last executing test programs: 4m27.201846262s ago: executing program 0 (id=4710): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20008040) 4m25.957962619s ago: executing program 0 (id=4714): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 4m22.798333822s ago: executing program 0 (id=4721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)={0x3, 'batadv0\x00', {0x7f}, 0x2}) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet(r0, 0x0, 0x0, 0x40880d1) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626174616476300000"], 0x34}}, 0x0) 4m18.792895583s ago: executing program 0 (id=4733): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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") syz_read_part_table(0x5e1, &(0x7f0000000600)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$inet6(0xa, 0x3, 0xff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5}) syz_io_uring_complete(0x0, 0x0) getdents64(r0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000480)='./file2\x00') 4m16.719328284s ago: executing program 0 (id=4740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x68, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x68}}, 0x0) 4m15.692138129s ago: executing program 0 (id=4744): syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xa0c003, &(0x7f0000000200)={[{@resize={'resize', 0x3d, 0x80000001}}, {@balloc_noborder}, {@barrier_flush}, {@balloc_border}, {@acl}, {@noacl}, {@acl}, {@usrquota}, {@balloc_hashed_reloc}, {@jqfmt_vfsv0}, {@expose_privroot}, {@data_journal}, {@commit={'commit', 0x3d, 0x10001}}, {@barrier_none}, {@usrjquota_file}, {@resize_auto}], [], 0x63}, 0x20, 0x112f, &(0x7f00000033c0)="$eJzs2bFqFF0UB/D/ndlNvg+UDSO2i6ClBMPaSwoFGwtrG5FUWmUrJYW9jc/hG/gOoo2FXXyApAjYj+xkJu4qKJoVIvx+xe65Zy/33FueswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICFUa4dlaRt27YZcltVUpLp9P04yfhs79a7ukrJw73787v7s3vzJHWSRa5KqRZbSpJm53rTzJpZs9PcvrJ7o5k/f/H08Ztne/v9MSXTHJ4cPMmD47U+pfT3+VE7WV2fPun/tVYHAACAi6s9t8n3R26mGyv0NoaW/Gi1br2u+gAAAMCv/O35AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDv+G8IqiSlj8cvM/3pZgAAAOCiK6nyaLKSavNpCJbdzMdJ6cYCw3jgy0aVKrfSbv5B4fF5bg0AAAD/ltfLi8uXks938urqcrLqeu3yYViPuv77m1G2t0+j/ivHu0mdLHXlb7vPw5ODs3/tS/d7vda3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf2YEDEgAAAABB/1+3I1AAAAAAAAAAAAAAAAAAAAAAAAAAAADgpgAAAP//mBPaPg==") socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000140), 0x526, 0x840) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) utimensat(r1, 0x0, &(0x7f0000000400)={{}, {0x0, 0x3ffffffe}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x8042) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x20) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000300)={0x529, 0x1, 'client0\x00', 0x0, "17488227eb0f4e6e", "ecf64e59bd4f15d1895615b70ce54350478f4b022e6bfd9f0c1cd69363f8537c", 0x10001, 0x5}) 4m0.197809046s ago: executing program 32 (id=4744): syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xa0c003, &(0x7f0000000200)={[{@resize={'resize', 0x3d, 0x80000001}}, {@balloc_noborder}, {@barrier_flush}, {@balloc_border}, {@acl}, {@noacl}, {@acl}, {@usrquota}, {@balloc_hashed_reloc}, {@jqfmt_vfsv0}, {@expose_privroot}, {@data_journal}, {@commit={'commit', 0x3d, 0x10001}}, {@barrier_none}, {@usrjquota_file}, {@resize_auto}], [], 0x63}, 0x20, 0x112f, &(0x7f00000033c0)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000140), 0x526, 0x840) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) utimensat(r1, 0x0, &(0x7f0000000400)={{}, {0x0, 0x3ffffffe}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x8042) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x20) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000300)={0x529, 0x1, 'client0\x00', 0x0, "17488227eb0f4e6e", "ecf64e59bd4f15d1895615b70ce54350478f4b022e6bfd9f0c1cd69363f8537c", 0x10001, 0x5}) 3m37.656286074s ago: executing program 3 (id=4831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) nanosleep(0x0, &(0x7f0000000380)) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000017c0)={0xa, @pix_mp={0xffff, 0x40000c, 0x31324d59, 0x0, 0x9, [{0x2319, 0x81}, {0xfffffffd, 0x7}, {0x4, 0xadf}, {0x5, 0x4018}, {0x0, 0x8}, {}, {0x0, 0x9}, {0xaa}], 0xff, 0x0, 0x0, 0x2, 0x2}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001900)={0x35, 0x0, [{0x1d9, 0x0, 0x2}]}) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x27) 3m34.334403154s ago: executing program 3 (id=4842): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 3m33.275034602s ago: executing program 3 (id=4847): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) fsmount(0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f00000004c0)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 3m29.414908367s ago: executing program 3 (id=4853): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x7a2, 0x8450, 0x7, 0x0, 0x5, 0x5}, 0xc) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0x20048040}, 0x48010) listen(r1, 0x10001) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m27.798197833s ago: executing program 3 (id=4856): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) sendfile(r1, r1, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r2, &(0x7f00000002c0)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 3m25.270834171s ago: executing program 3 (id=4865): r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m9.961533775s ago: executing program 33 (id=4865): r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m36.545305477s ago: executing program 1 (id=4946): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, 0x0, 0xb) splice(r4, 0x0, r3, 0x0, 0xf3a, 0x8) splice(r2, 0x0, r5, 0x0, 0x50, 0x8) timer_settime(r1, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000240)={0xffffffffffffffb6, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x2, 0x0, 0x0, 0x2a, 0x3}}, 0x50) 2m34.813864473s ago: executing program 1 (id=4950): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x67) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001380)={'syztnl0\x00', &(0x7f0000001300)={'syztnl1\x00', 0x0, 0x29, 0x84, 0x6, 0x6, 0x48, @remote, @loopback, 0x700, 0x1, 0x5, 0x1}}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001640)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001740)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x68, 0x0, 0x110, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8051}, 0x200040c4) r6 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f0000001400)={0x11, 0x2, 0x0, 0x1, 0x7, 0x6, @multicast}, 0x14) bind$packet(r6, &(0x7f0000001440)={0x11, 0x4, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) sendmsg$inet(r2, &(0x7f00000014c0)={&(0x7f0000000740)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000012c0)=[{&(0x7f00000010c0)="435499f5e8445168cbfd9226f54f618ab42660fb2da2ca15c8b2ac070fb9c7517ba9364bc9e6802ae067a262b519b678d5fdb917b94c85184a", 0x39}, {&(0x7f0000001140)="f75597cad114c90a1efd7d44045aafb2623d1b0c06384e49d640c354e6145cffc1c5b101af2066e6c776d6f3703cd6e03349eb26a3b723a8c4124dbd5f20b56387226695781b029f6c1f578b5b39ee9996416344468fc73bcfefa35d699474102d913ddb66ed47bbae62269e76691f09ee403500e266bb2727cc220117deedec4adaaed1dbce8c31b09e0458918a7814b6e860330e3ffecd1b71f0ae532f3d54a92b3129ff9dc09612e413", 0xab}, {&(0x7f0000001200)="d5fe770167364d325e3b24e4bea4999618f9a566b4961217430cd03da15341c92fc247898284f24a7acdd20d6cc4ddeac7ee8be001b561b0bb3896d6af1e28c19fcf2c5616a62e27b60f3f9b19dca5496a5046a427f277f54efc15f2886592ff241adaf77655d7ceed4758c4ef4a986c039de5d4435d4b7ed5bfe899e8bf0ca4f104b286e26694da8e282f5078e143649b9d66deb9b3986d6e98d9e5801953ee0e5df8dae730af0a05cc90c2f8826922d7f527", 0xb3}], 0x3, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}], 0x20}, 0x2000c8e1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r7, 0x0, r1, 0x0, 0x9aa3, 0x1) write$P9_RREAD(r8, &(0x7f00000000c0)=ANY=[], 0xffffff96) 2m31.503803061s ago: executing program 1 (id=4956): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88}, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r2, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 2m28.270032531s ago: executing program 1 (id=4959): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') 2m26.347643108s ago: executing program 1 (id=4961): openat(0xffffffffffffff9c, 0x0, 0x40080, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000200)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000004c0)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000540)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000600)="97", 0xfdef}], 0x1}}], 0x1, 0x4000800) 2m25.235505161s ago: executing program 1 (id=4962): socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44014) 2m25.035910032s ago: executing program 5 (id=4964): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0}, 0x24008004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r1, &(0x7f0000000000)='\x00', &(0x7f0000000600)=@udp=r2, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 2m23.839466904s ago: executing program 5 (id=4966): syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 2m22.70437711s ago: executing program 5 (id=4968): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, 0x0, 0x0) close(0x3) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000004c0)=0x40000004, 0xfffffe5b) 2m20.981055796s ago: executing program 5 (id=4974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) 2m14.224807386s ago: executing program 5 (id=4984): open(0x0, 0x24842, 0x1a6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000880) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000daa000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0) 2m12.921990689s ago: executing program 5 (id=4986): socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44014) 2m10.032717193s ago: executing program 34 (id=4962): socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44014) 1m57.652184058s ago: executing program 35 (id=4986): socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44014) 1m36.08110839s ago: executing program 7 (id=5060): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, 0x0) landlock_create_ruleset(0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40080c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r7 = dup(r1) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x4, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) 1m34.4192538s ago: executing program 7 (id=5062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8bb4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, r4, 0x25, 0x4, @void}, 0x10) write$tun(r1, &(0x7f00000007c0)=ANY=[], 0xfdef) recvmsg(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r6, 0x0}, 0x20) 1m31.195983689s ago: executing program 7 (id=5066): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./tracing\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000780), 0x140, 0x0) truncate(&(0x7f0000000800)='./file3\x00', 0x80000000) ioctl$RTC_UIE_ON(r3, 0x7003) 1m30.001460471s ago: executing program 7 (id=5069): syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0x5, 0x4}, {0xffff, 0x69c9}}]}}, 0x11) syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0xa0000) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x401, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001580)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) 1m28.037850231s ago: executing program 7 (id=5071): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000300)=0x1, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vlan0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "91cee5d1aaab0bdae71fa083cdb51f81695df41766cb3cafb1fda3fa3e6025f2", "56ec92082cf2860d356454fa90602d519e8f47084b09891636f43dddd16435c0", "d868f3eda7bf2ab8a883c3720bd152932480f95fec0f7a20d2b6e1f604a4654a", "1133a33fd4d60bebed50cc1c19d0e83eba095ed99278ccc2c5e88011c3cdfe3d", "1bc3408abc5ea81d2fdf8fb811f5bbbcd52edb4579baf553bf793e47fdbf58cd", "e57f46ce962396e1eb375f67", 0x0, 0x8ef, 0x7ff, 0x8, 0x401}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) 1m26.613111567s ago: executing program 7 (id=5074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x140) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x300, 0xffffffff, 0x98, 0x188, 0x0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0xffffffff, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {0xff}, 0x6, 0x0, 0x32}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x7468, 0x99e, 0x1}}, @common=@addrtype={{0x30}, {0x10, 0xc0, 0x1, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'geneve1\x00', 'wlan1\x00', {}, {}, 0x21}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x0, [], 0x0, 0x2}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x3b2fe5ff, 0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 1m10.288723313s ago: executing program 36 (id=5074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x140) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x300, 0xffffffff, 0x98, 0x188, 0x0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0xffffffff, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {0xff}, 0x6, 0x0, 0x32}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x7468, 0x99e, 0x1}}, @common=@addrtype={{0x30}, {0x10, 0xc0, 0x1, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'geneve1\x00', 'wlan1\x00', {}, {}, 0x21}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x0, [], 0x0, 0x2}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x3b2fe5ff, 0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 38.893286889s ago: executing program 6 (id=5143): mount(0x0, &(0x7f00000000c0)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x10, 0x572, 0x1, 0x6, "ff000d00009a468e0cd912098d00"}) readv(r0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000a40)={0x1, 0x1, 0x8, 0xf1f, 0xb, "0900000009d794c1"}) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x14, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000a80)=0x8d) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000ac0)=0x9) 38.567395062s ago: executing program 6 (id=5145): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000015980)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, 0x0, 0x0) getpeername$inet(r4, 0x0, 0x0) 37.083079954s ago: executing program 6 (id=5146): r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 34.68021866s ago: executing program 6 (id=5152): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'dummy0\x00', @remote}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0}, 0x4040000) 34.401326208s ago: executing program 6 (id=5153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x7d69b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0xe3}, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x25fb, &(0x7f0000000000)={0x0, 0x42a, 0x400, 0x0, 0x64}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2000) r4 = eventfd2(0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000200)=r4, 0x1) 32.239823758s ago: executing program 6 (id=5155): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001840)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f00000003c0)=""/186) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) lsetxattr$system_posix_acl(0x0, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [], {0x8}, {0x10}}, 0x24, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 16.869150508s ago: executing program 37 (id=5155): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001840)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f00000003c0)=""/186) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) lsetxattr$system_posix_acl(0x0, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [], {0x8}, {0x10}}, 0x24, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 15.659497971s ago: executing program 8 (id=5170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(&(0x7f00000000c0)={0x3564}, 0x18, 0x0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x4, 0x8fb, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48010}, 0x84) 14.084043142s ago: executing program 8 (id=5171): timer_settime(0x0, 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xff, 0x8, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f00000000c0), 0x1, 0x5bc, &(0x7f0000001440)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) umount2(&(0x7f0000000040)='.\x00', 0x2) write$char_usb(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.404673394s ago: executing program 8 (id=5176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = io_uring_setup(0x6bd, &(0x7f00000000c0)={0x0, 0x78cf, 0x400, 0x1, 0x5e}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x80000034) close_range(r3, 0xffffffffffffffff, 0x0) 11.229996493s ago: executing program 8 (id=5177): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c1040, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x0, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000100)=0x8000005, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 11.200627346s ago: executing program 2 (id=5178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) 9.540089156s ago: executing program 8 (id=5180): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', 0x0, 0x804040, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0xfffffee2) fanotify_init(0xf00, 0x0) setuid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file7/file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file7/file0\x00', 0x0) timer_create(0x1, &(0x7f0000000480)={0x0, 0x21, 0x800000000004}, &(0x7f00000004c0)) landlock_restrict_self(0xffffffffffffffff, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x101042, 0x15) 9.125458418s ago: executing program 2 (id=5181): timer_settime(0x0, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='maps\x00') syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x1ff) fallocate(r1, 0x10, 0x20004, 0x2000100007b) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 7.499727714s ago: executing program 4 (id=5183): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x1000414, &(0x7f0000000000)=ANY=[], 0x6, 0x81b, &(0x7f0000000a40)="$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") syz_mount_image$udf(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x10048, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRES32], 0x67, 0xc54, &(0x7f0000001280)="$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") prlimit64(0x0, 0xe, &(0x7f0000001f00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001f40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001f80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000020c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000002140), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002180), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000021c0)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fsopen(&(0x7f0000002200)='cgroup2\x00', 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f00000022c0)) 6.416281795s ago: executing program 2 (id=5184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8cd}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @broadcast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000440), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x24dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xf, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000005c0)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="27030200591114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.258336203s ago: executing program 4 (id=5185): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r4 = syz_io_uring_setup(0x31c5, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000580)={0x0, 0x20, 0x27, 0x2, 0x2d8, 0x0, r4}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip_vs\x00') pread64(r5, &(0x7f0000000500)=""/92, 0x5c, 0x4000000000000f3) 4.457823825s ago: executing program 2 (id=5186): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) close(0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x20, 0x20, 0x20}) r4 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) 3.62138276s ago: executing program 4 (id=5187): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r2, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 2.487047396s ago: executing program 2 (id=5188): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000001700)="$eJzs3V9rm9UfAPDvk6bdn26/dTDGTy+ksAsnc+na+meCF/NSdDjQ+xnarIymy2jSsdaB24W78UaGIOJAfAHeezl8A76KgQ6GjqIX3lSe9EmXNUmbtpnpzOcDac95npOcc/I85+R78iQkgIE1nv7JRbwUEV8lEcea9uUj2zm+Xm71ya2Z9JbE2trHvyeRZNsa5ZPs/2iW+X9E/PxFxJlca73V5ZX5YrlcWszyE7WF6xPV5ZWzVxeKc6W50rWp6enzb05PvfP2Wz3r62uX/vr2owfvn//y1Oo3Pz46fi+JC3Ek29fcjz243ZwZj/HsORmOC5sKTvagsv0k6XcD2JWhbJwPRzoHHIuhbNQD/32fR8QaMKAS4x8GVCMOaKzte7QOfmE8fm99AdTa//z6eyNxsL42OryaPLMySte7Yz2oP63jp9/u30tv0bv3IQC2dftORJzL51vnvySb/3bvXBdlNtexw/lvbYdNApo8SOOf19vFP5WsxMH6383xz2ibsbsb24//3KMeVNNRGv+92zb+3bhoNTaU5Y7WY77h5MrVcimd2/4XEadj+ECa3+p6zvnVhx3nqafx30g9Bkzrb8SCWTse5Q88e5/ZYq24lz43e3wn4uW28W+yEf8mbY5/+nxc6rKOk6X7r3Ta1xz/tu//87X2Q8Sr2fG//cya6OkVrWTr65MT9fNhonFWtPrz7slfOtXfuf9Hn0NvW6XH/3Db83+j/2NJ8/Xa6s7r+P7g36VO+7Y//u3P/5Hkk3p6JNt2s1irLU5GjCQftm6fenrfRr5RPu3/6VPtx/9W5/+hiPi0y/7fPXG3Y9F+n/9p/2d3dPx3nnj4wWffdaq/u+P/Rj11OtvSzfzXbQP38twBAAAAAADAfpOLiCOR5Aob6VyuUFj/fMeJOJwrV6q1M1cqS9dmo/5d2bEYzjWudI82fR5iMvs8bCM/tSk/HRHHI+LroUP1fGGmUp7td+cBAAAAAAAAAAAAAAAAAABgnxjt8P3/1K9D/W4d8Nz5yW8YXNuO/1780hOwL3n9h8Fl/MPgMv5hcBn/MLjySb9bAPSL138YXMY/DC7jHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq0sWL6W1t9cmtmTQ/e2N5ab5y4+xsqTpfWFiaKcxUFq8X5ho/ELKw5YMlf0S5Urk+ORVLNydqpWptorq8cnmhsnStdvnqQnGudLk0/G90CgAAAAAAAAAAAAAAAAAAAF4w1eWV+WK5XFqUkNhVIr8/miGxnmgM7D0/YH/nJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo9k8AAAD//24dNcY=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x64042, 0x49) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x6549bfc8e202b0dd, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 2.166491288s ago: executing program 4 (id=5189): timerfd_create(0x0, 0x0) timerfd_create(0x0, 0x0) clock_adjtime(0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) lseek(0xffffffffffffffff, 0xffffffff, 0x1) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0xfffffffffffffd52}, {0x6, 0x1, 0x41c}}}, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) read$msr(r0, &(0x7f0000000e00)=""/102392, 0x18ff8) open_tree(0xffffffffffffff9c, 0x0, 0x8001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 1.006598227s ago: executing program 2 (id=5190): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) ptrace(0x10, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) waitid(0x2, r3, 0x0, 0x4, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "12"}], 0x18}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) memfd_secret(0x80000) 774.247111ms ago: executing program 4 (id=5191): r0 = getpgrp(0xffffffffffffffff) sched_setattr(r0, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x890b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000004c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f00000195c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000019600)='./sys\x00', &(0x7f0000019640)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019680)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r4, &(0x7f00000196c0)=""/265, 0x109) 370.571852ms ago: executing program 8 (id=5192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20040844) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94) 0s ago: executing program 4 (id=5193): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYBLOB='+pids '], 0x6) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2b, 'cpu'}]}, 0xb) r2 = socket(0xa, 0x3, 0x3a) getsockopt$inet_mreqn(r2, 0x0, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB="04130d03c9000100c8000104c900"], 0x10) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_rsp={{0x7, 0xb, 0x4}, {0x7fff, 0x100}}]}}, 0x11) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "804dc5d30a6f1591"}}}, 0x11) syz_usb_connect$uac2(0x2, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) syz_open_dev$sg(0x0, 0x0, 0x8002) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') kernel console output (not intermixed with test programs): .4.4581': attribute type 2 has an invalid length. [ 1158.760996][T20217] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1158.861464][T20217] CIFS: Attempting to mount \\127.0.0.1\share [ 1159.342463][T20233] UBIFS error (pid: 20233): cannot open "(null)", error -22 [ 1159.685309][T20217] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1159.998825][T20217] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1160.104703][ T26] audit: type=1326 audit(2000000594.727:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20234 comm="syz.1.