last executing test programs: 5m20.193375529s ago: executing program 0 (id=11): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d800000018007b7be00212ba0d0505040a603f00000f040b067c55a1bc000900b80006990300000015000500fe800000fc0000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 5m19.869820506s ago: executing program 0 (id=13): sched_setscheduler(0x0, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000840)=0x0) r2 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, 0x0, r2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) timer_settime(r1, 0x0, &(0x7f0000000c80)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = timerfd_create(0x1, 0x80000) timerfd_settime(r4, 0x3, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mkdir(0x0, 0x91) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/rtc/rtc0/wakealarm\x00', 0x1, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=0x820400080004, 0x12) read$FUSE(r3, &(0x7f0000000cc0)={0x2020}, 0x2020) 5m19.682926772s ago: executing program 2 (id=3): r0 = creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ee) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000540)='offline', 0x7) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="07000000cf4fca77bc8eb9fa97c97e88eda36e1cb821701f89c73ff3a44e8e83a20ca706c655285cec515636a67f9bef53c31e7443c7dfb8b60aeaacd11a3da0a5d32bc5e61b91abdce42f3171eda24fea7726c0cc2243b81b901d441badbdbda25dcdd2b211f9a56b4e2d8bb7a4b917f23015544f76b56b457d24b0bfb29e7c7fd4f61cbe48b0ea6f406cbf933fd2bb9e7d1b1aa9c002b7", @ANYRES16=r3, @ANYBLOB="000825bd7000ffdbdf2509"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x804) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') 5m18.880539552s ago: executing program 0 (id=16): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b15, 0x0) 5m14.982578092s ago: executing program 2 (id=28): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000700)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000780)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 5m14.20251528s ago: executing program 0 (id=29): bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0xc, 0x7, &(0x7f0000002080)=ANY=[@ANYBLOB="7911a800000000005501020000000000b7000000000000009500000000000000850000008b000000b70000000000000095"], &(0x7f00000020c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m13.790090923s ago: executing program 2 (id=31): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="240000002600090122bd7008133d9c7d7a98684508003f80040022800800030047"], 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) 5m12.09074565s ago: executing program 0 (id=34): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r1, 0x20e, 0x5ee, 0xfd000004, &(0x7f0000001480)="b9180bb7600a070c009e40f086dd1fff310005e03300fd870010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4, &(0x7f00000015c0), &(0x7f0000001600)}, 0x28) 5m12.039123103s ago: executing program 2 (id=35): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x2901, 0x0) close(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000009c0)={'syzkaller0\x00', @link_local}) write$tun(r2, &(0x7f0000000a00)=ANY=[], 0x16) close(0x3) close_range(r0, 0xffffffffffffffff, 0x0) 5m9.610365965s ago: executing program 0 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xffffffff, 0x0, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20090000}, 0x0) 4m56.559727218s ago: executing program 32 (id=35): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x2901, 0x0) close(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000009c0)={'syzkaller0\x00', @link_local}) write$tun(r2, &(0x7f0000000a00)=ANY=[], 0x16) close(0x3) close_range(r0, 0xffffffffffffffff, 0x0) 4m55.203422313s ago: executing program 33 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xffffffff, 0x0, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20090000}, 0x0) 4m23.688203076s ago: executing program 1 (id=96): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x6f8, 0xb000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x10, 0x4, {0x8, 0xb, 0x2, 0x2, 0x1, 0x26, 0x30, 0xc0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xb1, 0x8, 0x0, {0xa, 0x25, 0x25, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xa, 0x4, {0xa, 0x25, 0x25, 0xe, 0x0, 0x8}}}}}}}}]}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="fb7e", 0x2}], 0x1) 4m19.801311654s ago: executing program 1 (id=100): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, &(0x7f0000000280)={0x0, 0x1, r0, 0x80000000, 0x80000}) r1 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='map=off,iocharset=iso8859-1,session=0x0000000000000023,hide,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=strict,gid=', @ANYRESHEX, @ANYBLOB=',unhide,sbsector=0x0000000000000001,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c05000000fbcb"], 0x0, 0x57a, &(0x7f0000000500)="$eJzs3V9v0+odwPGfSwtRJlVoTAhVBR7KJrVSCU4CQRFXnvMkfSCxI9tB7RWqaIoqUpgok9beMG7YJm23u98udzGdV3DeETqv4Igj20kb2vw5/d/T8/1U1E+cn58/TuQfTuPHAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHIrtp23pG681rIazq0EfmPvYXfr/hXf1f4f7Fa7MLZdESv+J5mM3EpX3frd3tM3419zMps+mpVMvMjIzm9uXn96Y3Kit/2IDh/Kf49Y09b2zpvVTqf9/qQ6cgFc3ffa3r42PLamPRP6puHUtDKhr8qlkv1wqRqqqqnrcCWMdEO5gXYiP1Dz7oLKl8tFpXMrfsurVZy67q188qBg2yX1LNe86gSh7z18lgvdJVOvG6+WxMRPxzFP4jficxOpSDsNpdY3Ou3iuAHFQfmfE1QYF1SwC4V8vlDIlx6XHz+x7ckDK+x95EDEyb1p8ct0Ysdu4Lgmuvlf6mLEk5Ysixr440pFAvGlMeT5rm7iX/jDQz2y3f7838vyt/aenpEk/99JH90Zlv+H9OVIP197bR9mqy3Zlh15I6vSkY605f2gKOsoNe/t1RMc44n/1ESLJ0ZC8cVIQ5xkjequUVKWkpTElpeyJFUJRUlVjNRFSygrEkokOnlHuRKIFkci8SUQJfPiyoIoyUtZylIUJVpysiK+tMSTmlTESWpZl41kvxdFWUP34bpcT4LyQ4eR7b1CbSmMGC35H8d37GM2cFK+9vI/AAAAAAC4tKzk0/f4/H9Kbielqqlr+7y7BQAAAAAATlDyl//ZeDEVl26Lxfk/AAAAAACXjZVcY2eJSFbupqV1sZLLpfgQAAAAAACASyL5+/+deJHMgXJXrN05VTj/BwAAAADgkvj72Dn2w+Y16/sfJAimrE/N5d9bm8ncvM7mlXS7K/trjKoz1nS3kmRRSheTk66etTJp0O4kmF+6i/Vx/bD2OuDsduCvh+nAjUn5p9xLY+6tpcu13jNpK9mqqeuc69ef5sVxpicivRz9+e3GXyQZ/j+8xrSVkY1OO/fqXWct6cunuJZPm90JFA/MoziiLx+S+RaSay4GjngquRCj227WkvWNTtvuH/9EuvnEty1+nB7R5meZS6PmujPeZr8dfyZuM58bNvpuL/LHHPlnuZ/G3J+/ny4G9KIwrheF/l4M3hfH70VxXC+Kx+wFAJyX9TFZyJIDefcIR7mjZXc5ZHb/LPNpzPxMcmCNfx04otvjjuj2MbPb/3bvgdALHpZj43b/1Z9Ve+ngP0PbDesFK96FVz5s/klubm3vPNjYXH3dft1+WygUS/Yj235ckKlkGN0FuQcAMED/PXasgfm/F/Hjv9PAg7n70Ziz6t/ufqUgJ6/knXRkTRaTqw2SbxwM/B9Btu9rCItjzlqzSZpM7/CyOOKs7mpylUOv3sLI2G/7UDz9FwIAgDM0NyYPW+Pvwmct7j/vnhmWR+NcPvrseC82f8Z7AgCAXw8dfLGy0d+sIDDNl/lyOe9ES1oFvvtcBaZS08p4kQ7cJceradUM/Mh3/XpceGEqOlRhq9n0g0hV/UA1/dAsJ9MHqu6t30PdcLzIuL2PsV3fixw3UhUTuqrZ+mPdhEs6SDYOm9o1VeM6kfE9FfqtwNU5pUKt+wJNRXuRqZq46KlmYBpOkFEv/HqroVVFh25gmpGfVthry3hVP2gk1ebOeV8DAHBRbG3vvFntdNrvT7EwsOHMmQ8VAAB0jcnSAAAAAAAAAAAAAAAAAAAAAADgAjiL6/8onE0hfj3PpfXeVNAXYScctpC5GN24eIWxh46Pp31sAnC6fgoAAP//WHxK5g==") ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r1, 0x1000, 0xaf, 0x3}) 4m19.472504287s ago: executing program 1 (id=101): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x11) 4m14.625143893s ago: executing program 1 (id=106): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x12148c5, &(0x7f0000000180)={[{@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0x30a}}, {@shortname_mixed}, {@fat=@debug}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@flush}, {@uni_xlate}, {@shortname_win95}, {@shortname_lower}, {@uni_xlate}, {@shortname_lower}, {@rodir}, {@utf8}, {@numtail}, {@uni_xlateno}]}, 0x0, 0x2d9, &(0x7f0000000280)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mounts\x00') mount$tmpfs(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) 4m10.762104675s ago: executing program 1 (id=111): ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000001880)={0x8}) io_setup(0x3ff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x4}]) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000018c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000001900)="45000000040000000000", 0xa) 3m58.94040733s ago: executing program 1 (id=121): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000), 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/58, 0x3a}], 0x1, &(0x7f0000000140)=""/19, 0x13}, 0x90}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000a40)={&(0x7f0000000580)=@id={0x1e, 0x3, 0x1, {0x4e23}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000005c0)=']', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x24000081) 3m57.897127154s ago: executing program 34 (id=121): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000), 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/58, 0x3a}], 0x1, &(0x7f0000000140)=""/19, 0x13}, 0x90}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000a40)={&(0x7f0000000580)=@id={0x1e, 0x3, 0x1, {0x4e23}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000005c0)=']', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x24000081) 3m55.403272086s ago: executing program 5 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = socket(0xa, 0x3, 0x87) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@local, 0x40, r2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000280)) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r5, 0x400452c8, &(0x7f0000000540)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c80)='./dev/rfcomm0\x00', 0xd2483, 0x391) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c9, &(0x7f0000000cc0)) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0405627, &(0x7f00000004c0)={0x0, 0x0, {0x800000, 0x10008006, 0x2005, 0x7, 0x0, 0x1, 0x0, 0x3}}) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) write(r7, &(0x7f0000000100)='3', 0x62) syz_read_part_table(0x619, &(0x7f0000000640)="$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") 3m44.427044519s ago: executing program 5 (id=132): openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./tracing\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) r4 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000240)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000280)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000300)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000340)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000380)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x8, 0x8, "fff30010"}, 0x3, 0x2, {0x0}, 0x400000}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000480)=0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r5, 0x0, 0x0) 3m36.137435342s ago: executing program 3 (id=140): syz_emit_vhci(0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendto(r0, &(0x7f0000000180)="3e0000000b00010100f4ffffffffffffff", 0x11, 0x0, 0x0, 0x0) 3m33.083340559s ago: executing program 5 (id=143): r0 = io_uring_setup(0x5ac0, &(0x7f00000003c0)={0x0, 0xcf79, 0x400, 0x1, 0x4}) exit(0x1ff) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000000440), 0x2) 3m32.22654707s ago: executing program 3 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000e0000004000000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000800), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r0, &(0x7f0000000880), 0x0}, 0x20) 3m31.350311523s ago: executing program 5 (id=146): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000600)=0x3fa, 0x4) write(r0, &(0x7f0000000640)='3', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0xc, 0x6, 0x500, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) bind$inet(r3, &(0x7f00000007c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000800)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r3, &(0x7f0000000840), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000880)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m29.815140994s ago: executing program 3 (id=148): openat(0xffffffffffffff9c, &(0x7f0000104940)='./file0/file0\x00', 0x42, 0x0) 3m28.92231893s ago: executing program 3 (id=149): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a", 0xf5, 0x40, 0x0, 0x0) shutdown(r0, 0x1) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000740)='^', 0xfdef}], 0x1) 3m27.700495637s ago: executing program 5 (id=150): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0xedf, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 3m26.560646925s ago: executing program 3 (id=151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x68}}, 0x0) 3m26.560495072s ago: executing program 5 (id=152): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x1d0, 0x138, 0x1, 0x0, 0xa0011, 0x0, 0x0, @by_dev={r1}, [@raid={0x0, 0x8, 0x0, 0x98, 'raid\x00', {'raid6_zr', 0x20, '3 64 rebuild 0', 0x20, 0x3, [{0x20, @dev=@ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x0}}, {0x20, @dev=@ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x1}}, {0x20, @none, 0x20, @ram_num={'1:', 0x1}}]}}]}) 3m23.550325864s ago: executing program 3 (id=154): r0 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) syz_usb_connect(0x0, 0x39, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='100', 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) 3m11.367381561s ago: executing program 35 (id=152): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x1d0, 0x138, 0x1, 0x0, 0xa0011, 0x0, 0x0, @by_dev={r1}, [@raid={0x0, 0x8, 0x0, 0x98, 'raid\x00', {'raid6_zr', 0x20, '3 64 rebuild 0', 0x20, 0x3, [{0x20, @dev=@ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x0}}, {0x20, @dev=@ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x1}}, {0x20, @none, 0x20, @ram_num={'1:', 0x1}}]}}]}) 3m8.469905909s ago: executing program 36 (id=154): r0 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) syz_usb_connect(0x0, 0x39, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='100', 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) 34.501004922s ago: executing program 4 (id=211): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000580)="0000000001000000", 0x8) 31.7729713s ago: executing program 4 (id=212): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000006c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./mnt\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt/trace_marker\x00', 0x1, 0x5a) writev(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)="ff506bae17c55b91", 0x8}, {0x0}], 0x2) 27.542932698s ago: executing program 4 (id=213): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000100)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f0000000180)="$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") chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000d40)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d80)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000e00)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f00), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000f40)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000f80), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000fc0), &(0x7f0000001000)='./file0\x00', 0x0, &(0x7f0000001040)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@fat=@dmask={'dmask', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {}, {@utf8}, {@shortname_win95}, {@fat=@errors_remount}, {@uni_xlate}, {@utf8}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@fat=@discard}, {@shortname_win95}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_mixed}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}, 0x1, 0x36f, &(0x7f0000001500)="$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") write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000020c0), &(0x7f0000002100)='./bus\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000002140)) rmdir(&(0x7f0000002180)='./bus\x00') 22.848821458s ago: executing program 4 (id=214): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f0000000480)=[{0x20, 0x2a, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x63552b78}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000001200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000001340)='cgroup.procs\x00', 0x2, 0x0) pread64(r6, &(0x7f0000001380)=""/30, 0x1e, 0x800000000004) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000013c0)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r7 = memfd_create(&(0x7f0000001480)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xce\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf6 1 [ 284.128376][ T5649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 284.128915][ T5649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 284.130947][ T5649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 284.131626][ T5649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.225961][ T6727] rxe_eth0 speed is unknown, defaulting to 1000 [ 285.930284][ T5652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.932702][ T5652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.933250][ T5652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.957443][ T5652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.961154][ T5652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 286.224975][ T5649] Bluetooth: hci0: command tx timeout [ 287.268409][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.300330][ T6727] ip6tnl0 speed is unknown, defaulting to 1000 [ 288.896276][ T5649] Bluetooth: hci1: command tx timeout [ 288.896542][ T5649] Bluetooth: hci0: command tx timeout [ 288.903119][ T6691] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 289.671569][ T6743] rxe_eth0 speed is unknown, defaulting to 1000 [ 290.359195][ T6743] ip6tnl0 speed is unknown, defaulting to 1000 [ 290.412603][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.412792][ T6727] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.413314][ T6727] bridge_slave_0: entered allmulticast mode [ 290.424547][ T6727] bridge_slave_0: entered promiscuous mode [ 290.432634][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.432830][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.432979][ T6727] bridge_slave_1: entered allmulticast mode [ 290.440020][ T6727] bridge_slave_1: entered promiscuous mode [ 290.561444][ T6727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.571430][ T6727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.869312][ T6727] team0: Port device team_slave_0 added [ 290.887845][ T6727] team0: Port device team_slave_1 added [ 290.945169][ T5649] Bluetooth: hci0: command tx timeout [ 290.945200][ T5649] Bluetooth: hci1: command tx timeout [ 292.410400][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.411966][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.411997][ T6727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.448809][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.448824][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.448861][ T6727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.786997][ T5652] Bluetooth: hci1: command tx timeout [ 293.787034][ T5652] Bluetooth: hci0: command tx timeout [ 295.045903][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.093862][ T5647] Bluetooth: hci1: command tx timeout [ 296.172307][ T6727] hsr_slave_0: entered promiscuous mode [ 296.173339][ T6727] hsr_slave_1: entered promiscuous mode [ 296.174094][ T6727] debugfs: 'hsr0' already exists in 'hsr' [ 296.174111][ T6727] Cannot create hsr debugfs directory [ 298.722150][ T5652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.737200][ T5652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.808762][ T5649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.920171][ T5649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.967152][ T5649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.316126][ T6805] FAULT_INJECTION: forcing a failure. [ 299.316126][ T6805] name failslab, interval 1, probability 0, space 0, times 0 [ 299.316162][ T6805] CPU: 0 UID: 0 PID: 6805 Comm: syz.4.183 Not tainted syzkaller #0 PREEMPT(full) [ 299.316190][ T6805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 299.316205][ T6805] Call Trace: [ 299.316215][ T6805] [ 299.316225][ T6805] dump_stack_lvl+0xe8/0x150 [ 299.316272][ T6805] should_fail_ex+0x3eb/0x540 [ 299.316310][ T6805] should_failslab+0xa8/0x100 [ 299.316350][ T6805] ? mempool_init_node+0x1f4/0x510 [ 299.316379][ T6805] kmem_cache_alloc_noprof+0x9c/0x600 [ 299.316411][ T6805] ? kmem_cache_alloc_noprof+0x151/0x600 [ 299.316442][ T6805] ? mempool_init_node+0x1f4/0x510 [ 299.316473][ T6805] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.316508][ T6805] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 299.316536][ T6805] mempool_init_node+0x1f4/0x510 [ 299.316574][ T6805] ? __pfx_mempool_free_slab+0x10/0x10 [ 299.316600][ T6805] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 299.316627][ T6805] mempool_init_noprof+0x3a/0x50 [ 299.316658][ T6805] dm_io_client_create+0x78/0x100 [ 299.316689][ T6805] dm_bufio_client_create+0x711/0x1480 [ 299.316751][ T6805] ? __pfx_dm_bufio_client_create+0x10/0x10 [ 299.316791][ T6805] ? sync_rw_sb+0x543/0x810 [ 299.316828][ T6805] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.316863][ T6805] ? calculate_device_limits+0xa84/0x1100 [ 299.316911][ T6805] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.316941][ T6805] ? calculate_device_limits+0xa84/0x1100 [ 299.317003][ T6805] dm_integrity_ctr+0x4818/0x5e10 [ 299.317072][ T6805] ? __pfx_dm_integrity_ctr+0x10/0x10 [ 299.317105][ T6805] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.317135][ T6805] ? rcu_needs_cpu+0xb0/0xb0 [ 299.317175][ T6805] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.317211][ T6805] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.317241][ T6805] ? skip_spaces+0x8a/0xa0 [ 299.317277][ T6805] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.317307][ T6805] ? dm_split_args+0x50b/0x5d0 [ 299.317348][ T6805] dm_table_add_target+0x58d/0xc70 [ 299.317396][ T6805] table_load+0x325/0x8a0 [ 299.317433][ T6805] ? __pfx_table_load+0x10/0x10 [ 299.317462][ T6805] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.317496][ T6805] ? __might_fault+0xaf/0x130 [ 299.317533][ T6805] dm_ctl_ioctl+0x9ec/0xe10 [ 299.317585][ T6805] ? __pfx_table_load+0x10/0x10 [ 299.317611][ T6805] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 299.317689][ T6805] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.317721][ T6805] ? __fget_files+0x2a/0x420 [ 299.317758][ T6805] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.317788][ T6805] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.317820][ T6805] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 299.317867][ T6805] __se_sys_ioctl+0xfc/0x170 [ 299.317910][ T6805] do_syscall_64+0x166/0x520 [ 299.317940][ T6805] ? trace_irq_disable+0x3b/0x140 [ 299.317977][ T6805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.318011][ T6805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.318037][ T6805] RIP: 0033:0x7f532379fb19 [ 299.318060][ T6805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.318080][ T6805] RSP: 002b:00007f5324660028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.318106][ T6805] RAX: ffffffffffffffda RBX: 00007f5323a25fa0 RCX: 00007f532379fb19 [ 299.318125][ T6805] RDX: 0000200000000180 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 299.318142][ T6805] RBP: 00007f5323837b70 R08: 0000000000000000 R09: 0000000000000000 [ 299.318158][ T6805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.318174][ T6805] R13: 00007f5323a26038 R14: 00007f5323a25fa0 R15: 00007ffdb887c6f8 [ 299.318215][ T6805] [ 299.791649][ T6805] device-mapper: table: 248:2: integrity: Cannot initialize dm-bufio (-ENOMEM) [ 299.791677][ T6805] device-mapper: ioctl: error adding target to table [ 301.349486][ T5649] Bluetooth: hci2: command tx timeout [ 302.555404][ T5647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.559583][ T5647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.585143][ T5647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.586524][ T5647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.588437][ T5647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.426450][ T5649] Bluetooth: hci2: command tx timeout [ 303.780416][ T6825] warning: `syz.4.185' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 304.989429][ T5649] Bluetooth: hci6: command tx timeout [ 305.028338][ T5652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.031103][ T5652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.033146][ T5652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.058199][ T5652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.058846][ T5652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.979754][ T5649] Bluetooth: hci2: command tx timeout [ 307.025913][ T5652] Bluetooth: hci6: command tx timeout [ 308.083913][ T5652] Bluetooth: hci2: command tx timeout [ 308.083965][ T5652] Bluetooth: hci4: command tx timeout [ 309.109808][ T5649] Bluetooth: hci6: command tx timeout [ 309.762696][ T5819] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 310.655180][ T5649] Bluetooth: hci4: command tx timeout [ 311.423968][ T5652] Bluetooth: hci6: command tx timeout [ 312.966320][ T5652] Bluetooth: hci4: command tx timeout [ 312.968756][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.503004][ T6822] rxe_eth0 speed is unknown, defaulting to 1000 [ 315.163376][ T5652] Bluetooth: hci4: command tx timeout [ 315.199807][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.220525][ T6901] FAULT_INJECTION: forcing a failure. [ 315.220525][ T6901] name failslab, interval 1, probability 0, space 0, times 0 [ 315.220554][ T6901] CPU: 0 UID: 0 PID: 6901 Comm: syz.4.193 Not tainted syzkaller #0 PREEMPT(full) [ 315.220581][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 315.220596][ T6901] Call Trace: [ 315.220606][ T6901] [ 315.220616][ T6901] dump_stack_lvl+0xe8/0x150 [ 315.220663][ T6901] should_fail_ex+0x3eb/0x540 [ 315.220700][ T6901] should_failslab+0xa8/0x100 [ 315.220744][ T6901] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 315.220779][ T6901] ? __d_alloc+0x37/0x820 [ 315.220811][ T6901] ? __d_alloc+0x37/0x820 [ 315.220844][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.220882][ T6901] __d_alloc+0x37/0x820 [ 315.220927][ T6901] d_alloc+0x4b/0x190 [ 315.220958][ T6901] ? lookup_one_qstr_excl+0xc4/0x360 [ 315.220997][ T6901] lookup_one_qstr_excl+0xd8/0x360 [ 315.221031][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.221061][ T6901] ? lock_rename_child+0xef/0x180 [ 315.221101][ T6901] start_renaming_dentry+0x250/0x4d0 [ 315.221148][ T6901] ovl_get_workdir+0x8a5/0x1980 [ 315.221186][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.221219][ T6901] ? __pfx_ovl_get_workdir+0x10/0x10 [ 315.221280][ T6901] ? do_raw_spin_lock+0x12b/0x2f0 [ 315.221313][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.221348][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.221378][ T6901] ? do_raw_spin_unlock+0xf5/0x200 [ 315.221408][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.221437][ T6901] ? _raw_spin_unlock+0x28/0x50 [ 315.221461][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.221490][ T6901] ? ovl_inuse_trylock+0x177/0x230 [ 315.221520][ T6901] ovl_fill_super+0x1767/0x4570 [ 315.221563][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.221593][ T6901] ? __mutex_unlock_slowpath+0x731/0x900 [ 315.221640][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.221670][ T6901] ? __raw_spin_lock_init+0x45/0x100 [ 315.221705][ T6901] ? __pfx_ovl_fill_super+0x10/0x10 [ 315.221729][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.221759][ T6901] ? shrinker_register+0x158/0x210 [ 315.221792][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.221822][ T6901] ? sget_fc+0x1b47/0x1ce0 [ 315.221881][ T6901] ? __pfx_ovl_next_opt+0x10/0x10 [ 315.221924][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.221959][ T6901] ? __pfx_ovl_fill_super+0x10/0x10 [ 315.221987][ T6901] get_tree_nodev+0xbe/0x150 [ 315.222025][ T6901] vfs_get_tree+0x92/0x2a0 [ 315.222066][ T6901] do_new_mount+0x325/0xb00 [ 315.222097][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.222133][ T6901] ? __pfx_do_new_mount+0x10/0x10 [ 315.222166][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.222196][ T6901] ? ns_capable+0x84/0xe0 [ 315.222234][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.222264][ T6901] ? path_mount+0x647/0x1050 [ 315.222298][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.222328][ T6901] ? user_path_at+0xd4/0x160 [ 315.222365][ T6901] __se_sys_mount+0x31d/0x420 [ 315.222403][ T6901] ? __pfx___se_sys_mount+0x10/0x10 [ 315.222446][ T6901] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.222476][ T6901] ? __x64_sys_mount+0x20/0xc0 [ 315.222511][ T6901] do_syscall_64+0x166/0x520 [ 315.222540][ T6901] ? trace_irq_disable+0x3b/0x140 [ 315.222578][ T6901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.222611][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.222637][ T6901] RIP: 0033:0x7f532379fb19 [ 315.222661][ T6901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.222681][ T6901] RSP: 002b:00007f5324660028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 315.222708][ T6901] RAX: ffffffffffffffda RBX: 00007f5323a25fa0 RCX: 00007f532379fb19 [ 315.222727][ T6901] RDX: 00002000000007c0 RSI: 0000200000000780 RDI: 0000000000000000 [ 315.222745][ T6901] RBP: 00007f5323837b70 R08: 0000200000000800 R09: 0000000000000000 [ 315.222762][ T6901] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 315.222777][ T6901] R13: 00007f5323a26038 R14: 00007f5323a25fa0 R15: 00007ffdb887c6f8 [ 315.222819][ T6901] [ 315.289730][ T6799] rxe_eth0 speed is unknown, defaulting to 1000 [ 315.291263][ T6822] ip6tnl0 speed is unknown, defaulting to 1000 [ 316.931861][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.931923][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.087984][ T6799] ip6tnl0 speed is unknown, defaulting to 1000 [ 317.089469][ T6833] rxe_eth0 speed is unknown, defaulting to 1000 [ 317.403320][ T6743] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.403513][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.403660][ T6743] bridge_slave_0: entered allmulticast mode [ 317.418772][ T6743] bridge_slave_0: entered promiscuous mode [ 318.039487][ T6743] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.039625][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.039797][ T6743] bridge_slave_1: entered allmulticast mode [ 318.232716][ T6743] bridge_slave_1: entered promiscuous mode [ 318.823386][ T6743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.883850][ T6833] ip6tnl0 speed is unknown, defaulting to 1000 [ 318.888215][ T6743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.216482][ T6743] team0: Port device team_slave_0 added [ 319.221243][ T6743] team0: Port device team_slave_1 added [ 319.696316][ T6743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.696336][ T6743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.696366][ T6743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.295735][ T6743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.295753][ T6743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.295782][ T6743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.135384][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.378417][ T6743] hsr_slave_0: entered promiscuous mode [ 325.379599][ T6743] hsr_slave_1: entered promiscuous mode [ 325.380458][ T6743] debugfs: 'hsr0' already exists in 'hsr' [ 325.380474][ T6743] Cannot create hsr debugfs directory [ 326.620212][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.620585][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.620926][ T6822] bridge_slave_0: entered allmulticast mode [ 326.659264][ T6822] bridge_slave_0: entered promiscuous mode [ 326.866199][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.866315][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.866494][ T6822] bridge_slave_1: entered allmulticast mode [ 326.911812][ T6822] bridge_slave_1: entered promiscuous mode [ 328.715378][ T6822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.393656][ T6992] loop4: detected capacity change from 0 to 128 [ 332.401158][ T6992] EXT4-fs (loop4): Test dummy encryption mode enabled [ 333.439179][ T6833] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.439292][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.439437][ T6833] bridge_slave_0: entered allmulticast mode [ 333.441353][ T6833] bridge_slave_0: entered promiscuous mode [ 333.443956][ T6833] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.444068][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.444205][ T6833] bridge_slave_1: entered allmulticast mode [ 333.446149][ T6833] bridge_slave_1: entered promiscuous mode [ 333.479110][ T6833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.685705][ T6992] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 334.685814][ T6992] System zones: 1-3, 19-19, 35-36 [ 334.691991][ T6992] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 334.692744][ T6992] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.693510][ T6822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.697068][ T6992] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib" [ 334.704056][ T6992] FAULT_INJECTION: forcing a failure. [ 334.704056][ T6992] name failslab, interval 1, probability 0, space 0, times 0 [ 334.704085][ T6992] CPU: 1 UID: 0 PID: 6992 Comm: syz.4.200 Not tainted syzkaller #0 PREEMPT(full) [ 334.704113][ T6992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 334.704127][ T6992] Call Trace: [ 334.704137][ T6992] [ 334.704147][ T6992] dump_stack_lvl+0xe8/0x150 [ 334.704194][ T6992] should_fail_ex+0x3eb/0x540 [ 334.704233][ T6992] should_failslab+0xa8/0x100 [ 334.704273][ T6992] ? __ext4_journal_start_sb+0x2bf/0x780 [ 334.704314][ T6992] kmem_cache_alloc_noprof+0x9c/0x600 [ 334.704345][ T6992] ? ext4_itable_unused_count+0x8e/0x100 [ 334.704383][ T6992] ? __ext4_journal_start_sb+0x2bf/0x780 [ 334.704424][ T6992] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.704461][ T6992] __ext4_journal_start_sb+0x2bf/0x780 [ 334.704508][ T6992] __ext4_new_inode+0x1310/0x3ed0 [ 334.704566][ T6992] ? __asan_memset+0x22/0x50 [ 334.704605][ T6992] ? __pfx___ext4_new_inode+0x10/0x10 [ 334.704650][ T6992] ? __pfx___dquot_initialize+0x10/0x10 [ 334.704687][ T6992] ? hook_capable+0x1c3/0x5e0 [ 334.704740][ T6992] ext4_mknod+0x22e/0x480 [ 334.704796][ T6992] ? __pfx_ext4_mknod+0x10/0x10 [ 334.704836][ T6992] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.704866][ T6992] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.704896][ T6992] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.704932][ T6992] ? security_inode_mknod+0xc7/0x370 [ 334.704966][ T6992] vfs_mknod+0x452/0x660 [ 334.705015][ T6992] filename_mknodat+0x3cb/0x680 [ 334.705062][ T6992] ? __pfx_filename_mknodat+0x10/0x10 [ 334.705104][ T6992] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.705134][ T6992] ? do_getname+0x151/0x250 [ 334.705166][ T6992] __se_sys_mknodat+0x3b/0x150 [ 334.705208][ T6992] do_syscall_64+0x166/0x520 [ 334.705238][ T6992] ? trace_irq_disable+0x3b/0x140 [ 334.705274][ T6992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.705308][ T6992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.705333][ T6992] RIP: 0033:0x7f532379fb19 [ 334.705356][ T6992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.705376][ T6992] RSP: 002b:00007f5324660028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 334.705401][ T6992] RAX: ffffffffffffffda RBX: 00007f5323a25fa0 RCX: 00007f532379fb19 [ 334.705420][ T6992] RDX: 00000000000021c0 RSI: 0000200000004dc0 RDI: ffffffffffffff9c [ 334.705438][ T6992] RBP: 00007f5323837b70 R08: 0000000000000000 R09: 0000000000000000 [ 334.705454][ T6992] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000000 [ 334.705470][ T6992] R13: 00007f5323a26038 R14: 00007f5323a25fa0 R15: 00007ffdb887c6f8 [ 334.705511][ T6992] [ 334.705523][ T6992] EXT4-fs error (device loop4) in __ext4_new_inode:1096: Out of memory [ 334.725589][ T6822] team0: Port device team_slave_0 added [ 334.728805][ T6822] team0: Port device team_slave_1 added [ 334.756572][ T5291] 8021q: adding VLAN 0 to HW filter on device eth4 [ 335.618730][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.618848][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.618990][ T6799] bridge_slave_0: entered allmulticast mode [ 335.622325][ T6799] bridge_slave_0: entered promiscuous mode [ 335.628016][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.628127][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.628320][ T6799] bridge_slave_1: entered allmulticast mode [ 335.631678][ T6799] bridge_slave_1: entered promiscuous mode [ 335.966969][ T5633] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 337.082269][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.087950][ T6833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.130657][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.130675][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.130704][ T6822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.132774][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.132788][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.132817][ T6822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.811256][ T6833] team0: Port device team_slave_0 added [ 339.815293][ T6833] team0: Port device team_slave_1 added [ 339.841312][ T6799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.193615][ T6833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.193635][ T6833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.193665][ T6833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.197690][ T6833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.197705][ T6833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.197734][ T6833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.380827][ T6799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.476797][ T6799] team0: Port device team_slave_0 added [ 342.488818][ T6799] team0: Port device team_slave_1 added [ 342.580837][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.580856][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.580885][ T6799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.585918][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.585933][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.585961][ T6799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.742044][ T6799] hsr_slave_0: entered promiscuous mode [ 342.743202][ T6799] hsr_slave_1: entered promiscuous mode [ 342.747266][ T6799] debugfs: 'hsr0' already exists in 'hsr' [ 342.747284][ T6799] Cannot create hsr debugfs directory [ 343.210089][ T6727] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 343.343348][ T6727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.394202][ T5649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.402522][ T5649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.403071][ T5649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.404071][ T5649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.438151][ T6822] hsr_slave_0: entered promiscuous mode [ 345.439268][ T6822] hsr_slave_1: entered promiscuous mode [ 345.440031][ T6822] debugfs: 'hsr0' already exists in 'hsr' [ 345.440047][ T6822] Cannot create hsr debugfs directory [ 345.541973][ T5649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 347.892430][ T5649] Bluetooth: hci3: command tx timeout [ 347.901709][ T5649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.925714][ T5649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.933825][ T5649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.963247][ T5649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.966427][ T5649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.921788][ T5649] Bluetooth: hci3: command tx timeout [ 350.065632][ T5652] Bluetooth: hci0: command tx timeout [ 350.124092][ T6833] hsr_slave_0: entered promiscuous mode [ 350.142727][ T6833] hsr_slave_1: entered promiscuous mode [ 350.150792][ T6833] debugfs: 'hsr0' already exists in 'hsr' [ 350.150810][ T6833] Cannot create hsr debugfs directory [ 352.070473][ T5652] Bluetooth: hci3: command tx timeout [ 352.122740][ T31] bridge_slave_1: left allmulticast mode [ 352.122765][ T31] bridge_slave_1: left promiscuous mode [ 352.122988][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.125403][ T31] bridge_slave_0: left allmulticast mode [ 352.125425][ T31] bridge_slave_0: left promiscuous mode [ 352.125872][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.592593][ T5652] Bluetooth: hci0: command tx timeout [ 353.159815][ T31] bridge_slave_1: left allmulticast mode [ 353.159847][ T31] bridge_slave_1: left promiscuous mode [ 353.160039][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.166726][ T31] bridge_slave_0: left allmulticast mode [ 353.166747][ T31] bridge_slave_0: left promiscuous mode [ 353.200138][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.219655][ T31] bridge_slave_1: left allmulticast mode [ 353.219680][ T31] bridge_slave_1: left promiscuous mode [ 353.219878][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.223268][ T31] bridge_slave_0: left allmulticast mode [ 353.223289][ T31] bridge_slave_0: left promiscuous mode [ 353.223467][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.150625][ T5652] Bluetooth: hci3: command tx timeout [ 354.165225][ T31] bridge_slave_1: left allmulticast mode [ 354.165250][ T31] bridge_slave_1: left promiscuous mode [ 354.165470][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.170706][ T31] bridge_slave_0: left allmulticast mode [ 354.170728][ T31] bridge_slave_0: left promiscuous mode [ 354.170930][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.654836][ T5652] Bluetooth: hci0: command tx timeout [ 355.342487][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.347233][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.425226][ T31] bond0 (unregistering): Released all slaves [ 356.493270][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.504017][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.526983][ T31] bond0 (unregistering): Released all slaves [ 356.704872][ T5652] Bluetooth: hci0: command tx timeout [ 358.339547][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.342824][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.372907][ T31] bond0 (unregistering): Released all slaves [ 358.404291][ T5649] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 358.411020][ T5649] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 358.411543][ T5649] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 358.412504][ T5649] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 358.413256][ T5649] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.077784][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.080639][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.082351][ T31] bond0 (unregistering): Released all slaves [ 360.989625][ T5649] Bluetooth: hci7: command tx timeout [ 362.301558][ T5652] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 362.304723][ T5652] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 362.320663][ T5652] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 362.329470][ T5652] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 362.332882][ T5652] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 363.465354][ T5649] Bluetooth: hci7: command tx timeout [ 365.002425][ T5649] Bluetooth: hci8: command tx timeout [ 365.811167][ T5652] Bluetooth: hci7: command tx timeout [ 365.884167][ T7114] FAULT_INJECTION: forcing a failure. [ 365.884167][ T7114] name failslab, interval 1, probability 0, space 0, times 0 [ 365.884200][ T7114] CPU: 1 UID: 0 PID: 7114 Comm: syz.4.208 Not tainted syzkaller #0 PREEMPT(full) [ 365.884227][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 365.884242][ T7114] Call Trace: [ 365.884252][ T7114] [ 365.884262][ T7114] dump_stack_lvl+0xe8/0x150 [ 365.884310][ T7114] should_fail_ex+0x3eb/0x540 [ 365.884345][ T7114] ? do_kmem_cache_create+0x180/0x980 [ 365.884384][ T7114] should_failslab+0xa8/0x100 [ 365.884426][ T7114] ? do_kmem_cache_create+0x180/0x980 [ 365.884463][ T7114] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 365.884504][ T7114] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 365.884537][ T7114] ? do_kmem_cache_create+0x180/0x980 [ 365.884576][ T7114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.884613][ T7114] do_kmem_cache_create+0x180/0x980 [ 365.884662][ T7114] __kmem_cache_create_args+0x328/0x470 [ 365.884708][ T7114] bioset_init+0x3c5/0x7e0 [ 365.884748][ T7114] ? __pfx_bioset_init+0x10/0x10 [ 365.884794][ T7114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.884824][ T7114] ? percpu_ref_init+0x215/0x350 [ 365.884864][ T7114] ? __pfx_no_op+0x10/0x10 [ 365.884903][ T7114] mddev_init+0x13b/0x700 [ 365.884941][ T7114] md_alloc+0xb8/0xf40 [ 365.884987][ T7114] md_alloc_and_put+0x1a/0x1f0 [ 365.885021][ T7114] add_named_array+0x240/0x350 [ 365.885052][ T7114] ? __pfx___mutex_lock+0x10/0x10 [ 365.885085][ T7114] ? __pfx_add_named_array+0x10/0x10 [ 365.885122][ T7114] ? sysfs_file_kobj+0x1a/0x230 [ 365.885163][ T7114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.885203][ T7114] param_attr_store+0x214/0x310 [ 365.885248][ T7114] ? __pfx_param_attr_store+0x10/0x10 [ 365.885287][ T7114] ? __pfx_sysfs_kf_write+0x10/0x10 [ 365.885322][ T7114] module_attr_store+0x65/0x90 [ 365.885365][ T7114] kernfs_fop_write_iter+0x3a4/0x540 [ 365.885405][ T7114] vfs_write+0x612/0xba0 [ 365.885453][ T7114] ? __pfx_vfs_write+0x10/0x10 [ 365.885491][ T7114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.885525][ T7114] ? __fget_files+0x3a2/0x420 [ 365.885557][ T7114] ? __fget_files+0x2a/0x420 [ 365.885593][ T7114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.885623][ T7114] ? fdget+0x1ac/0x250 [ 365.885657][ T7114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.885693][ T7114] ksys_write+0x150/0x270 [ 365.885732][ T7114] ? __pfx_ksys_write+0x10/0x10 [ 365.885784][ T7114] do_syscall_64+0x166/0x520 [ 365.885813][ T7114] ? trace_irq_disable+0x3b/0x140 [ 365.885849][ T7114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.885883][ T7114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.885909][ T7114] RIP: 0033:0x7f532379fb19 [ 365.885932][ T7114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.885952][ T7114] RSP: 002b:00007f5324660028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 365.885978][ T7114] RAX: ffffffffffffffda RBX: 00007f5323a25fa0 RCX: 00007f532379fb19 [ 365.885997][ T7114] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: 0000000000000007 [ 365.886013][ T7114] RBP: 00007f5323837b70 R08: 0000000000000000 R09: 0000000000000000 [ 365.886029][ T7114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.886044][ T7114] R13: 00007f5323a26038 R14: 00007f5323a25fa0 R15: 00007ffdb887c6f8 [ 365.886087][ T7114] [ 365.886216][ T7114] __kmem_cache_create_args(bio-184) failed with error -22 [ 365.886235][ T7114] CPU: 1 UID: 0 PID: 7114 Comm: syz.4.208 Not tainted syzkaller #0 PREEMPT(full) [ 365.886261][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 365.886275][ T7114] Call Trace: [ 365.886284][ T7114] [ 365.886293][ T7114] dump_stack_lvl+0xe8/0x150 [ 365.886337][ T7114] __kmem_cache_create_args+0x3fe/0x470 [ 365.886381][ T7114] bioset_init+0x3c5/0x7e0 [ 365.886418][ T7114] ? __pfx_bioset_init+0x10/0x10 [ 365.886464][ T7114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.886494][ T7114] ? percpu_ref_init+0x215/0x350 [ 365.886539][ T7114] ? __pfx_no_op+0x10/0x10 [ 365.886576][ T7114] mddev_init+0x13b/0x700 [ 365.886615][ T7114] md_alloc+0xb8/0xf40 [ 365.886661][ T7114] md_alloc_and_put+0x1a/0x1f0 [ 365.886695][ T7114] add_named_array+0x240/0x350 [ 365.886727][ T7114] ? __pfx___mutex_lock+0x10/0x10 [ 365.886759][ T7114] ? __pfx_add_named_array+0x10/0x10 [ 365.886796][ T7114] ? sysfs_file_kobj+0x1a/0x230 [ 365.886836][ T7114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.886876][ T7114] param_attr_store+0x214/0x310 [ 365.886920][ T7114] ? __pfx_param_attr_store+0x10/0x10 [ 365.886957][ T7114] ? __pfx_sysfs_kf_write+0x10/0x10 [ 365.886989][ T7114] module_attr_store+0x65/0x90 [ 365.887029][ T7114] kernfs_fop_write_iter+0x3a4/0x540 [ 365.887066][ T7114] vfs_write+0x612/0xba0 [ 365.887109][ T7114] ? __pfx_vfs_write+0x10/0x10 [ 365.887146][ T7114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.887175][ T7114] ? __fget_files+0x3a2/0x420 [ 365.887204][ T7114] ? __fget_files+0x2a/0x420 [ 365.887240][ T7114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.887269][ T7114] ? fdget+0x1ac/0x250 [ 365.887303][ T7114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.887338][ T7114] ksys_write+0x150/0x270 [ 365.887376][ T7114] ? __pfx_ksys_write+0x10/0x10 [ 365.887427][ T7114] do_syscall_64+0x166/0x520 [ 365.887455][ T7114] ? trace_irq_disable+0x3b/0x140 [ 365.887490][ T7114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.887528][ T7114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.887553][ T7114] RIP: 0033:0x7f532379fb19 [ 365.887575][ T7114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.887594][ T7114] RSP: 002b:00007f5324660028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 365.887618][ T7114] RAX: ffffffffffffffda RBX: 00007f5323a25fa0 RCX: 00007f532379fb19 [ 365.887636][ T7114] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: 0000000000000007 [ 365.887652][ T7114] RBP: 00007f5323837b70 R08: 0000000000000000 R09: 0000000000000000 [ 365.887667][ T7114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.887682][ T7114] R13: 00007f5323a26038 R14: 00007f5323a25fa0 R15: 00007ffdb887c6f8 [ 365.887724][ T7114] [ 365.888256][ T7114] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 367.345335][ T5649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.347672][ T5649] Bluetooth: hci8: command tx timeout [ 367.364962][ T5649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.392383][ T5647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.396150][ T5647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.396834][ T5647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.825891][ T5647] Bluetooth: hci7: command tx timeout [ 369.456052][ T5652] Bluetooth: hci1: command tx timeout [ 369.456607][ T5652] Bluetooth: hci8: command tx timeout [ 371.212301][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 371.534847][ T5647] Bluetooth: hci8: command tx timeout [ 371.534886][ T5647] Bluetooth: hci1: command tx timeout [ 372.060437][ T7051] rxe_eth0 speed is unknown, defaulting to 1000 [ 372.987315][ T7051] ip6tnl0 speed is unknown, defaulting to 1000 [ 373.048958][ T7082] rxe_eth0 speed is unknown, defaulting to 1000 [ 374.000957][ T5649] Bluetooth: hci1: command tx timeout [ 375.336128][ T7031] rxe_eth0 speed is unknown, defaulting to 1000 [ 375.834027][ T7095] rxe_eth0 speed is