Port device team_slave_0 added [ 100.499529][ T5592] team0: Port device team_slave_1 added [ 100.506812][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.506876][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.506940][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.520560][ T5591] team0: Port device team_slave_1 added [ 100.523137][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.523151][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.523175][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.545943][ T5589] team0: Port device team_slave_0 added [ 100.628875][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.628949][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.629007][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.645217][ T5589] team0: Port device team_slave_1 added [ 100.725035][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.725099][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.725153][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.743146][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.743185][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.743235][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.815507][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.817450][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.817481][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.867443][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.867517][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.867593][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.877318][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.877372][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.877423][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.100736][ T5602] Bluetooth: hci1: command tx timeout [ 101.100772][ T4904] Bluetooth: hci0: command tx timeout [ 101.100799][ T4904] Bluetooth: hci2: command tx timeout [ 101.180762][ T5602] Bluetooth: hci3: command tx timeout [ 101.180833][ T5602] Bluetooth: hci4: command tx timeout [ 101.368083][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.368229][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.368324][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.468108][ T5590] hsr_slave_0: entered promiscuous mode [ 101.482319][ T5590] hsr_slave_1: entered promiscuous mode [ 101.533708][ T5593] hsr_slave_0: entered promiscuous mode [ 101.537155][ T5593] hsr_slave_1: entered promiscuous mode [ 101.539436][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 101.539737][ T5593] Cannot create hsr debugfs directory [ 101.646612][ T5592] hsr_slave_0: entered promiscuous mode [ 101.650401][ T5592] hsr_slave_1: entered promiscuous mode [ 101.659538][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 101.659618][ T5592] Cannot create hsr debugfs directory [ 101.701436][ T5591] hsr_slave_0: entered promiscuous mode [ 101.707331][ T5591] hsr_slave_1: entered promiscuous mode [ 101.708050][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 101.708068][ T5591] Cannot create hsr debugfs directory [ 101.793992][ T5589] hsr_slave_0: entered promiscuous mode [ 101.797455][ T5589] hsr_slave_1: entered promiscuous mode [ 101.799500][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 101.799562][ T5589] Cannot create hsr debugfs directory [ 102.729614][ T5590] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.794271][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.804830][ T5590] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.843575][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.857774][ T5590] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.904216][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.927552][ T5590] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.965359][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.091631][ T5592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.134168][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.149028][ T5592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.173903][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.182123][ T5592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.182312][ T4904] Bluetooth: hci1: command tx timeout [ 103.182377][ T4904] Bluetooth: hci2: command tx timeout [ 103.191503][ T5602] Bluetooth: hci0: command tx timeout [ 103.216066][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.245411][ T5592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.260701][ T4904] Bluetooth: hci3: command tx timeout [ 103.261004][ T5602] Bluetooth: hci4: command tx timeout [ 103.275180][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.405073][ T5591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.446374][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.464548][ T5591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.503849][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.519257][ T5591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.556854][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.586550][ T5591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.614109][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.788666][ T5589] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.814224][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.829370][ T5589] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.864377][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.887305][ T5589] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.934401][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.962752][ T5589] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.004755][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.126095][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.180319][ T5593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.215699][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.227026][ T5593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.263776][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.276893][ T5593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.318725][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.336511][ T5593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.354890][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.401806][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.452095][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.455207][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.501718][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.535688][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.538398][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.637790][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.675317][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.701845][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.709250][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.749455][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.749989][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.814760][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.848064][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.869796][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.870369][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.944684][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.945058][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.049169][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.107024][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.113693][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.157773][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.193597][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.194319][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.261300][ T4904] Bluetooth: hci0: command tx timeout [ 105.261313][ T5595] Bluetooth: hci1: command tx timeout [ 105.265585][ T5602] Bluetooth: hci2: command tx timeout [ 105.340647][ T5602] Bluetooth: hci4: command tx timeout [ 105.343578][ T4904] Bluetooth: hci3: command tx timeout [ 105.350964][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.456764][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.456968][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.535132][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.541830][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.149781][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.584186][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.654705][ T5590] veth0_vlan: entered promiscuous mode [ 106.803692][ T5590] veth1_vlan: entered promiscuous mode [ 107.007024][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.138665][ T5590] veth0_macvtap: entered promiscuous mode [ 107.207074][ T5590] veth1_macvtap: entered promiscuous mode [ 107.277682][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.337468][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.369204][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.379883][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.391305][ T5591] veth0_vlan: entered promiscuous mode [ 107.459697][ T5591] veth1_vlan: entered promiscuous mode [ 107.759291][ T5592] veth0_vlan: entered promiscuous mode [ 107.782700][ T5589] veth0_vlan: entered promiscuous mode [ 107.883109][ T5592] veth1_vlan: entered promiscuous mode [ 107.891748][ T5589] veth1_vlan: entered promiscuous mode [ 107.903986][ T5593] veth0_vlan: entered promiscuous mode [ 107.945272][ T5591] veth0_macvtap: entered promiscuous mode [ 108.002587][ T5591] veth1_macvtap: entered promiscuous mode [ 108.009206][ T5593] veth1_vlan: entered promiscuous mode [ 108.032322][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.045080][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.181546][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.204673][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.206226][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.230216][ T5592] veth0_macvtap: entered promiscuous mode [ 108.245691][ T5589] veth0_macvtap: entered promiscuous mode [ 108.253433][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.284045][ T5592] veth1_macvtap: entered promiscuous mode [ 108.306025][ T5589] veth1_macvtap: entered promiscuous mode [ 108.362926][ T5593] veth0_macvtap: entered promiscuous mode [ 108.421422][ T5593] veth1_macvtap: entered promiscuous mode [ 108.449191][ T5590] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.522556][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.535634][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.764000][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.796774][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.864512][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.034406][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.170006][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.170866][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.284773][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.284854][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.170436][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.178679][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.353427][ T3401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.355468][ T3401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.676851][ T81] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.683673][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.683726][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.946434][ T3401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.955033][ T3401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.225274][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.233277][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.393486][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.447792][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.455739][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.462138][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462270][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462313][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462353][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462393][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462433][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462473][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462513][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462552][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462592][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462632][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462671][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462710][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462749][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462789][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462829][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462868][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462916][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.086141][ T5722] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.407521][ T5722] usb 4-1: Using ep0 maxpacket: 16 [ 114.416015][ T5722] usb 4-1: device descriptor read/all, error -71 [ 114.613316][ T5816] jffs2: notice: (5816) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 115.384739][ T5828] 0x000000000000-0x000000020000 : "" [ 116.334542][ T5828] ftl_cs: FTL header not found. [ 117.475106][ T5838] fuse: Unknown parameter '0x0000000000000003' [ 122.756417][ T5871] sg_write: data in/out 1280/136 bytes for SCSI command 0x0-- guessing data in; [ 122.756417][ T5871] program syz.1.20 not setting count and/or reply_len properly [ 126.187370][ T5878] 0x000000000000-0x000000020000 : "" [ 126.680613][ T5883] fuse: Unknown parameter '0x0000000000000003' [ 129.139466][ T5878] ftl_cs: FTL header not found. [ 131.567670][ T5913] sg_write: data in/out 768/136 bytes for SCSI command 0x0-- guessing data in; [ 131.567670][ T5913] program syz.2.33 not setting count and/or reply_len properly [ 133.143590][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.165622][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.718956][ T5923] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 137.531131][ T5936] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 137.546764][ T5936] block device autoloading is deprecated and will be removed. [ 138.380082][ T5947] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 138.422563][ T5946] 0x000000000000-0x000000020000 : "" [ 138.753872][ T5946] ftl_cs: FTL header not found. [ 139.399186][ T5954] netlink: 'syz.3.45': attribute type 12 has an invalid length. [ 140.139847][ T5957] sg_write: data in/out 768/136 bytes for SCSI command 0x0-- guessing data in; [ 140.139847][ T5957] program syz.2.46 not setting count and/or reply_len properly [ 146.607781][ T6019] sg_write: data in/out 768/136 bytes for SCSI command 0x0-- guessing data in; [ 146.607781][ T6019] program syz.2.58 not setting count and/or reply_len properly [ 147.351546][ T6029] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.385702][ T6029] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.405543][ T6029] IPv6: NLM_F_CREATE should be set when creating new route [ 147.405673][ T6029] IPv6: NLM_F_CREATE should be set when creating new route [ 147.405692][ T6029] IPv6: NLM_F_CREATE should be set when creating new route [ 147.457023][ T6028] jffs2: notice: (6028) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 152.460510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 152.650511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 152.660500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 152.670493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 152.680498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 152.740492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 152.750495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 152.760490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 152.770508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 152.780515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 155.082152][ T5321] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 155.800875][ T5321] usb 5-1: Using ep0 maxpacket: 8 [ 155.839098][ T5321] usb 5-1: device descriptor read/all, error -71 [ 157.444833][ T6080] 0x000000000000-0x000000020000 : "" [ 157.637682][ T6080] ftl_cs: FTL header not found. [ 160.186029][ T6097] jffs2: notice: (6097) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 161.535063][ T3344] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 161.553196][ T6121] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 167.068925][ T6151] binder: BINDER_SET_CONTEXT_MGR already set [ 167.097072][ T6151] binder: 6147:6151 ioctl 4018620d 200000000040 returned -16 [ 167.124388][ T6151] binder: 6147:6151 ioctl c0306201 0 returned -14 [ 174.529910][ T6214] 0x000000000007-0x000000020000 : "" [ 174.538716][ T6214] ftl_cs: FTL header corrupt! [ 176.298526][ T6228] jffs2: notice: (6228) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 176.317974][ T6230] syzkaller0: entered promiscuous mode [ 176.318063][ T6230] syzkaller0: entered allmulticast mode [ 176.345661][ T6230] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 176.702296][ T6241] netlink: 44 bytes leftover after parsing attributes in process `syz.2.111'. [ 182.409201][ T6276] syz.2.119 uses obsolete (PF_INET,SOCK_PACKET) [ 184.659379][ T6291] jffs2: notice: (6291) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 187.374645][ T6303] 0x000000000000-0x000000020000 : "" [ 187.395516][ T1131] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 187.408310][ T6299] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 187.713896][ T6303] ftl_cs: FTL header not found. [ 188.034562][ T6307] netlink: 44 bytes leftover after parsing attributes in process `syz.3.129'. [ 188.034901][ T6307] Zero length message leads to an empty skb [ 188.396700][ T6310] jffs2: notice: (6310) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 188.750641][ T5709] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 189.840732][ T5709] usb 1-1: Using ep0 maxpacket: 8 [ 189.854894][ T5709] usb 1-1: unable to get BOS descriptor or descriptor too short [ 189.855489][ T5709] usb 1-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c [ 189.906006][ T5709] usb 1-1: config 0 has no interfaces? [ 189.940001][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.940031][ T5709] usb 1-1: Product: syz [ 189.940046][ T5709] usb 1-1: Manufacturer: syz [ 189.940062][ T5709] usb 1-1: SerialNumber: syz [ 190.151896][ T5709] apple-mfi-fastcharge 1-1: config 0 descriptor?? [ 191.643096][ T5722] apple-mfi-fastcharge 1-1: USB disconnect, device number 2 [ 194.222511][ T6360] 0x000000000000-0x000000020000 : "" [ 195.529750][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.531554][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.004341][ T6360] ftl_cs: FTL header not found. [ 196.453427][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.586643][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.894997][ T6340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.970828][ T6340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.176406][ T6396] netlink: 44 bytes leftover after parsing attributes in process `syz.0.144'. [ 202.499364][ T3344] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.511603][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.513663][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.513769][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.731638][ T889] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 202.740893][ T6422] 0x000000000000-0x000000020000 : "" [ 202.772903][ T6422] ftl_cs: FTL header not found. [ 202.891316][ T889] usb 3-1: Using ep0 maxpacket: 8 [ 202.901259][ T889] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 202.926502][ T889] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 202.934887][ T889] usb 3-1: config 0 has no interface number 0 [ 202.934958][ T889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.039486][ T889] usb 3-1: config 0 descriptor?? [ 203.258334][ T889] viperboard 3-1:0.143: version 0.00 found at bus 003 address 002 [ 204.339096][ T6429] syz.0.157 (6429) used greatest stack depth: 18688 bytes left [ 204.585048][ T889] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 204.601182][ T889] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 208.094147][ T889] usb 3-1: USB disconnect, device number 2 [ 208.145081][ T6457] netlink: 44 bytes leftover after parsing attributes in process `syz.3.164'. [ 214.541090][ T5893] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 214.710688][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 214.714493][ T5893] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 214.731569][ T5893] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 214.739909][ T5893] usb 4-1: config 0 has no interface number 0 [ 214.739947][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.988292][ T5893] usb 4-1: config 0 descriptor?? [ 215.168617][ T5893] viperboard 4-1:0.143: version 0.00 found at bus 004 address 004 [ 215.648558][ T5893] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 215.668912][ T5893] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 216.450330][ T5321] usb 4-1: USB disconnect, device number 4 [ 217.297568][ T6519] syzkaller1: entered promiscuous mode [ 217.297662][ T6519] syzkaller1: entered allmulticast mode [ 221.995116][ T5605] Bluetooth: hci0: command 0x0406 tx timeout [ 221.995138][ T5610] Bluetooth: hci4: command 0x0406 tx timeout [ 221.995996][ T5610] Bluetooth: hci1: command 0x0406 tx timeout [ 221.997892][ T5606] Bluetooth: hci3: command 0x0406 tx timeout [ 221.997921][ T5606] Bluetooth: hci2: command 0x0406 tx timeout [ 228.180072][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 228.180256][ T6599] bridge_slave_1: left allmulticast mode [ 228.180289][ T6599] bridge_slave_1: left promiscuous mode [ 228.181362][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.181051][ T6599] bridge_slave_0: left allmulticast mode [ 229.187375][ T6599] bridge_slave_0: left promiscuous mode [ 229.187646][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.248010][ T6606] sg_write: data in/out 1280/136 bytes for SCSI command 0x0-- guessing data in; [ 229.248010][ T6606] program syz.3.205 not setting count and/or reply_len properly [ 230.631171][ T6611] comedi comedi1: Minor 47 could not be opened [ 237.558782][ T6629] jffs2: notice: (6629) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 237.982798][ T6635] fuse: Unknown parameter 'user_i00000000000000000000' [ 238.330573][ T5321] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 239.000764][ T5321] usb 5-1: Using ep0 maxpacket: 8 [ 239.010314][ T5321] usb 5-1: unable to get BOS descriptor or descriptor too short [ 239.010782][ T5321] usb 5-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c [ 239.051701][ T5321] usb 5-1: config 0 has no interfaces? [ 239.115956][ T5321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.116107][ T5321] usb 5-1: Product: syz [ 239.116156][ T5321] usb 5-1: Manufacturer: syz [ 239.116172][ T5321] usb 5-1: SerialNumber: syz [ 239.468518][ T5321] apple-mfi-fastcharge 5-1: config 0 descriptor?? [ 242.843977][ T6663] misc userio: Invalid payload size [ 242.890452][ T6663] misc userio: Invalid payload size [ 242.899868][ T6663] misc userio: Invalid payload size [ 244.642512][ T889] apple-mfi-fastcharge 5-1: USB disconnect, device number 4 [ 253.800245][ T6704] jffs2: notice: (6704) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 256.684773][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.684826][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.765538][ T6717] comedi comedi1: Minor 47 could not be opened [ 257.860558][ T5832] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 258.825690][ T5832] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 258.919275][ T5832] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 258.919370][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.919391][ T5832] usb 5-1: config 0 has no interface number 0 [ 258.919439][ T5832] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 258.919467][ T5832] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 258.919489][ T5832] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.924912][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.924968][ T5832] usb 5-1: Product: syz [ 258.924983][ T5832] usb 5-1: Manufacturer: syz [ 258.924997][ T5832] usb 5-1: SerialNumber: syz [ 258.964134][ T5832] usb 5-1: config 0 descriptor?? [ 259.257331][ T5832] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 259.348158][ T5832] usb 5-1: USB disconnect, device number 5 [ 262.224978][ T6765] 0x000000000000-0x000000020000 : "" [ 262.266398][ T6765] ftl_cs: FTL header not found. [ 267.272577][ T6788] jffs2: notice: (6788) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 268.434270][ T6797] fuse: Bad value for 'fd' [ 271.660945][ T5595] Bluetooth: hci4: command 0x0406 tx timeout [ 272.141856][ T5832] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 272.300577][ T5832] usb 3-1: Using ep0 maxpacket: 8 [ 272.344417][ T5832] usb 3-1: unable to get BOS descriptor or descriptor too short [ 272.359928][ T5832] usb 3-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c [ 272.373641][ T5832] usb 3-1: config 0 has no interfaces? [ 272.417874][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.418025][ T5832] usb 3-1: Product: syz [ 272.418043][ T5832] usb 3-1: Manufacturer: syz [ 272.418059][ T5832] usb 3-1: SerialNumber: syz [ 272.717436][ T5832] apple-mfi-fastcharge 3-1: config 0 descriptor?? [ 274.680525][ T5695] apple-mfi-fastcharge 3-1: USB disconnect, device number 3 [ 314.192330][ T889] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 314.203557][ T889] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 314.203587][ T889] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 314.203611][ T889] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 314.203634][ T889] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 314.203657][ T889] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 314.203681][ T889] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 314.203704][ T889] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 314.203728][ T889] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 314.203751][ T889] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 314.489614][ T889] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 316.261129][ T7039] fido_id[7039]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 317.787455][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.804794][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.847765][ T7095] 0x000000000000-0x000000020000 : "" [ 322.903977][ T7095] ftl_cs: FTL header not found. [ 326.379682][ T7122] jffs2: notice: (7122) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 335.048129][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.057634][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.296080][ T41] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 335.312691][ T7174] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 335.495464][ T7183] ubi0: attaching mtd0 [ 335.505050][ T7183] FAULT_INJECTION: forcing a failure. [ 335.505050][ T7183] name failslab, interval 1, probability 0, space 0, times 1 [ 335.505120][ T7183] CPU: 1 UID: 0 PID: 7183 Comm: syz.1.353 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 335.505154][ T7183] Tainted: [L]=SOFTLOCKUP [ 335.505163][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.505185][ T7183] Call Trace: [ 335.505195][ T7183] [ 335.505205][ T7183] dump_stack_lvl+0xe8/0x150 [ 335.505260][ T7183] should_fail_ex+0x46b/0x600 [ 335.505294][ T7183] ? do_kmem_cache_create+0x8cb/0x9c0 [ 335.505333][ T7183] should_failslab+0xa8/0x100 [ 335.505371][ T7183] ? do_kmem_cache_create+0x8cb/0x9c0 [ 335.505405][ T7183] __kmalloc_flags_noprof+0x128/0x810 [ 335.505453][ T7183] ? do_kmem_cache_create+0x8cb/0x9c0 [ 335.505496][ T7183] do_kmem_cache_create+0x8cb/0x9c0 [ 335.505558][ T7183] __kmem_cache_create_args+0x338/0x480 [ 335.505594][ T7183] ubi_attach+0x2b4/0x4f70 [ 335.505621][ T7183] ? __kasan_unpoison_vmalloc+0x51/0x80 [ 335.505652][ T7183] ? __vmalloc_node_range_noprof+0x14b9/0x1540 [ 335.505716][ T7183] ? __pfx_ubi_attach+0x10/0x10 [ 335.505750][ T7183] ? ubi_attach_mtd_dev+0x1b0e/0x3a50 [ 335.505778][ T7183] ? vmalloc_noprof+0xb2/0xe0 [ 335.505812][ T7183] ubi_attach_mtd_dev+0x1b54/0x3a50 [ 335.505880][ T7183] ctrl_cdev_ioctl+0x301/0x490 [ 335.505915][ T7183] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 335.505942][ T7183] ? __fget_files+0x2a/0x420 [ 335.505968][ T7183] ? __fget_files+0x2a/0x420 [ 335.505997][ T7183] ? bpf_lsm_file_ioctl+0x9/0x20 [ 335.506023][ T7183] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 335.506053][ T7183] __se_sys_ioctl+0xff/0x170 [ 335.506088][ T7183] do_syscall_64+0x166/0x520 [ 335.506117][ T7183] ? trace_irq_disable+0x3b/0x140 [ 335.506147][ T7183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.506172][ T7183] ? clear_bhb_loop+0x70/0xc0 [ 335.506202][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.506226][ T7183] RIP: 0033:0x7fba1623e159 [ 335.506254][ T7183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.506275][ T7183] RSP: 002b:00007fba14496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.506305][ T7183] RAX: ffffffffffffffda RBX: 00007fba164c5fa0 RCX: 00007fba1623e159 [ 335.506323][ T7183] RDX: 00002000000001c0 RSI: 0000000040186f40 RDI: 0000000000000004 [ 335.506351][ T7183] RBP: 00007fba162d5024 R08: 0000000000000000 R09: 0000000000000000 [ 335.506365][ T7183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.506379][ T7183] R13: 00007fba164c6038 R14: 00007fba164c5fa0 R15: 00007ffd59d2c5e8 [ 335.506416][ T7183] [ 335.506662][ T7183] __kmem_cache_create_args(ubi_aeb_slab_cache) failed with error -12 [ 335.506686][ T7183] CPU: 1 UID: 0 PID: 7183 Comm: syz.1.353 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 335.506718][ T7183] Tainted: [L]=SOFTLOCKUP [ 335.506726][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.506740][ T7183] Call Trace: [ 335.506748][ T7183] [ 335.506757][ T7183] dump_stack_lvl+0xe8/0x150 [ 335.506812][ T7183] __kmem_cache_create_args+0x40e/0x480 [ 335.506852][ T7183] ubi_attach+0x2b4/0x4f70 [ 335.506876][ T7183] ? __kasan_unpoison_vmalloc+0x51/0x80 [ 335.506905][ T7183] ? __vmalloc_node_range_noprof+0x14b9/0x1540 [ 335.506961][ T7183] ? __pfx_ubi_attach+0x10/0x10 [ 335.506991][ T7183] ? ubi_attach_mtd_dev+0x1b0e/0x3a50 [ 335.507016][ T7183] ? vmalloc_noprof+0xb2/0xe0 [ 335.507046][ T7183] ubi_attach_mtd_dev+0x1b54/0x3a50 [ 335.507100][ T7183] ctrl_cdev_ioctl+0x301/0x490 [ 335.507131][ T7183] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 335.507155][ T7183] ? __fget_files+0x2a/0x420 [ 335.507185][ T7183] ? __fget_files+0x2a/0x420 [ 335.507210][ T7183] ? bpf_lsm_file_ioctl+0x9/0x20 [ 335.507252][ T7183] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 335.507300][ T7183] __se_sys_ioctl+0xff/0x170 [ 335.507344][ T7183] do_syscall_64+0x166/0x520 [ 335.507373][ T7183] ? trace_irq_disable+0x3b/0x140 [ 335.507402][ T7183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.507432][ T7183] ? clear_bhb_loop+0x70/0xc0 [ 335.507461][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.507485][ T7183] RIP: 0033:0x7fba1623e159 [ 335.507512][ T7183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.507531][ T7183] RSP: 002b:00007fba14496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.507555][ T7183] RAX: ffffffffffffffda RBX: 00007fba164c5fa0 RCX: 00007fba1623e159 [ 335.507573][ T7183] RDX: 00002000000001c0 RSI: 0000000040186f40 RDI: 0000000000000004 [ 335.507588][ T7183] RBP: 00007fba162d5024 R08: 0000000000000000 R09: 0000000000000000 [ 335.507603][ T7183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.507617][ T7183] R13: 00007fba164c6038 R14: 00007fba164c5fa0 R15: 00007ffd59d2c5e8 [ 335.507655][ T7183] [ 335.507690][ T7183] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -12 [ 340.008981][ T7152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.069946][ T7152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.361774][ T7226] jffs2: notice: (7226) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 348.411293][ T7229] FAULT_INJECTION: forcing a failure. [ 348.411293][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 348.411406][ T7229] CPU: 0 UID: 0 PID: 7229 Comm: syz.4.366 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 348.411528][ T7229] Tainted: [L]=SOFTLOCKUP [ 348.411551][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.411592][ T7229] Call Trace: [ 348.411631][ T7229] [ 348.411647][ T7229] dump_stack_lvl+0xe8/0x150 [ 348.411769][ T7229] should_fail_ex+0x46b/0x600 [ 348.411868][ T7229] ? __d_alloc+0x37/0x6f0 [ 348.411930][ T7229] should_failslab+0xa8/0x100 [ 348.412026][ T7229] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 348.412115][ T7229] ? __d_alloc+0x37/0x6f0 [ 348.412206][ T7229] __d_alloc+0x37/0x6f0 [ 348.412292][ T7229] d_alloc_pseudo+0x21/0xc0 [ 348.412362][ T7229] alloc_path_pseudo+0x107/0x220 [ 348.412467][ T7229] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 348.412555][ T7229] ? rt_spin_lock+0x1e2/0x400 [ 348.412695][ T7229] alloc_file_pseudo+0xa8/0x1e0 [ 348.412795][ T7229] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 348.412896][ T7229] ? alloc_fd+0x654/0x6d0 [ 348.412944][ T7229] sock_alloc_file+0xb8/0x2f0 [ 348.412968][ T7229] ? __sys_socket+0x12b/0x1b0 [ 348.413055][ T7229] __sys_socket+0x13f/0x1b0 [ 348.413162][ T7229] __x64_sys_socket+0x7a/0x90 [ 348.413248][ T7229] do_syscall_64+0x166/0x520 [ 348.413319][ T7229] ? trace_irq_disable+0x3b/0x140 [ 348.413417][ T7229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.413484][ T7229] ? clear_bhb_loop+0x70/0xc0 [ 348.413558][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.413631][ T7229] RIP: 0033:0x7f62fdf0e159 [ 348.413686][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.413738][ T7229] RSP: 002b:00007f62fc166028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 348.413804][ T7229] RAX: ffffffffffffffda RBX: 00007f62fe195fa0 RCX: 00007f62fdf0e159 [ 348.413848][ T7229] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000040000000015 [ 348.413891][ T7229] RBP: 00007f62fdfa5024 R08: 0000000000000000 R09: 0000000000000000 [ 348.413933][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.413965][ T7229] R13: 00007f62fe196038 R14: 00007f62fe195fa0 R15: 00007fff685e8518 [ 348.414061][ T7229] [ 348.776005][ T4904] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.832766][ T4904] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.852384][ T4904] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.868695][ T4904] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.881698][ T4904] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.117311][ T5595] Bluetooth: hci5: command tx timeout [ 352.130498][ T6009] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.139544][ T6009] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.139590][ T6009] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.139628][ T6009] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.260604][ T5595] Bluetooth: hci5: command tx timeout [ 354.116753][ T7266] jffs2: notice: (7266) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 354.850581][ T7274] sg_write: data in/out 768/136 bytes for SCSI command 0x0-- guessing data in; [ 354.850581][ T7274] program syz.2.374 not setting count and/or reply_len properly [ 356.036325][ T5595] Bluetooth: hci5: command tx timeout [ 356.450739][ T7178] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 358.060544][ T5595] Bluetooth: hci5: command tx timeout [ 358.996342][ T13] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 359.007710][ T7304] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 359.207529][ T7178] usb 5-1: Using ep0 maxpacket: 8 [ 359.382648][ T7178] usb 5-1: device descriptor read/all, error -71 [ 359.939598][ T7310] jffs2: notice: (7310) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 363.926445][ T7232] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.926953][ T7232] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.927516][ T7232] bridge_slave_0: entered allmulticast mode [ 363.994939][ T7232] bridge_slave_0: entered promiscuous mode [ 364.322456][ T7232] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.322840][ T7232] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.367095][ T7232] bridge_slave_1: entered allmulticast mode [ 364.382810][ T7232] bridge_slave_1: entered promiscuous mode [ 366.321097][ T7350] jffs2: notice: (7350) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 366.328175][ T7349] ubi0: attaching mtd0 [ 366.436236][ T7232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.455537][ T7349] FAULT_INJECTION: forcing a failure. [ 366.455537][ T7349] name failslab, interval 1, probability 0, space 0, times 0 [ 366.455595][ T7349] CPU: 1 UID: 0 PID: 7349 Comm: syz.4.393 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 366.455625][ T7349] Tainted: [L]=SOFTLOCKUP [ 366.455634][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.455651][ T7349] Call Trace: [ 366.455660][ T7349] [ 366.455670][ T7349] dump_stack_lvl+0xe8/0x150 [ 366.455787][ T7349] should_fail_ex+0x46b/0x600 [ 366.455852][ T7349] should_failslab+0xa8/0x100 [ 366.455909][ T7349] ? __kernfs_new_node+0xe7/0xa70 [ 366.455953][ T7349] kmem_cache_alloc_noprof+0x9e/0x690 [ 366.455989][ T7349] ? __kernfs_new_node+0xe7/0xa70 [ 366.456024][ T7349] __kernfs_new_node+0xe7/0xa70 [ 366.456051][ T7349] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 366.456185][ T7349] ? __pfx___kernfs_new_node+0x10/0x10 [ 366.456214][ T7349] ? kernfs_root+0x1c/0x230 [ 366.456246][ T7349] ? kernfs_root+0x1c/0x230 [ 366.456271][ T7349] ? kernfs_root+0x1c/0x230 [ 366.456294][ T7349] ? kernfs_root+0x1c/0x230 [ 366.456337][ T7349] kernfs_new_node+0xea/0x140 [ 366.456370][ T7349] __kernfs_create_file+0x4b/0x2e0 [ 366.456410][ T7349] sysfs_add_file_mode_ns+0x237/0x300 [ 366.456454][ T7349] internal_create_group+0x679/0x1180 [ 366.456489][ T7349] ? kernfs_create_dir_ns+0x1d5/0x230 [ 366.456523][ T7349] ? __pfx_internal_create_group+0x10/0x10 [ 366.456548][ T7349] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 366.456575][ T7349] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 366.456605][ T7349] sysfs_create_groups+0x59/0x120 [ 366.456634][ T7349] kobject_add_internal+0x673/0xce0 [ 366.456725][ T7349] kobject_init_and_add+0x12b/0x1a0 [ 366.456765][ T7349] ? __pfx_kobject_init_and_add+0x10/0x10 [ 366.456794][ T7349] ? kernfs_remove_by_name_ns+0x101/0x140 [ 366.456834][ T7349] ? kernfs_remove_by_name_ns+0x101/0x140 [ 366.456868][ T7349] sysfs_slab_add+0x7c/0x260 [ 366.456905][ T7349] do_kmem_cache_create+0x913/0x9c0 [ 366.456945][ T7349] __kmem_cache_create_args+0x338/0x480 [ 366.456984][ T7349] ubi_attach+0x2b4/0x4f70 [ 366.457033][ T7349] ? __kasan_unpoison_vmalloc+0x51/0x80 [ 366.457062][ T7349] ? __vmalloc_node_range_noprof+0x14b9/0x1540 [ 366.457119][ T7349] ? __pfx_ubi_attach+0x10/0x10 [ 366.457149][ T7349] ? ubi_attach_mtd_dev+0x1b0e/0x3a50 [ 366.457175][ T7349] ? vmalloc_noprof+0xb2/0xe0 [ 366.457205][ T7349] ubi_attach_mtd_dev+0x1b54/0x3a50 [ 366.457259][ T7349] ctrl_cdev_ioctl+0x301/0x490 [ 366.457291][ T7349] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 366.457323][ T7349] ? __fget_files+0x2a/0x420 [ 366.457358][ T7349] ? __fget_files+0x2a/0x420 [ 366.457384][ T7349] ? bpf_lsm_file_ioctl+0x9/0x20 [ 366.457430][ T7349] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 366.457457][ T7349] __se_sys_ioctl+0xff/0x170 [ 366.457489][ T7349] do_syscall_64+0x166/0x520 [ 366.457553][ T7349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.457620][ T7349] ? clear_bhb_loop+0x70/0xc0 [ 366.457648][ T7349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.457674][ T7349] RIP: 0033:0x7f62fdf0e159 [ 366.457696][ T7349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.457714][ T7349] RSP: 002b:00007f62fc166028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.457738][ T7349] RAX: ffffffffffffffda RBX: 00007f62fe195fa0 RCX: 00007f62fdf0e159 [ 366.457754][ T7349] RDX: 00002000000001c0 RSI: 0000000040186f40 RDI: 0000000000000004 [ 366.457769][ T7349] RBP: 00007f62fdfa5024 R08: 0000000000000000 R09: 0000000000000000 [ 366.457782][ T7349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.457795][ T7349] R13: 00007f62fe196038 R14: 00007f62fe195fa0 R15: 00007fff685e8518 [ 366.457828][ T7349] [ 366.477947][ T7349] kobject: kobject_add_internal failed for ubi_aeb_slab_cache (error: -12 parent: slab) [ 366.477973][ T7349] SLUB: Unable to add cache ubi_aeb_slab_cache to sysfs [ 366.496664][ T7232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.501399][ T7349] ubi0: scanning is finished [ 366.501473][ T7349] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 368.044611][ T7232] team0: Port device team_slave_0 added [ 368.055006][ T7232] team0: Port device team_slave_1 added [ 368.152543][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.152608][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.152637][ T7232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.167562][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.167601][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.167627][ T7232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.426162][ T7232] hsr_slave_0: entered promiscuous mode [ 368.427525][ T7232] hsr_slave_1: entered promiscuous mode [ 368.428422][ T7232] debugfs: 'hsr0' already exists in 'hsr' [ 368.428444][ T7232] Cannot create hsr debugfs directory [ 368.512607][ T7349] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 374.357760][ T3423] bridge_slave_1: left allmulticast mode [ 374.371121][ T3423] bridge_slave_1: left promiscuous mode [ 374.377548][ T3423] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.457654][ T3423] bridge_slave_0: left allmulticast mode [ 377.458022][ T3423] bridge_slave_0: left promiscuous mode [ 377.459282][ T3423] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.580178][ T6013] IPVS: starting estimator thread 0... [ 378.721931][ T7413] IPVS: using max 8 ests per chain, 19200 per kthread [ 378.734633][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.741927][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.595095][ T7418] binder: 7416:7418 ioctl 4018620d 0 returned -22 [ 380.762953][ T7423] binder: 7421:7423 ioctl 4018620d 0 returned -22 [ 381.139214][ T12] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 381.152844][ T7425] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 385.776927][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 388.141708][ T81] IPVS: starting estimator thread 0... [ 388.340699][ T7453] comedi comedi1: Minor 47 could not be opened [ 388.548374][ T7467] IPVS: using max 8 ests per chain, 19200 per kthread [ 390.222260][ T3423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.819767][ T3423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.114342][ T3423] bond0 (unregistering): Released all slaves [ 394.214032][ T7486] sg_write: data in/out 1280/136 bytes for SCSI command 0x0-- guessing data in; [ 394.214032][ T7486] program syz.4.430 not setting count and/or reply_len properly [ 397.849846][ T5250] 8021q: adding VLAN 0 to HW filter on device eth1 [ 398.028862][ T7232] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 398.328212][ T7232] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.350053][ T7232] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 398.587592][ T7232] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.821336][ T7232] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 398.967223][ T7232] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.978258][ T7232] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 399.315901][ T7232] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.636340][ T7537] 0x000000000000-0x000000020000 : "" [ 399.751540][ T7537] ftl_cs: FTL header not found. [ 400.730916][ T3423] hsr_slave_0: left promiscuous mode [ 400.779115][ T3423] hsr_slave_1: left promiscuous mode [ 400.788920][ T3423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.879479][ T3423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.252809][ T7546] comedi comedi1: Minor 47 could not be opened [ 408.713568][ T1019] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 408.727626][ T7574] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 408.945236][ T4904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 409.002173][ T4904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 409.030102][ T4904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 409.042066][ T4904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 409.046020][ T4904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.049621][ T7581] udevd[7581]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 409.588005][ T3423] team0 (unregistering): Port device team_slave_1 removed [ 409.761219][ T3423] team0 (unregistering): Port device team_slave_0 removed [ 411.427758][ T7601] sg_write: data in/out 768/136 bytes for SCSI command 0x0-- guessing data in; [ 411.427758][ T7601] program syz.3.448 not setting count and/or reply_len properly [ 411.447248][ T4904] Bluetooth: hci0: command tx timeout [ 412.520666][ T7604] comedi comedi1: Minor 47 could not be opened [ 413.500769][ T4904] Bluetooth: hci0: command tx timeout [ 414.698572][ T5250] 8021q: adding VLAN 0 to HW filter on device eth2 [ 414.741371][ T7615] udevd[7615]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 415.580767][ T4904] Bluetooth: hci0: command tx timeout [ 417.667255][ T4904] Bluetooth: hci0: command tx timeout [ 417.821184][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.069190][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.117400][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.381361][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.886397][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.682133][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.935075][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.741429][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.906739][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.923986][ T6012] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 424.030522][ T7669] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 425.314483][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.820798][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.864941][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.913311][ T5250] 8021q: adding VLAN 0 to HW filter on device eth3 [ 426.947013][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.923968][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.946966][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.478804][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.998816][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.567151][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.910709][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.580881][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.916213][ T5250] 8021q: adding VLAN 0 to HW filter on device eth4 [ 434.060981][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.621067][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.661165][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.011612][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.122656][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.062591][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.101370][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.065750][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.072703][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.152992][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.612224][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.106732][ T5595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 442.211237][ T5595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 442.224711][ T5595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 442.226266][ T5595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 442.228486][ T5595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 442.460077][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.500768][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.657263][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.692133][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.454510][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.540722][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.861809][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.926088][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.060627][ T5595] Bluetooth: hci5: command tx timeout [ 446.701742][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.752428][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.581188][ T7800] jffs2: notice: (7800) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 447.750888][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.061503][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.073770][ T7582] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.074180][ T7582] bridge_slave_0: entered allmulticast mode [ 