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e8d9f559 code=0x7ffc0000 [ 1160.146107][ T26] audit: type=1326 audit(2000000594.727:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20234 comm="syz.1.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00e8d9f559 code=0x7ffc0000 [ 1160.192980][ T26] audit: type=1326 audit(2000000594.727:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20234 comm="syz.1.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e8d9f559 code=0x7ffc0000 [ 1160.230893][ T26] audit: type=1326 audit(2000000594.727:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20234 comm="syz.1.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f00e8d9f559 code=0x7ffc0000 [ 1160.262475][ T26] audit: type=1326 audit(2000000594.727:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20234 comm="syz.1.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e8d9f559 code=0x7ffc0000 [ 1160.300599][ T26] audit: type=1326 audit(2000000594.727:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20234 comm="syz.1.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f00e8d9f559 code=0x7ffc0000 [ 1160.326514][ T26] audit: type=1326 audit(2000000594.727:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20234 comm="syz.1.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e8d9f559 code=0x7ffc0000 [ 1160.352655][ T26] audit: type=1326 audit(2000000594.727:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20234 comm="syz.1.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00e8d9f559 code=0x7ffc0000 [ 1160.377563][ T26] audit: type=1326 audit(2000000594.727:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20234 comm="syz.1.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e8d9f559 code=0x7ffc0000 [ 1160.406808][ T26] audit: type=1326 audit(2000000594.727:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20234 comm="syz.1.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00e8d9f559 code=0x7ffc0000 [ 1161.168711][T20253] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4602'. [ 1165.342572][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1165.425190][T20298] netlink: 'syz.2.4615': attribute type 1 has an invalid length. [ 1165.487316][T20295] .`: (slave bridge0): Releasing backup interface [ 1165.615844][T20295] team0: Failed to send options change via netlink (err -105) [ 1166.038073][T20295] team0: Port device bridge0 added [ 1166.195131][T20299] device lo left promiscuous mode [ 1166.200352][T20299] device tunl0 left promiscuous mode [ 1166.271368][T20299] device gre0 left promiscuous mode [ 1166.360014][T20299] device gretap0 left promiscuous mode [ 1166.371674][T20299] device erspan0 left promiscuous mode [ 1166.404009][T20299] device ip_vti0 left promiscuous mode [ 1166.411675][T20299] device ip6_vti0 left promiscuous mode [ 1166.424050][T20299] device sit0 left promiscuous mode [ 1166.429669][T20299] device ip6tnl0 left promiscuous mode [ 1166.436743][T20299] device ip6gre0 left promiscuous mode [ 1166.442559][T20299] device ip6gretap0 left promiscuous mode [ 1167.024334][T20299] device .` left promiscuous mode [ 1167.172719][T20299] device team0 left promiscuous mode [ 1167.178533][T20299] device bridge0 left promiscuous mode [ 1167.209083][T20299] device dummy0 left promiscuous mode [ 1167.217419][T20299] device nlmon0 left promiscuous mode [ 1167.223024][T20299] device caif0 left promiscuous mode [ 1167.336655][T20299] device batadv0 left promiscuous mode [ 1167.363554][T20299] device veth0 left promiscuous mode [ 1167.376755][T20299] device veth1 left promiscuous mode [ 1167.413126][T20299] device wg0 left promiscuous mode [ 1167.449046][T20299] device wg1 left promiscuous mode [ 1167.475620][T20299] device wg2 left promiscuous mode [ 1167.495672][T20299] device veth0_to_bridge left promiscuous mode [ 1167.513961][T20299] device bridge_slave_0 left promiscuous mode [ 1167.520831][T20299] device veth1_to_bridge left promiscuous mode [ 1167.527336][T20299] device bridge_slave_1 left promiscuous mode [ 1167.534412][T20299] device veth0_to_bond left promiscuous mode [ 1167.540590][T20299] device bond_slave_0 left promiscuous mode [ 1167.546748][T20299] device veth1_to_team left promiscuous mode [ 1167.552869][T20299] device team_slave_1 left promiscuous mode [ 1167.559106][T20299] device veth1_to_batadv left promiscuous mode [ 1167.565489][T20299] device batadv_slave_1 left promiscuous mode [ 1167.571696][T20299] device xfrm0 left promiscuous mode [ 1167.577285][T20299] device veth0_to_hsr left promiscuous mode [ 1167.739369][T20299] device veth1_to_hsr left promiscuous mode [ 1167.962298][T20299] device hsr0 left promiscuous mode [ 1168.157233][T20299] device veth1_virt_wifi left promiscuous mode [ 1168.206909][T20299] device veth0_virt_wifi left promiscuous mode [ 1168.245963][T20299] device virt_wifi0 left promiscuous mode [ 1168.278839][T20299] device vlan0 left promiscuous mode [ 1168.305297][T20299] device vlan1 left promiscuous mode [ 1168.340472][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 1168.340488][ T26] audit: type=1326 audit(2000000602.957:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.2.4623" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf579f559 code=0x7ffc0000 [ 1168.380741][T20299] device macvlan0 left promiscuous mode [ 1168.410077][ T26] audit: type=1326 audit(2000000602.997:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.2.4623" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf579f559 code=0x7ffc0000 [ 1168.453656][T20299] device macvlan1 left promiscuous mode [ 1168.459195][ T26] audit: type=1326 audit(2000000602.997:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.2.4623" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf579f559 code=0x7ffc0000 [ 1168.459506][T20299] device ipvlan0 left promiscuous mode [ 1168.483969][ T26] audit: type=1326 audit(2000000602.997:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.2.4623" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf579f559 code=0x7ffc0000 [ 1168.518775][ T26] audit: type=1326 audit(2000000602.997:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.2.4623" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fdcf579f559 code=0x7ffc0000 [ 1168.550671][ T26] audit: type=1326 audit(2000000602.997:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.2.4623" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf579f559 code=0x7ffc0000 [ 1168.581190][ T26] audit: type=1326 audit(2000000602.997:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.2.4623" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf579f559 code=0x7ffc0000 [ 1168.593558][T20299] device ipvlan1 left promiscuous mode [ 1168.621240][ T26] audit: type=1326 audit(2000000603.017:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.2.4623" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf579f559 code=0x7ffc0000 [ 1168.623163][T20299] device macvtap0 left promiscuous mode [ 1168.651780][ T26] audit: type=1326 audit(2000000603.017:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.2.4623" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf579f559 code=0x7ffc0000 [ 1168.683432][ T26] audit: type=1326 audit(2000000603.017:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.2.4623" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdcf579f559 code=0x7ffc0000 [ 1168.708195][T20299] device macsec0 left promiscuous mode [ 1168.708319][T20299] device geneve0 left promiscuous mode [ 1168.762098][T20299] device geneve1 left promiscuous mode [ 1168.767856][T20299] device netdevsim0 left promiscuous mode [ 1168.775493][T20299] device netdevsim1 left promiscuous mode [ 1168.781499][T20299] device netdevsim2 left promiscuous mode [ 1168.796477][T20299] device netdevsim3 left promiscuous mode [ 1168.813787][T20299] device wlan0 left promiscuous mode [ 1168.819272][T20299] device wlan1 left promiscuous mode [ 1168.825060][T20299] device syzkaller0 left promiscuous mode [ 1168.830933][T20299] device bond1 left promiscuous mode [ 1168.836710][T20299] device wireguard0 left promiscuous mode [ 1168.842562][T20299] device sit1 left promiscuous mode [ 1168.858294][T20299] device gre1 left promiscuous mode [ 1168.868473][T20299] device bond2 left promiscuous mode [ 1168.883668][T20299] device gretap1 left promiscuous mode [ 1168.889274][T20299] device veth2 left promiscuous mode [ 1168.900310][T20299] device veth3 left promiscuous mode [ 1168.925869][T20299] device bond3 left promiscuous mode [ 1168.954962][T20299] device bond0 left promiscuous mode [ 1168.960483][T20299] device bond4 left promiscuous mode [ 1168.999889][T20299] device veth4 left promiscuous mode [ 1169.030256][T20299] device veth5 left promiscuous mode [ 1169.056655][T20299] device vlan2 left promiscuous mode [ 1169.076522][T20299] device bond5 left promiscuous mode [ 1169.092287][T20299] device bond6 left promiscuous mode [ 1169.103605][T20299] device macvlan2 left promiscuous mode [ 1169.131523][T20299] device bond7 left promiscuous mode [ 1169.145790][T20299] device bond8 left promiscuous mode [ 1169.151236][T20299] device bridge1 left promiscuous mode [ 1169.162215][T20299] device bond9 left promiscuous mode [ 1169.169423][T20299] device erspan1 left promiscuous mode [ 1169.180231][T20299] device bond10 left promiscuous mode [ 1169.187557][T20299] device veth6 left promiscuous mode [ 1169.193248][T20299] device veth7 left promiscuous mode [ 1169.204024][T20299] device  left promiscuous mode [ 1169.209199][T20299] device bond11 left promiscuous mode [ 1169.281363][T20299] device vlan3 left promiscuous mode [ 1169.297146][T20299] device bond12 left promiscuous mode [ 1169.302932][T20299] device geneve2 left promiscuous mode [ 1169.329484][T20299] device bond13 left promiscuous mode [ 1169.393815][T20299] device macvlan3 left promiscuous mode [ 1169.399580][T20299] device bridge2 left promiscuous mode [ 1169.413629][T20299] device vxlan0 left promiscuous mode [ 1169.423682][T20299] device vlan4 left promiscuous mode [ 1169.429064][T20299] device bond14 left promiscuous mode [ 1170.330076][T20299] device bridge3 left promiscuous mode [ 1170.392520][T20299] device syztnl2 left promiscuous mode [ 1170.441877][T20299] device ipip0 left promiscuous mode [ 1170.448777][T20299] device bond15 left promiscuous mode [ 1171.713935][T20342] ceph: No mds server is up or the cluster is laggy [ 1172.875339][ T4284] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1174.009421][T20381] team0: Device bridge0 is of different type [ 1174.684725][T20381] device bridge_slave_0 left promiscuous mode [ 1176.117211][T20385] rxe_eth0 speed is unknown, defaulting to 1000 [ 1176.344419][T20403] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1176.369689][T20403] ip_tables: iptables: counters copy to user failed while replacing table [ 1176.385221][T20403] ip_tables: iptables: counters copy to user failed while replacing table [ 1176.684483][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4649'. [ 1177.624786][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.631147][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.186170][T20443] device bridge0 entered promiscuous mode [ 1181.265742][T20443] team0: Device bridge0 is of different type [ 1181.377860][T20445] device lo left promiscuous mode [ 1181.383114][T20445] device tunl0 left promiscuous mode [ 1181.392782][T20445] device gre0 left promiscuous mode [ 1181.401355][T20445] device gretap0 left promiscuous mode [ 1181.411116][T20445] device erspan0 left promiscuous mode [ 1181.419937][T20445] device ip_vti0 left promiscuous mode [ 1181.429450][T20445] device ip6_vti0 left promiscuous mode [ 1181.438466][T20445] device sit0 left promiscuous mode [ 1181.448155][T20445] device ip6tnl0 left promiscuous mode [ 1181.456689][T20445] device ip6gre0 left promiscuous mode [ 1181.462354][T20445] device ip6gretap0 left promiscuous mode [ 1181.472268][T20445] device team0 left promiscuous mode [ 1181.482308][T20445] device dummy0 left promiscuous mode [ 1181.491794][T20445] device nlmon0 left promiscuous mode [ 1181.500138][T20445] device caif0 left promiscuous mode [ 1181.510588][T20445] device vxcan0 left promiscuous mode [ 1181.519514][T20445] device vxcan1 left promiscuous mode [ 1181.529043][T20445] device veth0 left promiscuous mode [ 1181.544291][T20445] device veth1 left promiscuous mode [ 1181.549780][T20445] device wg0 left promiscuous mode [ 1181.558137][T20445] device wg1 left promiscuous mode [ 1181.567695][T20445] device wg2 left promiscuous mode [ 1181.572973][T20445] device veth0_to_bridge left promiscuous mode [ 1181.582077][T20445] device bridge_slave_0 left promiscuous mode [ 1181.593243][T20445] device veth1_to_bridge left promiscuous mode [ 1181.602233][T20445] device bridge_slave_1 left promiscuous mode [ 1181.616397][T20445] device bond_slave_0 left promiscuous mode [ 1181.622522][T20445] device veth0_to_team left promiscuous mode [ 1181.632696][T20445] device team_slave_0 left promiscuous mode [ 1181.641699][T20445] device veth1_to_team left promiscuous mode [ 1181.651684][T20445] device team_slave_1 left promiscuous mode [ 1181.660418][T20445] device veth0_to_batadv left promiscuous mode [ 1181.680352][T20445] device batadv_slave_0 left promiscuous mode [ 1181.690424][T20445] device veth1_to_batadv left promiscuous mode [ 1181.704844][T20445] device batadv_slave_1 left promiscuous mode [ 1181.711076][T20445] device xfrm0 left promiscuous mode [ 1181.722876][T20445] device veth0_to_hsr left promiscuous mode [ 1181.731827][T20445] device veth1_to_hsr left promiscuous mode [ 1181.744895][T20445] device hsr0 left promiscuous mode [ 1181.750342][T20445] device veth1_virt_wifi left promiscuous mode [ 1181.761845][T20445] device veth0_virt_wifi left promiscuous mode [ 1181.769845][T20445] device virt_wifi0 left promiscuous mode [ 1181.790089][T20445] device vlan0 left promiscuous mode [ 1181.799204][T20445] device vlan1 left promiscuous mode [ 1181.823929][T20445] device macvlan0 left promiscuous mode [ 1181.834538][T20445] device macvlan1 left promiscuous mode [ 1181.860951][T20445] device ipvlan0 left promiscuous mode [ 1181.901468][T20445] device ipvlan1 left promiscuous mode [ 1181.942252][T20445] device macvtap0 left promiscuous mode [ 1181.992850][T20445] device macsec0 left promiscuous mode [ 1182.006443][T20445] device geneve0 left promiscuous mode [ 1182.023143][T20445] device geneve1 left promiscuous mode [ 1182.037110][T20445] device netdevsim0 left promiscuous mode [ 1182.049944][T20445] device netdevsim1 left promiscuous mode [ 1182.056468][T20445] device netdevsim2 left promiscuous mode [ 1182.062391][T20445] device netdevsim3 left promiscuous mode [ 1182.076298][T20445] device bridge1 left promiscuous mode [ 1182.082075][T20445] device geneve2 left promiscuous mode [ 1182.092763][T20445] device bond2 left promiscuous mode [ 1182.099795][T20445] device veth2 left promiscuous mode [ 1182.111054][T20445] device veth3 left promiscuous mode [ 1182.118103][T20445] device bond3 left promiscuous mode [ 1182.129397][T20445] device bridge2 left promiscuous mode [ 1182.137579][T20445] device bond4 left promiscuous mode [ 1182.143074][T20445] device gretap1 left promiscuous mode [ 1182.149089][T20445] device bridge3 left promiscuous mode [ 1182.155802][T20445] device bond8 left promiscuous mode [ 1182.162118][T20445] device vlan4 left promiscuous mode [ 1182.169768][T20445] device ip6gre1 left promiscuous mode [ 1182.177012][T20445] device ip6erspan0 left promiscuous mode [ 1182.188505][T20445] device bond14 left promiscuous mode [ 1182.202735][T20445] device ip6gre2 left promiscuous mode [ 1182.209835][T20455] netlink: 'syz.0.4661': attribute type 1 has an invalid length. [ 1182.276547][T20455] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1182.296708][T20457] bond4: (slave lo): Releasing backup interface [ 1182.304385][T20457] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1182.352273][T20457] device erspan0 left promiscuous mode [ 1182.379825][T20457] bridge3: port 1(erspan0) entered disabled state [ 1182.451264][T20457] team0: Failed to send options change via netlink (err -105) [ 1182.473699][T20457] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 1182.502324][T20457] team0: Port device bridge0 removed [ 1182.528481][T20457] bond12: (slave veth0_to_bond): Releasing backup interface [ 1182.613201][T20457] tipc: Resetting bearer [ 1182.640718][T20457] bond9: (slave bridge4): Releasing active interface [ 1182.681981][T20457] bond11: (slave veth9): Releasing active interface [ 1182.713669][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4661'. [ 1182.822012][T20459] team0: Failed to send options change via netlink (err -105) [ 1182.846542][T20459] team0: Mode changed to "activebackup" [ 1182.901873][T20460] bond16: (slave bridge4): making interface the new active one [ 1182.912905][T20460] bond16: (slave bridge4): Enslaving as an active interface with an up link [ 1182.971172][T16404] IPv6: ADDRCONF(NETDEV_CHANGE): bond16: link becomes ready [ 1183.775219][T20475] rxe_eth0 speed is unknown, defaulting to 1000 [ 1188.186554][T20510] bond1: option mode: unable to set because the bond device is up [ 1194.173624][T20549] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4684'. [ 1195.487015][T20549] bond0 (unregistering): Released all slaves [ 1196.925512][T20573] bond3: option mode: unable to set because the bond device has slaves [ 1197.012305][T20573] bond3: (slave vlan6): Opening slave failed [ 1198.859453][T20596] overlayfs: failed to clone upperpath [ 1199.310937][T20602] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4706'. [ 1199.610222][T20602] bond0 (unregistering): Released all slaves [ 1201.996902][T20616] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1202.012758][T20616] bond3: (slave macvlan2): Enslaving as an active interface with a down link [ 1203.287758][T20641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4726'. [ 1204.315265][T20649] netlink: 'syz.0.4714': attribute type 1 has an invalid length. [ 1204.746155][T20660] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1205.322200][T20650] bond17: (slave gretap2): making interface the new active one [ 1205.377314][T20650] bond17: (slave gretap2): Enslaving as an active interface with an up link [ 1205.934699][T20653] device macvlan5 entered promiscuous mode [ 1205.941828][T20653] device bond17 entered promiscuous mode [ 1205.955886][T20653] device gretap2 entered promiscuous mode [ 1205.965060][T20653] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1205.985693][T20653] bond17: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1206.056466][T20653] device bond17 left promiscuous mode [ 1206.076887][T20653] device gretap2 left promiscuous mode [ 1206.170490][T20656] team0: Port device bridge0 added [ 1206.352239][T20681] batman_adv: batadv0: Adding interface: veth0 [ 1206.366772][T20681] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.071189][T20681] batman_adv: batadv0: Interface activated: veth0 [ 1207.415740][T20681] batman_adv: batadv0: Interface deactivated: veth0 [ 1207.505300][T20692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4723'. [ 1207.893428][T20681] batman_adv: batadv0: Removing interface: veth0 [ 1211.446373][T20733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4736'. [ 1212.278118][T20737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1212.567489][T20737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1213.193552][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1214.338101][T20756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4747'. [ 1214.356791][T20756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4747'. [ 1217.738843][T20783] netlink: 'syz.1.4756': attribute type 10 has an invalid length. [ 1217.789220][T20783] netlink: 'syz.1.4756': attribute type 4 has an invalid length. [ 1217.798026][T20783] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4756'. [ 1217.870192][T20785] device bridge_slave_0 entered promiscuous mode [ 1217.877323][T20787] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1217.932147][T20785] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1218.007227][T20787] ip_tables: iptables: counters copy to user failed while replacing table [ 1218.058185][T20790] ip_tables: iptables: counters copy to user failed while replacing table [ 1218.143908][T20788] netlink: 'syz.2.4757': attribute type 9 has an invalid length. [ 1223.009153][T20826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4768'. [ 1226.139408][T20870] netlink: 'syz.3.4779': attribute type 1 has an invalid length. [ 1226.238819][T20870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.364073][T20873] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.395496][T20873] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.414272][T20873] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.434536][T20873] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.457058][T20873] bond0: (slave geneve2): making interface the new active one [ 1226.546578][T20873] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 1226.582249][T11496] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1229.398177][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1229.415214][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1229.428189][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1229.441583][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1229.457680][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1229.465518][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1229.662694][T20889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1230.007578][T20893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4797'. [ 1230.032002][T20893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4797'. [ 1230.155194][T20895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4797'. [ 1230.468367][T20889] chnl_net:caif_netlink_parms(): no params data found [ 1231.513638][ T4280] Bluetooth: hci5: command 0x0409 tx timeout [ 1231.530719][T20889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.307398][T20889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.340461][T20889] device bridge_slave_0 entered promiscuous mode [ 1232.385482][T20889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.461403][T20889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.470145][T20889] device bridge_slave_1 entered promiscuous mode [ 1232.594230][T20889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1232.652645][T20889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.822307][T20889] team0: Port device team_slave_0 added [ 1232.867826][T20889] team0: Port device team_slave_1 added [ 1233.031373][T20889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.052094][T20889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.089549][T20889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.116918][T20889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.128399][T20889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.179744][T20889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.916798][ T4280] Bluetooth: hci5: command 0x041b tx timeout [ 1234.887825][T20889] device hsr_slave_0 entered promiscuous mode [ 1235.124809][T20889] device hsr_slave_1 entered promiscuous mode [ 1235.160240][T20889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1235.177209][T20889] Cannot create hsr debugfs directory [ 1236.003619][ T4280] Bluetooth: hci5: command 0x040f tx timeout [ 1237.640741][T20950] rxe_eth0 speed is unknown, defaulting to 1000 [ 1237.695127][T20889] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1237.749051][T20889] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1237.789725][T20889] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1237.832513][T20889] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1238.074366][ T4280] Bluetooth: hci5: command 0x0419 tx timeout [ 1238.123610][T20889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.172924][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1238.187744][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1238.214711][T20889] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.238127][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1238.247706][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1238.264305][ T4628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.271576][ T4628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.360102][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1238.489955][T11949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1238.518568][T11949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1238.531026][T11949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.538277][T11949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.622485][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1238.640488][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1238.659294][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1238.672162][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1238.686857][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1238.704623][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1238.735389][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1238.748680][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1238.757791][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1238.767857][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1238.778175][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1238.789680][T20889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1238.813174][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.819546][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.923188][T20957] rxe_eth0 speed is unknown, defaulting to 1000 [ 1239.732581][T20889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.757684][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1239.766233][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1240.759384][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1240.769550][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1240.786939][T20889] device veth0_vlan entered promiscuous mode [ 1240.794602][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1240.810231][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1240.827844][T20889] device veth1_vlan entered promiscuous mode [ 1240.835447][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1240.844613][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1240.853036][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1241.088981][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1241.098190][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1241.111973][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1241.132517][T20889] device veth0_macvtap entered promiscuous mode [ 1241.211432][T20889] device veth1_macvtap entered promiscuous mode [ 1241.277652][T20889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1241.297965][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1241.330977][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1241.350181][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1241.374854][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1241.395716][T20889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1241.410990][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1241.423104][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1241.436955][T20889] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.448321][T20889] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.457989][T20889] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.467562][T20889] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.727068][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.738201][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.754926][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1241.856950][ T4628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.872182][ T4628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.882641][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1242.207076][T20976] loop5: detected capacity change from 0 to 4096 [ 1242.369124][T20976] ntfs3: loop5: Failed to load $Extend. [ 1242.677813][T20981] ntfs3: loop5: ino=23, "memory.events.local" mmap(write) compressed not supported [ 1242.890418][T20889] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 1242.924814][T20889] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1243.718809][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 1243.718825][ T26] audit: type=1326 audit(2000000678.337:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20985 comm="syz.5.4805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36c39f559 code=0x0 [ 1244.293940][T20993] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4818'. [ 1246.623970][ C1] net_ratelimit: 29 callbacks suppressed [ 1251.756217][T21063] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1251.780343][T21063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1251.809270][T21063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1251.829579][T21063] device bridge_slave_0 left promiscuous mode [ 1251.865022][T21063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.911657][T21063] device bridge_slave_1 left promiscuous mode [ 1251.940038][T21063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.042825][T21063] bond0: (slave bond_slave_0): Releasing backup interface [ 1252.386198][T21063] bond0: (slave bond_slave_1): Releasing backup interface [ 1252.553069][ C1] net_ratelimit: 10 callbacks suppressed [ 1253.076998][T21063] team0: Port device team_slave_0 removed [ 1253.109314][T21063] team0: Port device team_slave_1 removed [ 1253.135237][T21063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.155800][T21063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.190487][T21063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.208114][T21063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.243887][T21067] team0: Mode changed to "activebackup" [ 1253.287075][T21071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1253.419795][T21085] netlink: 146340 bytes leftover after parsing attributes in process `syz.5.4838'. [ 1253.439864][T21085] openvswitch: netlink: Key type 386 is out of range max 32 [ 1257.672339][ C1] net_ratelimit: 4 callbacks suppressed [ 1259.692867][T21126] overlayfs: failed to clone upperpath [ 1259.889657][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1259.899498][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1259.907208][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1259.917311][ T4280] Workqueue: hci1 hci_rx_work [ 1259.922143][ T4280] Call Trace: [ 1259.925471][ T4280] [ 1259.928438][ T4280] dump_stack_lvl+0x188/0x24e [ 1259.933176][ T4280] ? show_regs_print_info+0x12/0x12 [ 1259.938432][ T4280] ? load_image+0x410/0x410 [ 1259.942980][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1259.943112][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1259.943152][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1259.943187][ T4280] kobject_add_internal+0x617/0xca0 [ 1259.958258][ T4280] kobject_add+0x160/0x230 [ 1259.967981][ T4280] ? kobject_init+0x1c0/0x1c0 [ 1259.972720][ T4280] ? __raw_spin_lock_init+0x41/0x100 [ 1259.978045][ T4280] ? klist_children_get+0x50/0x50 [ 1259.983183][ T4280] ? get_device_parent+0x121/0x3e0 [ 1259.988369][ T4280] device_add+0x470/0x1050 [ 1259.988410][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1259.997806][ T4280] le_conn_complete_evt+0xf93/0x15c0 [ 1260.003128][ T4280] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1260.009406][ T4280] ? param_get_dyndbg_classes+0x160/0x160 [ 1260.015201][ T4280] ? mutex_unlock+0x10/0x10 [ 1260.019763][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1260.025364][ T4280] ? hci_remote_host_features_evt+0x230/0x230 [ 1260.031455][ T4280] hci_event_packet+0x7b3/0x1290 [ 1260.036445][ T4280] ? lock_chain_count+0x20/0x20 [ 1260.041395][ T4280] ? bis_list+0x280/0x280 [ 1260.045769][ T4280] ? lockdep_hardirqs_on+0x94/0x140 [ 1260.051007][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1260.056411][ T4280] hci_rx_work+0x3eb/0xd40 [ 1260.056445][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1260.056481][ T4280] ? process_one_work+0x7b4/0x1160 [ 1260.056563][ T4280] process_one_work+0x8ab/0x1160 [ 1260.056602][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1260.056630][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1260.056658][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1260.056687][ T4280] ? wq_worker_running+0x97/0x190 [ 1260.056710][ T4280] worker_thread+0xaf5/0x12a0 [ 1260.086940][ T4280] kthread+0x29d/0x330 [ 1260.106397][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1260.111473][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1260.116107][ T4280] ret_from_fork+0x1f/0x30 [ 1260.120612][ T4280] [ 1260.126962][ T4280] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1260.140520][ T4280] Bluetooth: hci1: failed to register connection device [ 1262.386359][T21167] netlink: 'syz.1.4858': attribute type 2 has an invalid length. [ 1262.664432][T21172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4859'. [ 1262.687882][T21172] loop5: detected capacity change from 0 to 512 [ 1262.993825][T21174] loop5: detected capacity change from 0 to 512 [ 1263.133888][T21174] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1263.149980][T21174] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1263.190765][ T26] audit: type=1800 audit(2000000953.812:1764): pid=21174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4860" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1263.616731][T20889] EXT4-fs (loop5): unmounting filesystem. [ 1265.218462][T21199] rxe_eth0 speed is unknown, defaulting to 1000 [ 1265.240515][T21204] jffs2: notice: (21204) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1266.933860][T21222] netlink: 'syz.2.4872': attribute type 2 has an invalid length. [ 1268.790894][ C1] net_ratelimit: 8 callbacks suppressed [ 1268.850021][T21238] netlink: 'syz.1.4889': attribute type 11 has an invalid length. [ 1269.391619][T21244] rxe_eth0 speed is unknown, defaulting to 1000 [ 1269.679383][T19458] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.745917][T21255] overlayfs: failed to clone upperpath [ 1270.126290][T19458] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.410968][T19458] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.495170][T20367] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1270.508977][T20367] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1270.518745][T20367] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1270.528150][T20367] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1270.539223][T20367] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1270.547128][T20367] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1270.878479][T19458] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.925877][T21267] rxe_eth0 speed is unknown, defaulting to 1000 [ 1272.640681][T20367] Bluetooth: hci5: command 0x0409 tx timeout [ 1273.872260][T21293] rxe_eth0 speed is unknown, defaulting to 1000 [ 1274.065291][T21267] chnl_net:caif_netlink_parms(): no params data found [ 1274.710423][T20367] Bluetooth: hci5: command 0x041b tx timeout [ 1276.197562][T21267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.211064][T21267] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.232327][T21267] device bridge_slave_0 entered promiscuous mode [ 1276.255196][T21267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.273110][T21267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.297825][T21267] device bridge_slave_1 entered promiscuous mode [ 1276.692992][T21267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.724899][T21267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.790276][T20367] Bluetooth: hci5: command 0x040f tx timeout [ 1277.650382][T21267] team0: Port device team_slave_0 added [ 1277.697818][T21267] team0: Port device team_slave_1 added [ 1278.216802][T21267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.228387][T21267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.309986][T21267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.613082][T21267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1278.625062][T21267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.668982][T21267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1278.891666][T20367] Bluetooth: hci5: command 0x0419 tx timeout [ 1279.817706][T21267] device hsr_slave_0 entered promiscuous mode [ 1279.893863][T21267] device hsr_slave_1 entered promiscuous mode [ 1279.923852][T21267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1279.954464][T21267] Cannot create hsr debugfs directory [ 1280.075808][T20367] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1280.089556][T20367] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1280.100303][T20367] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1280.125218][T20367] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1280.133889][T20367] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1280.149065][T20367] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1280.178472][T19458] device hsr_slave_0 left promiscuous mode [ 1280.239883][T19458] device hsr_slave_1 left promiscuous mode [ 1280.556009][T19458] device veth1_macvtap left promiscuous mode [ 1280.571187][T19458] device veth0_macvtap left promiscuous mode [ 1280.579281][T19458] device veth1_vlan left promiscuous mode [ 1280.613388][T19458] device veth0_vlan left promiscuous mode [ 1282.229386][T20367] Bluetooth: hci6: command 0x0409 tx timeout [ 1284.309061][T20367] Bluetooth: hci6: command 0x041b tx timeout [ 1285.031506][T19458] bond0 (unregistering): Released all slaves [ 1285.427569][T21361] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1285.436501][T21361] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1285.600379][T21343] rxe_eth0 speed is unknown, defaulting to 1000 [ 1286.450908][T20367] Bluetooth: hci6: command 0x040f tx timeout [ 1288.461152][T21343] chnl_net:caif_netlink_parms(): no params data found [ 1288.468531][ T4280] Bluetooth: hci6: command 0x0419 tx timeout [ 1291.236354][T21343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.274411][T21343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.312110][T21343] device bridge_slave_0 entered promiscuous mode [ 1291.410802][T21267] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1291.466078][T21422] jffs2: notice: (21422) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1291.493523][T21343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.507086][T21343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.541010][T21343] device bridge_slave_1 entered promiscuous mode [ 1291.594439][T21267] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1291.658511][T21267] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1291.741014][T21343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.765646][T21343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.775098][T21267] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1291.896596][T21343] team0: Port device team_slave_0 added [ 1291.917409][T21343] team0: Port device team_slave_1 added [ 1292.302389][T21343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.313885][T21343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1292.396848][T21343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1292.436975][T21430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4910'. [ 1292.527093][T21343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.545229][T21343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1292.625379][T21343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1292.996966][T21343] device hsr_slave_0 entered promiscuous mode [ 1293.035997][T21343] device hsr_slave_1 entered promiscuous mode [ 1293.045218][T21343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1293.064270][T21343] Cannot create hsr debugfs directory [ 1293.159145][T21438] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1293.167197][T21441] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 1294.121352][T21267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.180484][T21449] futex_wake_op: syz.1.4914 tries to shift op by 144; fix this program [ 1294.401021][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1294.417153][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1294.458083][T21267] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.596801][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1294.641419][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1294.674858][T19458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.682055][T19458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.744583][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1294.779396][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1294.800902][T19458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.808062][T19458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.867041][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1294.903280][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1295.014070][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1295.039812][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1295.085084][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1295.224517][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1295.236618][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1295.281356][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1295.316529][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1295.359789][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1295.413298][T21267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1295.444061][T21267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1295.470356][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1295.499211][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1295.546963][T21343] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1295.682227][T21343] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1295.880021][T21343] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1296.009486][T21343] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1297.560690][T21343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.801174][T21343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1298.075178][T19457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1298.131009][T19457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1298.178624][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1298.210045][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1298.281120][T11943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.288313][T11943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1298.361951][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1298.420764][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1298.447125][T11943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.454338][T11943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.505617][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1298.519778][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1298.535605][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1298.616077][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1298.633778][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1298.645969][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1298.670933][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1298.691960][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1298.710193][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1298.733589][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1298.766065][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1298.810558][T21267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1298.821211][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1298.854541][T21343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1298.916519][T21343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1298.961962][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1298.989918][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1300.627441][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.637571][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.799074][T19457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1300.806658][T19457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1300.898659][T21343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1301.207477][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1301.237861][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1301.301375][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1301.332346][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1301.376822][T21267] device veth0_vlan entered promiscuous mode [ 1301.397884][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1301.407826][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1301.450598][T21267] device veth1_vlan entered promiscuous mode [ 1301.565195][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1301.593064][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1301.607042][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1301.636127][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1301.676967][T21267] device veth0_macvtap entered promiscuous mode [ 1301.724292][T21267] device veth1_macvtap entered promiscuous mode [ 1301.818746][T21267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1301.826358][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1301.843648][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1301.860129][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1301.899836][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1301.973964][T21267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1302.079217][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1302.094578][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1302.238905][T21267] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.413951][T21267] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.695191][T21267] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.828335][T21267] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.295083][T19454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1303.328821][T19454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1303.375803][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1303.429448][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1303.474295][T21343] device veth0_vlan entered promiscuous mode [ 1303.485552][T11949] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1304.369112][T11949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1304.419777][T11949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1304.509581][T21343] device veth1_vlan entered promiscuous mode [ 1304.532648][T11949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1304.569161][T11949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1304.591025][T11949] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1304.692916][T19451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1304.707350][T19451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1304.741800][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1304.788443][T19451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1304.797562][T19451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1304.845828][T21343] device veth0_macvtap entered promiscuous mode [ 1304.899770][T21343] device veth1_macvtap entered promiscuous mode [ 1304.990169][T21343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.046263][T21343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.082536][T21343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1305.100670][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1305.110766][ T4280] CPU: 0 PID: 4280 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1305.118357][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1305.128610][ T4280] Workqueue: hci4 hci_rx_work [ 1305.133359][ T4280] Call Trace: [ 1305.136714][ T4280] [ 1305.139694][ T4280] dump_stack_lvl+0x188/0x24e [ 1305.144512][ T4280] ? show_regs_print_info+0x12/0x12 [ 1305.149758][ T4280] ? load_image+0x410/0x410 [ 1305.154327][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1305.159520][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1305.164255][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1305.169506][ T4280] kobject_add_internal+0x617/0xca0 [ 1305.174759][ T4280] kobject_add+0x160/0x230 [ 1305.179220][ T4280] ? kobject_init+0x1c0/0x1c0 [ 1305.183948][ T4280] ? __raw_spin_lock_init+0x41/0x100 [ 1305.189283][ T4280] ? klist_children_get+0x50/0x50 [ 1305.194343][ T4280] ? get_device_parent+0x121/0x3e0 [ 1305.199510][ T4280] device_add+0x470/0x1050 [ 1305.203979][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1305.208946][ T4280] le_conn_complete_evt+0xf93/0x15c0 [ 1305.214292][ T4280] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1305.220552][ T4280] ? param_get_dyndbg_classes+0x160/0x160 [ 1305.226394][ T4280] ? mutex_unlock+0x10/0x10 [ 1305.230923][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1305.236497][ T4280] ? hci_remote_host_features_evt+0x230/0x230 [ 1305.242665][ T4280] hci_event_packet+0x7b3/0x1290 [ 1305.247626][ T4280] ? lock_chain_count+0x20/0x20 [ 1305.252490][ T4280] ? bis_list+0x280/0x280 [ 1305.256831][ T4280] ? lockdep_hardirqs_on+0x94/0x140 [ 1305.262045][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1305.267261][ T4280] hci_rx_work+0x3eb/0xd40 [ 1305.271696][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1305.276653][ T4280] ? process_one_work+0x7b4/0x1160 [ 1305.281778][ T4280] process_one_work+0x8ab/0x1160 [ 1305.286785][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1305.292428][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1305.297464][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1305.303021][ T4280] ? wq_worker_running+0x97/0x190 [ 1305.308054][ T4280] worker_thread+0xaf5/0x12a0 [ 1305.312764][ T4280] kthread+0x29d/0x330 [ 1305.316835][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1305.321880][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1305.326529][ T4280] ret_from_fork+0x1f/0x30 [ 1305.330981][ T4280] [ 1305.336354][ T4280] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1305.350489][ T4280] Bluetooth: hci4: failed to register connection device [ 1305.399743][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1305.418822][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1305.482119][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1305.525994][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1305.585367][T21343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1305.624320][T21343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.667490][T21343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1305.704675][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1305.735019][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1305.767672][T21343] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.811763][T21343] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.860987][T21343] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.907494][T21343] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.971653][T21581] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4883'. [ 1306.167113][T21582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4883'. [ 1306.553191][T19451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.564694][T19451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.595748][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1307.428953][ T4280] Bluetooth: hci4: command 0x2016 tx timeout [ 1307.913274][T11492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.936312][T11492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.955406][T11949] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1308.868376][ C1] net_ratelimit: 69 callbacks suppressed [ 1311.682939][T21647] xt_socket: unknown flags 0x4c [ 1313.994616][ C0] net_ratelimit: 19 callbacks suppressed [ 1319.268279][ C0] net_ratelimit: 23 callbacks suppressed [ 1321.334225][T21723] xt_socket: unknown flags 0x4c [ 1324.548176][ C0] net_ratelimit: 9 callbacks suppressed [ 1326.796153][T21761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4965'. [ 1328.455346][T21780] IPv6: NLM_F_CREATE should be specified when creating new route [ 1329.828156][ C0] net_ratelimit: 19 callbacks suppressed [ 1329.944682][T21791] xt_socket: unknown flags 0x4c [ 1330.777030][T21802] __vm_enough_memory: pid: 21802, comm: syz.6.4978, no enough memory for the allocation [ 1335.188199][ C1] net_ratelimit: 14 callbacks suppressed [ 1336.744924][T21832] tipc: Started in network mode [ 1336.750587][T21832] tipc: Node identity 2a5bc50a4f65, cluster identity 4711 [ 1337.158349][T21832] tipc: Enabled bearer , priority 0 [ 1337.173589][T21835] device syzkaller0 entered promiscuous mode [ 1337.206810][T21832] tipc: Resetting bearer [ 1337.256687][T21831] tipc: Resetting bearer [ 1337.395820][T21831] tipc: Disabling bearer [ 1337.555907][T21841] loop6: detected capacity change from 0 to 128 [ 1338.694016][ T4280] Bluetooth: to_multiplier 0 < 10 [ 1339.667950][T20367] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1339.686775][T20367] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1339.697222][T20367] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1339.716548][T20367] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1339.723720][T20972] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1339.734851][T20367] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1339.745241][T20367] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1339.969686][T20972] usb 7-1: not running at top speed; connect to a high speed hub [ 1339.989178][T20972] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.005712][T21853] rxe_eth0 speed is unknown, defaulting to 1000 [ 1340.019818][T20972] usb 7-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1340.048275][T20972] usb 7-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1340.067293][T20972] usb 7-1: Product: syz [ 1340.073005][T20972] usb 7-1: Manufacturer: syz [ 1340.127344][T20972] usb 7-1: Found UVC 1.00 device syz (225a:e1d4) [ 1340.138337][T20972] usb 7-1: No streaming interface found for terminal 2. [ 1340.228190][ C1] net_ratelimit: 13 callbacks suppressed [ 1340.411781][T20992] usb 7-1: USB disconnect, device number 2 [ 1341.828400][T20367] Bluetooth: hci1: command 0x0409 tx timeout [ 1341.888872][T21853] chnl_net:caif_netlink_parms(): no params data found [ 1342.143965][T21878] loop6: detected capacity change from 0 to 2048 [ 1342.232707][T21878] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1342.287209][T21853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.289755][T21878] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, [ 1342.294801][T21853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.303774][T21878] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1342.321111][T21853] device bridge_slave_0 entered promiscuous mode [ 1342.333900][T21853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.353532][T21853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.376859][T21853] device bridge_slave_1 entered promiscuous mode [ 1342.471134][T21878] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1342.524411][T21878] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1342.524411][T21878] [ 1342.544459][T21878] EXT4-fs (loop6): Total free blocks count 0 [ 1342.564983][T21878] EXT4-fs (loop6): Free/Dirty block details [ 1342.582362][T21853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1342.612092][T21853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1342.622612][T21878] EXT4-fs (loop6): free_blocks=2415919504 [ 1342.645668][T21878] EXT4-fs (loop6): dirty_blocks=48 [ 1342.674486][T21878] EXT4-fs (loop6): Block reservation details [ 1342.693096][T21878] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 1342.716437][T21883] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 1342.788696][T20367] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1342.797867][T20367] Bluetooth: hci6: Injecting HCI hardware error event [ 1342.811333][ T4280] Bluetooth: hci6: hardware error 0x00 [ 1342.834705][T21853] team0: Port device team_slave_0 added [ 1343.086237][T21853] team0: Port device team_slave_1 added [ 1343.243220][T21853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1343.257017][T21853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1343.294651][T21853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1343.339155][T21853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1343.357535][T21853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1343.414550][T21853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1344.179224][T21853] device hsr_slave_0 entered promiscuous mode [ 1344.338485][T21853] device hsr_slave_1 entered promiscuous mode [ 1344.462505][T20367] Bluetooth: hci1: command 0x041b tx timeout [ 1344.568599][T21853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1344.568743][T21853] Cannot create hsr debugfs directory [ 1345.028689][ T4280] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1345.508435][ C1] net_ratelimit: 18 callbacks suppressed [ 1346.390669][T21853] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1346.459716][T21853] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1346.510164][T21853] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1346.548275][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 1346.556210][T21853] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1347.654833][T21853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1347.808725][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1347.840882][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1347.874803][T21853] 8021q: adding VLAN 0 to HW filter on device team0 [ 1347.919911][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1347.959220][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1347.978433][T11943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.985696][T11943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.009103][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1348.045085][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1348.063898][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1348.088910][T11943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.096357][T11943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.133435][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1348.165124][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1348.194622][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1348.238447][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1348.259362][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1348.297631][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1348.347924][T11943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1348.376583][T19450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1348.409380][T19450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1348.455990][T21853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1348.488779][T21853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1348.518972][T19450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1348.549105][T19450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1348.658172][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 1350.165295][T19450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1350.173202][T19450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1350.305829][T21853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1350.788366][ C1] net_ratelimit: 22 callbacks suppressed [ 1351.429259][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1352.420151][T20367] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1352.432737][T20367] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1352.447149][T20367] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1352.456781][T20367] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1352.467391][T20367] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1352.475368][T20367] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1352.681301][T19450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1352.699730][T21959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5016'. [ 1352.730457][T19450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1352.843276][T21954] rxe_eth0 speed is unknown, defaulting to 1000 [ 1353.109297][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1353.872390][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1353.980220][T21853] device veth0_vlan entered promiscuous mode [ 1354.048733][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1354.067210][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1354.084701][T21853] device veth1_vlan entered promiscuous mode [ 1354.210029][T21853] device veth0_macvtap entered promiscuous mode [ 1354.273895][T11950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1354.290199][T11950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1354.314905][T11950] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1354.343065][T21853] device veth1_macvtap entered promiscuous mode [ 1354.388860][ T9309] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1354.479305][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.508273][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.528260][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.559261][ T4280] Bluetooth: hci7: command 0x0409 tx timeout [ 1354.578661][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.596268][ T9309] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.627152][ T9309] usb 7-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1354.671628][T21853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1354.696018][ T9309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.726236][ T9309] usb 7-1: Product: syz [ 1354.747288][ T9309] usb 7-1: Manufacturer: syz [ 1354.770345][ T9309] usb 7-1: SerialNumber: syz [ 1354.848226][T11950] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1354.856612][T11950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1354.882910][ T9309] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1355.217861][T11950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1355.411767][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.667376][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.678558][T21853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.689255][T21853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.701358][T21853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1355.715671][T21853] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.724787][T21853] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.735743][T21853] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.746058][T21853] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.851383][T21853] net_ratelimit: 15 callbacks suppressed [ 1356.417392][T19454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1356.475059][T19454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1356.716431][ T4280] Bluetooth: hci7: command 0x041b tx timeout [ 1357.154857][T19450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.164248][T19450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.178033][ T9309] gspca_mr97310a: reg write [21] error -71 [ 1357.184762][ T9309] mr97310a: probe of 7-1:1.0 failed with error -71 [ 1357.234153][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1357.241668][ T9309] usb 7-1: USB disconnect, device number 3 [ 1357.453959][T21993] tipc: Resetting bearer [ 1357.487229][T21993] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.525247][T21993] tipc: Resetting bearer [ 1357.608264][T21997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5026'. [ 1357.624529][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.668564][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.689216][T19454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1357.754573][T21954] chnl_net:caif_netlink_parms(): no params data found [ 1358.313954][T21954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.355413][T21954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.401475][T21954] device bridge_slave_0 entered promiscuous mode [ 1358.441702][T21954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.486539][T21954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.533021][T21954] device bridge_slave_1 entered promiscuous mode [ 1358.773572][T21954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.798363][ T4280] Bluetooth: hci7: command 0x040f tx timeout [ 1359.012527][T21954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1359.890689][T21954] team0: Port device team_slave_0 added [ 1359.924762][T21954] team0: Port device team_slave_1 added [ 1360.008949][T21954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1360.016356][T21954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1360.105212][T21954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1360.119309][T21954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1360.126303][T21954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1360.152654][T21954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1360.868189][ C1] net_ratelimit: 57 callbacks suppressed [ 1360.878338][ T4280] Bluetooth: hci7: command 0x0419 tx timeout [ 1361.660802][T21954] device hsr_slave_0 entered promiscuous mode [ 1361.682479][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.688883][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.761639][T21954] device hsr_slave_1 entered promiscuous mode [ 1361.778060][T21954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1361.800878][T21954] Cannot create hsr debugfs directory [ 1361.895230][T22044] x_tables: duplicate underflow at hook 1 [ 1362.658285][ T9309] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1362.860496][ T9309] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.893689][ T9309] usb 8-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1362.893715][ T9309] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.947369][ T9309] usb 8-1: Product: syz [ 1362.978933][ T9309] usb 8-1: Manufacturer: syz [ 1362.996062][ T9309] usb 8-1: SerialNumber: syz [ 1363.053346][ T9309] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1363.486805][T21954] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1364.114652][ T9309] gspca_mr97310a: reg write [21] error -71 [ 1364.220153][ T9309] mr97310a: probe of 8-1:1.0 failed with error -71 [ 1364.249069][T22054] tipc: Resetting bearer [ 1364.260464][ T9309] usb 8-1: USB disconnect, device number 2 [ 1364.461928][T22054] bond16: (slave veth0_to_bond): Releasing backup interface [ 1364.662788][T22063] ubi0: attaching mtd0 [ 1364.694355][T22063] ubi0: scanning is finished [ 1364.699140][T22063] ubi0: empty MTD device detected [ 1365.252414][T22054] team0: Port device xfrm0 removed [ 1365.274083][T22063] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1365.417173][T22054] bond17: (slave geneve3): Releasing active interface [ 1365.461836][T22054] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.488601][T22054] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.530934][T22054] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.597659][T22054] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.308141][ C1] net_ratelimit: 51 callbacks suppressed [ 1366.676426][T21954] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1366.917349][T22077] tipc: Started in network mode [ 1366.922369][T22077] tipc: Node identity 3eac57924b91, cluster identity 4711 [ 1366.947430][T22077] tipc: Enabled bearer , priority 0 [ 1366.979457][T22082] tipc: Resetting bearer [ 1366.985711][T22079] device syzkaller0 entered promiscuous mode [ 1367.009549][T22079] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1367.128990][T21954] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1367.218561][T22070] tipc: Resetting bearer [ 1367.299248][T22070] tipc: Disabling bearer [ 1367.331316][T21954] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1367.678369][T21954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1367.823755][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1367.849793][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1368.642710][T21954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.664697][T17076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1368.704534][T17076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1368.734623][T17076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.741783][T17076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.800801][T17076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1368.829063][T19453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1368.859896][T19453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1368.875645][T19453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.882839][T19453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.941234][T17076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1369.028928][T19453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1370.729567][T19453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1370.788374][T19453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1370.906564][T22112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5052'. [ 1370.970886][T19453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1370.992679][T19453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1371.099228][T19453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1371.121968][T19453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1371.149749][T19453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1371.181609][T21954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1371.219469][T21954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1371.239825][T19453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1371.252365][T19453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1371.748866][ C0] net_ratelimit: 31 callbacks suppressed [ 1373.699211][T21954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1373.776047][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1373.786302][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1374.736918][T22155] loop6: detected capacity change from 0 to 512 [ 1374.762791][T22156] __vm_enough_memory: pid: 22156, comm: syz.4.5061, no enough memory for the allocation [ 1375.067752][T22155] EXT4-fs error (device loop6): __ext4_iget:5102: inode #2: block 131072: comm syz.6.5056: invalid block [ 1375.326607][T22155] EXT4-fs (loop6): get root inode failed [ 1375.372172][T22155] EXT4-fs (loop6): mount failed [ 1376.868132][ C0] net_ratelimit: 31 callbacks suppressed [ 1377.005149][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1377.019252][T19455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1377.701486][T21954] device veth0_vlan entered promiscuous mode [ 1377.800943][T21954] device veth1_vlan entered promiscuous mode [ 1377.895002][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1377.909767][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1377.955709][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1378.009986][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1378.032718][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1378.106572][T21954] device veth0_macvtap entered promiscuous mode [ 1378.139179][T21954] device veth1_macvtap entered promiscuous mode [ 1378.211781][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1378.228268][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1378.247614][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1378.281643][T19458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1379.023590][T21954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1379.036064][T21954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1379.046274][T21954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1379.046294][T21954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1379.046310][T21954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1379.046325][T21954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1379.142518][T21954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1379.316631][T21954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1379.509184][T21954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1379.776780][T21954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1380.147363][T21954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1380.253247][T21954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1380.338405][T21954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1380.420500][T21954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1380.988344][ T26] audit: type=1800 audit(2000001072.618:1765): pid=22187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5068" name="bus" dev="ramfs" ino=117100 res=0 errno=0 [ 1381.082959][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1381.236095][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1381.290982][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1381.311710][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1381.946834][T21954] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.988223][ C1] net_ratelimit: 28 callbacks suppressed [ 1382.020127][T21954] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.141854][T21954] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.284587][T21954] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.997325][T19457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1385.018687][T19457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1385.842593][T19453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1386.032370][T19453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.040421][T22228] loop6: detected capacity change from 0 to 512 [ 1386.064563][T19453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.110367][T22228] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1386.123515][T19457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1386.168014][T22228] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.5077: invalid indirect mapped block 256 (level 1) [ 1386.288263][T22228] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.5077: invalid indirect mapped block 2683928664 (level 1) [ 1386.303670][T22228] EXT4-fs (loop6): 1 truncate cleaned up [ 1386.318136][T22228] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1387.239945][ C0] net_ratelimit: 57 callbacks suppressed [ 1387.546585][T21343] EXT4-fs (loop6): unmounting filesystem. [ 1388.891813][T22248] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 1388.899866][T22248] Error parsing options; rc = [-22] [ 1389.502380][T22248] device vlan0 entered promiscuous mode [ 1389.523746][T22248] team0: Port device vlan0 added [ 1392.948137][ C1] net_ratelimit: 44 callbacks suppressed [ 1394.658308][T20367] Bluetooth: hci5: command 0x0406 tx timeout [ 1398.608444][ C0] net_ratelimit: 35 callbacks suppressed [ 1399.176232][T22315] __vm_enough_memory: pid: 22315, comm: syz.2.5094, no enough memory for the allocation [ 1400.071747][T20367] Bluetooth: hci1: link tx timeout [ 1400.078619][T20367] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1400.498764][ T26] audit: type=1326 audit(2000001092.128:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22328 comm="syz.2.5099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf579f559 code=0x7ffc0000 [ 1400.593367][ T26] audit: type=1326 audit(2000001092.158:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22328 comm="syz.2.5099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf579f559 code=0x7ffc0000 [ 1400.697392][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1400.713381][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1400.724331][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1400.733812][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1400.764561][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1400.772758][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1400.879066][ T26] audit: type=1326 audit(2000001092.188:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22328 comm="syz.2.5099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdcf579f559 code=0x7ffc0000 [ 1400.968191][ T26] audit: type=1326 audit(2000001092.188:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22328 comm="syz.2.5099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdcf579f2c2 code=0x7ffc0000 [ 1401.013242][ T26] audit: type=1326 audit(2000001092.188:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22328 comm="syz.2.5099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdcf575fd8e code=0x7ffc0000 [ 1401.061976][T22330] overlayfs: conflicting lowerdir path [ 1401.112293][ T26] audit: type=1326 audit(2000001092.258:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22328 comm="syz.2.5099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdcf579f387 code=0x7ffc0000 [ 1401.136817][ T26] audit: type=1326 audit(2000001092.258:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22328 comm="syz.2.5099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcf575fd8e code=0x7ffc0000 [ 1401.209363][ T26] audit: type=1326 audit(2000001092.258:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22328 comm="syz.2.5099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdcf575fd8e code=0x7ffc0000 [ 1401.284918][T22340] ubi0: attaching mtd0 [ 1401.306440][T22340] ubi0: scanning is finished [ 1401.502906][ T26] audit: type=1326 audit(2000001092.258:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22328 comm="syz.2.5099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf579f559 code=0x7ffc0000 [ 1401.601490][ T26] audit: type=1326 audit(2000001092.488:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22328 comm="syz.2.5099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdcf579f559 code=0x7ffc0000 [ 1401.666732][T22340] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1401.674735][T22340] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1401.682219][T22340] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1401.689932][T22340] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1401.697519][T22340] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1401.704459][T22340] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1401.712716][T22340] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2534747164 [ 1401.722857][T22340] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1401.843890][T22341] ubi0: background thread "ubi_bgt0d" started, PID 22341 [ 1402.111292][T22332] rxe_eth0 speed is unknown, defaulting to 1000 [ 1402.158328][T20367] Bluetooth: hci1: command 0x0406 tx timeout [ 1403.137316][T20367] Bluetooth: hci0: command 0x0409 tx timeout [ 1403.733100][T22356] net_ratelimit: 52 callbacks suppressed [ 1403.733145][T22356] ip_tables: iptables: counters copy to user failed while replacing table [ 1405.737067][T20367] Bluetooth: hci0: command 0x041b tx timeout [ 1408.089369][T20367] Bluetooth: hci0: command 0x040f tx timeout [ 1408.340549][T22370] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1408.425002][T22384] loop6: detected capacity change from 0 to 2048 [ 1408.442086][ T4612] tipc: Disabling bearer [ 1408.459044][ T4612] tipc: Disabling bearer [ 1408.504896][T22384] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1408.551783][ T4612] tipc: Disabling bearer [ 1408.573136][T22384] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1408.592527][ T4612] tipc: Left network mode [ 1408.908254][T22370] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1408.957464][T22332] chnl_net:caif_netlink_parms(): no params data found [ 1409.028121][ C0] net_ratelimit: 43 callbacks suppressed [ 1409.906368][T22383] UDF-fs: warning (device loop6): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 217088 lbcount: 221184 extent 129+185856 [ 1410.052537][T22370] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1410.148746][T20367] Bluetooth: hci0: command 0x0419 tx timeout [ 1410.273778][T22370] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1410.355252][T22401] device bridge1 entered promiscuous mode [ 1410.374901][T22401] team0: Port device bridge1 added [ 1410.603564][ T4612] device macvlan4 left promiscuous mode [ 1410.632057][ T4612] bridge0: port 1(macvlan4) entered disabled state [ 1410.727232][T22402] bridge0: port 3(team0) entered blocking state [ 1410.738939][T22402] bridge0: port 3(team0) entered disabled state [ 1410.762793][T22402] device team0 entered promiscuous mode [ 1410.787193][T22402] device team_slave_0 entered promiscuous mode [ 1410.799234][T22402] device team_slave_1 entered promiscuous mode [ 1410.817325][T22402] bridge0: port 3(team0) entered blocking state [ 1410.826336][T22402] bridge0: port 3(team0) entered forwarding state [ 1414.139334][T22428] loop6: detected capacity change from 0 to 128 [ 1414.148134][ C0] net_ratelimit: 34 callbacks suppressed [ 1414.202386][T22428] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1414.248656][T22370] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1414.265162][T22370] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1414.283094][T22370] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1414.299828][T22370] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1414.391092][T22428] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5117'. [ 1414.400415][T22428] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5117'. [ 1416.257667][T22332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.288298][T22332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.296932][T22332] device bridge_slave_0 entered promiscuous mode [ 1417.671412][T22332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.719587][T22332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.778919][T22332] device bridge_slave_1 entered promiscuous mode [ 1418.153997][T22332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.259199][T22332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.278364][T20992] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1418.470091][T20992] usb 7-1: not running at top speed; connect to a high speed hub [ 1418.481700][T20992] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.513809][T20992] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1418.549092][T20992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.608214][T20992] usb 7-1: Found UVC 1.00 device (046d:0825) [ 1418.627410][T20992] usb 7-1: No streaming interface found for terminal 2. [ 1418.874798][T22215] usb 7-1: USB disconnect, device number 4 [ 1419.834540][ C1] net_ratelimit: 34 callbacks suppressed [ 1419.977000][ T4612] bond17: (slave gretap2): Releasing active interface [ 1420.171875][T22480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1420.204591][T22480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1420.241859][T22480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1420.255739][T22480] device bridge_slave_0 left promiscuous mode [ 1420.270693][T22480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.334596][T22480] device bridge_slave_1 left promiscuous mode [ 1420.350725][T22480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.631008][T22480] bond0: (slave bond_slave_0): Releasing backup interface [ 1421.471345][T22480] bond0: (slave bond_slave_1): Releasing backup interface [ 1422.605239][T22480] team0: Port device team_slave_0 removed [ 1422.613967][T22496] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5130'. [ 1422.623264][T22496] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5130'. [ 1423.451780][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.458271][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.491164][T22480] team0: Port device team_slave_1 removed [ 1423.506354][T22480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1423.565576][T22480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.603829][T22480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1423.618175][T22480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.669082][T22480] team0: Port device vlan0 removed [ 1423.719502][T22332] team0: Port device team_slave_0 added [ 1423.764269][T22481] team0: Mode changed to "loadbalance" [ 1425.101177][ C0] net_ratelimit: 53 callbacks suppressed [ 1425.208845][T22517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5134'. [ 1425.504607][T22484] team0: Port device vlan0 added [ 1426.765664][T22332] team0: Port device team_slave_1 added [ 1426.976395][T22332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.987408][T22332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1427.064662][T22332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1427.652154][T22548] __vm_enough_memory: pid: 22548, comm: syz.8.5137, no enough memory for the allocation [ 1428.344523][T22332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1428.369537][T22332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1428.462995][T22332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1429.193492][T22567] binder: 22560:22567 ioctl c0306201 200000000380 returned -14 [ 1429.345762][T22332] device hsr_slave_0 entered promiscuous mode [ 1429.397461][T22332] device hsr_slave_1 entered promiscuous mode [ 1429.445775][T22332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1429.463801][T22332] Cannot create hsr debugfs directory [ 1430.230873][ C1] net_ratelimit: 55 callbacks suppressed [ 1433.700296][ T4612] device hsr_slave_0 left promiscuous mode [ 1433.784416][ T4612] device hsr_slave_1 left promiscuous mode [ 1434.127290][ T4612] bond17 (unregistering): Released all slaves [ 1434.391334][ T4612] bond16 (unregistering): (slave bridge4): Releasing active interface [ 1435.300746][ C1] net_ratelimit: 52 callbacks suppressed [ 1436.885393][T22625] loop8: detected capacity change from 0 to 512 [ 1437.015334][T22625] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1437.037029][T22625] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1437.323441][ T14] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1437.558176][ T14] usb 7-1: Using ep0 maxpacket: 8 [ 1438.305583][ T14] usb 7-1: config 0 has no interfaces? [ 1438.311682][ T14] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1438.328095][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.338565][ T14] usb 7-1: config 0 descriptor?? [ 1438.365023][T21954] EXT4-fs (loop8): unmounting filesystem. [ 1438.460329][ T4612] bond16 (unregistering): Released all slaves [ 1438.505636][ T4612] bond15 (unregistering): Released all slaves [ 1438.569594][ T9309] usb 7-1: USB disconnect, device number 5 [ 1438.804232][ T4612] bond14 (unregistering): Released all slaves [ 1439.089944][ T4612] bond3 (unregistering): (slave macvlan3): Releasing backup interface [ 1439.974848][ T4612] bond13 (unregistering): Released all slaves [ 1440.037554][ T4612] bond12 (unregistering): (slave geneve2): Releasing active interface [ 1440.379958][ T4612] bond12 (unregistering): Released all slaves [ 1440.398402][ C1] net_ratelimit: 39 callbacks suppressed [ 1440.436216][ T4612] bond11 (unregistering): Released all slaves [ 1442.189245][ T4612] bond10 (unregistering): Released all slaves [ 1444.402666][ T4612] bond9 (unregistering): Released all slaves [ 1445.067786][ T4612] bond8 (unregistering): Released all slaves [ 1445.126203][ T4612] bond7 (unregistering): Released all slaves [ 1445.491947][ T4612] bond6 (unregistering): Released all slaves [ 1445.541078][ T4612] bond5 (unregistering): Released all slaves [ 1445.668240][ C1] net_ratelimit: 44 callbacks suppressed [ 1446.188736][ T4612] bond4 (unregistering): Released all slaves [ 1446.836122][ T4612] bond0 (unregistering): Released all slaves [ 1447.503492][ T4612] bond3 (unregistering): Released all slaves [ 1447.611587][ T4612] bond2 (unregistering): Released all slaves [ 1448.158978][ T4612] bond1 (unregistering): Released all slaves [ 1450.879960][ C1] net_ratelimit: 56 callbacks suppressed [ 1451.138812][ T4612] team0 (unregistering): Port device bridge0 removed [ 1451.230588][ T4612] .` (unregistering): Released all slaves [ 1451.354388][ T4612] smc: removing net device lo with user defined pnetid SYZ0 [ 1451.459665][T22646] device bridge9 entered promiscuous mode [ 1451.604096][T22646] team0: Port device bridge9 added [ 1451.714347][T22647] bridge0: port 1(team0) entered blocking state [ 1451.742167][T22647] bridge0: port 1(team0) entered disabled state [ 1451.777648][T22647] device team0 entered promiscuous mode [ 1451.958269][T22670] netlink: 'syz.4.5166': attribute type 1 has an invalid length. [ 1454.830288][ T4604] tipc: Resetting bearer [ 1454.961149][ T4280] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1454.974904][ T4280] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1454.985493][ T4280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1454.997258][ T4280] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1455.006215][ T4280] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1455.036605][ T4280] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1455.143097][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 1455.143115][ T26] audit: type=1326 audit(2000001146.768:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22711 comm="syz.8.5171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8499f559 code=0x7ffc0000 [ 1455.154104][ T26] audit: type=1326 audit(2000001146.768:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22711 comm="syz.8.5171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8499f559 code=0x7ffc0000 [ 1455.242743][T22712] loop8: detected capacity change from 0 to 512 [ 1455.378454][T22712] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1455.383129][ T26] audit: type=1326 audit(2000001146.838:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22711 comm="syz.8.5171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffa8499f559 code=0x7ffc0000 [ 1455.449655][T22712] overlayfs: overlapping lowerdir path [ 1455.538427][ T26] audit: type=1326 audit(2000001146.838:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22711 comm="syz.8.5171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffa8499f2c2 code=0x7ffc0000 [ 1455.703421][ T26] audit: type=1326 audit(2000001146.838:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22711 comm="syz.8.5171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffa8495fd8e code=0x7ffc0000 [ 1455.734659][T22721] EXT4-fs (loop8): unmounting filesystem. [ 1455.745745][ T26] audit: type=1326 audit(2000001146.838:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22711 comm="syz.8.5171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffa8499f387 code=0x7ffc0000 [ 1455.745785][ T26] audit: type=1326 audit(2000001146.838:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22711 comm="syz.8.5171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa8495fd8e code=0x7ffc0000 [ 1456.521691][ C1] net_ratelimit: 43 callbacks suppressed [ 1456.633978][T22707] rxe_eth0 speed is unknown, defaulting to 1000 [ 1456.839995][ T26] audit: type=1326 audit(2000001146.838:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22711 comm="syz.8.5171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa8499f1eb code=0x7ffc0000 [ 1456.976338][T22332] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1457.110427][T20367] Bluetooth: hci6: command 0x0409 tx timeout [ 1457.374547][ T26] audit: type=1326 audit(2000001146.908:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22711 comm="syz.8.5171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffa8495fd8e code=0x7ffc0000 [ 1457.689470][T22332] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1457.764521][ T26] audit: type=1326 audit(2000001146.908:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22711 comm="syz.8.5171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffa8495fd8e code=0x7ffc0000 [ 1457.843542][T22332] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1458.829179][T22332] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1459.198232][ T4280] Bluetooth: hci6: command 0x041b tx timeout [ 1459.671031][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1459.748430][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1459.838239][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x1597 instead [ 1460.003723][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xe64e instead [ 1460.069131][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1460.149855][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1460.215935][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1460.331831][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1460.384052][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1460.435330][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1460.481809][T20367] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1460.496381][T20367] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1460.506586][T20367] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1460.564375][T20367] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1460.573718][T20367] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1460.578308][T22763] jffs2: Further such events for this erase block will not be printed [ 1460.589814][T20367] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1460.726069][T22707] chnl_net:caif_netlink_parms(): no params data found [ 1460.746931][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1460.798302][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1460.828253][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x1597 instead [ 1460.894843][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xe64e instead [ 1460.926061][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1460.972035][T22779] rxe_eth0 speed is unknown, defaulting to 1000 [ 1460.987413][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1461.018534][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1461.059995][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1461.099120][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1461.138262][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1461.178551][T22763] jffs2: Further such events for this erase block will not be printed [ 1461.208007][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1461.248350][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1461.268185][ T4280] Bluetooth: hci6: command 0x040f tx timeout [ 1461.318242][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x1597 instead [ 1461.351065][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x2d71 instead [ 1461.368757][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1461.419188][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1461.442658][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x1597 instead [ 1461.454576][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x2d71 instead [ 1461.468754][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1461.550370][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1461.626413][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x1597 instead [ 1461.626444][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x2d71 instead [ 1461.739996][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1461.748142][ C0] net_ratelimit: 49 callbacks suppressed [ 1461.793194][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1461.880724][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x1597 instead [ 1461.909972][T22707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.919040][T22707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.941415][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x2d71 instead [ 1461.959922][T22707] device bridge_slave_0 entered promiscuous mode [ 1461.985009][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1462.036591][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1462.047454][T22707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.064885][T22707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.073715][T22707] device bridge_slave_1 entered promiscuous mode [ 1462.088257][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x1597 instead [ 1462.118238][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x2d71 instead [ 1462.138773][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1462.151373][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1462.182339][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x1597 instead [ 1462.199350][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x2d71 instead [ 1462.252936][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1462.279154][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1462.298913][T22707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.317695][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x1597 instead [ 1462.353750][T22707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1462.377764][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x2d71 instead [ 1462.377820][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1462.457378][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1462.513404][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x1597 