unknown, defaulting to 1000 [ 376.208197][ T5649] Bluetooth: hci1: command tx timeout [ 376.328039][ T7082] ip6tnl0 speed is unknown, defaulting to 1000 [ 378.058386][ T7095] ip6tnl0 speed is unknown, defaulting to 1000 [ 378.059851][ T7116] rxe_eth0 speed is unknown, defaulting to 1000 [ 378.488149][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.488209][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.659303][ T5291] 8021q: adding VLAN 0 to HW filter on device eth6 [ 381.633263][ T7031] ip6tnl0 speed is unknown, defaulting to 1000 [ 385.062407][ T7051] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.064126][ T7051] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.064272][ T7051] bridge_slave_0: entered allmulticast mode [ 385.090803][ T7051] bridge_slave_0: entered promiscuous mode [ 385.143060][ T7051] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.143215][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.143356][ T7051] bridge_slave_1: entered allmulticast mode [ 385.166911][ T7051] bridge_slave_1: entered promiscuous mode [ 385.578911][ T7051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.600151][ T7051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.932115][ T7194] loop4: detected capacity change from 0 to 4096 [ 386.036857][ T7194] EXT4-fs: Ignoring removed nobh option [ 386.050673][ T7194] EXT4-fs: Ignoring removed bh option [ 387.594413][ T7194] EXT4-fs (loop4): Test dummy encryption mode enabled [ 387.898759][ T7082] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.900429][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.900595][ T7082] bridge_slave_0: entered allmulticast mode [ 387.935693][ T7082] bridge_slave_0: entered promiscuous mode [ 387.959845][ T7051] team0: Port device team_slave_0 added [ 387.960184][ T7082] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.960294][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.960468][ T7082] bridge_slave_1: entered allmulticast mode [ 387.999889][ T7082] bridge_slave_1: entered promiscuous mode [ 388.029176][ T7051] team0: Port device team_slave_1 added [ 388.029225][ T7116] ip6tnl0 speed is unknown, defaulting to 1000 [ 388.233052][ T7194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.560288][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.606182][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.606199][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.606231][ T7051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.608344][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.608359][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.608389][ T7051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.669491][ T5291] 8021q: adding VLAN 0 to HW filter on device eth5 [ 392.026967][ T7082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.137144][ T7082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.380085][ T7082] team0: Port device team_slave_0 added [ 392.461746][ T7051] hsr_slave_0: entered promiscuous mode [ 392.477732][ T7051] hsr_slave_1: entered promiscuous mode [ 392.483038][ T7051] debugfs: 'hsr0' already exists in 'hsr' [ 392.483063][ T7051] Cannot create hsr debugfs directory [ 392.659041][ T7082] team0: Port device team_slave_1 added [ 393.249891][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.249913][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.249944][ T7082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.902924][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.902946][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.902977][ T7082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.950028][ T7082] hsr_slave_0: entered promiscuous mode [ 400.951128][ T7082] hsr_slave_1: entered promiscuous mode [ 400.951939][ T7082] debugfs: 'hsr0' already exists in 'hsr' [ 400.951955][ T7082] Cannot create hsr debugfs directory [ 402.743825][ T31] hsr_slave_0: left promiscuous mode [ 402.786513][ T31] hsr_slave_1: left promiscuous mode [ 402.789037][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.790443][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.096345][ T31] hsr_slave_0: left promiscuous mode [ 404.097210][ T31] hsr_slave_1: left promiscuous mode [ 404.098194][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.098972][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.141770][ T31] hsr_slave_0: left promiscuous mode [ 404.142626][ T31] hsr_slave_1: left promiscuous mode [ 404.143617][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.143638][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.144551][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.144571][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.129712][ T31] hsr_slave_0: left promiscuous mode [ 405.130535][ T31] hsr_slave_1: left promiscuous mode [ 405.131596][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.131616][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.133370][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.133390][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.170805][ T31] veth1_macvtap: left promiscuous mode [ 405.170841][ T31] veth0_macvtap: left promiscuous mode [ 405.170988][ T31] veth1_vlan: left promiscuous mode [ 405.171062][ T31] veth0_vlan: left promiscuous mode [ 405.172194][ T5647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 405.173443][ T5647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.173961][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 405.174889][ T5647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 405.175506][ T5647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.123203][ T31] veth1_macvtap: left promiscuous mode [ 406.123278][ T31] veth0_macvtap: left promiscuous mode [ 406.123402][ T31] veth1_vlan: left promiscuous mode [ 406.123474][ T31] veth0_vlan: left promiscuous mode [ 407.369988][ T5649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.373551][ T5649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 407.391513][ T5649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 407.401262][ T5649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 407.410062][ T5649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 408.435036][ T5647] Bluetooth: hci2: command tx timeout [ 409.505409][ T5647] Bluetooth: hci4: command tx timeout [ 410.547486][ T5647] Bluetooth: hci2: command tx timeout [ 410.553724][ T31] team0 (unregistering): Port device team_slave_1 removed [ 410.578375][ T31] team0 (unregistering): Port device team_slave_0 removed [ 411.585155][ T5647] Bluetooth: hci4: command tx timeout [ 411.778973][ T31] team0 (unregistering): Port device team_slave_1 removed [ 411.792685][ T31] team0 (unregistering): Port device team_slave_0 removed [ 412.624815][ T5647] Bluetooth: hci2: command tx timeout [ 412.800827][ T31] team0 (unregistering): Port device team_slave_1 removed [ 412.812698][ T31] team0 (unregistering): Port device team_slave_0 removed [ 413.664801][ T5647] Bluetooth: hci4: command tx timeout [ 414.192691][ T5649] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 414.194182][ T5649] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 414.199252][ T5649] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 414.200271][ T5649] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 414.200929][ T5649] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 414.704943][ T5649] Bluetooth: hci2: command tx timeout [ 415.319223][ T31] team0 (unregistering): Port device team_slave_1 removed [ 415.343262][ T31] team0 (unregistering): Port device team_slave_0 removed [ 415.745060][ T5649] Bluetooth: hci4: command tx timeout [ 416.233114][ T5649] Bluetooth: hci6: command tx timeout [ 417.113702][ T7082] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 418.686311][ T5649] Bluetooth: hci6: command tx timeout [ 418.759697][ T7082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 419.589018][ T7095] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.589142][ T7095] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.589286][ T7095] bridge_slave_0: entered allmulticast mode [ 419.597073][ T7095] bridge_slave_0: entered promiscuous mode [ 421.305317][ T5649] Bluetooth: hci6: command tx timeout [ 421.309080][ T5647] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 421.310332][ T5647] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 421.310900][ T5647] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 421.311842][ T5647] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 421.312447][ T5647] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 422.295216][ T7095] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.295343][ T7095] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.295493][ T7095] bridge_slave_1: entered allmulticast mode [ 422.301235][ T7095] bridge_slave_1: entered promiscuous mode [ 423.804549][ T5652] Bluetooth: hci6: command tx timeout [ 424.356026][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.356225][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.356666][ T7116] bridge_slave_0: entered allmulticast mode [ 424.396864][ T7116] bridge_slave_0: entered promiscuous mode [ 424.426351][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.426464][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.426897][ T7116] bridge_slave_1: entered allmulticast mode [ 424.462321][ T7116] bridge_slave_1: entered promiscuous mode [ 424.614334][ T5649] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 424.627363][ T5649] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 424.627913][ T5649] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 424.642079][ T5649] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 424.657906][ T5649] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 424.738569][ T7116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.742174][ T7116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.772541][ T7116] team0: Port device team_slave_0 added [ 426.822810][ T7116] team0: Port device team_slave_1 added [ 427.784280][ T5647] Bluetooth: hci9: command tx timeout [ 427.853659][ T7273] rxe_eth0 speed is unknown, defaulting to 1000 [ 428.763392][ T5647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 428.860959][ T5647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.940450][ T5647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.086685][ T5647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.132353][ T5647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.826359][ T5647] Bluetooth: hci9: command tx timeout [ 430.625033][ T5647] Bluetooth: hci10: command tx timeout [ 431.184870][ T5647] Bluetooth: hci0: command tx timeout [ 431.735907][ T7273] ip6tnl0 speed is unknown, defaulting to 1000 [ 431.742553][ T7260] rxe_eth0 speed is unknown, defaulting to 1000 [ 431.905561][ T5647] Bluetooth: hci9: command tx timeout [ 432.705070][ T5647] Bluetooth: hci10: command tx timeout [ 432.958060][ T7266] rxe_eth0 speed is unknown, defaulting to 1000 [ 433.910093][ T5647] Bluetooth: hci0: command tx timeout [ 433.988987][ T5647] Bluetooth: hci9: command tx timeout [ 434.784836][ T5647] Bluetooth: hci10: command tx timeout [ 434.851738][ T7260] ip6tnl0 speed is unknown, defaulting to 1000 [ 435.777975][ T7293] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.674975][ T7266] ip6tnl0 speed is unknown, defaulting to 1000 [ 436.734353][ T5647] Bluetooth: hci0: command tx timeout [ 436.868140][ T5647] Bluetooth: hci10: command tx timeout [ 438.038962][ T7293] ip6tnl0 speed is unknown, defaulting to 1000 [ 438.266605][ T7333] rxe_eth0 speed is unknown, defaulting to 1000 [ 438.330842][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.331027][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.331189][ T7273] bridge_slave_0: entered allmulticast mode [ 438.375638][ T7273] bridge_slave_0: entered promiscuous mode [ 438.396063][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.396198][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.396358][ T7273] bridge_slave_1: entered allmulticast mode [ 438.428271][ T7273] bridge_slave_1: entered promiscuous mode [ 438.701775][ T7273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.725731][ T7273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.785678][ T5647] Bluetooth: hci0: command tx timeout [ 439.052218][ T7273] team0: Port device team_slave_0 added [ 440.253308][ T7273] team0: Port device team_slave_1 added [ 440.267322][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.267393][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.299488][ T7333] ip6tnl0 speed is unknown, defaulting to 1000 [ 441.428702][ T7321] rxe_eth0 speed is unknown, defaulting to 1000 [ 442.532277][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.532296][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.532327][ T7273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.534459][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.534475][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.534506][ T7273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.589232][ T7273] hsr_slave_0: entered promiscuous mode [ 442.590463][ T7273] hsr_slave_1: entered promiscuous mode [ 442.591369][ T7273] debugfs: 'hsr0' already exists in 'hsr' [ 442.591387][ T7273] Cannot create hsr debugfs directory [ 443.791637][ T7321] ip6tnl0 speed is unknown, defaulting to 1000 [ 447.022116][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.023784][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.023935][ T7260] bridge_slave_0: entered allmulticast mode [ 447.048225][ T7260] bridge_slave_0: entered promiscuous mode [ 447.132353][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.132506][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.132674][ T7260] bridge_slave_1: entered allmulticast mode [ 447.157023][ T7260] bridge_slave_1: entered promiscuous mode [ 447.315450][ T7260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.482345][ T7260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.650538][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.650726][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.650875][ T7266] bridge_slave_0: entered allmulticast mode [ 447.676822][ T7266] bridge_slave_0: entered promiscuous mode [ 447.687853][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.687965][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.688115][ T7266] bridge_slave_1: entered allmulticast mode [ 447.693033][ T7266] bridge_slave_1: entered promiscuous mode [ 447.861827][ T7260] team0: Port device team_slave_0 added [ 448.007164][ T7260] team0: Port device team_slave_1 added [ 448.033309][ T7266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.198318][ T7266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.251169][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.251190][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.251220][ T7260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.332177][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 451.332755][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.332863][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.333105][ T7293] bridge_slave_0: entered allmulticast mode [ 451.336274][ T7293] bridge_slave_0: entered promiscuous mode [ 451.340205][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.340220][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.340253][ T7260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.340877][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.340976][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.341110][ T7293] bridge_slave_1: entered allmulticast mode [ 451.342769][ T7293] bridge_slave_1: entered promiscuous mode [ 451.346786][ T7266] team0: Port device team_slave_0 added [ 451.349698][ T7266] team0: Port device team_slave_1 added [ 452.433069][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.433089][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.433117][ T7266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.435232][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.435247][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.435274][ T7266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.659479][ T7260] hsr_slave_0: entered promiscuous mode [ 452.662207][ T7260] hsr_slave_1: entered promiscuous mode [ 452.664564][ T7260] debugfs: 'hsr0' already exists in 'hsr' [ 452.664581][ T7260] Cannot create hsr debugfs directory [ 453.530750][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.548867][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.612111][ T7333] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.612305][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.612757][ T7333] bridge_slave_0: entered allmulticast mode [ 454.642586][ T7333] bridge_slave_0: entered promiscuous mode [ 454.701917][ T7293] team0: Port