448.109498][ T7582] bridge_slave_0: entered promiscuous mode [ 448.189152][ T7582] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.189543][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.190014][ T7582] bridge_slave_1: entered allmulticast mode [ 448.213602][ T7582] bridge_slave_1: entered promiscuous mode [ 448.376264][ T7582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.402866][ T7582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.484227][ T7582] team0: Port device team_slave_0 added [ 448.496913][ T7582] team0: Port device team_slave_1 added [ 448.568367][ T36] audit: type=1800 audit(1788770960.390:2): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.488" name="test2" dev="jffs2" ino=2 res=0 errno=0 [ 448.604490][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.606286][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.606367][ T7582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.620605][ T5595] Bluetooth: hci5: command tx timeout [ 448.647121][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.647147][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.647216][ T7582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.781482][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.397790][ T7582] hsr_slave_0: entered promiscuous mode [ 449.412520][ T7582] hsr_slave_1: entered promiscuous mode [ 449.421973][ T7582] debugfs: 'hsr0' already exists in 'hsr' [ 449.427958][ T7582] Cannot create hsr debugfs directory [ 450.279556][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.319620][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.497432][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.921304][ T5595] Bluetooth: hci5: command tx timeout [ 452.318445][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.552901][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.552201][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.874069][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.980618][ T5595] Bluetooth: hci5: command tx timeout [ 456.208322][ T7849] jffs2: notice: (7849) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 456.292322][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.845436][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.845765][ T889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.902539][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.498'. [ 458.333783][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.334123][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.381562][ T3423] bridge_slave_1: left allmulticast mode [ 459.381603][ T3423] bridge_slave_1: left promiscuous mode [ 459.381890][ T3423] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.482320][ T3423] bridge_slave_0: left allmulticast mode [ 459.482361][ T3423] bridge_slave_0: left promiscuous mode [ 459.487037][ T3423] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.665355][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.673853][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.060687][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.068651][ T889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.605686][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.752206][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.358162][ T7884] jffs2: notice: (7884) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 462.361072][ T889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.040877][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.042750][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.633204][ T36] audit: type=1800 audit(1788770976.490:3): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.507" name="test2" dev="jffs2" ino=2 res=0 errno=0 [ 464.670673][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.675420][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.731986][ T889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.886590][ T7897] futex_wake_op: syz.4.508 tries to shift op by 144; fix this program [ 465.102758][ T3423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.108618][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.108775][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.554140][ T3423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.664805][ T3423] bond0 (unregistering): Released all slaves [ 467.431623][ T3423] hsr_slave_0: left promiscuous mode [ 467.476785][ T3423] hsr_slave_1: left promiscuous mode [ 467.484813][ T3423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.512197][ T31] net_ratelimit: 2 callbacks suppressed [ 467.512344][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.512781][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.542422][ T3423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.750936][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.751073][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.709454][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.718009][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.820295][ T7921] sg_write: data in/out 1280/136 bytes for SCSI command 0x0-- guessing data in; [ 468.820295][ T7921] program syz.3.513 not setting count and/or reply_len properly [ 469.743795][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.743926][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.957392][ T4904] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 470.934477][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.947077][ T4904] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 470.965825][ T4904] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 470.974982][ T4904] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 470.976072][ T4904] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 470.990683][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.141350][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.143130][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.143998][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.347806][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.348048][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.407654][ T3423] team0 (unregistering): Port device team_slave_1 removed [ 474.833317][ T5595] Bluetooth: hci4: command tx timeout [ 474.848031][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.864567][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.490537][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.591312][ T3423] team0 (unregistering): Port device team_slave_0 removed [ 475.903395][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.903756][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.882214][ T5595] Bluetooth: hci4: command tx timeout [ 479.001171][ T5595] Bluetooth: hci4: command tx timeout [ 479.038277][ T5695] net_ratelimit: 6 callbacks suppressed [ 479.038361][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.038558][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.262633][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.512739][ T5595] Bluetooth: hci4: command tx timeout [ 481.514324][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.528820][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.886538][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.266853][ T5250] 8021q: adding VLAN 0 to HW filter on device eth5 [ 482.547755][ T7178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.559863][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.132936][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.301182][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.943990][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.773289][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.773832][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.774598][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.775049][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.990777][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.265476][ T7763] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.272986][ T7763] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.273136][ T7763] bridge_slave_0: entered allmulticast mode [ 486.275706][ T7763] bridge_slave_0: entered promiscuous mode [ 487.033612][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.033745][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.255258][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.443890][ T31] net_ratelimit: 1 callbacks suppressed [ 489.443911][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.444187][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.073754][ T8049] misc userio: Invalid payload size [ 490.083086][ T8049] misc userio: Invalid payload size [ 490.092985][ T8049] misc userio: Invalid payload size [ 490.462193][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.476677][ T7178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.540870][ T7763] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.573256][ T7763] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.584006][ T7763] bridge_slave_1: entered allmulticast mode [ 490.629321][ T7763] bridge_slave_1: entered promiscuous mode [ 491.510701][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.511039][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.515425][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.515566][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.734979][ T7763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.799121][ T7763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.219374][ T7763] team0: Port device team_slave_0 added [ 492.239023][ T7763] team0: Port device team_slave_1 added [ 492.543591][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.549540][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.654757][ T8063] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 494.687248][ T889] net_ratelimit: 3 callbacks suppressed [ 494.687342][ T889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.704224][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.101197][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.259015][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.259704][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.310920][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.311668][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.752194][ T3423] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.980501][ T5894] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 497.050279][ T7763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.057644][ T7763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.057671][ T7763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.178808][ T7763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.178876][ T7763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.178903][ T7763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.224537][ T5894] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 497.235731][ T5894] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 497.235758][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.235825][ T5894] usb 4-1: config 0 has no interface number 0 [ 497.235920][ T5894] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 497.235948][ T5894] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 497.235971][ T5894] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.302657][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.310767][ T5894] usb 4-1: Product: syz [ 497.310787][ T5894] usb 4-1: Manufacturer: syz [ 497.310804][ T5894] usb 4-1: SerialNumber: syz [ 497.351415][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.351813][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.392434][ T5894] usb 4-1: config 0 descriptor?? [ 497.740761][ T889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.820161][ T5894] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 497.891999][ T5894] usb 4-1: USB disconnect, device number 5 [ 500.213151][ T5321] net_ratelimit: 3 callbacks suppressed [ 500.213173][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.213560][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.786673][ T889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.856266][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.272107][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.272613][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.543040][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.547894][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.670106][ T3423] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.765229][ T4904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 502.811278][ T4904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 502.824523][ T4904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 502.836190][ T4904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 502.866558][ T4904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 502.996406][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.996708][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.027712][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.288825][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.031312][ T4904] Bluetooth: hci0: command tx timeout [ 505.340893][ T1655] net_ratelimit: 4 callbacks suppressed [ 505.340989][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.341285][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.323741][ T3423] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.390959][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.391332][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.894785][ T1129] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 506.904704][ T8143] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 507.127380][ T4904] Bluetooth: hci0: command tx timeout [ 507.254151][ T3423] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.553701][ T7925] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.607391][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.616156][ T7925] bridge_slave_0: entered allmulticast mode [ 508.839083][ T8158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.973676][ T7925] bridge_slave_0: entered promiscuous mode [ 509.191504][ T4904] Bluetooth: hci0: command tx timeout [ 510.093579][ T7925] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.103156][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.105295][ T7925] bridge_slave_1: entered allmulticast mode [ 510.179844][ T7925] bridge_slave_1: entered promiscuous mode [ 510.237655][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.237844][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.238017][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.240144][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.260668][ T4904] Bluetooth: hci0: command tx timeout [ 511.266599][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.266748][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.558355][ T7925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.610850][ T7925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.829021][ T7925] team0: Port device team_slave_0 added [ 511.884920][ T7925] team0: Port device team_slave_1 added [ 511.920530][ T5894] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 512.130618][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 512.683564][ T5894] usb 2-1: unable to get BOS descriptor or descriptor too short [ 512.691372][ T5894] usb 2-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c [ 512.693363][ T5894] usb 2-1: config 0 has no interfaces? [ 512.716327][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.717974][ T5894] usb 2-1: Product: syz [ 512.717991][ T5894] usb 2-1: Manufacturer: syz [ 512.718005][ T5894] usb 2-1: SerialNumber: syz [ 512.764831][ T5894] apple-mfi-fastcharge 2-1: config 0 descriptor?? [ 512.815499][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.982534][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.982653][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.074141][ T7925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.077250][ T7925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.077346][ T7925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.143848][ T7925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.155088][ T7925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.155121][ T7925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.260669][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.262316][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.072222][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.072555][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.201387][ T7925] hsr_slave_0: entered promiscuous mode [ 514.211467][ T7925] hsr_slave_1: entered promiscuous mode [ 514.220085][ T7925] debugfs: 'hsr0' already exists in 'hsr' [ 514.220889][ T7925] Cannot create hsr debugfs directory [ 514.304551][ T889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.467353][ T8211] No source specified [ 516.489289][ T5321] net_ratelimit: 2 callbacks suppressed [ 516.489428][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.841487][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.131872][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.132084][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.133645][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.170076][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.170466][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.690550][ T889] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 518.850563][ T889] usb 4-1: Using ep0 maxpacket: 8 [ 518.859612][ T889] usb 4-1: unable to get BOS descriptor or descriptor too short [ 518.859671][ T889] usb 4-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c [ 518.880885][ T889] usb 4-1: config 0 has no interfaces? [ 518.890841][ T889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.898946][ T889] usb 4-1: Product: syz [ 518.898965][ T889] usb 4-1: Manufacturer: syz [ 518.898981][ T889] usb 4-1: SerialNumber: syz [ 518.921105][ T889] apple-mfi-fastcharge 4-1: config 0 descriptor?? [ 519.181758][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.238920][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.242141][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.372586][ T3423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.431103][ T3423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.472794][ T3423] bond0 (unregistering): Released all slaves [ 521.633851][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 521.808299][ T5894] apple-mfi-fastcharge 4-1: USB disconnect, device number 6 [ 521.840527][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 521.846678][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 521.846732][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c [ 521.848127][ T10] usb 5-1: config 0 has no interfaces? [ 521.934787][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.934858][ T10] usb 5-1: Product: syz [ 521.934873][ T10] usb 5-1: Manufacturer: syz [ 521.934927][ T10] usb 5-1: SerialNumber: syz [ 522.018626][ T10] apple-mfi-fastcharge 5-1: config 0 descriptor?? [ 522.338343][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.744326][ T889] apple-mfi-fastcharge 5-1: USB disconnect, device number 8 [ 523.356697][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.900771][ T889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.302103][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.391927][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.523813][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.341399][ T889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.697668][ T5595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 528.752435][ T5595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 528.769148][ T5595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 528.806278][ T5595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 528.843393][ T5595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 529.513454][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.381452][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.868193][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.052043][ T5595] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 531.223829][ T5595] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 531.267287][ T5595] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 531.296847][ T5595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 531.318490][ T5595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 531.420627][ T4904] Bluetooth: hci5: command tx timeout [ 531.929615][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.224172][ T8304] jffs2: notice: (8304) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 533.379967][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.514731][ T4904] Bluetooth: hci5: command tx timeout [ 533.691427][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.691672][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.980511][ T5595] Bluetooth: hci6: command tx timeout [ 534.211352][ T3423] hsr_slave_0: left promiscuous mode [ 534.226414][ T1135] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 534.236073][ T8317] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 534.262510][ T3423] hsr_slave_1: left promiscuous mode [ 534.294526][ T3423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.295616][ T3423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.322125][ T3423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.322203][ T3423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.381072][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.649393][ T3423] veth1_macvtap: left promiscuous mode [ 534.656020][ T3423] veth0_macvtap: left promiscuous mode [ 534.663586][ T3423] veth1_vlan: left promiscuous mode [ 534.668695][ T3423] veth0_vlan: left promiscuous mode [ 535.430866][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.502569][ T3423] team0 (unregistering): Port device team_slave_1 removed [ 535.561084][ T3423] team0 (unregistering): Port device team_slave_0 removed [ 535.590559][ T5595] Bluetooth: hci5: command tx timeout [ 535.868627][ T8332] jffs2: notice: (8332) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 536.070476][ T5595] Bluetooth: hci6: command tx timeout [ 536.720911][ T889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.667653][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.109769][ T5595] Bluetooth: hci5: command tx timeout [ 538.150760][ T5595] Bluetooth: hci6: command tx timeout [ 539.743629][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.824079][ T889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.220701][ T5595] Bluetooth: hci6: command tx timeout [ 540.812069][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.863948][ T5894] apple-mfi-fastcharge 2-1: USB disconnect, device number 2 [ 541.106954][ T8108] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.109110][ T8108] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.109684][ T8108] bridge_slave_0: entered allmulticast mode [ 541.130923][ T8108] bridge_slave_0: entered promiscuous mode [ 541.149054][ T8108] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.151066][ T8108] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.151660][ T8108] bridge_slave_1: entered allmulticast mode [ 541.170715][ T8108] bridge_slave_1: entered promiscuous mode [ 541.386042][ T8108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.411276][ T8108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.574839][ T8108] team0: Port device team_slave_0 added [ 541.641209][ T8108] team0: Port device team_slave_1 added [ 541.787305][ T8108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.787372][ T8108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.787399][ T8108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.831373][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.846218][ T8108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.846278][ T8108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.846303][ T8108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.258893][ T8108] hsr_slave_0: entered promiscuous mode [ 542.265523][ T8108] hsr_slave_1: entered promiscuous mode [ 542.267941][ T8108] debugfs: 'hsr0' already exists in 'hsr' [ 542.267997][ T8108] Cannot create hsr debugfs directory [ 542.367532][ T3423] IPVS: stop unused estimator thread 0... [ 542.860926][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.872215][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.904715][ T3423] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.078377][ T5250] 8021q: adding VLAN 0 to HW filter