device team_slave_0 added [ 454.797497][ T7333] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.797889][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.798042][ T7333] bridge_slave_1: entered allmulticast mode [ 454.825158][ T7333] bridge_slave_1: entered promiscuous mode [ 455.750321][ T7293] team0: Port device team_slave_1 added [ 455.787582][ T7266] hsr_slave_0: entered promiscuous mode [ 455.788815][ T7266] hsr_slave_1: entered promiscuous mode [ 455.789690][ T7266] debugfs: 'hsr0' already exists in 'hsr' [ 455.789708][ T7266] Cannot create hsr debugfs directory [ 455.956739][ T7333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.994490][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.994507][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.994538][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.143113][ T7333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.188313][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.188329][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.188361][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.809619][ T7333] team0: Port device team_slave_0 added [ 457.043867][ T7333] team0: Port device team_slave_1 added [ 457.218487][ T7321] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.218713][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.218880][ T7321] bridge_slave_0: entered allmulticast mode [ 457.222428][ T7321] bridge_slave_0: entered promiscuous mode [ 458.392724][ T7293] hsr_slave_0: entered promiscuous mode [ 458.401796][ T7293] hsr_slave_1: entered promiscuous mode [ 458.410532][ T7293] debugfs: 'hsr0' already exists in 'hsr' [ 458.410550][ T7293] Cannot create hsr debugfs directory [ 458.411441][ T7333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.411456][ T7333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.411487][ T7333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.412348][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.412505][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.412655][ T7321] bridge_slave_1: entered allmulticast mode [ 458.473955][ T7321] bridge_slave_1: entered promiscuous mode [ 459.593557][ T7333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.593577][ T7333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.593610][ T7333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.723782][ T7333] hsr_slave_0: entered promiscuous mode [ 460.733129][ T7333] hsr_slave_1: entered promiscuous mode [ 460.733979][ T7333] debugfs: 'hsr0' already exists in 'hsr' [ 460.733996][ T7333] Cannot create hsr debugfs directory [ 460.849864][ T7321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.869942][ T7321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.053271][ T7321] team0: Port device team_slave_0 added [ 461.129407][ T7321] team0: Port device team_slave_1 added [ 461.262450][ T7321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.262471][ T7321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.262502][ T7321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.402589][ T7321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.402609][ T7321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.402641][ T7321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.629671][ T7321] hsr_slave_0: entered promiscuous mode [ 461.634523][ T7321] hsr_slave_1: entered promiscuous mode [ 461.648608][ T7321] debugfs: 'hsr0' already exists in 'hsr' [ 461.648626][ T7321] Cannot create hsr debugfs directory [ 462.047100][ T7273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 463.092934][ T7273] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.106247][ T7273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 463.129800][ T7273] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.146084][ T7273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 463.167430][ T7273] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.178149][ T7273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 464.182807][ T7273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.358419][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.406470][ T7273] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.429001][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.429118][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.459043][ T3371] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.459149][ T3371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.920085][ T5649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 467.921088][ T5649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 467.921632][ T5649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 467.922570][ T5649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 467.923238][ T5649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 468.240887][ T7273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.085241][ T7273] veth0_vlan: entered promiscuous mode [ 469.103044][ T7273] veth1_vlan: entered promiscuous mode [ 469.135622][ T7273] veth0_macvtap: entered promiscuous mode [ 469.140227][ T7273] veth1_macvtap: entered promiscuous mode [ 470.109955][ T5649] Bluetooth: hci1: command tx timeout [ 470.128566][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.231617][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.307635][ T5647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 471.308590][ T5647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 471.309128][ T5647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 471.310098][ T5647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 471.310726][ T5647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 472.248406][ T3371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.248493][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.248538][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.248581][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.249120][ T5649] Bluetooth: hci1: command tx timeout [ 473.501935][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.501956][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.482604][ T5649] Bluetooth: hci3: command tx timeout [ 474.483214][ T5649] Bluetooth: hci1: command tx timeout [ 475.697266][ T7494] rxe_eth0 speed is unknown, defaulting to 1000 [ 475.860755][ T5649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 475.862699][ T5649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 475.864185][ T5649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 475.888975][ T5649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 475.889643][ T5649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 476.216143][ T7494] ip6tnl0 speed is unknown, defaulting to 1000 [ 476.685120][ T5649] Bluetooth: hci1: command tx timeout [ 476.685162][ T5649] Bluetooth: hci3: command tx timeout [ 477.406974][ T7519] rxe_eth0 speed is unknown, defaulting to 1000 [ 477.984860][ T5647] Bluetooth: hci5: command tx timeout [ 478.363666][ T7531] rxe_eth0 speed is unknown, defaulting to 1000 [ 478.705086][ T5647] Bluetooth: hci3: command tx timeout [ 479.479331][ T7519] ip6tnl0 speed is unknown, defaulting to 1000 [ 479.646150][ T7494] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.646268][ T7494] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.646420][ T7494] bridge_slave_0: entered allmulticast mode [ 479.651526][ T7494] bridge_slave_0: entered promiscuous mode [ 479.692486][ T7494] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.694150][ T7494] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.694302][ T7494] bridge_slave_1: entered allmulticast mode [ 479.724530][ T7494] bridge_slave_1: entered promiscuous mode [ 479.851340][ T7494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.876824][ T7494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.989735][ T7494] team0: Port device team_slave_0 added [ 480.007129][ T7494] team0: Port device team_slave_1 added [ 480.065078][ T5647] Bluetooth: hci5: command tx timeout [ 480.123146][ T7494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.123161][ T7494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.123192][ T7494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.183408][ T7494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.183424][ T7494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.183455][ T7494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.428089][ T7494] hsr_slave_0: entered promiscuous mode [ 480.430808][ T7494] hsr_slave_1: entered promiscuous mode [ 480.447728][ T7494] debugfs: 'hsr0' already exists in 'hsr' [ 480.447746][ T7494] Cannot create hsr debugfs directory [ 480.483980][ T7531] ip6tnl0 speed is unknown, defaulting to 1000 [ 480.784911][ T5647] Bluetooth: hci3: command tx timeout [ 482.715507][ T5647] Bluetooth: hci5: command tx timeout [ 483.416431][ T7519] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.416618][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.416784][ T7519] bridge_slave_0: entered allmulticast mode [ 483.418741][ T7519] bridge_slave_0: entered promiscuous mode [ 483.448377][ T7519] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.448577][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.448758][ T7519] bridge_slave_1: entered allmulticast mode [ 483.450719][ T7519] bridge_slave_1: entered promiscuous mode [ 483.519971][ T7519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.524365][ T7519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.576089][ T7519] team0: Port device team_slave_0 added [ 483.579541][ T7519] team0: Port device team_slave_1 added [ 483.639816][ T7519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.639834][ T7519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.639866][ T7519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.642072][ T7519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.642088][ T7519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.642118][ T7519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.816050][ T7519] hsr_slave_0: entered promiscuous mode [ 483.817303][ T7519] hsr_slave_1: entered promiscuous mode [ 483.818327][ T7519] debugfs: 'hsr0' already exists in 'hsr' [ 483.818362][ T7519] Cannot create hsr debugfs directory [ 484.538275][ T5649] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 484.539798][ T5649] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 484.540305][ T5649] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 484.541458][ T5649] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 484.542100][ T5649] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 485.991184][ T5649] Bluetooth: hci5: command tx timeout [ 487.175776][ T5647] Bluetooth: hci7: command tx timeout [ 487.203847][ T5647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 487.226219][ T5647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 487.227567][ T5647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 487.232842][ T5647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 487.269242][ T5647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 489.373453][ T5647] Bluetooth: hci7: command tx timeout [ 489.373527][ T5647] Bluetooth: hci6: command tx timeout [ 492.372244][ T5649] Bluetooth: hci6: command tx timeout [ 492.372286][ T5649] Bluetooth: hci7: command tx timeout [ 492.394471][ T7531] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.394584][ T7531] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.394872][ T7531] bridge_slave_0: entered allmulticast mode [ 492.418172][ T7531] bridge_slave_0: entered promiscuous mode [ 493.637516][ T5649] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 493.828250][ T5649] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 493.828971][ T5649] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 493.829963][ T5649] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 493.830574][ T5649] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 494.821097][ T5647] Bluetooth: hci7: command tx timeout [ 494.821134][ T5647] Bluetooth: hci6: command tx timeout [ 494.855256][ T7531] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.855368][ T7531] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.855560][ T7531] bridge_slave_1: entered allmulticast mode [ 494.857546][ T7531] bridge_slave_1: entered promiscuous mode [ 496.153263][ T7531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.207297][ T7575] rxe_eth0 speed is unknown, defaulting to 1000 [ 496.238950][ T7531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.385904][ T7531] team0: Port device team_slave_0 added [ 496.403624][ T7531] team0: Port device team_slave_1 added [ 496.538259][ T7531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.538279][ T7531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.538310][ T7531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.597711][ T7531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.597728][ T7531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.597760][ T7531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.877372][ T7531] hsr_slave_0: entered promiscuous mode [ 496.882025][ T7531] hsr_slave_1: entered promiscuous mode [ 496.899315][ T7531] debugfs: 'hsr0' already exists in 'hsr' [ 496.899333][ T7531] Cannot create hsr debugfs directory [ 496.945670][ T5649] Bluetooth: hci8: command tx timeout [ 497.460577][ T5649] Bluetooth: hci6: command tx timeout [ 497.477726][ T7575] ip6tnl0 speed is unknown, defaulting to 1000 [ 499.025942][ T5649] Bluetooth: hci8: command tx timeout [ 499.042373][ T7584] rxe_eth0 speed is unknown, defaulting to 1000 [ 499.697727][ T7584] ip6tnl0 speed is unknown, defaulting to 1000 [ 499.697778][ T7611] rxe_eth0 speed is unknown, defaulting to 1000 [ 500.817381][ T7611] ip6tnl0 speed is unknown, defaulting to 1000 [ 501.105315][ T5649] Bluetooth: hci8: command tx timeout [ 501.252327][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.252510][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.252684][ T7575] bridge_slave_0: entered allmulticast mode [ 501.282655][ T7575] bridge_slave_0: entered promiscuous mode [ 501.322265][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.322421][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.322575][ T7575] bridge_slave_1: entered allmulticast mode [ 501.358894][ T7575] bridge_slave_1: entered promiscuous mode [ 501.455537][ T7575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.478075][ T7575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.756856][ T7575] team0: Port device team_slave_0 added [ 502.770165][ T7575] team0: Port device team_slave_1 added [ 502.772362][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.772421][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.843352][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.843370][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.843401][ T7575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.846981][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.846998][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.847028][ T7575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.496575][ T5649] Bluetooth: hci8: command tx timeout [ 504.689187][ T7575] hsr_slave_0: entered promiscuous mode [ 504.694315][ T7575] hsr_slave_1: entered promiscuous mode [ 504.711639][ T7575] debugfs: 'hsr0' already exists in 'hsr' [ 504.711658][ T7575] Cannot create hsr debugfs directory [ 506.367724][ T7584] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.367917][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.368083][ T7584] bridge_slave_0: entered allmulticast mode [ 506.371577][ T7584] bridge_slave_0: entered promiscuous mode [ 506.406256][ T7584] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.406781][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.408761][ T7584] bridge_slave_1: entered allmulticast mode [ 506.412184][ T7584] bridge_slave_1: entered promiscuous mode [ 506.544307][ T7584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.571561][ T7584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.051863][ T7584] team0: Port device team_slave_0 added [ 508.110358][ T7584] team0: Port device team_slave_1 added [ 508.490271][ T7611] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.490462][ T7611] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.490647][ T7611] bridge_slave_0: entered allmulticast mode [ 508.515835][ T7611] bridge_slave_0: entered promiscuous mode [ 508.528833][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.529010][ T7611] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.529485][ T7611] bridge_slave_1: entered allmulticast mode [ 508.534488][ T7611] bridge_slave_1: entered promiscuous mode [ 508.640540][ T7611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.657881][ T7611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.752249][ T7611] team0: Port