on device eth5 [ 543.130914][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.300165][ T3423] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.637339][ T3423] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.805574][ T8299] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.807889][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.808048][ T8299] bridge_slave_0: entered allmulticast mode [ 543.833466][ T8299] bridge_slave_0: entered promiscuous mode [ 543.873022][ T8299] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.873403][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.873877][ T8299] bridge_slave_1: entered allmulticast mode [ 543.889964][ T8299] bridge_slave_1: entered promiscuous mode [ 543.902164][ T1655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.915106][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.916341][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.938747][ T8285] bridge_slave_0: entered allmulticast mode [ 543.946177][ T8285] bridge_slave_0: entered promiscuous mode [ 544.072766][ T3423] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.162067][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.162235][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.162489][ T8285] bridge_slave_1: entered allmulticast mode [ 544.175577][ T8285] bridge_slave_1: entered promiscuous mode [ 544.264354][ T8299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.347783][ T8299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.373774][ T8285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.419796][ T8285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.429337][ T8108] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 544.470603][ T8108] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.533479][ T8108] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 544.575902][ T8108] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.587271][ T8299] team0: Port device team_slave_0 added [ 544.615646][ T8108] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 544.675884][ T8108] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.687027][ T8299] team0: Port device team_slave_1 added [ 544.698801][ T8285] team0: Port device team_slave_0 added [ 544.705473][ T8108] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 544.759143][ T8108] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.797532][ T8285] team0: Port device team_slave_1 added [ 544.937185][ T8299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.941280][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.947238][ T8299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.947267][ T8299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.028926][ T5250] 8021q: adding VLAN 0 to HW filter on device eth6 [ 545.038789][ T8299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.038856][ T8299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.038917][ T8299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.048484][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.048519][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.048578][ T8285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.143560][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.143643][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.143672][ T8285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.301564][ T8299] hsr_slave_0: entered promiscuous mode [ 545.305137][ T8299] hsr_slave_1: entered promiscuous mode [ 545.307877][ T8299] debugfs: 'hsr0' already exists in 'hsr' [ 545.307935][ T8299] Cannot create hsr debugfs directory [ 545.500943][ T8285] hsr_slave_0: entered promiscuous mode [ 545.504434][ T8285] hsr_slave_1: entered promiscuous mode [ 545.506713][ T8285] debugfs: 'hsr0' already exists in 'hsr' [ 545.506800][ T8285] Cannot create hsr debugfs directory [ 545.651840][ T3423] bridge_slave_1: left allmulticast mode [ 545.651934][ T3423] bridge_slave_1: left promiscuous mode [ 545.652621][ T3423] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.759772][ T3423] bridge_slave_0: left allmulticast mode [ 545.759869][ T3423] bridge_slave_0: left promiscuous mode [ 545.761237][ T3423] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.900949][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.914212][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.951332][ T3423] bridge_slave_1: left allmulticast mode [ 545.951429][ T3423] bridge_slave_1: left promiscuous mode [ 545.952183][ T3423] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.110067][ T3423] bridge_slave_0: left allmulticast mode [ 546.110164][ T3423] bridge_slave_0: left promiscuous mode [ 546.119642][ T3423] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.330663][ T3423] bridge_slave_1: left allmulticast mode [ 546.330762][ T3423] bridge_slave_1: left promiscuous mode [ 546.331460][ T3423] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.451699][ T3423] bridge_slave_0: left allmulticast mode [ 546.451788][ T3423] bridge_slave_0: left promiscuous mode [ 546.452493][ T3423] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.650647][ T3423] bridge_slave_1: left allmulticast mode [ 546.650748][ T3423] bridge_slave_1: left promiscuous mode [ 546.651468][ T3423] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.751749][ T3423] bridge_slave_0: left allmulticast mode [ 546.751848][ T3423] bridge_slave_0: left promiscuous mode [ 546.752640][ T3423] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.221370][ T3423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.302859][ T3423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.362627][ T3423] bond0 (unregistering): Released all slaves [ 547.812655][ T3423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.891080][ T3423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.913439][ T3423] bond0 (unregistering): Released all slaves [ 548.131116][ T3423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.231331][ T3423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.292900][ T3423] bond0 (unregistering): Released all slaves [ 548.601465][ T3423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.681917][ T3423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.742392][ T3423] bond0 (unregistering): Released all slaves [ 549.556220][ T8108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.852029][ T8108] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.877982][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.885347][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.043020][ T8299] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 550.095122][ T8299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 550.356831][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.362873][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.367605][ T8299] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 550.410182][ T8299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 550.415413][ T5250] 8021q: adding VLAN 0 to HW filter on device eth7 [ 550.524118][ T8299] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 550.555495][ T8299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 550.612365][ T8299] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 550.654136][ T8299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 551.099854][ T8285] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 551.134365][ T8285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 551.143643][ T8285] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 551.208188][ T8285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 551.235635][ T8285] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 551.275052][ T8285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 551.293558][ T8285] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 551.368745][ T8285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 551.540701][ T3423] hsr_slave_0: left promiscuous mode [ 551.580636][ T3423] hsr_slave_1: left promiscuous mode [ 551.581943][ T3423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.622434][ T3423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.831604][ T3423] hsr_slave_0: left promiscuous mode [ 551.870557][ T3423] hsr_slave_1: left promiscuous mode [ 551.871910][ T3423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.871936][ T3423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.901416][ T3423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.901524][ T3423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.941844][ T3423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.983043][ T3423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.140566][ T3423] hsr_slave_0: left promiscuous mode [ 552.160788][ T3423] hsr_slave_1: left promiscuous mode [ 552.167209][ T3423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.201279][ T3423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.262089][ T3423] veth1_macvtap: left promiscuous mode [ 552.262335][ T3423] veth0_macvtap: left promiscuous mode [ 552.262919][ T3423] veth1_vlan: left promiscuous mode [ 552.263238][ T3423] veth0_vlan: left promiscuous mode [ 552.881356][ T3423] team0 (unregistering): Port device team_slave_1 removed [ 552.954730][ T3423] team0 (unregistering): Port device team_slave_0 removed [ 553.591846][ T3423] team0 (unregistering): Port device team_slave_1 removed [ 553.641023][ T3423] team0 (unregistering): Port device team_slave_0 removed [ 553.911342][ T3423] team0 (unregistering): Port device team_slave_1 removed [ 553.951886][ T3423] team0 (unregistering): Port device team_slave_0 removed [ 554.433630][ T3423] team0 (unregistering): Port device team_slave_1 removed [ 554.481132][ T3423] team0 (unregistering): Port device team_slave_0 removed [ 554.682270][ T5250] 8021q: adding VLAN 0 to HW filter on device eth8 [ 555.058820][ T8299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.223229][ T8299] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.325390][ T8285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.328299][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.328429][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.420907][ T3407] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.443497][ T3407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.563711][ T8285] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.667903][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.668521][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.798839][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.806433][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.096019][ T5250] 8021q: adding VLAN 0 to HW filter on device eth9 [ 556.240060][ T8108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.304181][ T8108] veth0_vlan: entered promiscuous mode [ 557.327599][ T8299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.402819][ T8108] veth1_vlan: entered promiscuous mode [ 557.642707][ T8108] veth0_macvtap: entered promiscuous mode [ 557.675645][ T8108] veth1_macvtap: entered promiscuous mode [ 557.862836][ T8108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.932084][ T8108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.009640][ T8285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.072695][ T5250] 8021q: adding VLAN 0 to HW filter on device eth10 [ 558.564049][ T81] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.660525][ T3407] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.662459][ T3407] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.662623][ T3407] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.787661][ T8299] veth0_vlan: entered promiscuous mode [ 558.976360][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.984328][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.042145][ T8299] veth1_vlan: entered promiscuous mode [ 559.236305][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.247591][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.432803][ T8285] veth0_vlan: entered promiscuous mode [ 559.505395][ T8285] veth1_vlan: entered promiscuous mode [ 559.516805][ T8299] veth0_macvtap: entered promiscuous mode [ 559.574866][ T8299] veth1_macvtap: entered promiscuous mode [ 559.633188][ T8299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.706335][ T8285] veth0_macvtap: entered promiscuous mode [ 559.716453][ T8299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.745272][ T8285] veth1_macvtap: entered promiscuous mode [ 559.858644][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.975548][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.101371][ T5250] 8021q: adding VLAN 0 to HW filter on device eth11 [ 560.677233][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.677294][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.055785][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.065441][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.324778][ T3407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.324857][ T3407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.358229][ T1135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.462255][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.462341][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.501004][ T1131] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.502361][ T1131] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.565941][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.568064][ T1019] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.568949][ T1019] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.701848][ T56] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.908128][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.105004][ T5250] 8021q: adding VLAN 0 to HW filter on device eth12 [ 562.943533][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.950036][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.384340][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.390476][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.471236][ T5595] Bluetooth: hci0: command 0x0406 tx timeout [ 652.060617][ T5595] Bluetooth: hci5: command 0x0406 tx timeout [ 657.180413][ T4904] Bluetooth: hci6: command 0x0406 tx timeout [ 685.822191][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.822320][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.020712][ T37] INFO: task syz-executor:5575 blocked in I/O wait for more than 143 seconds. [ 689.037100][ T37] Tainted: G L syzkaller #0 [ 689.037118][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 689.037128][ T37] task:syz-executor state:D stack:21824 pid:5575 tgid:5575 ppid:5574 task_flags:0x440100 flags:0x00080800 [ 689.037185][ T37] Call Trace: [ 689.037193][ T37] [ 689.037208][ T37] __schedule+0x16d9/0x5700 [ 689.037327][ T37] ? __pfx___schedule+0x10/0x10 [ 689.037360][ T37] ? schedule+0x90/0x2b0 [ 689.037387][ T37] schedule+0x164/0x2b0 [ 689.037412][ T37] io_schedule+0x80/0xe0 [ 689.037437][ T37] bit_wait_io+0x11/0xd0 [ 689.037465][ T37] __wait_on_bit+0xac/0x2f0 [ 689.037491][ T37] ? __pfx_bit_wait_io+0x10/0x10 [ 689.037518][ T37] out_of_line_wait_on_bit+0x13b/0x190 [ 689.037546][ T37] ? __pfx_bit_wait_io+0x10/0x10 [ 689.037570][ T37] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 689.037599][ T37] ? __pfx_wake_bit_function+0x10/0x10 [ 689.037658][ T37] do_get_write_access+0x671/0x1090 [ 689.037712][ T37] jbd2_journal_get_write_access+0x1d7/0x230 [ 689.037739][ T37] __ext4_journal_get_write_access+0xf1/0x620 [ 689.037776][ T37] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 689.037799][ T37] ? trace_kmem_cache_alloc+0x29/0xe0 [ 689.037856][ T37] ext4_reserve_inode_write+0x294/0x360 [ 689.037889][ T37] __ext4_mark_inode_dirty+0x146/0x7b0 [ 689.037933][ T37] ext4_dirty_inode+0xd0/0x ** replaying previous printk message ** [ 689.037933][ T37] ext4_dirty_inode+0xd0/0x110 [ 689.037967][ T37] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 689.037989][ T37] __mark_inode_dirty+0x3a8/0x13b0 [ 689.038042][ T37] file_update_time_flags+0x39f/0x450 [ 689.038075][ T37] ext4_page_mkwrite+0x225/0x1150 [ 689.038108][ T37] ? reacquire_held_locks+0x117/0x1a0 [ 689.038142][ T37] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 689.038175][ T37] do_page_mkwrite+0x14a/0x310 [ 689.038210][ T37] do_wp_page+0x20a7/0x3d20 [ 689.038250][ T37] ? preempt_count_add+0x6a/0x140 [ 689.038279][ T37] ? __pfx_do_wp_page+0x10/0x10 [ 689.038301][ T37] ? rt_spin_lock+0x2d0/0x400 [ 689.038336][ T37] ? __pfx_rt_spin_lock+0x10/0x10 [ 689.038373][ T37] ? pte_offset_map_rw_nolock+0xea/0x160 [ 689.038400][ T37] handle_mm_fault+0xd69/0x28c0 [ 689.038432][ T37] ? handle_mm_fault+0xeb/0x28c0 [ 689.038467][ T37] ? __pfx_handle_mm_fault+0x10/0x10 [ 689.038490][ T37] ? lock_vma_under_rcu+0x45a/0x500 [ 689.038544][ T37] ? __pfx_set_user_sigmask+0x10/0x10 [ 689.038615][ T37] do_user_addr_fault+0xa4f/0x1340 [ 689.038654][ T37] ? trace_page_fault_user+0x84/0x1e0 [ 689.038680][ T37] exc_page_fault+0x6a/0xc0 [ 689.038706][ T37] asm_exc_page_fault+0x26/0x30 [ 689.038744][ T37] RIP: 0033:0x7f5713ccc6e2 [ 689.038764][ T37] RSP: 002b:00007ffc5273fa00 EFLAGS: 00010202 [ 689.038783][ T37] RAX: 00007f5711c6c000 RBX: 0000555571af4b20 RCX: 0000000000000006 [ 689.038798][ T37] RDX: 000000000000044e RSI: 0000555571afd9e8 RDI: 0000000000000040 [ 689.038811][ T37] RBP: 00007ffc5273ff00 R08: 0000555571afd9f0 R09: 000000000000009f [ 689.038825][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc5273fd40 [ 689.038839][ T37] R13: 00007ffc5273fb30 R14: 585858582e7a7973 R15: 00007ffc5273fa80 [ 689.038872][ T37] [ 689.038936][ T37] [ 689.038936][ T37] Showing all locks held in the system: [ 689.038952][ T37] locks held by khungtaskd/37: 1, last CPU#1: [ 689.038967][ T37] #0: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 689.039060][ T37] locks held by getty/5342: 2, on CPU#1: [ 689.039075][ T37] #0: ffff888032fae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 689.039150][ T37] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 689.039207][ T37] locks held by syz-executor/5575: 3, on CPU#0: [ 689.039221][ T37] #0: ffff8880415666c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 689.039277][ T37] #1: ffff888036a56688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x203/0x1150 [ 689.039329][ T37] #2: ffff888036a52bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 689.039394][ T37] locks held by kworker/0:4/5702: 7, last CPU#0: [ 689.039409][ T37] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 689.039468][ T37] #1: ffffc900055afc40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 689.039532][ T37] #2: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 689.039590][ T37] #3: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 689.039647][ T37] #4: ffffffff8f701938 (&tbl->lock){+...}-{3:3}, at: neigh_periodic_work+0xc6b/0xe90 [ 689.039733][ T37] #5: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 689.039781][ T37] #6: ffff888036d6c0a8 (&n->lock){++..}-{3:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 689.039846][ T37] [ 689.039852][ T37] ============================================= [ 689.039852][ T37] [ 689.039866][ T37] NMI backtrace for cpu 1 [ 689.039883][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 689.039910][ T37] Tainted: [L]=SOFTLOCKUP [ 689.039917][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 689.039929][ T37] Call Trace: [ 689.039948][ T37] [ 689.039955][ T37] dump_stack_lvl+0xe8/0x150 [ 689.039985][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 689.040016][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 689.040066][ T37] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 689.040099][ T37] sys_info+0x135/0x170 [ 689.040156][ T37] watchdog+0xfd7/0x1030 [ 689.040198][ T37] ? watchdog+0x1c7/0x1030 [ 689.040231][ T37] kthread+0x38b/0x470 [ 689.040251][ T37] ? __pfx_watchdog+0x10/0x10 [ 689.040273][ T37] ? __pfx_kthread+0x10/0x10 [ 689.040293][ T37] ret_from_fork+0x514/0xb70 [ 689.040326][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 689.040346][ T37] ? __switch_to+0xc89/0x1420 [ 689.040376][ T37] ? __pfx_kthread+0x10/0x10 [ 689.040396][ T37] ret_from_fork_asm+0x1a/0x30 [ 689.040429][ T37] [ 689.040497][ T37] Sending NMI from CPU 1 to CPUs 0: [ 689.040554][ C0] NMI backtrace for cpu 0 [ 689.040572][ C0] CPU: 0 UID: 0 PID: 5702 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 689.040598][ C0] Tainted: [L]=SOFTLOCKUP [ 689.040604][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 689.040616][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 689.040643][ C0] RIP: 0010:post_alloc_hook+0x115/0x250 [ 689.040668][ C0] Code: 48 c1 e8 03 42 80 3c 28 00 74 0c 48 c7 c7 00 bf b7 8d e8 9e c3 0e 00 4c 03 25 c7 14 94 0b 44 89 f9 48 c1 e1 0c 31 c0 4c 89 e7 aa 0f 1f 44 00 00 e8 af 8b 0e 00 e9 c4 00 00 00 e9 d3 00 00 00 [ 689.040683][ C0] RSP: 0018:ffffc900055af4d0 EFLAGS: 00010246 [ 689.040699][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000003540 [ 689.040710][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888073c6cac0 [ 689.040722][ C0] RBP: 00000000000d2820 R08: ffffffff8fb1e67f R09: 0000000000000000 [ 689.040734][ C0] R10: ffffed100e78d800 R11: fffffbfff1f63cd0 R12: ffff888073c6c000 [ 689.040748][ C0] R13: dffffc0000000000 R14: ffffea0001cf1b00 R15: 0000000000000004 [ 689.040761][ C0] FS: 0000000000000000(0000) GS:ffff888125bd1000(0000) knlGS:0000000000000000 [ 689.040776][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 689.040789][ C0] CR2: 0000560d559d6660 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 689.040805][ C0] Call Trace: [ 689.040812][ C0] [ 689.040821][ C0] get_page_from_freelist+0x2591/0x2600 [ 689.040861][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 689.040884][ C0] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 689.040910][ C0] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 689.040938][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 689.040967][ C0] ? __refill_objects_node+0x22a/0x5a0 [ 689.041008][ C0] allocate_slab+0x7d/0x620 [ 689.041029][ C0] refill_objects+0x2d8/0x350 [ 689.041055][ C0] __pcs_replace_empty_main+0x339/0x690 [ 689.041074][ C0] ? rt_spin_trylock+0x13a/0x2b0 [ 689.041093][ C0] kmem_cache_alloc_node_noprof+0x4f1/0x660 [ 689.041117][ C0] ? __alloc_skb+0x27a/0x7a0 [ 689.041147][ C0] ? __alloc_skb+0x27a/0x7a0 [ 689.041173][ C0] __alloc_skb+0x27a/0x7a0 [ 689.041196][ C0] ? __neigh_notify+0x29/0x310 [ 689.041222][ C0] __neigh_notify+0x15c/0x310 [ 689.041249][ C0] ? neigh_cleanup_and_release+0x9c/0x2d0 [ 689.041269][ C0] neigh_cleanup_and_release+0xc2/0x2d0 [ 689.041291][ C0] neigh_periodic_work+0xb7b/0xe90 [ 689.041316][ C0] ? neigh_periodic_work+0x57/0xe90 [ 689.041340][ C0] ? process_scheduled_works+0x97a/0x1630 [ 689.041365][ C0] process_scheduled_works+0xc3d/0x1630 [ 689.041406][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 689.041434][ C0] ? assign_work+0x3cf/0x5d0 [ 689.041460][ C0] worker_thread+0xa47/0xfb0 [ 689.041493][ C0] ? __kthread_parkme+0x71/0x1f0 [ 689.041525][ C0] kthread+0x38b/0x470 [ 689.041550][ C0] ? __pfx_worker_thread+0x10/0x10 [ 689.041574][ C0] ? __pfx_kthread+0x10/0x10 [ 689.041594][ C0] ret_from_fork+0x514/0xb70 [ 689.041613][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 689.041630][ C0] ? __switch_to+0xc89/0x1420 [ 689.041657][ C0] ? __pfx_kthread+0x10/0x10 [ 689.041676][ C0] ret_from_fork_asm+0x1a/0x30 [ 689.041713][ C0] [ 689.178317][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 689.962630][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 689.973830][ T37] Tainted: [L]=SOFTLOCKUP [ 689.978151][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 689.988202][ T37] Call Trace: [ 689.991501][ T37] [ 689.994436][ T37] vpanic+0x56d/0xa60 [ 689.998421][ T37] ? __pfx___schedule+0x10/0x10 [ 690.003271][ T37] ? __pfx_vpanic+0x10/0x10 [ 690.007798][ T37] panic+0xc5/0xd0 [ 690.011519][ T37] ? __pfx_panic+0x10/0x10 [ 690.015938][ T37] ? preempt_schedule_common+0x7f/0xd0 [ 690.021403][ T37] ? preempt_schedule_thunk+0x16/0x40 [ 690.026781][ T37] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 690.032941][ T37] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 690.039115][ T37] watchdog+0x1030/0x1030 [ 690.043488][ T37] ? watchdog+0x1c7/0x1030 [ 690.047924][ T37] kthread+0x38b/0x470 [ 690.052032][ T37] ? __pfx_watchdog+0x10/0x10 [ 690.056728][ T37] ? __pfx_kthread+0x10/0x10 [ 690.061320][ T37] ret_from_fork+0x514/0xb70 [ 690.065935][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 690.071067][ T37] ? __switch_to+0xc89/0x1420 [ 690.075757][ T37] ? __pfx_kthread+0x10/0x10 [ 690.080347][ T37] ret_from_fork_asm+0x1a/0x30 [ 690.085120][ T37] [ 690.088744][ T37] Kernel Offset: disabled [ 690.093077][ T37] Rebooting in 86400 seconds..