device team_slave_0 added [ 508.768665][ T7611] team0: Port device team_slave_1 added [ 508.848860][ T7611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.848877][ T7611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.848908][ T7611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.852789][ T7611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.852810][ T7611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.852841][ T7611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.053286][ T7611] hsr_slave_0: entered promiscuous mode [ 509.054424][ T7611] hsr_slave_1: entered promiscuous mode [ 509.071866][ T7611] debugfs: 'hsr0' already exists in 'hsr' [ 509.071884][ T7611] Cannot create hsr debugfs directory [ 511.678366][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.678387][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.678419][ T7584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.680826][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.680842][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.680872][ T7584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.729461][ T7584] hsr_slave_0: entered promiscuous mode [ 511.730550][ T7584] hsr_slave_1: entered promiscuous mode [ 511.731295][ T7584] debugfs: 'hsr0' already exists in 'hsr' [ 511.731318][ T7584] Cannot create hsr debugfs directory [ 524.877198][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.924258][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 526.443067][ T5291] 8021q: adding VLAN 0 to HW filter on device eth7 [ 527.009622][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 528.630031][ T5647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 528.630997][ T5647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 528.631511][ T5647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 528.643583][ T5647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 528.651669][ T5647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 528.654825][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.681684][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.599500][ T5647] Bluetooth: hci0: command tx timeout [ 533.686311][ T5647] Bluetooth: hci0: command tx timeout [ 534.583334][ T5647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 534.584099][ T5647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 534.584615][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 535.398671][ T5652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 535.538044][ T5652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 536.162597][ T5647] Bluetooth: hci0: command tx timeout [ 536.249715][ T5652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.250664][ T5652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.251214][ T5652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.252200][ T5652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.254441][ T5652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 537.806582][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.227929][ T5647] Bluetooth: hci2: command tx timeout [ 538.527463][ T7802] rxe_eth0 speed is unknown, defaulting to 1000 [ 538.699235][ T5647] Bluetooth: hci0: command tx timeout [ 539.079847][ T7802] ip6tnl0 speed is unknown, defaulting to 1000 [ 539.082473][ T7752] rxe_eth0 speed is unknown, defaulting to 1000 [ 539.106602][ T5647] Bluetooth: hci4: command tx timeout [ 539.965714][ T7752] ip6tnl0 speed is unknown, defaulting to 1000 [ 539.991215][ T7813] rxe_eth0 speed is unknown, defaulting to 1000 [ 540.306187][ T5647] Bluetooth: hci2: command tx timeout [ 541.017760][ T7813] ip6tnl0 speed is unknown, defaulting to 1000 [ 541.185715][ T5652] Bluetooth: hci4: command tx timeout [ 541.267343][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.267531][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.267696][ T7802] bridge_slave_0: entered allmulticast mode [ 542.304458][ T7802] bridge_slave_0: entered promiscuous mode [ 542.385828][ T5647] Bluetooth: hci2: command tx timeout [ 542.438461][ T7802] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.438575][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.438753][ T7802] bridge_slave_1: entered allmulticast mode [ 542.442840][ T7802] bridge_slave_1: entered promiscuous mode [ 542.612553][ T7802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.628893][ T7802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.290526][ T5647] Bluetooth: hci4: command tx timeout [ 543.394444][ T7802] team0: Port device team_slave_0 added [ 543.401063][ T7802] team0: Port device team_slave_1 added [ 543.472212][ T7802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.472232][ T7802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.472263][ T7802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.477416][ T7802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.477432][ T7802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.477462][ T7802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.676721][ T7802] hsr_slave_0: entered promiscuous mode [ 543.680243][ T7802] hsr_slave_1: entered promiscuous mode [ 543.683583][ T7802] debugfs: 'hsr0' already exists in 'hsr' [ 543.683600][ T7802] Cannot create hsr debugfs directory [ 544.467937][ T5652] Bluetooth: hci2: command tx timeout [ 545.356465][ T5652] Bluetooth: hci4: command tx timeout [ 546.341943][ T5652] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 546.374526][ T5652] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 546.382798][ T5652] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 546.383774][ T5652] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 546.402445][ T5652] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 547.033344][ T7752] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.033530][ T7752] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.033994][ T7752] bridge_slave_0: entered allmulticast mode [ 547.065029][ T7752] bridge_slave_0: entered promiscuous mode [ 547.138297][ T7752] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.138426][ T7752] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.138904][ T7752] bridge_slave_1: entered allmulticast mode [ 547.167141][ T7752] bridge_slave_1: entered promiscuous mode [ 547.321404][ T7752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.323062][ T7813] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.323239][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.323409][ T7813] bridge_slave_0: entered allmulticast mode [ 547.358933][ T7813] bridge_slave_0: entered promiscuous mode [ 547.371914][ T7752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.413735][ T7813] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.413944][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.414461][ T7813] bridge_slave_1: entered allmulticast mode [ 547.447455][ T7813] bridge_slave_1: entered promiscuous mode [ 547.554573][ T7752] team0: Port device team_slave_0 added [ 547.571840][ T7752] team0: Port device team_slave_1 added [ 548.713532][ T5649] Bluetooth: hci11: command tx timeout [ 548.955874][ T7888] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 548.958048][ T7888] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 548.958599][ T7888] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 548.959552][ T7888] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 548.960149][ T7888] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 549.025877][ T7888] Bluetooth: hci9: command 0x0406 tx timeout [ 549.946546][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.956388][ T7752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.956404][ T7752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.956432][ T7752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.958532][ T7752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.958547][ T7752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.958578][ T7752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.336513][ T7813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.361307][ T7813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.485026][ T7813] team0: Port device team_slave_0 added [ 550.494271][ T7813] team0: Port device team_slave_1 added [ 550.605002][ T7813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.605022][ T7813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.605054][ T7813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.611652][ T7813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.611668][ T7813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.611700][ T7813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.901799][ T7813] hsr_slave_0: entered promiscuous mode [ 550.914363][ T7813] hsr_slave_1: entered promiscuous mode [ 550.924356][ T7813] debugfs: 'hsr0' already exists in 'hsr' [ 550.924377][ T7813] Cannot create hsr debugfs directory [ 551.024980][ T5652] Bluetooth: hci12: command tx timeout [ 551.167109][ T7864] rxe_eth0 speed is unknown, defaulting to 1000 [ 551.197910][ T5652] Bluetooth: hci11: command tx timeout [ 551.354415][ T7752] hsr_slave_0: entered promiscuous mode [ 551.364493][ T7752] hsr_slave_1: entered promiscuous mode [ 551.379581][ T7752] debugfs: 'hsr0' already exists in 'hsr' [ 551.379599][ T7752] Cannot create hsr debugfs directory [ 552.638091][ T7864] ip6tnl0 speed is unknown, defaulting to 1000 [ 553.826309][ T7888] Bluetooth: hci12: command tx timeout [ 553.826348][ T7888] Bluetooth: hci11: command tx timeout [ 554.144898][ T5647] Bluetooth: hci10: command 0x0406 tx timeout [ 556.259386][ T5647] Bluetooth: hci11: command tx timeout [ 556.259423][ T5647] Bluetooth: hci12: command tx timeout [ 556.259895][ T5647] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 556.282887][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.315776][ T7888] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 556.317476][ T7888] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 556.318451][ T7888] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 556.319139][ T7888] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 557.763698][ T7887] rxe_eth0 speed is unknown, defaulting to 1000 [ 558.386251][ T5652] Bluetooth: hci13: command tx timeout [ 558.628011][ T5652] Bluetooth: hci12: command tx timeout [ 558.829005][ T7887] ip6tnl0 speed is unknown, defaulting to 1000 [ 559.088712][ T7912] rxe_eth0 speed is unknown, defaulting to 1000 [ 559.092074][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.092259][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.092731][ T7864] bridge_slave_0: entered allmulticast mode [ 559.142831][ T7864] bridge_slave_0: entered promiscuous mode [ 559.159842][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.161560][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.161741][ T7864] bridge_slave_1: entered allmulticast mode [ 559.204492][ T7864] bridge_slave_1: entered promiscuous mode [ 559.368703][ T7864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.395680][ T7864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.303708][ T7864] team0: Port device team_slave_0 added [ 560.333271][ T7912] ip6tnl0 speed is unknown, defaulting to 1000 [ 560.466108][ T5652] Bluetooth: hci13: command tx timeout [ 561.670557][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.710938][ T7864] team0: Port device team_slave_1 added [ 563.047694][ T5652] Bluetooth: hci13: command tx timeout [ 563.200709][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.200730][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.200761][ T7864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.296978][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.296997][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.297029][ T7864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.546962][ T7864] hsr_slave_0: entered promiscuous mode [ 563.551186][ T7864] hsr_slave_1: entered promiscuous mode [ 563.553519][ T7864] debugfs: 'hsr0' already exists in 'hsr' [ 563.553536][ T7864] Cannot create hsr debugfs directory [ 564.604068][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 565.104826][ T7888] Bluetooth: hci13: command tx timeout [ 565.324406][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.324597][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.324857][ T7887] bridge_slave_0: entered allmulticast mode [ 565.350491][ T7887] bridge_slave_0: entered promiscuous mode [ 565.411699][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.411927][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.412073][ T7887] bridge_slave_1: entered allmulticast mode [ 565.414151][ T7887] bridge_slave_1: entered promiscuous mode [ 565.573208][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.573393][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.573546][ T7912] bridge_slave_0: entered allmulticast mode [ 565.603076][ T7912] bridge_slave_0: entered promiscuous mode [ 565.661483][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.661661][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.661807][ T7912] bridge_slave_1: entered allmulticast mode [ 565.687553][ T7912] bridge_slave_1: entered promiscuous mode [ 565.704250][ T7887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.811473][ T7887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.837849][ T7912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.946164][ T7912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.953870][ T7887] team0: Port device team_slave_0 added [ 566.019780][ T7887] team0: Port device team_slave_1 added [ 566.137082][ T7912] team0: Port device team_slave_0 added [ 566.200569][ T7912] team0: Port device team_slave_1 added [ 566.252934][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.252951][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.252981][ T7887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.397157][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.397177][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.397208][ T7887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.405057][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.405073][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.405104][ T7912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.529605][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.529622][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.529653][ T7912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.649439][ T7887] hsr_slave_0: entered promiscuous mode [ 566.650522][ T7887] hsr_slave_1: entered promiscuous mode [ 566.651271][ T7887] debugfs: 'hsr0' already exists in 'hsr' [ 566.651287][ T7887] Cannot create hsr debugfs directory [ 566.700677][ T7912] hsr_slave_0: entered promiscuous mode [ 566.701751][ T7912] hsr_slave_1: entered promiscuous mode [ 566.702526][ T7912] debugfs: 'hsr0' already exists in 'hsr' [ 566.702542][ T7912] Cannot create hsr debugfs directory [ 568.329339][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.329404][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.427081][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.049977][ T5291] 8021q: adding VLAN 0 to HW filter on device eth7 [ 573.957237][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.269668][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.739831][ T7531] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.123304][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.571212][ T5291] 8021q: adding VLAN 0 to HW filter on device eth8 [ 584.580991][ T7531] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.804093][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.832944][ T7531] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.672562][ T31] bridge_slave_1: left allmulticast mode [ 587.672590][ T31] bridge_slave_1: left promiscuous mode [ 587.672805][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.481903][ T31] bridge_slave_0: left allmulticast mode [ 588.481937][ T31] bridge_slave_0: left promiscuous mode [ 588.499733][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.524126][ T31] bridge_slave_1: left allmulticast mode [ 588.524150][ T31] bridge_slave_1: left promiscuous mode [ 588.524334][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.549777][ T31] bridge_slave_0: left allmulticast mode [ 588.549801][ T31] bridge_slave_0: left promiscuous mode [ 588.549984][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.223222][ T31] bridge_slave_1: left allmulticast mode [ 589.223251][ T31] bridge_slave_1: left promiscuous mode [ 589.223450][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.259820][ T31] bridge_slave_0: left allmulticast mode [ 589.259850][ T31] bridge_slave_0: left promiscuous mode [ 589.260039][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.300892][ T31] bridge_slave_1: left allmulticast mode [ 589.300918][ T31] bridge_slave_1: left promiscuous mode [ 589.301126][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.329653][ T31] bridge_slave_0: left allmulticast mode [ 589.329676][ T31] bridge_slave_0: left promiscuous mode [ 589.329865][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.067935][ T31] bridge_slave_1: left allmulticast mode [ 590.067965][ T31] bridge_slave_1: left promiscuous mode [ 590.068170][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.072635][ T5652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 590.106137][ T5652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 590.110722][ T5652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 590.122583][ T31] bridge_slave_0: left allmulticast mode [ 590.122606][ T31] bridge_slave_0: left promiscuous mode [ 590.122938][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.123632][ T5652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 590.132651][ T5652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 590.939661][ T31] bridge_slave_1: left allmulticast mode [ 590.939693][ T31] bridge_slave_1: left promiscuous mode [ 590.939896][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.943765][ T31] bridge_slave_0: left allmulticast mode [ 590.943786][ T31] bridge_slave_0: left promiscuous mode [ 590.943963][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.990206][ T31] bridge_slave_1: left allmulticast mode [ 590.990229][ T31] bridge_slave_1: left promiscuous mode [ 590.990412][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.004786][ T31] bridge_slave_0: left allmulticast mode [ 591.004807][ T31] bridge_slave_0: left promiscuous mode [ 591.004991][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.029154][ T31] bridge_slave_1: left allmulticast mode [ 591.029176][ T31] bridge_slave_1: left promiscuous mode [ 591.029357][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.826914][ T31] bridge_slave_0: left allmulticast mode [ 591.826944][ T31] bridge_slave_0: left promiscuous mode [ 591.830729][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.867499][ T31] bridge_slave_1: left allmulticast mode [ 591.867526][ T31] bridge_slave_1: left promiscuous mode [ 591.867719][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.870391][ T31] bridge_slave_0: left allmulticast mode [ 591.870413][ T31] bridge_slave_0: left promiscuous mode [ 591.870601][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.887316][ T31] bridge_slave_1: left allmulticast mode [ 591.887339][ T31] bridge_slave_1: left promiscuous mode [ 591.887530][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.896152][ T31] bridge_slave_0: left allmulticast mode [ 591.896173][ T31] bridge_slave_0: left promiscuous mode [ 591.896356][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.144836][ T5652] Bluetooth: hci1: command tx timeout [ 592.549254][ T31] bridge_slave_1: left allmulticast mode [ 592.549285][ T31] bridge_slave_1: left promiscuous mode [ 592.549494][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.551900][ T31] bridge_slave_0: left allmulticast mode [ 592.551922][ T31] bridge_slave_0: left promiscuous mode [ 592.552108][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.594306][ T31] bridge_slave_1: left allmulticast mode [ 592.594330][ T31] bridge_slave_1: left promiscuous mode [ 592.594514][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.596963][ T31] bridge_slave_0: left allmulticast mode [ 592.596991][ T31] bridge_slave_0: left promiscuous mode [ 592.597167][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.607447][ T31] bridge_slave_1: left allmulticast mode [ 592.607467][ T31] bridge_slave_1: left promiscuous mode [ 592.607639][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.609425][ T7888] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 592.610293][ T31] bridge_slave_0: left allmulticast mode [ 592.610314][ T31] bridge_slave_0: left promiscuous mode [ 592.610496][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.650596][ T7888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 592.663803][ T7888] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 592.707460][ T7888] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 592.708082][ T7888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 593.136486][ T31] bridge_slave_1: left allmulticast mode [ 593.136516][ T31] bridge_slave_1: left promiscuous mode [ 593.136979][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.140283][ T31] bridge_slave_0: left allmulticast mode [ 593.140305][ T31] bridge_slave_0: left promiscuous mode [ 593.142050][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.186487][ T31] bridge_slave_1: left allmulticast mode [ 593.186511][ T31] bridge_slave_1: left promiscuous mode [ 593.186696][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.189153][ T31] bridge_slave_0: left allmulticast mode [ 593.189175][ T31] bridge_slave_0: left promiscuous mode [ 593.189360][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.747695][ T31] bridge_slave_1: left allmulticast mode [ 593.747727][ T31] bridge_slave_1: left promiscuous mode [ 593.747929][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.750908][ T31] bridge_slave_0: left allmulticast mode [ 593.750932][ T31] bridge_slave_0: left promiscuous mode [ 593.751196][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.784639][ T31] bridge_slave_1: left allmulticast mode [ 593.784664][ T31] bridge_slave_1: left promiscuous mode [ 593.784856][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.799185][ T31] bridge_slave_0: left allmulticast mode [ 593.799206][ T31] bridge_slave_0: left promiscuous mode [ 593.799389][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.829591][ T31] bridge_slave_1: left allmulticast mode [ 593.829608][ T31] bridge_slave_1: left promiscuous mode [ 593.829749][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.831815][ T31] bridge_slave_0: left allmulticast mode [ 593.831833][ T31] bridge_slave_0: left promiscuous mode [ 593.831980][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.224962][ T7888] Bluetooth: hci1: command tx timeout [ 594.397112][ T31] bridge_slave_1: left allmulticast mode [ 594.397137][ T31] bridge_slave_1: left promiscuous mode [ 594.397286][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.399150][ T31] bridge_slave_0: left allmulticast mode [ 594.399168][ T31] bridge_slave_0: left promiscuous mode [ 594.399310][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.404458][ T31] bridge_slave_1: left allmulticast mode [ 594.404477][ T31] bridge_slave_1: left promiscuous mode [ 594.404619][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.435309][ T31] bridge_slave_0: left allmulticast mode [ 594.435331][ T31] bridge_slave_0: left promiscuous mode [ 594.435547][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.466017][ T31] bridge_slave_1: left allmulticast mode [ 594.466040][ T31] bridge_slave_1: left promiscuous mode [ 594.466227][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.785634][ T7888] Bluetooth: hci3: command tx timeout [ 595.168211][ T31] bridge_slave_0: left allmulticast mode [ 595.168235][ T31] bridge_slave_0: left promiscuous mode [ 595.168383][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.305075][ T7888] Bluetooth: hci1: command tx timeout [ 596.493903][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.504570][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.506412][ T31] bond0 (unregistering): Released all slaves [ 597.157569][ T7888] Bluetooth: hci3: command tx timeout [ 597.210127][ T5652] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 597.212439][ T5652] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 597.213185][ T5652] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 597.215044][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.225632][ T5652] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 597.226977][ T5652] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 597.230810][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.956227][ T31] bond0 (unregistering): Released all slaves [ 598.019057][ T31] bond0 (unregistering): Released all slaves [ 598.384769][ T7888] Bluetooth: hci1: command tx timeout [ 598.735331][ T31] bond0 (unregistering): Released all slaves [ 598.790367][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.792638][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.794015][ T31] bond0 (unregistering): Released all slaves [ 599.185049][ T7888] Bluetooth: hci3: command tx timeout [ 599.382675][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.403344][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.415256][ T31] bond0 (unregistering): Released all slaves [ 599.932548][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.933967][ T31] bond0 (unregistering): Released all slaves [ 599.984816][ T7888] Bluetooth: hci9: command tx timeout [ 600.226724][ T7888] Bluetooth: hci5: command 0x0406 tx timeout [ 600.369164][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.372061][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.373749][ T31] bond0 (unregistering): Released all slaves [ 600.762036][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.773929][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.778319][ T31] bond0 (unregistering): Released all slaves [ 600.841271][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.843445][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.847575][ T31] bond0 (unregistering): Released all slaves [ 601.217455][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.264720][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.281648][ T5652] Bluetooth: hci3: command tx timeout [ 601.282996][ T31] bond0 (unregistering): Released all slaves [ 601.780575][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.783601][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.785482][ T31] bond0 (unregistering): Released all slaves [ 602.064734][ T5652] Bluetooth: hci9: command tx timeout [ 602.415430][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.420116][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.422137][ T31] bond0 (unregistering): Released all slaves [ 602.968847][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.972372][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.973736][ T31] bond0 (unregistering): Released all slaves [ 603.437651][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.440628][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.442657][ T31] bond0 (unregistering): Released all slaves [ 603.953578][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.970289][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.972068][ T31] bond0 (unregistering): Released all slaves [ 604.038809][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.040983][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.042327][ T31] bond0 (unregistering): Released all slaves [ 604.144763][ T5652] Bluetooth: hci9: command tx timeout [ 604.621088][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.623309][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.635764][ T31] bond0 (unregistering): Released all slaves [ 604.668440][ T50] smc: removing ib device syz0 [ 605.317546][ T50] smbdirect: ib_dev[syz0] removed [ 606.013794][ T7888] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 606.022908][ T7888] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 606.023897][ T7888] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 606.040872][ T7888] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 606.041536][ T7888] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 606.224766][ T7888] Bluetooth: hci9: command tx timeout [ 608.144803][ T7888] Bluetooth: hci10: command tx timeout [ 611.739902][ T5649] Bluetooth: hci10: command tx timeout [ 611.739940][ T5649] Bluetooth: hci7: command 0x0406 tx timeout [ 611.739987][ T5649] Bluetooth: hci6: command 0x0406 tx timeout [ 613.885945][ T8059] Bluetooth: hci10: command tx timeout [ 617.260563][ T5647] Bluetooth: hci10: command tx timeout [ 617.910526][ T5647] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 617.928492][ T5647] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 617.929014][ T5647] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 617.929898][ T5647] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 617.930515][ T5647] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 619.970427][ T5652] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 619.973988][ T5652] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 619.991876][ T5652] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 619.992801][ T5652] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 619.993452][ T5652] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 620.707437][ T5647] Bluetooth: hci8: command 0x0406 tx timeout [ 621.974072][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.014012][ T31] bond_slave_0: left allmulticast mode [ 622.024097][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.033920][ T31] bond_slave_1: left allmulticast mode [ 622.042929][ T31] bond0 (unregistering): Released all slaves [ 622.064807][ T8059] Bluetooth: hci15: command tx timeout [ 623.953897][ T8059] Bluetooth: hci14: command tx timeout [ 624.145194][ T8059] Bluetooth: hci15: command tx timeout [ 626.074633][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.080347][ T8059] Bluetooth: hci14: command tx timeout [ 626.441721][ T8059] Bluetooth: hci15: command tx timeout [ 628.088338][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.090695][ T31] bond0 (unregistering): Released all slaves [ 628.464807][ T5647] Bluetooth: hci15: command tx timeout [ 630.175075][ T5647] Bluetooth: hci14: command tx timeout [ 630.178605][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.178663][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.224778][ T5647] Bluetooth: hci14: command tx timeout [ 639.170632][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.173602][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.180887][ T31] bond0 (unregistering): Released all slaves [ 643.250470][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.253442][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.255219][ T31] bond0 (unregistering): Released all slaves [ 646.539104][ T5291] 8021q: adding VLAN 0 to HW filter on device eth9 [ 649.395105][ T7531] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.403507][ T5753] infiniband syz0: ib_query_port failed (-19) [ 652.060179][ T5647] Bluetooth: hci0: command 0x0406 tx timeout [ 655.998404][ T5652] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 656.430000][ T7888] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 656.560793][ T8060] rxe_eth0 speed is unknown, defaulting to 1000 [ 656.737909][ T7888] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 657.415437][ T7888] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 657.458653][ T8067] rxe_eth0 speed is unknown, defaulting to 1000 [ 657.698390][ T33] INFO: task syz-executor:7575 blocked for more than 146 seconds. [ 657.698418][ T33] Not tainted syzkaller #0 [ 657.698432][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 657.698443][ T33] task:syz-executor state:D stack:22288 pid:7575 tgid:7575 ppid:1 task_flags:0x400140 flags:0x00080002 [ 657.698515][ T33] Call Trace: [ 657.698524][ T33] [ 657.698540][ T33] __schedule+0x17dd/0x5830 [ 657.698591][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.698626][ T33] ? register_lock_class+0x31/0x2e0 [ 657.698670][ T33] ? __pfx___schedule+0x10/0x10 [ 657.698709][ T33] ? schedule+0x90/0x2b0 [ 657.698742][ T33] schedule+0x164/0x2b0 [ 657.698772][ T33] schedule_preempt_disabled+0x13/0x30 [ 657.698799][ T33] __mutex_lock+0x7c4/0x15a0 [ 657.698835][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 657.698872][ T33] ? del_device_store+0xd6/0x370 [ 657.698912][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 657.698941][ T33] ? __mutex_lock+0x305/0x15a0 [ 657.698972][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 657.699033][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.699064][ T33] ? lock_acquire+0x115/0x350 [ 657.699097][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 657.699143][ T33] del_device_store+0xd6/0x370 [ 657.699181][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 657.699217][ T33] ? __pfx_del_device_store+0x10/0x10 [ 657.699255][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.699285][ T33] ? sysfs_file_kobj+0x1e4/0x230 [ 657.699321][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.699351][ T33] ? sysfs_kf_write+0x166/0x260 [ 657.699387][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.699420][ T33] ? __pfx_sysfs_kf_write+0x10/0x10 [ 657.699455][ T33] kernfs_fop_write_iter+0x3a4/0x540 [ 657.699496][ T33] vfs_write+0x612/0xba0 [ 657.699543][ T33] ? __pfx_vfs_write+0x10/0x10 [ 657.699582][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.699613][ T33] ? kmem_cache_free+0x182/0x650 [ 657.699655][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.699685][ T33] ? fdget+0x16b/0x250 [ 657.699720][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.699756][ T33] ksys_write+0x150/0x270 [ 657.699796][ T33] ? __pfx_ksys_write+0x10/0x10 [ 657.699847][ T33] do_syscall_64+0x166/0x520 [ 657.699877][ T33] ? trace_irq_disable+0x3b/0x140 [ 657.699915][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.699949][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.699976][ T33] RIP: 0033:0x7fd3e4d6034e [ 657.699998][ T33] RSP: 002b:00007ffe76f784f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 657.700025][ T33] RAX: ffffffffffffffda RBX: 000055557814a500 RCX: 00007fd3e4d6034e [ 657.700045][ T33] RDX: 0000000000000001 RSI: 00007ffe76f78580 RDI: 0000000000000005 [ 657.700062][ T33] RBP: 00007fd3e4e38447 R08: 0000000000000000 R09: 0000000000000000 [ 657.700079][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.700095][ T33] R13: 00007ffe76f78580 R14: 00007ffe76f78dc0 R15: 0000000000000003 [ 657.700141][ T33] [ 657.700189][ T33] [ 657.700189][ T33] Showing all locks held in the system: [ 657.700201][ T33] locks held by kworker/u8:2/31: 3, on CPU#0: [ 657.700220][ T33] #0: ffff88801d286148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 657.700298][ T33] #1: ffffc90000a77c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 657.700374][ T33] #2: ffffffff916844c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 657.700451][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 657.700469][ T33] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 657.700546][ T33] locks held by kworker/0:2/3111: 3, last CPU#0: [ 657.700565][ T33] #0: ffff88813fe0ed48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 657.700641][ T33] #1: ffffc9000d967c40 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 657.700717][ T33] #2: ffffffff90290740 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 657.700792][ T33] locks held by getty/5384: 2, on CPU#1: [ 657.700810][ T33] #0: ffff888036bcc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 657.700876][ T33] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 657.700952][ T33] locks held by kworker/u9:5/5647: 3, on CPU#0: [ 657.700970][ T33] #0: ffff888078b5f148 ((wq_completion)hci16){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 657.701046][ T33] #1: ffffc90004657c40 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 657.701130][ T33] #2: ffff888068bb0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1a2/0x750 [ 657.701206][ T33] locks held by syz-executor/7531: 7, last CPU#0: [ 657.701224][ T33] #0: ffff888034558478 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 657.701300][ T33] #1: ffff88802bd17c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 657.701368][ T33] #2: ffff88802a0a10f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 657.701444][ T33] #3: ffffffff90eec280 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 657.701516][ T33] #4: ffff888051ab3128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa9/0x7d0 [ 657.701585][ T33] #5: ffff88807ed52258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 657.701684][ T33] #6: ffffffff90160928 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 657.701751][ T33] locks held by syz-executor/7575: 4, on CPU#0: [ 657.701769][ T33] #0: ffff888034558478 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 657.701846][ T33] #1: ffff888082d44880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 657.701914][ T33] #2: ffff88802a0a10f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 657.701989][ T33] #3: ffffffff90eec280 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 657.702062][ T33] locks held by syz-executor/7584: 4, on CPU#0: [ 657.702080][ T33] #0: ffff888034558478 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 657.702163][ T33] #1: ffff88806154b080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 657.702232][ T33] #2: ffff88802a0a10f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 657.702308][ T33] #3: ffffffff90eec280 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 657.702381][ T33] locks held by syz-executor/7611: 4, on CPU#0: [ 657.702399][ T33] #0: ffff888034558478 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 657.702474][ T33] #1: ffff88805021dc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 657.702543][ T33] #2: ffff88802a0a10f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 657.702618][ T33] #3: ffffffff90eec280 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 657.702692][ T33] locks held by syz-executor/7752: 4, on CPU#0: [ 657.702711][ T33] #0: ffff888034558478 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 657.702786][ T33] #1: ffff8880918cfc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 657.702854][ T33] #2: ffff88802a0a10f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 657.702929][ T33] #3: ffffffff90eec280 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 657.703002][ T33] locks held by syz-executor/7802: 4, on CPU#0: [ 657.703020][ T33] #0: ffff888034558478 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 657.703096][ T33] #1: ffff88808b142480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 657.703169][ T33] #2: ffff88802a0a10f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 657.703244][ T33] #3: ffffffff90eec280 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 657.703315][ T33] locks held by syz-executor/7813: 4, on CPU#0: [ 657.703333][ T33] #0: ffff888034558478 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 657.703409][ T33] #1: ffff88804130a480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 657.703478][ T33] #2: ffff88802a0a10f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 657.703554][ T33] #3: ffffffff90eec280 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 657.703627][ T33] locks held by syz-executor/7864: 4, on CPU#0: [ 657.703645][ T33] #0: ffff888034558478 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 657.703722][ T33] #1: ffff888092a82080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 657.703791][ T33] #2: ffff88802a0a10f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 657.703866][ T33] #3: ffffffff90eec280 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 657.703940][ T33] locks held by syz-executor/7887: 4, on CPU#1: [ 657.703958][ T33] #0: ffff888034558478 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 657.704041][ T33] #1: ffff888090dcc080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 657.704109][ T33] #2: ffff88802a0a10f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 657.704190][ T33] #3: ffffffff90eec280 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 657.704262][ T33] locks held by syz-executor/7912: 4, on CPU#1: [ 657.704280][ T33] #0: ffff888034558478 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 657.704357][ T33] #1: ffff88808f811880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 657.704425][ T33] #2: ffff88802a0a10f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 657.704500][ T33] #3: ffffffff90eec280 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 657.704574][ T33] locks held by syz-executor/8034: 4, last CPU#0: [ 657.704592][ T33] #0: ffff888040100ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x232/0x5c0 [ 657.704663][ T33] #1: ffff8880401000b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5e6/0xf90 [ 657.704726][ T33] #2: ffffffff9180ece0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 [ 657.704790][ T33] #3: ffff88805e2edaf8 (_T->lock#5){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x630 [ 657.704861][ T33] locks held by syz-executor/8039: 3, last CPU#0: [ 657.704879][ T33] #0: ffffffff916844c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 657.704952][ T33] #1: ffffffff916931a0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 657.705021][ T33] #2: ffff88801d285180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x510 [ 657.705084][ T33] locks held by syz-executor/8044: 4, on CPU#0: [ 657.705103][ T33] #0: ffffffff916844c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 657.705182][ T33] #1: ffffffff913e5628 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1fb/0x2f0 [ 657.705250][ T33] #2: ffffffff913e57e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x2f0 [ 657.705316][ T33] #3: ffff8880792a9020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x640 [ 657.705382][ T33] locks held by syz-executor/8053: 2, on CPU#0: [ 657.705400][ T33] #0: ffffffff916844c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 657.705474][ T33] #1: ffffffff916931a0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 657.705551][ T33] locks held by syz-executor/8060: 2, last CPU#0: [ 657.705569][ T33] #0: ffffffff916844c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 657.705642][ T33] #1: ffffffff916931a0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 657.705709][ T33] locks held by syz-executor/8067: 6, last CPU#0: [ 657.705726][ T33] #0: ffffffff916844c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 657.705799][ T33] #1: ffffffff913e5628 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1fb/0x2f0 [ 657.705866][ T33] #2: ffffffff913e57e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x2f0 [ 657.705932][ T33] #3: ffff8880792a9020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x640 [ 657.705999][ T33] #4: ffffffff90294de0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x5f/0x600 [ 657.706067][ T33] #5: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: fs_reclaim_acquire+0x7c/0x100 [ 657.706142][ T33] [ 657.706149][ T33] ============================================= [ 657.706149][ T33] [ 657.706160][ T33] NMI backtrace for cpu 1 [ 657.706175][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 657.706201][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 657.706217][ T33] Call Trace: [ 657.706226][ T33] [ 657.706235][ T33] dump_stack_lvl+0xe8/0x150 [ 657.706278][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 657.706320][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 657.706354][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 657.706399][ T33] sys_info+0x135/0x170 [ 657.706434][ T33] watchdog+0x1073/0x10f0 [ 657.706480][ T33] ? watchdog+0x209/0x10f0 [ 657.706524][ T33] kthread+0x38b/0x480 [ 657.706554][ T33] ? __pfx_watchdog+0x10/0x10 [ 657.706587][ T33] ? __pfx_kthread+0x10/0x10 [ 657.706619][ T33] ret_from_fork+0x514/0xb70 [ 657.706653][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 657.706682][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.706712][ T33] ? __switch_to+0xc78/0x1410 [ 657.706756][ T33] ? __pfx_kthread+0x10/0x10 [ 657.706788][ T33] ret_from_fork_asm+0x1a/0x30 [ 657.706835][ T33] [ 657.706844][ T33] Sending NMI from CPU 1 to CPUs 0: [ 657.706870][ C0] NMI backtrace for cpu 0 [ 657.706883][ C0] CPU: 0 UID: 0 PID: 8067 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 657.706907][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 657.706921][ C0] RIP: 0010:lock_release+0x44/0x3c0 [ 657.706951][ C0] Code: 8b 05 28 ba 3c 13 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 27 ba 3c 13 83 f8 08 0f 83 60 02 00 00 89 c0 48 0f a3 05 94 a8 19 10 <73> 0d e8 e5 26 09 00 84 c0 0f 84 9e 02 00 00 83 3d b6 d7 19 10 00 [ 657.706971][ C0] RSP: 0018:ffffc900029874f0 EFLAGS: 00000293 [ 657.706991][ C0] RAX: 0000000000000000 RBX: ffffffff82826c4c RCX: ffff888023b28000 [ 657.707007][ C0] RDX: 0000000000000000 RSI: ffffffff82826c4c RDI: ffffffff9015a2a0 [ 657.707024][ C0] RBP: 0000000000000001 R08: ffffffff82826c4c R09: 0000000000000000 [ 657.707039][ C0] R10: dffffc0000000000 R11: fffff52000530e48 R12: dffffc0000000000 [ 657.707057][ C0] R13: ffffffff82826c4c R14: ffffffff9015a2a0 R15: ffff8880351e23c0 [ 657.707078][ C0] FS: 0000555567d88500(0000) GS:ffff888123410000(0000) knlGS:0000000000000000 [ 657.707098][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.707114][ C0] CR2: 00007f29a8916e9c CR3: 000000006546b000 CR4: 0000000000350ef0 [ 657.707133][ C0] Call Trace: [ 657.707141][ C0] [ 657.707152][ C0] ? kernfs_root+0x1c/0x230 [ 657.707172][ C0] ? kernfs_root+0x1c/0x230 [ 657.707194][ C0] kernfs_root+0x1e5/0x230 [ 657.707217][ C0] kernfs_add_one+0x14d/0x510 [ 657.707245][ C0] __kernfs_create_file+0x22b/0x2e0 [ 657.707276][ C0] sysfs_add_file_mode_ns+0x237/0x300 [ 657.707315][ C0] internal_create_group+0x679/0x1180 [ 657.707351][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.707385][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.707412][ C0] ? kobject_add+0x163/0x240 [ 657.707445][ C0] ? rcu_is_watching+0x16/0xb0 [ 657.707481][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 657.707525][ C0] ? __kmalloc_noprof+0x1a6/0x710 [ 657.707557][ C0] sysfs_create_groups+0x59/0x120 [ 657.707595][ C0] ib_setup_port_attrs+0xfe4/0x2460 [ 657.707630][ C0] ? __lock_acquire+0x747/0x2de0 [ 657.707680][ C0] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 657.707710][ C0] ? __mutex_unlock_slowpath+0x731/0x900 [ 657.707740][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 657.707763][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.707791][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 657.707820][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.707852][ C0] ? kobject_put+0x50f/0x550 [ 657.707883][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 657.707909][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.707936][ C0] ? device_add+0x6f6/0xb80 [ 657.707974][ C0] add_one_compat_dev+0x441/0x640 [ 657.708005][ C0] rdma_dev_init_net+0x23e/0x2f0 [ 657.708032][ C0] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 657.708059][ C0] ? __kmalloc_noprof+0x1a6/0x710 [ 657.708086][ C0] ? ops_init+0x7b/0x5d0 [ 657.708122][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.708153][ C0] ops_init+0x35d/0x5d0 [ 657.708195][ C0] setup_net+0x118/0x350 [ 657.708231][ C0] ? __pfx_setup_net+0x10/0x10 [ 657.708265][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.708292][ C0] ? down_read_killable+0x1b6/0x3b0 [ 657.708322][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.708349][ C0] ? __ns_common_init+0x384/0x590 [ 657.708375][ C0] copy_net_ns+0x536/0x770 [ 657.708412][ C0] create_new_namespaces+0x3f0/0x6b0 [ 657.708449][ C0] ? security_capable+0x7e/0x2c0 [ 657.708489][ C0] unshare_nsproxy_namespaces+0x144/0x190 [ 657.708527][ C0] ksys_unshare+0x532/0x890 [ 657.708565][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 657.708600][ C0] ? fput_close_sync+0x11f/0x240 [ 657.708632][ C0] ? __pfx_do_faccessat+0x10/0x10 [ 657.708661][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 657.708692][ C0] __x64_sys_unshare+0x38/0x50 [ 657.708729][ C0] do_syscall_64+0x166/0x520 [ 657.708755][ C0] ? trace_irq_disable+0x3b/0x140 [ 657.708788][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.708816][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.708839][ C0] RIP: 0033:0x7f17059a0de7 [ 657.708859][ C0] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.708878][ C0] RSP: 002b:00007ffe9ae3ae88 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 657.708901][ C0] RAX: ffffffffffffffda RBX: 00007f1705c25f40 RCX: 00007f17059a0de7 [ 657.708918][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 657.708933][ C0] RBP: 00007f1705c267b8 R08: 0000000000000000 R09: 0000000000000000 [ 657.708948][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 657.708962][ C0] R13: 0000000000000003 R14: 00007ffe9ae3b0c8 R15: 0000000000000000 [ 657.708991][ C0] [ 657.709869][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 659.479612][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 659.488710][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 659.498751][ T33] Call Trace: [ 659.502017][ T33] [ 659.504933][ T33] vpanic+0x26f/0x710 [ 659.508940][ T33] panic+0xc5/0xd0 [ 659.512649][ T33] ? __pfx_panic+0x10/0x10 [ 659.517054][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 659.522683][ T33] ? wq_watchdog_touch+0xf9/0x160 [ 659.527708][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 659.533871][ T33] watchdog+0x10e7/0x10f0 [ 659.538208][ T33] ? watchdog+0x209/0x10f0 [ 659.542631][ T33] kthread+0x38b/0x480 [ 659.546701][ T33] ? __pfx_watchdog+0x10/0x10 [ 659.551375][ T33] ? __pfx_kthread+0x10/0x10 [ 659.555965][ T33] ret_from_fork+0x514/0xb70 [ 659.560575][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 659.565678][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 659.571303][ T33] ? __switch_to+0xc78/0x1410 [ 659.575987][ T33] ? __pfx_kthread+0x10/0x10 [ 659.580574][ T33] ret_from_fork_asm+0x1a/0x30 [ 659.585351][ T33] [ 659.588445][ T33] Kernel Offset: disabled [ 659.592753][ T33] Rebooting in 86400 seconds..