instead [ 1462.548538][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x2d71 instead [ 1462.574130][T22707] team0: Port device team_slave_0 added [ 1462.587647][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1462.622062][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1462.637416][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 1462.649761][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x1597 instead [ 1462.692368][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x2d71 instead [ 1462.719474][T22707] team0: Port device team_slave_1 added [ 1462.778680][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1462.814497][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1462.872750][T22707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1462.881291][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x1597 instead [ 1462.892063][T22707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.928115][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x2d71 instead [ 1462.955033][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1462.978248][T22707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.989026][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1463.038420][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x1597 instead [ 1463.199463][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x2d71 instead [ 1463.348320][ T4280] Bluetooth: hci6: command 0x0419 tx timeout [ 1463.364207][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1463.498655][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1463.577588][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x1597 instead [ 1463.739737][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x2d71 instead [ 1463.770566][T22707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1463.777705][T22707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1463.815201][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1463.851031][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1463.884498][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x1597 instead [ 1463.906427][T22707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1463.931361][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x2d71 instead [ 1463.979910][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1464.033999][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1464.075859][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x1597 instead [ 1464.140567][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x2d71 instead [ 1464.186853][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1464.209247][T22779] chnl_net:caif_netlink_parms(): no params data found [ 1464.232452][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1464.261066][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x1597 instead [ 1464.293841][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x2d71 instead [ 1464.330450][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1464.448103][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1464.490952][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x1597 instead [ 1464.580632][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x2d71 instead [ 1464.618443][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1464.710731][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 1465.216882][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1465.273766][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x1597 instead [ 1465.328996][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x2d71 instead [ 1465.414428][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1465.462790][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1465.508326][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x1597 instead [ 1465.538674][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x2d71 instead [ 1465.579139][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1465.608789][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1465.797665][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x1597 instead [ 1465.808374][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x2d71 instead [ 1465.839053][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1465.895813][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1465.906513][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x1597 instead [ 1465.917923][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x2d71 instead [ 1466.570320][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1466.590642][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1466.613964][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x1597 instead [ 1466.648091][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x2d71 instead [ 1466.668234][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1466.698920][T22707] device hsr_slave_0 entered promiscuous mode [ 1466.708486][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1466.738504][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x1597 instead [ 1466.752139][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x2d71 instead [ 1466.762837][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1466.778203][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1466.789170][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 1466.797563][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x1597 instead [ 1466.823409][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x2d71 instead [ 1466.823468][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1466.845566][T22707] device hsr_slave_1 entered promiscuous mode [ 1466.895157][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1466.912974][T22707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1466.912997][T22707] Cannot create hsr debugfs directory [ 1466.943847][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x1597 instead [ 1467.008231][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x2d71 instead [ 1467.055767][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1467.108241][ C0] net_ratelimit: 48 callbacks suppressed [ 1467.187998][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1467.228712][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x1597 instead [ 1467.280752][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x2d71 instead [ 1467.345967][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1467.413063][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1467.424002][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x1597 instead [ 1467.435196][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x2d71 instead [ 1467.445898][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1467.456367][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1467.466865][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x1597 instead [ 1467.477723][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x2d71 instead [ 1467.489077][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1467.504810][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1467.515436][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x1597 instead [ 1467.515465][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x2d71 instead [ 1468.058931][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1468.113341][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1468.146020][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x1597 instead [ 1468.189625][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x2d71 instead [ 1468.235639][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1468.248971][T22779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.256360][T22779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.281763][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1468.299921][T22779] device bridge_slave_0 entered promiscuous mode [ 1468.312557][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x1597 instead [ 1468.343886][T22779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.362201][T22763] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x2d71 instead [ 1468.367003][T22779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.395368][T22779] device bridge_slave_1 entered promiscuous mode [ 1468.396101][T22763] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1468.447643][T22763] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1468.664128][T22779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1468.767419][T22779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1468.868401][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 1469.191490][ T27] INFO: task syz.1.4962:21740 blocked for more than 144 seconds. [ 1469.208238][ T27] Not tainted syzkaller #0 [ 1469.213243][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1469.230541][T22779] procname=suppress_frag_ndisc mode=644 proc_handler=proc_dointvec data=ffff88803d351684 [ 1469.249163][T16404] bond0: (slave geneve2): Send learning packet: mac 26:2b:50:03:09:0f vlan 0 [ 1469.251730][ C0] virtqueue callback for ffff888025ccb600 (ffffffff858ab770) [ 1469.287609][T22241] nf_conntrack: normal packet for ffff88803062c300 [ 1469.298261][T22779] procname=accept_ra_from_local mode=644 proc_handler=proc_dointvec data=ffff88803d351660 [ 1469.309352][T16404] nf_conntrack: new packet for ffff88803062d980 [ 1469.316386][T16404] nf_conntrack: nf_ct_destroy(ffff88803062d980) [ 1469.322755][T16404] nf_conntrack: nf_ct_destroy: returning ct=ffff88803062d980 to slab [ 1469.344120][ T27] task:syz.1.4962 state:D stack:25968 pid:21740 ppid:4281 flags:0x00004004 [ 1469.373577][T21206] cb->arg bucket: 283851, t ffffc9001d800000 n 0000000000000000 [ 1469.428342][T22779] procname=accept_ra_mtu mode=644 proc_handler=proc_dointvec data=ffff88803d351688 [ 1469.445015][ T27] Call Trace: [ 1469.449004][T22875] kcov: kcov_start: t = ffff88807db73c00, size = 524288, area = ffffc9001fa05000 [ 1469.473203][ T27] [ 1469.476980][ T27] __schedule+0x107f/0x4030 [ 1469.497083][ C0] virtqueue callback for ffff888025ccb600 (ffffffff858ab770) [ 1469.506381][T22779] procname=stable_secret mode=600 proc_handler=addrconf_sysctl_stable_secret data=ffff88803d351694 [ 1469.519443][T16404] bond0: (slave geneve2): Send learning packet: mac 26:2b:50:03:09:0f vlan 1 [ 1469.530286][T22876] kcov: kcov_start: t = ffff88807db71e00, size = 524288, area = ffffc90020208000 [ 1469.548425][ T27] ? release_firmware_map_entry+0x187/0x187 [ 1469.605462][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1469.635866][T22779] procname=use_oif_addrs_only mode=644 proc_handler=proc_dointvec data=ffff88803d3516a8 [ 1469.656433][T16404] nf_conntrack: new packet for ffff88803062d980 [ 1469.663552][T16404] nf_conntrack: nf_ct_destroy(ffff88803062d980) [ 1469.669922][T16404] nf_conntrack: nf_ct_destroy: returning ct=ffff88803062d980 to slab [ 1469.699463][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1469.705730][ T27] schedule+0xb9/0x180 [ 1469.732487][ T58] bond19: (slave bridge7): Send learning packet: mac 86:d6:7c:81:6c:26 vlan 0 [ 1469.760178][T21206] cb->arg bucket: 283852, t ffffc9001d800000 n 0000000000000000 [ 1469.778206][T22779] procname=ignore_routes_with_linkdown mode=644 proc_handler=addrconf_sysctl_ignore_routes_with_linkdown data=ffff88803d351644 [ 1469.789079][ C0] virtqueue callback for ffff888025ccb600 (ffffffff858ab770) [ 1469.792915][ T27] schedule_preempt_disabled+0xf/0x20 [ 1469.809363][ T58] bond19: (slave bridge7): Send learning packet: mac 86:d6:7c:81:6c:26 vlan 1 [ 1469.874192][T22779] procname=drop_unicast_in_l2_multicast mode=644 proc_handler=proc_dointvec data=ffff88803d351674 [ 1469.888068][ T27] __mutex_lock+0x548/0xae0 [ 1469.892654][ T27] ? __mutex_lock+0x3ba/0xae0 [ 1469.973205][ T27] ? nfnetlink_rcv_msg+0xa58/0x1290 [ 1469.983341][T22779] procname=drop_unsolicited_na mode=644 proc_handler=proc_dointvec data=ffff88803d35168c [ 1470.008366][ T27] ? mutex_lock_nested+0x10/0x10 [ 1470.013557][ T27] ? ip_set_protocol+0x5b0/0x5b0 [ 1470.048261][T22678] Added buffer head 0 to ffff888141666200 [ 1470.048519][T21206] cb->arg bucket: 283853, t ffffc9001d800000 n 0000000000000000 [ 1470.055520][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88805891aa98 is addr:2001::2 for cmd:0 at entry:ffff88807a8e7580 [ 1470.066095][T22779] procname=keep_addr_on_down mode=644 proc_handler=proc_dointvec data=ffff88803d3516ac [ 1470.075026][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 1470.084977][ C0] virtqueue callback for ffff888141666200 (ffffffff84767210) [ 1470.085023][ C0] virtqueue interrupt with no work for ffff888141666000 [ 1470.085036][ C0] virtqueue interrupt with no work for ffff888141665e00 [ 1470.115582][ C0] bridge1: hello timer expired [ 1470.121336][ C0] nf_conntrack: new packet for ffff888019a78c00 [ 1470.122694][T16404] sd 0:0:1:0: cmd ffff888028264c20 CDB: 0x2a [ 1470.127632][ C0] nf_nat: Already setup manip DST for ct ffff888019a78c00 (status bits 0x188) [ 1470.128309][ C0] No more buffers in queue [ 1470.138060][ T27] nfnetlink_rcv_msg+0xa58/0x1290 [ 1470.143341][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1470.158137][ C1] nf_conntrack: new packet for ffff88803062d080 [ 1470.158897][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1470.165096][ C1] nf_nat: Already setup manip DST for ct ffff88803062d080 (status bits 0x188) [ 1470.171018][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1470.180003][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1470.186023][ C0] No more buffers in queue [ 1470.195132][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1470.199537][ C0] tcp_conntracks: [ 1470.208481][ C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 1470.217751][ C0] tcp_conntracks: [ 1470.217766][ C0] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 1470.226972][ C0] tcp_conntracks: [ 1470.226988][ C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 1470.236372][ C0] nf_conntrack: normal packet for ffff88807a46c300 [ 1470.243573][ C0] tcp_conntracks: [ 1470.243587][ C0] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 1470.253557][ C0] No more buffers in queue [ 1470.258392][ C0] eth0: xmit ffff88803f4648c0 42:01:0a:80:00:01 [ 1470.264746][ C0] Added buffer head 29 to ffff888025ccb800 [ 1470.270665][ C0] virtqueue callback for ffff888025ccb800 (ffffffff858ab860) [ 1470.289002][ C0] Sent skb ffff88803f4648c0 [ 1470.292971][ T27] ? nfnetlink_rcv_msg+0x224/0x1290 [ 1470.293621][ C0] No more buffers in queue [ 1470.303434][ C0] No more buffers in queue [ 1470.307903][ C0] No more buffers in queue [ 1470.336263][ T27] ? nfnetlink_unbind+0x160/0x160 [ 1470.362398][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1470.402762][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1470.412931][T16404] Added buffer head 54 to ffff888025caf000 [ 1470.436737][ T14] Added buffer head 0 to ffff888141666200 [ 1470.447546][ T14] nf_conntrack: normal packet for ffff88802f902900 [ 1470.454733][ T27] ? netlink_rcv_skb+0x194/0x440 [ 1470.454908][T22432] nf_conntrack: normal packet for ffff88803062dc80 [ 1470.468074][T21484] nf_conntrack: normal packet for ffff888024372a80 [ 1470.475829][T20992] nf_conntrack: normal packet for ffff88803062c300 [ 1470.475823][T22779] procname=seg6_enabled mode=644 proc_handler=proc_dointvec data=ffff88803d3516b0 [ 1470.475859][T22779] procname=seg6_require_hmac mode=644 proc_handler=proc_dointvec data=ffff88803d3516b4 [ 1470.482862][T16404] sd 0:0:1:0: cmd ffff888028264fe0 CDB: 0x2a [ 1470.491817][T22779] procname=enhanced_dad mode=644 proc_handler=proc_dointvec data=ffff88803d3516b8 [ 1470.517568][T22779] procname=addr_gen_mode mode=644 proc_handler=addrconf_sysctl_addr_gen_mode data=ffff88803d3516bc [ 1470.523116][ T27] netlink_rcv_skb+0x1ef/0x440 [ 1470.528515][T21206] cb->arg bucket: 283854, t ffffc9001d800000 n 0000000000000000 [ 1470.541040][T22779] procname=disable_policy mode=644 proc_handler=addrconf_sysctl_disable_policy data=ffff88803d3516c0 [ 1470.547986][T22881] kcov: kcov_start: t = ffff8880510f5a00, size = 524288, area = ffffc9000ee52000 [ 1470.552322][T22779] procname=ndisc_tclass mode=644 proc_handler=proc_dointvec_minmax data=ffff88803d3516c4 [ 1470.568424][ T4261] nf_conntrack: normal packet for ffff88807a46c300 [ 1470.571478][T22779] procname=rpl_seg_enabled mode=644 proc_handler=proc_dointvec_minmax data=ffff88803d3516c8 [ 1470.588593][T22882] kcov: kcov_start: t = ffff888027d25a00, size = 524288, area = ffffc90010257000 [ 1470.601173][T22779] procname=ioam6_enabled mode=644 proc_handler=proc_dou8vec_minmax data=ffff88803d3516d4 [ 1470.618091][T21206] cb->arg bucket: 283855, t ffffc9001d800000 n 0000000000000000 [ 1470.625808][T21206] cb->arg bucket: 283856, t ffffc9001d800000 n 0000000000000000 [ 1470.633997][T22779] procname=ioam6_id mode=644 proc_handler=proc_douintvec_minmax data=ffff88803d3516cc [ 1470.638194][ T27] ? nfnetlink_unbind+0x160/0x160 [ 1470.653256][ T4261] tcp_conntracks: [ 1470.653276][ T4261] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 1470.658086][T22779] procname=ioam6_id_wide mode=644 proc_handler=proc_douintvec data=ffff88803d3516d0 [ 1470.688074][T22779] procname=ndisc_evict_nocarrier mode=644 proc_handler=proc_dou8vec_minmax data=ffff88803d3516d5 [ 1470.708073][T22779] procname=accept_untracked_na mode=644 proc_handler=proc_dointvec_minmax data=ffff88803d351690 [ 1470.708297][T16404] Added buffer head 55 to ffff888025caf000 [ 1470.728168][ T4261] No more buffers in queue [ 1470.728515][T22779] Registering net sysctl (net ffff88803bdb3880): net/mpls/conf/team_slave_1 [ 1470.733101][ T4261] eth0: xmit ffff8880963a2780 42:01:0a:80:00:01 [ 1470.748260][ T4261] Added buffer head 2 to ffff888025ccbc00 [ 1470.754048][ C1] virtqueue callback for ffff888025ccbc00 (ffffffff858ab860) [ 1470.761146][T22779] procname=input mode=644 proc_handler=mpls_conf_proc data=ffff88807c255280 [ 1470.761977][ C1] Sent skb ffff8880963a2780 [ 1470.775466][ C1] No more buffers in queue [ 1470.780200][T21206] cb->arg bucket: 283857, t ffffc9001d800000 n 0000000000000000 [ 1470.781307][ T27] ? netlink_ack+0x1160/0x1160 [ 1470.790396][T22779] team_slave_0: bond_netdev_event received NETDEV_PRE_UP [ 1470.818132][T22779] net team_slave_0: siw: event 14 [ 1470.828268][T22885] kcov: kcov_start: t = ffff888027d20000, size = 524288, area = ffffc90011e5e000 [ 1470.838382][T22779] team_slave_0: bond_netdev_event received NETDEV_UP [ 1470.846178][T22779] net team_slave_0: siw: event 1 [ 1470.851620][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88805891aa98 is addr:2001::2 for cmd:0 at entry:ffff88807a8e7580 [ 1470.864841][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 1470.876520][T16404] sd 0:0:1:0: cmd ffff8880282653a0 CDB: 0x2a [ 1470.878115][ C1] bridge9: hello timer expired [ 1470.887427][ C1] bridge0: hello timer expired [ 1470.888117][T16404] Added buffer head 184 to ffff888025caf000 [ 1470.893855][ T27] ? bpf_lsm_capable+0x5/0x10 [ 1470.908332][T22779] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1470.915953][T22779] team_slave_0: bond_netdev_event received NETDEV_PRECHANGEUPPER [ 1470.925621][T21206] cb->arg bucket: 283858, t ffffc9001d800000 n 0000000000000000 [ 1470.936647][ C1] virtqueue callback for ffff888025caf000 (ffffffff85445d80) [ 1470.944104][ C1] sd 0:0:1:0: cmd ffff888028264c20 response 0 status 0x0 sense_len 0 [ 1470.948486][T22889] kcov: kcov_start: t = ffff88801cb2bc00, size = 524288, area = ffffc90013664000 [ 1470.953233][ C1] sd 0:0:1:0: cmd ffff888028264fe0 response 0 status 0x0 sense_len 0 [ 1470.962703][T22779] net team_slave_0: siw: event 26 [ 1470.970583][ C1] No more buffers in queue [ 1470.979610][ C1] virtqueue callback for ffff888025caf000 (ffffffff85445d80) [ 1470.987735][ C1] sd 0:0:1:0: cmd ffff8880282653a0 response 0 status 0x0 sense_len 0 [ 1470.996005][ C1] No more buffers in queue [ 1471.001453][ T27] ? security_capable+0x85/0xb0 [ 1471.006609][ T27] nfnetlink_rcv+0x2b0/0x2470 [ 1471.011762][ T27] ? __lock_acquire+0x1359/0x7ea0 [ 1471.016887][ T27] ? verify_lock_unused+0x140/0x140 [ 1471.022439][T19458] bond0: (slave geneve2): Send learning packet: mac 26:2b:50:03:09:0f vlan 0 [ 1471.022602][T19458] nf_conntrack: new packet for ffff888024372900 [ 1471.022850][T19458] nf_conntrack: nf_ct_destroy(ffff888024372900) [ 1471.022869][T19458] nf_conntrack: nf_ct_destroy: returning ct=ffff888024372900 to slab [ 1471.022941][T19458] bond0: (slave geneve2): Send learning packet: mac 26:2b:50:03:09:0f vlan 1 [ 1471.023310][ T4260] tcp_conntracks: [ 1471.038204][ T4280] hci4 [ 1471.038346][ T4260] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 1471.045220][ T4280] kcov: kcov_remote_start: handle = 5, context: task [ 1471.081476][ T4280] kcov: kcov_start: t = ffff888031a39e00, size = 1048576, area = ffffc9001aa7b000 [ 1471.091542][ C0] virtqueue callback for ffff888141666200 (ffffffff84767210) [ 1471.099261][ C0] virtqueue interrupt with no work for ffff888141666000 [ 1471.106233][ C0] virtqueue interrupt with no work for ffff888141665e00 [ 1471.114017][ T14] nf_conntrack: normal packet for ffff88803062c480 [ 1471.120071][T19458] nf_conntrack: new packet for ffff88803062d980 [ 1471.120693][ T4610] bond19: (slave bridge7): Send learning packet: mac 86:d6:7c:81:6c:26 vlan 0 [ 1471.127132][T19458] nf_conntrack: nf_ct_destroy(ffff88803062d980) [ 1471.136434][T22432] Added buffer head 0 to ffff888141666200 [ 1471.142251][T19458] nf_conntrack: nf_ct_destroy: returning ct=ffff88803062d980 to slab [ 1471.146691][ T27] ? __schedule+0x1087/0x4030 [ 1471.148475][ T4280] hci4 Event packet [ 1471.149271][ T4280] hci4: event 0x13 [ 1471.158505][T22779] Insert adjacency: dev team_slave_0 adj_dev team0 adj->ref_nr 1; dev_hold on team0 [ 1471.161462][ T4280] hci4: num 3 [ 1471.165591][T22779] Insert adjacency: dev team0 adj_dev team_slave_0 adj->ref_nr 1; dev_hold on team_slave_0 [ 1471.169102][ T4280] Bluetooth: hci4: hcon ffff888027eca000 sent 0 < count 1 [ 1471.169129][ T4280] Bluetooth: hci4: hcon ffff888072e24000 sent 1 < count 1025 [ 1471.172357][ T4280] kcov: kcov_move_area: ffffc90019a79000 1048576 <= ffffc9001aa7b000 300084 [ 1471.216869][ C0] nf_conntrack: new packet for ffff888019a78c00 [ 1471.218158][ C1] nf_conntrack: new packet for ffff88803062d080 [ 1471.223187][ C0] nf_nat: Already setup manip DST for ct ffff888019a78c00 (status bits 0x188) [ 1471.229626][ C1] nf_nat: Already setup manip DST for ct ffff88803062d080 (status bits 0x188) [ 1471.239355][ T4280] kcov: kcov_remote_start: handle = 5, context: task [ 1471.247465][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1471.254699][ T4280] kcov: kcov_start: t = ffff888031a39e00, size = 1048576, area = ffffc9001aa7b000 [ 1471.263783][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1471.272954][ T4280] hci4 ACL data packet [ 1471.286171][ T4280] hci4: len 12 handle 0x00c8 flags 0x000c [ 1471.287404][T21206] cb->arg bucket: 283859, t ffffc9001d800000 n 0000000000000000 [ 1471.292003][ T4280] hcon ffff888072e24000 mode 0 [ 1471.304538][ T4280] conn ffff8880245b6800 len 12 flags 0xc [ 1471.312664][ T4261] nf_conntrack: normal packet for ffff88807a46c300 [ 1471.319736][ T4280] kcov: kcov_move_area: ffffc90019a79000 1048576 <= ffffc9001aa7b000 448577 [ 1471.320439][ T4280] kcov: kcov_remote_start: handle = 5, context: task [ 1471.335954][ T4280] kcov: kcov_start: t = ffff888031a39e00, size = 1048576, area = ffffc9001aa7b000 [ 1471.338975][ T4610] bond19: (slave bridge7): Send learning packet: mac 86:d6:7c:81:6c:26 vlan 1 [ 1471.345461][ T4280] hci4 Event packet [ 1471.358231][ T4280] hci4: event 0x3d [ 1471.361987][ T4280] hci4: [ 1471.364954][ T4280] cache ffff88802bcfd278, 00:00:00:00:00:00 [ 1471.365304][ T27] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1471.371017][ T4280] kcov: kcov_move_area: ffffc90019a79000 1048576 <= ffffc9001aa7b000 229721 [ 1471.371381][ T4280] hci4 [ 1471.385482][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88805891aa98 is addr:2001::2 for cmd:0 at entry:ffff88807a8e7580 [ 1471.385530][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 1471.410362][ T4280] hci4 acl 4 sco 6 le 9 iso 183 [ 1471.416484][ T4280] hci4: type 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1471.420007][ T4280] hci4: type 2 [ 1471.423798][ T4280] hci4 [ 1471.426505][ T4280] hci4 [ 1471.429608][ T4280] hci4 [ 1471.432596][ T4280] hci4 [ 1471.435382][ T4280] hci4 [ 1471.438461][ T14] nf_conntrack: normal packet for ffff88803062de00 [ 1471.446565][ T4260] No more buffers in queue [ 1471.451084][ T4260] eth0: xmit ffff88803b47b270 42:01:0a:80:00:01 [ 1471.456081][ T4261] tcp_conntracks: [ 1471.457453][ T4260] Added buffer head 29 to ffff888025ccb800 [ 1471.457495][ C0] virtqueue callback for ffff888025ccb800 (ffffffff858ab860) [ 1471.457879][ C1] virtqueue callback for ffff888025ccba00 (ffffffff858ab770) [ 1471.461894][T22892] kcov: kcov_start: t = ffff88802bd0da00, size = 524288, area = ffffc9002561a000 [ 1471.467500][ T4261] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 1471.475355][ C0] Sent skb ffff88803b47b270 [ 1471.483184][ C1] No more buffers in queue [ 1471.492186][ C0] No more buffers in queue [ 1471.497562][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 1471.516905][ C1] No more buffers in queue [ 1471.517190][T22779] team_slave_0: bond_netdev_event received NETDEV_CHANGEUPPER [ 1471.521393][ C1] nf_conntrack: normal packet for ffff88823bdcc000 [ 1471.521416][ C1] tcp_conntracks: [ 1471.521427][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 1471.529283][ T27] ? verify_lock_unused+0x140/0x140 [ 1471.536296][T22779] net team_slave_0: siw: event 21 [ 1471.540003][T20992] nf_conntrack: normal packet for ffff88803062c300 [ 1471.545662][T22779] team_slave_0: bond_netdev_event received NETDEV_CHANGELOWERSTATE [ 1471.578470][ T4261] No more buffers in queue [ 1471.584173][ T4261] eth0: xmit ffff88803b47a5f0 42:01:0a:80:00:01 [ 1471.590622][ T4261] Added buffer head 29 to ffff888025ccb800 [ 1471.590663][ C0] virtqueue callback for ffff888025ccb800 (ffffffff858ab860) [ 1471.596500][ C0] virtqueue callback for ffff888025ccb600 (ffffffff858ab770) [ 1471.612432][ C0] Sent skb ffff88803b47a5f0 [ 1471.617084][ C0] No more buffers in queue [ 1471.621607][ C0] No more buffers in queue [ 1471.626147][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1471.628935][ T27] ? netlink_deliver_tap+0x2e/0x1b0 [ 1471.632802][ C0] No more buffers in queue [ 1471.642547][ C0] tcp_conntracks: [ 1471.642564][ C0] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 1471.679729][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 1471.684857][ T27] ? net_generic+0x1e/0x240 [ 1471.754181][ T27] ? netlink_deliver_tap+0x2e/0x1b0 [ 1471.763318][T22779] net team_slave_0: siw: event 27 [ 1471.827045][ T27] netlink_unicast+0x7ad/0x920 [ 1471.851128][T22779] team_slave_0: bond_netdev_event received NETDEV_CHANGELOWERSTATE [ 1471.880702][ T27] netlink_sendmsg+0x8ad/0xbd0 [ 1471.906246][ T27] ? netlink_getsockopt+0x550/0x550 [ 1471.915512][T22779] net team_slave_0: siw: event 27 [ 1471.938476][T21206] cb->arg bucket: 283860, t ffffc9001d800000 n 0000000000000000 [ 1471.951437][ T27] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1471.957788][T22779] team0: Port device team_slave_0 added [ 1472.004422][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1472.010433][T22779] team0: Features changed: 0x0000e2000fe0f388 -> 0x0000e0064fddfbe9 [ 1472.038316][ T27] ? security_socket_sendmsg+0x7c/0xa0 [ 1472.044261][T22779] team0: bond_netdev_event received NETDEV_FEAT_CHANGE [ 1472.069038][ T27] ? netlink_getsockopt+0x550/0x550 [ 1472.075285][ T4271] kcov: kcov_task_exit: t = ffff88807d3d0000, kcov->t = ffff88807d3d0000 [ 1472.077356][ C0] virtqueue callback for ffff888141666200 (ffffffff84767210) [ 1472.084048][ T4273] kcov: kcov_task_exit: t = ffff88807d3d3c00, kcov->t = ffff88807d3d3c00 [ 1472.091327][ C0] virtqueue interrupt with no work for ffff888141666000 [ 1472.099887][T21942] kcov: kcov_task_exit: t = ffff88802b49bc00, kcov->t = ffff88802b49bc00 [ 1472.106645][ C0] virtqueue interrupt with no work for ffff888141665e00 [ 1472.148194][ C1] net_ratelimit: 50 callbacks suppressed [ 1472.148214][ C1] wireguard: wg0: Sending keepalive packet to peer 45 ([::1]:20002/0%0) [ 1472.168127][T22779] net team0: siw: event 12 [ 1472.173117][T22707] geneve0 (uninitialized): bond_netdev_event received NETDEV_POST_INIT [ 1472.182566][ T27] ____sys_sendmsg+0x5ed/0x9a0 [ 1472.187494][ T27] ? __sys_sendmsg_sock+0x30/0x30 [ 1472.203392][T22707] (null): siw: event 17 [ 1472.207900][T22707] device: 'geneve0': device_add [ 1472.238129][ C1] nf_conntrack: new packet for ffff88803062d080 [ 1472.244828][ C1] nf_nat: Already setup manip DST for ct ffff88803062d080 (status bits 0x188) [ 1472.253957][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1472.263164][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1472.296406][ T27] ? __import_iovec+0x306/0x510 [ 1472.314170][T21206] cb->arg bucket: 283861, t ffffc9001d800000 n 0000000000000000 [ 1472.418497][T22876] kcov: kcov_task_exit: t = ffff88807db71e00, kcov->t = ffff88807db71e00 [ 1472.443254][T22707] kobject: 'geneve0' (ffff88807a690688): kobject_add_internal: parent: 'net', set: 'devices' [ 1472.458312][T22752] kcov: kcov_task_exit: t = ffff8880288b3c00, kcov->t = ffff8880288b3c00 [ 1472.468084][T22689] kcov: kcov_task_exit: t = ffff888026773c00, kcov->t = ffff888026773c00 [ 1472.474656][T22892] kcov: kcov_task_exit: t = ffff88802bd0da00, kcov->t = ffff88802bd0da00 [ 1472.483210][ T4260] tcp_conntracks: [ 1472.485062][ T4260] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 1472.485394][T22432] Added buffer head 0 to ffff888141666200 [ 1472.488908][ C1] wireguard: wg0: Sending keepalive packet to peer 51 ([::1]:20002/0%0) [ 1472.495131][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88805891aa98 is addr:2001::2 for cmd:0 at entry:ffff88807a8e7580 [ 1472.510523][ T3603] sd 0:0:1:0: cmd ffff888028265760 CDB: 0x2a [ 1472.521961][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 1472.522650][ C0] nf_conntrack: new packet for ffff888019a78c00 [ 1472.543395][ C0] nf_nat: Already setup manip DST for ct ffff888019a78c00 (status bits 0x188) [ 1472.552673][ C0] wireguard: wg1: Sending keepalive packet to peer 54 (127.0.0.1:20003) [ 1472.561974][T22678] nf_conntrack: normal packet for ffff88802f902780 [ 1472.569901][ T27] ? import_iovec+0x6f/0xa0 [ 1472.574474][ T27] ___sys_sendmsg+0x2a2/0x360 [ 1472.598188][ T4260] No more buffers in queue [ 1472.602735][ T4260] eth0: xmit ffff88803b47aff0 42:01:0a:80:00:01 [ 1472.609080][ T4260] Added buffer head 2 to ffff888025ccbc00 [ 1472.611608][T22707] net geneve0: No ACPI support [ 1472.615006][ C1] virtqueue callback for ffff888025ccbc00 (ffffffff858ab860) [ 1472.627681][ C1] virtqueue callback for ffff888025ccba00 (ffffffff858ab770) [ 1472.627694][ T27] ? __sys_sendmsg+0x2a0/0x2a0 [ 1472.635714][ C1] wireguard: wg0: Sending keepalive packet to peer 39 (127.0.0.1:20002) [ 1472.648660][ C1] virtqueue callback for ffff888025ccba00 (ffffffff858ab770) [ 1472.655956][T22707] PM: Adding info for No Bus:geneve0 [ 1472.656134][ C1] wireguard: wg0: Sending keepalive packet to peer 57 ([::1]:20002/0%0) [ 1472.661812][ T27] __se_sys_sendmsg+0x1c3/0x2b0 [ 1472.670949][ C1] Sent skb ffff88803b47aff0 [ 1472.676947][T22707] kobject: 'geneve0' (ffff88807a690688): kobject_uevent_env [ 1472.679325][ C1] No more buffers in queue [ 1472.679345][ C1] No more buffers in queue [ 1472.679365][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 1472.686854][T22707] kobject: 'geneve0' (ffff88807a690688): fill_kobj_path: path = '/devices/virtual/net/geneve0' [ 1472.691105][ C1] Receiving skb proto 0x0800 len 88 type 0 [ 1472.698066][ T27] ? __x64_sys_sendmsg+0x80/0x80 [ 1472.701622][ C1] Receiving skb proto 0x0800 len 112 type 0 [ 1472.712309][T22707] kobject: 'queues' (ffff88807370db50): kobject_add_internal: parent: 'geneve0', set: '' [ 1472.717738][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 1472.722945][T21206] cb->arg bucket: 283862, t ffffc9001d800000 n 0000000000000000 [ 1472.728729][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 1472.748100][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1472.752517][ C1] No more buffers in queue [ 1472.758757][T22707] kobject: 'queues' (ffff88807370db50): kobject_uevent_env [ 1472.764201][ C1] nf_conntrack: normal packet for ffff88823bdcc000 [ 1472.778504][T22707] kobject: 'queues' (ffff88807370db50): kobject_uevent_env: filter function caused the event to drop! [ 1472.783031][ C1] tcp_conntracks: [ 1472.794548][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 1472.794564][ T27] do_syscall_64+0x4c/0xa0 [ 1472.798343][ C1] nf_conntrack: normal packet for ffff88823bdcc000 [ 1472.806598][ C0] wireguard: wg1: Receiving keepalive packet from peer 47 ([::1]:20001/0%0) [ 1472.808258][ C1] tcp_conntracks: [ 1472.823892][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 1472.828138][ T4610] wireguard: wg1: Sending handshake initiation to peer 47 ([::1]:20001/0%0) [ 1472.833185][ C1] nf_conntrack: normal packet for ffff88823bdcc000 [ 1472.833206][ C1] tcp_conntracks: [ 1472.849156][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 1472.855109][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1472.858519][ C1] virtqueue callback for ffff888025ccba00 (ffffffff858ab770) [ 1472.870679][ C1] nf_conntrack: normal packet for ffff88823bdcc000 [ 1472.877237][ C1] tcp_conntracks: [ 1472.877253][ C1] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 1472.877708][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1472.881137][ C1] nf_conntrack: normal packet for ffff88823bdcc000 [ 1472.887161][ T4610] nf_conntrack: normal packet for ffff888024373380 [ 1472.891661][ C1] tcp_conntracks: [ 1472.891675][ C1] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 1472.898482][ C1] bridge0: hello timer expired [ 1472.908087][ T3603] Added buffer head 184 to ffff888025caf000 [ 1472.909535][ C1] bridge9: hello timer expired [ 1472.909694][ C1] No more buffers in queue [ 1472.916149][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1472.920531][ C1] virtqueue callback for ffff888025caf000 (ffffffff85445d80) [ 1472.927228][ C0] wireguard: wg2: Receiving keepalive packet from peer 56 (127.0.0.1:20002) [ 1472.931271][ C1] sd 0:0:1:0: cmd ffff888028265760 response 0 status 0x0 sense_len 0 [ 1472.931298][ C1] No more buffers in queue [ 1472.931372][ C1] Receiving skb proto 0x0800 len 148 type 0 [ 1472.940312][T16404] bond0: (slave geneve2): Send learning packet: mac 26:2b:50:03:09:0f vlan 0 [ 1472.941820][ C1] No more buffers in queue [ 1472.951441][T16404] nf_conntrack: new packet for ffff888024372900 [ 1472.958306][ C1] nf_conntrack: normal packet for ffff88823bdcc000 [ 1472.966605][T16404] nf_conntrack: nf_ct_destroy(ffff888024372900) [ 1472.970833][ C1] tcp_conntracks: [ 1472.976729][T16404] nf_conntrack: nf_ct_destroy: returning ct=ffff888024372900 to slab [ 1472.985980][ C1] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 1472.991283][T22707] kobject: 'rx-0' (ffff88808ff4d450): kobject_add_internal: parent: 'queues', set: 'queues' [ 1472.997321][T22241] wireguard: wg0: Receiving handshake initiation from peer 45 ([::1]:20002/0%0) [ 1473.018152][ C0] bridge1: hello timer expired [ 1473.022889][ T6905] nf_conntrack: normal packet for ffff88803062c300 [ 1473.028419][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88805891aa98 is addr:2001::2 for cmd:0 at entry:ffff88807a8e7580 [ 1473.073515][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 1473.082203][ C0] virtqueue callback for ffff888141666200 (ffffffff84767210) [ 1473.082286][ C0] virtqueue interrupt with no work for ffff888141666000 [ 1473.082299][ C0] virtqueue interrupt with no work for ffff888141665e00 [ 1473.108181][T22861] kcov: kcov_task_exit: t = ffff8880789b3c00, kcov->t = ffff8880789b3c00 [ 1473.116904][T22678] Added buffer head 0 to ffff888141666200 [ 1473.123147][T22870] kcov: kcov_task_exit: t = ffff88801cb1bc00, kcov->t = ffff88801cb1bc00 [ 1473.132026][T22863] kcov: kcov_task_exit: t = ffff8880289cda00, kcov->t = ffff8880289cda00 [ 1473.148112][T22241] wireguard: wg0: Sending handshake response to peer 45 ([::1]:20002/0%0) [ 1473.158293][ T27] RIP: 0033:0x7f00e8d9f559 [ 1473.163142][ T7573] sd 0:0:1:0: cmd ffff88802694c920 CDB: 0x35 [ 1473.168359][ T27] RSP: 002b:00007f00e9cab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1473.169782][ T7573] Added buffer head 184 to ffff888025caf000 [ 1473.188198][T22707] kobject: 'rx-0' (ffff88808ff4d450): kobject_uevent_env [ 1473.188590][T22241] nf_conntrack: normal packet for ffff888024373380 [ 1473.195272][ C1] virtqueue callback for ffff888025caf000 (ffffffff85445d80) [ 1473.195295][T22707] kobject: 'rx-0' (ffff88808ff4d450): fill_kobj_path: path = '/devices/virtual/net/geneve0/queues/rx-0' [ 1473.195302][ C1] sd 0:0:1:0: cmd ffff88802694c920 response 0 status 0x0 sense_len 0 [ 1473.195329][ C1] No more buffers in queue [ 1473.195452][T22707] kobject: 'rx-1' (ffff88808ff4d510): kobject_add_internal: parent: 'queues', set: 'queues' [ 1473.203045][ T7573] sd 0:0:1:0: cmd ffff888028265b20 CDB: 0x2a [ 1473.218238][ T4260] tcp_conntracks: [ 1473.221117][ T7573] Added buffer head 184 to ffff888025caf000 [ 1473.229174][ T4260] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 1473.235560][ C1] virtqueue callback for ffff888025caf000 (ffffffff85445d80) [ 1473.268077][ T27] RAX: ffffffffffffffda RBX: 00007f00e9026180 RCX: 00007f00e8d9f559 [ 1473.272204][ C1] sd 0:0:1:0: cmd ffff888028265b20 response 0 status 0x0 sense_len 0 [ 1473.288458][ C1] No more buffers in queue [ 1473.293389][ C1] nf_conntrack: new packet for ffff88803062d080 [ 1473.300014][ C1] nf_nat: Already setup manip DST for ct ffff88803062d080 (status bits 0x188) [ 1473.308078][ T27] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 1473.309058][ C1] virtqueue callback for ffff888025ccba00 (ffffffff858ab770) [ 1473.317265][ T27] RBP: 00007f00e8e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1473.324431][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1473.333605][T22707] kobject: 'rx-1' (ffff88808ff4d510): kobject_uevent_env [ 1473.341980][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1473.358980][ C1] No more buffers in queue [ 1473.363462][ C1] Receiving skb proto 0x0800 len 148 type 0 [ 1473.368426][T16404] bond0: (slave geneve2): Send learning packet: mac 26:2b:50:03:09:0f vlan 1 [ 1473.369414][ C1] No more buffers in queue [ 1473.378555][ T4260] No more buffers in queue [ 1473.382634][ C1] nf_conntrack: normal packet for ffff88823bdcc000 [ 1473.387026][ T4260] eth0: xmit ffff888085f74c80 42:01:0a:80:00:01 [ 1473.393614][ C1] tcp_conntracks: [ 1473.399913][ T4260] Added buffer head 29 to ffff888025ccb800 [ 1473.399954][ C0] virtqueue callback for ffff888025ccb800 (ffffffff858ab860) [ 1473.403745][ C1] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 1473.428114][T21206] cb->arg bucket: 283863, t ffffc9001d800000 n 0000000000000000 [ 1473.435839][T21206] cb->arg bucket: 283864, t ffffc9001d800000 n 0000000000000000 [ 1473.444090][T16404] nf_conntrack: new packet for ffff888024372900 [ 1473.450709][T16404] nf_conntrack: nf_ct_destroy(ffff888024372900) [ 1473.456990][T16404] nf_conntrack: nf_ct_destroy: returning ct=ffff888024372900 to slab [ 1473.489401][T22882] kcov: kcov_task_exit: t = ffff888027d25a00, kcov->t = ffff888027d25a00 [ 1473.498213][T22885] kcov: kcov_task_exit: t = ffff888027d20000, kcov->t = ffff888027d20000 [ 1473.507227][T22889] kcov: kcov_task_exit: t = ffff88801cb2bc00, kcov->t = ffff88801cb2bc00 [ 1473.528105][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1473.536213][ T27] R13: 00007f00e9026218 R14: 00007f00e9026180 R15: 00007fff52e49008 [ 1473.544790][T22707] kobject: 'rx-1' (ffff88808ff4d510): fill_kobj_path: path = '/devices/virtual/net/geneve0/queues/rx-1' [ 1473.545231][T22881] kcov: kcov_task_exit: t = ffff8880510f5a00, kcov->t = ffff8880510f5a00 [ 1473.577169][T22707] kobject: 'tx-0' (ffff8880812fe820): kobject_add_internal: parent: 'queues', set: 'queues' [ 1473.587759][ T4260] tcp_conntracks: [ 1473.587779][ T4260] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 1473.608090][ T27] [ 1473.608294][T21206] cb->arg bucket: 283865, t ffffc9001d800000 n 0000000000000000 [ 1473.611326][ T4260] Sent skb ffff888085f74c80 [ 1473.623557][ T4260] No more buffers in queue [ 1473.628127][ T4260] eth0: xmit ffff888024a92500 42:01:0a:80:00:01 [ 1473.634403][ T4260] Added buffer head 29 to ffff888025ccb800 [ 1473.640389][ C0] virtqueue callback for ffff888025ccb600 (ffffffff858ab770) [ 1473.640422][ C0] virtqueue callback for ffff888025ccb800 (ffffffff858ab860) [ 1473.648411][T22707] kobject: 'tx-0' (ffff8880812fe820): kobject_uevent_env [ 1473.655283][ T27] INFO: task syz.1.4962:21741 blocked for more than 148 seconds. [ 1473.655312][ T27] Not tainted syzkaller #0 [ 1473.663117][T21206] cb->arg bucket: 283866, t ffffc9001d800000 n 0000000000000000 [ 1473.685205][T22707] kobject: 'tx-0' (ffff8880812fe820): fill_kobj_path: path = '/devices/virtual/net/geneve0/queues/tx-0' [ 1473.688069][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1473.697242][T22707] kobject: 'tx-1' (ffff8880812fe9e0): kobject_add_internal: parent: 'queues', set: 'queues' [ 1473.718248][ T4610] bond19: (slave bridge7): Send learning packet: mac 86:d6:7c:81:6c:26 vlan 0 [ 1473.719459][ C0] nf_conntrack: new packet for ffff888019a78c00 [ 1473.727172][ T4610] bond19: (slave bridge7): Send learning packet: mac 86:d6:7c:81:6c:26 vlan 1 [ 1473.733555][ C0] nf_nat: Already setup manip DST for ct ffff888019a78c00 (status bits 0x188) [ 1473.733651][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88805891aa98 is addr:2001::2 for cmd:0 at entry:ffff88807a8e7580 [ 1473.751936][T22707] kobject: 'tx-1' (ffff8880812fe9e0): kobject_uevent_env [ 1473.764590][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 1473.764835][ C0] Sent skb ffff888024a92500 [ 1473.780518][ T4260] tcp_conntracks: [ 1473.784978][ C0] No more buffers in queue [ 1473.785383][ C0] No more buffers in queue [ 1473.788744][ T4260] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 1473.803218][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 1473.809129][ C0] No more buffers in queue [ 1473.813746][ C0] No more buffers in queue [ 1473.819100][ C0] eth0: xmit ffff88803d577dc0 42:01:0a:80:00:01 [ 1473.825388][ C0] Added buffer head 29 to ffff888025ccb800 [ 1473.828231][ T4260] No more buffers in queue [ 1473.831268][ C0] virtqueue callback for ffff888025ccb800 (ffffffff858ab860) [ 1473.835626][ T4260] eth0: xmit ffff88808ff0edc0 42:01:0a:80:00:01 [ 1473.843386][T22678] nf_conntrack: normal packet for ffff88802f902900 [ 1473.849471][ T4260] Added buffer head 2 to ffff888025ccbc00 [ 1473.856148][ C1] virtqueue callback for ffff888025ccbc00 (ffffffff858ab860) [ 1473.868124][ T27] task:syz.1.4962 state:D stack:26544 pid:21741 ppid:4281 flags:0x00004004 [ 1473.870156][ C1] Sent skb ffff88808ff0edc0 [ 1473.883581][ C1] No more buffers in queue [ 1473.888072][ T27] Call Trace: [ 1473.891963][ T27] [ 1473.892396][T22707] kobject: 'tx-1' (ffff8880812fe9e0): fill_kobj_path: path = '/devices/virtual/net/geneve0/queues/tx-1' [ 1473.895117][ T27] __schedule+0x107f/0x4030 [ 1473.923964][T22707] Registering net sysctl (net ffff888053d19c40): net/ipv4/neigh/geneve0 [ 1473.932825][ T27] ? release_firmware_map_entry+0x187/0x187 [ 1473.952362][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1473.957906][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1473.958551][ C0] Sent skb ffff88803d577dc0 [ 1473.968848][ C0] No more buffers in queue [ 1473.978096][ C0] No more buffers in queue [ 1473.983292][T22707] procname=mcast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88801cab3d60 [ 1474.008133][T21206] cb->arg bucket: 283867, t ffffc9001d800000 n 0000000000000000 [ 1474.015949][T22678] nf_conntrack: normal packet for ffff888024372a80 [ 1474.023837][ T27] schedule+0xb9/0x180 [ 1474.027974][ T27] schedule_preempt_disabled+0xf/0x20 [ 1474.033605][T21206] cb->arg bucket: 283868, t ffffc9001d800000 n 0000000000000000 [ 1474.033633][T21206] cb->arg bucket: 283869, t ffffc9001d800000 n 0000000000000000 [ 1474.033652][T21206] cb->arg bucket: 283870, t ffffc9001d800000 n 0000000000000000 [ 1474.041484][T22707] procname=ucast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88801cab3d64 [ 1474.052586][ T4258] tcp_conntracks: [ 1474.068353][ T4258] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 1474.070214][T22707] procname=app_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88801cab3d68 [ 1474.077375][ C0] virtqueue callback for ffff888141666200 (ffffffff84767210) [ 1474.077462][T22707] procname=mcast_resolicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88801cab3d6c [ 1474.088344][ C0] virtqueue interrupt with no work for ffff888141666000 [ 1474.088360][ C0] virtqueue interrupt with no work for ffff888141665e00 [ 1474.089297][T22678] Added buffer head 0 to ffff888141666200 [ 1474.108681][ T27] __mutex_lock+0x548/0xae0 [ 1474.135050][ T4258] No more buffers in queue [ 1474.136378][T22241] nf_conntrack: normal packet for ffff88803062c300 [ 1474.139543][ T4258] eth0: xmit ffff88807ca68ff0 42:01:0a:80:00:01 [ 1474.152653][ T4258] Added buffer head 29 to ffff888025ccb800 [ 1474.152680][ C0] virtqueue callback for ffff888025ccb800 (ffffffff858ab860) [ 1474.152874][ C1] virtqueue callback for ffff888025ccba00 (ffffffff858ab770) [ 1474.165915][ C1] No more buffers in queue [ 1474.173453][ C0] Sent skb ffff88807ca68ff0 [ 1474.177694][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 1474.182252][ C0] No more buffers in queue [ 1474.188062][ C1] No more buffers in queue [ 1474.197020][ C1] nf_conntrack: normal packet for ffff88823bdcc000 [ 1474.203732][ C1] tcp_conntracks: [ 1474.203749][ C1] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 1474.213226][T22678] nf_conntrack: normal packet for ffff88803062c480 [ 1474.214597][T22707] procname=retrans_time mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88801cab3d70 [ 1474.231558][ T27] ? __mutex_lock+0x3ba/0xae0 [ 1474.236294][ T27] ? nfnetlink_rcv_msg+0xa58/0x1290 [ 1474.257177][T21206] cb->arg bucket: 283871, t ffffc9001d800000 n 0000000000000000 [ 1474.258074][ T27] ? mutex_lock_nested+0x10/0x10 [ 1474.268538][T21206] cb->arg bucket: 283872, t ffffc9001d800000 n 0000000000000000 [ 1474.270090][T22707] procname=base_reachable_time mode=644 proc_handler=neigh_proc_base_reachable_time data=ffff88801cab3d74 [ 1474.277896][T21206] cb->arg bucket: 283873, t ffffc9001d800000 n 0000000000000000 [ 1474.289890][ T27] ? __nla_parse+0x3c/0x50 [ 1474.289926][ T27] ? ip_set_create+0x18e0/0x18e0 [ 1474.289955][ T27] nfnetlink_rcv_msg+0xa58/0x1290 [ 1474.289983][ T27] ? nfnetlink_rcv_msg+0x224/0x1290 [ 1474.290030][ T27] ? nfnetlink_unbind+0x160/0x160 [ 1474.290106][ T27] netlink_rcv_skb+0x1ef/0x440 [ 1474.313281][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88805891aa98 is addr:2001::2 for cmd:0 at entry:ffff88807a8e7580 [ 1474.313326][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 1474.319079][ C1] nf_conntrack: new packet for ffff88803062d080 [ 1474.324222][T22432] nf_conntrack: normal packet for ffff88802f902900 [ 1474.328885][ C1] nf_nat: Already setup manip DST for ct ffff88803062d080 (status bits 0x188) [ 1474.342243][ T4280] hcon ffff88803111c000 state BT_CONNECTED [ 1474.350660][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1474.350765][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1474.376014][T22707] procname=delay_first_probe_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff88801cab3d78 [ 1474.380398][ T4280] hcon ffff88803111c000 [ 1474.414416][ T4280] hci7 opcode 0x0406 plen 3 [ 1474.418241][T22707] procname=interval_probe_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies_positive data=ffff88801cab3d7c [ 1474.419109][ T4280] hci7: skb len 6 [ 1474.432451][ T27] ? nfnetlink_unbind+0x160/0x160 [ 1474.438568][ T4280] hci7 cmd_cnt 1 cmd queued 1 [ 1474.445614][ T4280] hci7: skb ffff888053b00640 [ 1474.450436][ T4280] hci7 type 1 len 6 [ 1474.454397][T21206] cb->arg bucket: 283874, t ffffc9001d800000 n 0000000000000000 [ 1474.458170][ T27] ? netlink_ack+0x1160/0x1160 [ 1474.462139][T21206] cb->arg bucket: 283875, t ffffc9001d800000 n 0000000000000000 [ 1474.469079][T22707] procname=gc_stale_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff88801cab3d80 [ 1474.474762][T21206] cb->arg bucket: 283876, t ffffc9001d800000 n 0000000000000000 [ 1474.493366][ T27] ? bpf_lsm_capable+0x5/0x10 [ 1474.493404][ T27] ? security_capable+0x85/0xb0 [ 1474.493438][ T27] nfnetlink_rcv+0x2b0/0x2470 [ 1474.493470][ T27] ? __lock_acquire+0x1359/0x7ea0 [ 1474.493521][ T27] ? verify_lock_unused+0x140/0x140 [ 1474.498410][T22432] nf_conntrack: normal packet for ffff88803062de00 [ 1474.526039][T21206] cb->arg bucket: 283877, t ffffc9001d800000 n 0000000000000000 [ 1474.534050][T21206] cb->arg bucket: 283878, t ffffc9001d800000 n 0000000000000000 [ 1474.541816][T21206] cb->arg bucket: 283879, t ffffc9001d800000 n 0000000000000000 [ 1474.542101][ T27] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1474.550050][T21206] cb->arg bucket: 283880, t ffffc9001d800000 n 0000000000000000 [ 1474.563354][T21206] cb->arg bucket: 283881, t ffffc9001d800000 n 0000000000000000 [ 1474.571110][T21206] cb->arg bucket: 283882, t ffffc9001d800000 n 0000000000000000 [ 1474.571364][ T27] ? verify_lock_unused+0x140/0x140 [ 1474.578905][T21206] cb->arg bucket: 283883, t ffffc9001d800000 n 0000000000000000 [ 1474.578930][T21206] cb->arg bucket: 283884, t ffffc9001d800000 n 0000000000000000 [ 1474.578949][T21206] cb->arg bucket: 283885, t ffffc9001d800000 n 0000000000000000 [ 1474.578967][T21206] cb->arg bucket: 283886, t ffffc9001d800000 n 0000000000000000 [ 1474.578985][T21206] cb->arg bucket: 283887, t ffffc9001d800000 n 0000000000000000 [ 1474.579004][T21206] cb->arg bucket: 283888, t ffffc9001d800000 n 0000000000000000 [ 1474.579022][T21206] cb->arg bucket: 283889, t ffffc9001d800000 n 0000000000000000 [ 1474.579041][T21206] cb->arg bucket: 283890, t ffffc9001d800000 n 0000000000000000 [ 1474.579059][T21206] cb->arg bucket: 283891, t ffffc9001d800000 n 0000000000000000 [ 1474.579077][T21206] cb->arg bucket: 283892, t ffffc9001d800000 n 0000000000000000 [ 1474.579096][T21206] cb->arg bucket: 283893, t ffffc9001d800000 n 0000000000000000 [ 1474.579115][T21206] cb->arg bucket: 283894, t ffffc9001d800000 n 0000000000000000 [ 1474.579133][T21206] cb->arg bucket: 283895, t ffffc9001d800000 n 0000000000000000 [ 1474.579152][T21206] cb->arg bucket: 283896, t ffffc9001d800000 n 0000000000000000 [ 1474.579170][T21206] cb->arg bucket: 283897, t ffffc9001d800000 n 0000000000000000 [ 1474.579189][T21206] cb->arg bucket: 283898, t ffffc9001d800000 n 0000000000000000 [ 1474.579208][T21206] cb->arg bucket: 283899, t ffffc9001d800000 n 0000000000000000 [ 1474.579227][T21206] cb->arg bucket: 283900, t ffffc9001d800000 n 0000000000000000 [ 1474.579246][T21206] cb->arg bucket: 283901, t ffffc9001d800000 n 0000000000000000 [ 1474.579272][T21206] cb->arg bucket: 283902, t ffffc9001d800000 n 0000000000000000 [ 1474.579290][T21206] cb->arg bucket: 283903, t ffffc9001d800000 n 0000000000000000 [ 1474.579309][T21206] cb->arg bucket: 283904, t ffffc9001d800000 n 0000000000000000 [ 1474.579328][T21206] cb->arg bucket: 283905, t ffffc9001d800000 n 0000000000000000 [ 1474.579346][T21206] cb->arg bucket: 283906, t ffffc9001d800000 n 0000000000000000 [ 1474.579366][T21206] cb->arg bucket: 283907, t ffffc9001d800000 n 0000000000000000 [ 1474.579385][T21206] cb->arg bucket: 283908, t ffffc9001d800000 n 0000000000000000 [ 1474.599294][T22707] procname=unres_qlen_bytes mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88801cab3d84 [ 1474.600642][T21206] cb->arg bucket: 283909, t ffffc9001d800000 n 0000000000000000 [ 1474.607816][T22707] procname=proxy_qlen mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88801cab3d88 [ 1474.607851][T22707] procname=anycast_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88801cab3d8c [ 1474.615775][T21206] cb->arg bucket: 283910, t ffffc9001d800000 n 0000000000000000 [ 1474.615799][T21206] cb->arg bucket: 283911, t ffffc9001d800000 n 0000000000000000 [ 1474.615818][T21206] cb->arg bucket: 283912, t ffffc9001d800000 n 0000000000000000 [ 1474.615837][T21206] cb->arg bucket: 283913, t ffffc9001d800000 n 0000000000000000 [ 1474.615855][T21206] cb->arg bucket: 283914, t ffffc9001d800000 n 0000000000000000 [ 1474.615873][T21206] cb->arg bucket: 283915, t ffffc9001d800000 n 0000000000000000 [ 1474.615891][T21206] cb->arg bucket: 283916, t ffffc9001d800000 n 0000000000000000 [ 1474.615910][T21206] cb->arg bucket: 283917, t ffffc9001d800000 n 0000000000000000 [ 1474.615929][T21206] cb->arg bucket: 283918, t ffffc9001d800000 n 0000000000000000 [ 1474.615947][T21206] cb->arg bucket: 283919, t ffffc9001d800000 n 0000000000000000 [ 1474.615966][T21206] cb->arg bucket: 283920, t ffffc9001d800000 n 0000000000000000 [ 1474.615984][T21206] cb->arg bucket: 283921, t ffffc9001d800000 n 0000000000000000 [ 1474.616003][T21206] cb->arg bucket: 283922, t ffffc9001d800000 n 0000000000000000 [ 1474.616021][T21206] cb->arg bucket: 283923, t ffffc9001d800000 n 0000000000000000 [ 1474.616040][T21206] cb->arg bucket: 283924, t ffffc9001d800000 n 0000000000000000 [ 1474.616058][T21206] cb->arg bucket: 283925, t ffffc9001d800000 n 0000000000000000 [ 1474.616077][T21206] cb->arg bucket: 283926, t ffffc9001d800000 n 0000000000000000 [ 1474.775476][T22875] kcov: kcov_task_exit: t = ffff88807db73c00, kcov->t = ffff88807db73c00 [ 1474.779160][ T27] ? netlink_deliver_tap+0x2e/0x1b0 [ 1474.797983][ C0] nf_conntrack: new packet for ffff888019a78c00 [ 1474.798067][ C0] nf_nat: Already setup manip DST for ct ffff888019a78c00 (status bits 0x188) [ 1474.877224][ T4610] bond0: (slave geneve2): Send learning packet: mac 26:2b:50:03:09:0f vlan 0 [ 1474.882375][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88805891aa98 is addr:2001::2 for cmd:0 at entry:ffff88807a8e7580 [ 1474.882391][ C1] bridge9: hello timer expired [ 1474.882414][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 1474.882419][ C1] bridge0: hello timer expired [ 1474.883219][T22707] procname=proxy_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88801cab3d90 [ 1474.911274][ T4610] nf_conntrack: new packet for ffff88803062d980 [ 1474.914378][T22707] procname=locktime mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88801cab3d94 [ 1474.921995][ T4610] nf_conntrack: nf_ct_destroy(ffff88803062d980) [ 1474.929502][T22707] procname=unres_qlen mode=644 proc_handler=neigh_proc_dointvec_unres_qlen data=ffff88801cab3d84 [ 1474.937217][ T4610] nf_conntrack: nf_ct_destroy: returning ct=ffff88803062d980 to slab [ 1474.945283][T22707] procname=retrans_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies data=ffff88801cab3d70 [ 1474.953587][ C0] bridge1: hello timer expired [ 1474.974380][ T4610] bond0: (slave geneve2): Send learning packet: mac 26:2b:50:03:09:0f vlan 1 [ 1474.975223][T22707] procname=base_reachable_time_ms mode=644 proc_handler=neigh_proc_base_reachable_time data=ffff88801cab3d74 [ 1474.997382][ T4610] nf_conntrack: new packet for ffff88803062d980 [ 1474.999580][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 1475.012997][ T4610] nf_conntrack: nf_ct_destroy(ffff88803062d980) [ 1475.013018][ T4610] nf_conntrack: nf_ct_destroy: returning ct=ffff88803062d980 to slab [ 1475.056780][T21206] cb->arg bucket: 283927, t ffffc9001d800000 n 0000000000000000 [ 1475.061125][T19458] bond19: (slave bridge7): Send learning packet: mac 86:d6:7c:81:6c:26 vlan 0 [ 1475.069765][T21206] cb->arg bucket: 283928, t ffffc9001d800000 n 0000000000000000 [ 1475.077364][T22707] Registering net sysctl (net ffff888053d19c40): net/ipv4/conf/geneve0 [ 1475.077402][ C0] virtqueue callback for ffff888141666200 (ffffffff84767210) [ 1475.094041][T21206] cb->arg bucket: 283929, t ffffc9001d800000 n 0000000000000000 [ 1475.096475][ C0] virtqueue interrupt with no work for ffff888141666000 [ 1475.101497][T21206] cb->arg bucket: 283930, t ffffc9001d800000 n 0000000000000000 [ 1475.110379][ C0] virtqueue interrupt with no work for ffff888141665e00 [ 1475.110918][T22432] Added buffer head 0 to ffff888141666200 [ 1475.138186][T19458] bond19: (slave bridge7): Send learning packet: mac 86:d6:7c:81:6c:26 vlan 1 [ 1475.162060][ T27] ? net_generic+0x1e/0x240 [ 1475.165117][T22707] procname=forwarding mode=644 proc_handler=devinet_sysctl_forward data=ffff888055087160 [ 1475.188099][ T27] ? netlink_deliver_tap+0x2e/0x1b0 [ 1475.188772][T21206] cb->arg bucket: 283931, t ffffc9001d800000 n 0000000000000000 [ 1475.196268][ T27] netlink_unicast+0x7ad/0x920 [ 1475.203491][T22707] procname=mc_forwarding mode=444 proc_handler=devinet_conf_proc data=ffff888055087164 [ 1475.203642][T22707] Not writable by anyone [ 1475.203654][T22707] procname=bc_forwarding mode=644 proc_handler=devinet_conf_proc data=ffff8880550871dc [ 1475.203678][T22707] procname=accept_redirects mode=644 proc_handler=devinet_conf_proc data=ffff88805508716c [ 1475.203700][T22707] procname=secure_redirects mode=644 proc_handler=devinet_conf_proc data=ffff888055087170 [ 1475.203723][T22707] procname=shared_media mode=644 proc_handler=devinet_conf_proc data=ffff888055087178 [ 1475.203746][T22707] procname=rp_filter mode=644 proc_handler=devinet_conf_proc data=ffff88805508717c [ 1475.212029][T17732] nf_conntrack: normal packet for ffff88803062c300 [ 1475.233758][T22707] procname=send_redirects mode=644 proc_handler=devinet_conf_proc data=ffff888055087174 [ 1475.233792][T22707] procname=accept_source_route mode=644 proc_handler=devinet_conf_proc data=ffff888055087180 [ 1475.253466][ T27] netlink_sendmsg+0x8ad/0xbd0 [ 1475.261518][T22707] procname=accept_local mode=644 proc_handler=devinet_conf_proc data=ffff8880550871b8 [ 1475.261556][T22707] procname=src_valid_mark mode=644 proc_handler=devinet_conf_proc data=ffff8880550871bc [ 1475.261579][T22707] procname=proxy_arp mode=644 proc_handler=devinet_conf_proc data=ffff888055087168 [ 1475.261602][T22707] procname=medium_id mode=644 proc_handler=devinet_conf_proc data=ffff888055087194 [ 1475.261623][T22707] procname=bootp_relay mode=644 proc_handler=devinet_conf_proc data=ffff888055087184 [ 1475.261646][T22707] procname=log_martians mode=644 proc_handler=devinet_conf_proc data=ffff888055087188 [ 1475.261668][T22707] procname=tag mode=644 proc_handler=devinet_conf_proc data=ffff88805508718c [ 1475.261690][T22707] procname=arp_filter mode=644 proc_handler=devinet_conf_proc data=ffff888055087190 [ 1475.261712][T22707] procname=arp_announce mode=644 proc_handler=devinet_conf_proc data=ffff8880550871a4 [ 1475.261733][T22707] procname=arp_ignore mode=644 proc_handler=devinet_conf_proc data=ffff8880550871a8 [ 1475.261755][T22707] procname=arp_accept mode=644 proc_handler=devinet_conf_proc data=ffff8880550871b0 [ 1475.266554][ T27] ? netlink_getsockopt+0x550/0x550 [ 1475.289465][T22707] procname=arp_notify mode=644 proc_handler=devinet_conf_proc data=ffff8880550871b4 [ 1475.292434][ T27] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1475.314154][T22707] procname=arp_evict_nocarrier mode=644 proc_handler=devinet_conf_proc data=ffff8880550871e0 [ 1475.328764][T21206] cb->arg bucket: 283932, t ffffc9001d800000 n 0000000000000000 [ 1475.336975][T22707] procname=proxy_arp_pvlan mode=644 proc_handler=devinet_conf_proc data=ffff8880550871c0 [ 1475.337847][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1475.348123][ C1] nf_conntrack: new packet for ffff88803062d080 [ 1475.348147][ C1] nf_nat: Already setup manip DST for ct ffff88803062d080 (status bits 0x188) [ 1475.348223][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1475.348317][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1475.348670][T22707] procname=force_igmp_version mode=644 proc_handler=devinet_conf_proc data=ffff8880550871a0 [ 1475.348700][T22707] procname=igmpv2_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=ffff8880550871c8 [ 1475.348734][T22707] procname=igmpv3_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=ffff8880550871cc [ 1475.348758][T22707] procname=ignore_routes_with_linkdown mode=644 proc_handler=devinet_conf_proc data=ffff8880550871d0 [ 1475.348782][T22707] procname=drop_gratuitous_arp mode=644 proc_handler=devinet_conf_proc data=ffff8880550871d8 [ 1475.348805][T22707] procname=disable_xfrm mode=644 proc_handler=ipv4_doint_and_flush data=ffff888055087198 [ 1475.348829][T22707] procname=disable_policy mode=644 proc_handler=ipv4_doint_and_flush data=ffff88805508719c [ 1475.348852][T22707] procname=promote_secondaries mode=644 proc_handler=ipv4_doint_and_flush data=ffff8880550871ac [ 1475.348876][T22707] procname=route_localnet mode=644 proc_handler=ipv4_doint_and_flush data=ffff8880550871c4 [ 1475.348900][T22707] procname=drop_unicast_in_l2_multicast mode=644 proc_handler=ipv4_doint_and_flush data=ffff8880550871d4 [ 1475.349070][T22707] geneve0: bond_netdev_event received NETDEV_REGISTER [ 1475.374139][ T27] ? security_socket_sendmsg+0x7c/0xa0 [ 1475.393790][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88805891aa98 is addr:2001::2 for cmd:0 at entry:ffff88807a8e7580 [ 1475.393831][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 1475.407423][T21206] cb->arg bucket: 283933, t ffffc9001d800000 n 0000000000000000 [ 1475.432070][ T27] ? netlink_getsockopt+0x550/0x550 [ 1475.433920][T22707] net geneve0: siw: event 5 [ 1475.460003][ T27] ____sys_sendmsg+0x5ed/0x9a0 [ 1475.463924][T22707] Registering net sysctl (net ffff888053d19c40): net/ipv6/neigh/geneve0 [ 1475.472748][ T27] ? __sys_sendmsg_sock+0x30/0x30 [ 1475.489107][T22707] procname=mcast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88807370de60 [ 1475.493050][ T27] ? __import_iovec+0x306/0x510 [ 1475.516436][T22707] procname=ucast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88807370de64 [ 1475.526900][ T27] ? import_iovec+0x6f/0xa0 [ 1475.542872][T22707] procname=app_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88807370de68 [ 1475.542916][T22707] procname=mcast_resolicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88807370de6c [ 1475.542944][T22707] procname=retrans_time mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff88807370de70 [ 1475.563434][T21206] cb->arg bucket: 283934, t ffffc9001d800000 n 0000000000000000 [ 1475.608157][T22707] procname=base_reachable_time mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff88807370de74 [ 1475.617902][ T27] ___sys_sendmsg+0x2a2/0x360 [ 1475.645286][T22707] procname=delay_first_probe_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff88807370de78 [ 1475.653652][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 1475.660416][T22707] procname=interval_probe_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies_positive data=ffff88807370de7c [ 1475.691948][ T27] ? __sys_sendmsg+0x2a0/0x2a0 [ 1475.697485][T22707] procname=gc_stale_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff88807370de80 [ 1475.706379][ T27] __se_sys_sendmsg+0x1c3/0x2b0 [ 1475.738187][T22707] procname=unres_qlen_bytes mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88807370de84 [ 1475.743538][ T27] ? __x64_sys_sendmsg+0x80/0x80 [ 1475.764900][T22707] procname=proxy_qlen mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88807370de88 [ 1475.774457][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1475.775295][T22707] procname=anycast_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88807370de8c [ 1475.785858][ T27] do_syscall_64+0x4c/0xa0 [ 1475.785885][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1475.785906][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1475.785929][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1475.785958][ T27] RIP: 0033:0x7f00e8d9f559 [ 1475.785977][ T27] RSP: 002b:00007f00e9c8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1475.786004][ T27] RAX: ffffffffffffffda RBX: 00007f00e9026270 RCX: 00007f00e8d9f559 [ 1475.786020][ T27] RDX: 0000000000044014 RSI: 0000200000000500 RDI: 0000000000000004 [ 1475.786034][ T27] RBP: 00007f00e8e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1475.786048][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1475.805355][T22707] procname=proxy_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88807370de90 [ 1475.808123][ T27] R13: 00007f00e9026308 R14: 00007f00e9026270 R15: 00007fff52e49008 [ 1475.828303][ C0] nf_conntrack: new packet for ffff888019a78c00 [ 1475.832203][ T27] [ 1475.843223][ C0] nf_nat: Already setup manip DST for ct ffff888019a78c00 (status bits 0x188) [ 1475.854951][ T27] [ 1475.854951][ T27] Showing all locks held in the system: [ 1475.872425][T22707] procname=locktime mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88807370de94 [ 1475.881405][ T27] 1 lock held by rcu_tasks_kthre/12: [ 1475.894043][T22707] procname=unres_qlen mode=644 proc_handler=neigh_proc_dointvec_unres_qlen data=ffff88807370de84 [ 1475.908795][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88805891aa98 is addr:2001::2 for cmd:0 at entry:ffff88807a8e7580 [ 1475.908838][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 1475.918303][ T27] #0: [ 1475.926266][T22707] procname=retrans_time_ms mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff88807370de70 [ 1475.938059][ T27] ffffffff8db2e230 [ 1475.950213][T22707] procname=base_reachable_time_ms mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff88807370de74 [ 1475.950381][T22707] Registering net sysctl (net ffff888053d19c40): net/ipv6/conf/geneve0 [ 1475.950421][T22707] procname=forwarding mode=644 proc_handler=addrconf_sysctl_forward data=ffff888052afe5e0 [ 1475.950467][T22707] procname=hop_limit mode=644 proc_handler=proc_dointvec_minmax data=ffff888052afe5e4 [ 1475.950495][T22707] procname=mtu mode=644 proc_handler=addrconf_sysctl_mtu data=ffff888052afe5e8 [ 1475.950524][T22707] procname=accept_ra mode=644 proc_handler=proc_dointvec data=ffff888052afe5ec [ 1475.950550][T22707] procname=accept_redirects mode=644 proc_handler=proc_dointvec data=ffff888052afe5f0 [ 1475.971880][ T27] ( [ 1475.975131][T21206] cb->arg bucket: 283935, t ffffc9001d800000 n 0000000000000000 [ 1476.018128][ T27] rcu_tasks.tasks_gp_mutex [ 1476.038549][T22707] procname=autoconf mode=644 proc_handler=proc_dointvec data=ffff888052afe5f4 [ 1476.077626][ C0] virtqueue callback for ffff888141666200 (ffffffff84767210) [ 1476.077712][ C0] virtqueue interrupt with no work for ffff888141666000 [ 1476.077725][ C0] virtqueue interrupt with no work for ffff888141665e00 [ 1476.079109][ T27] ){+.+.}-{3:3} [ 1476.089783][T16215] Added buffer head 0 to ffff888141666200 [ 1476.131776][ T27] , at: rcu_tasks_one_gp+0x33/0xef0 [ 1476.182861][T19458] bond0: (slave geneve2): Send learning packet: mac 26:2b:50:03:09:0f vlan 0 [ 1476.183028][T19458] nf_conntrack: new packet for ffff888024372900 [ 1476.238725][T20965] nf_conntrack: normal packet for ffff88803062c300 [ 1476.242370][T19458] nf_conntrack: nf_ct_destroy(ffff888024372900) [ 1476.262184][T19458] nf_conntrack: nf_ct_destroy: returning ct=ffff888024372900 to slab [ 1476.273662][T22707] procname=dad_transmits mode=644 proc_handler=proc_dointvec data=ffff888052afe5f8 [ 1476.283581][T22707] procname=router_solicitations mode=644 proc_handler=proc_dointvec_minmax data=ffff888052afe5fc [ 1476.294545][ T27] 1 lock held by rcu_tasks_trace/13: [ 1476.294566][ T27] #0: ffffffff8db2ea50 [ 1476.300248][T22707] procname=router_solicitation_interval mode=644 proc_handler=proc_dointvec_jiffies data=ffff888052afe600 [ 1476.316875][T22707] procname=router_solicitation_max_interval mode=644 proc_handler=proc_dointvec_jiffies data=ffff888052afe604 [ 1476.318084][ T27] ( [ 1476.329112][T22707] procname=router_solicitation_delay mode=644 proc_handler=proc_dointvec_jiffies data=ffff888052afe608 [ 1476.334448][T22875] ffff888078464000 name hci7 bus 0 [ 1476.343998][T22707] procname=force_mld_version mode=644 proc_handler=proc_dointvec data=ffff888052afe60c [ 1476.359454][T19458] bond0: (slave geneve2): Send learning packet: mac 26:2b:50:03:09:0f vlan 1 [ 1476.368138][ T27] rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1476.368532][T19458] nf_conntrack: new packet for ffff888024372900 [ 1476.377375][ T27] 1 lock held by khungtaskd/27: [ 1476.383926][T19458] nf_conntrack: nf_ct_destroy(ffff888024372900) [ 1476.383946][T19458] nf_conntrack: nf_ct_destroy: returning ct=ffff888024372900 to slab [ 1476.385280][ T4610] bond19: (slave bridge7): Send learning packet: mac 86:d6:7c:81:6c:26 vlan 0 [ 1476.389003][ C1] nf_conntrack: new packet for ffff88803062d080 [ 1476.404237][T22707] procname=mldv1_unsolicited_report_interval mode=644 proc_handler=proc_dointvec_ms_jiffies data=ffff888052afe610 [ 1476.412237][ C1] nf_nat: Already setup manip DST for ct ffff88803062d080 (status bits 0x188) [ 1476.412319][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1476.418576][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88805891aa98 is addr:2001::2 for cmd:0 at entry:ffff88807a8e7580 [ 1476.430906][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1476.439788][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 1476.473927][ T27] #0: ffffffff8db2d8a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1476.488162][ T4280] Bluetooth: hci7: command 0x0406 tx timeout [ 1476.490849][ T27] 3 locks held by kworker/u4:4/58: [ 1476.496516][ T4280] hci7: err 0x6e [ 1476.501801][ T27] #0: [ 1476.505331][ T4280] hci7 cmd_cnt 1 cmd queued 0 [ 1476.515068][T22875] hci7 ffff888078464000 [ 1476.519633][T22875] hci7: [ 1476.523463][T22875] hci7: err 0x13 [ 1476.527047][T22875] hci7: cancelling interleave scan [ 1476.538164][ T4610] bond19: (slave bridge7): Send learning packet: mac 86:d6:7c:81:6c:26 vlan 1 [ 1476.559047][ T27] ffff888018479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1476.571700][T22875] hci7 state 0 -> 0 [ 1476.576448][T22875] All LE pending actions cleared [ 1476.581557][T22707] procname=mldv2_unsolicited_report_interval mode=644 proc_handler=proc_dointvec_ms_jiffies data=ffff888052afe614 [ 1476.598067][ T27] #1: ffffc90001597d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1476.618075][T22875] hdev hci7 [ 1476.623289][T22875] hcon ffff88803ae52000 reason 22 [ 1476.630430][T21206] cb->arg bucket: 283936, t ffffc9001d800000 n 0000000000000000 [ 1476.630460][T21206] cb->arg bucket: 283937, t ffffc9001d800000 n 0000000000000000 [ 1476.630489][T21206] cb->arg bucket: 283938, t ffffc9001d800000 n 0000000000000000 [ 1476.630508][T21206] cb->arg bucket: 283939, t ffffc9001d800000 n 0000000000000000 [ 1476.630528][T21206] cb->arg bucket: 283940, t ffffc9001d800000 n 0000000000000000 [ 1476.630546][T21206] cb->arg bucket: 283941, t ffffc9001d800000 n 0000000000000000 [ 1476.630565][T21206] cb->arg bucket: 283942, t ffffc9001d800000 n 0000000000000000 [ 1476.630584][T21206] cb->arg bucket: 283943, t ffffc9001d800000 n 0000000000000000 [ 1476.630602][T21206] cb->arg bucket: 283944, t ffffc9001d800000 n 0000000000000000 [ 1476.630621][T21206] cb->arg bucket: 283945, t ffffc9001d800000 n 0000000000000000 [ 1476.630639][T21206] cb->arg bucket: 283946, t ffffc9001d800000 n 0000000000000000 [ 1476.630658][T21206] cb->arg bucket: 283947, t ffffc9001d800000 n 0000000000000000 [ 1476.630677][T21206] cb->arg bucket: 283948, t ffffc9001d800000 n 0000000000000000 [ 1476.630706][T21206] cb->arg bucket: 283949, t ffffc9001d800000 n 0000000000000000 [ 1476.630725][T21206] cb->arg bucket: 283950, t ffffc9001d800000 n 0000000000000000 [ 1476.630744][T21206] cb->arg bucket: 283951, t ffffc9001d800000 n 0000000000000000 [ 1476.630762][T21206] cb->arg bucket: 283952, t ffffc9001d800000 n 0000000000000000 [ 1476.630781][T21206] cb->arg bucket: 283953, t ffffc9001d800000 n 0000000000000000 [ 1476.630800][T21206] cb->arg bucket: 283954, t ffffc9001d800000 n 0000000000000000 [ 1476.630820][T21206] cb->arg bucket: 283955, t ffffc9001d800000 n 0000000000000000 [ 1476.630839][T21206] cb->arg bucket: 283956, t ffffc9001d800000 n 0000000000000000 [ 1476.630858][T21206] cb->arg bucket: 283957, t ffffc9001d800000 n 0000000000000000 [ 1476.630877][T21206] cb->arg bucket: 283958, t ffffc9001d800000 n 0000000000000000 [ 1476.630898][T21206] cb->arg bucket: 283959, t ffffc9001d800000 n 0000000000000000 [ 1476.640247][T22707] procname=use_tempaddr mode=644 proc_handler=proc_dointvec data=ffff888052afe618 [ 1476.655126][ T27] #2: [ 1476.675147][T22875] hcon ffff88803ae52000 conn ffff888027d9b800, err 103 [ 1476.705680][ T27] ffffffff8ed760e8 [ 1476.721766][T22707] procname=temp_valid_lft mode=644 proc_handler=proc_dointvec data=ffff888052afe61c [ 1476.738167][ T27] ( [ 1476.756179][T22707] procname=temp_prefered_lft mode=644 proc_handler=proc_dointvec data=ffff888052afe620 [ 1476.778135][ T27] rtnl_mutex [ 1476.781942][T22875] hci7 hcon ffff88803ae52000 chan ffff8880522bbd00 [ 1476.818134][ T27] ){+.+.}-{3:3} [ 1476.820962][T22707] procname=regen_max_retry mode=644 proc_handler=proc_dointvec data=ffff888052afe624 [ 1476.838187][T21206] cb->arg bucket: 283960, t ffffc9001d800000 n 0000000000000000 [ 1476.840701][T22707] procname=max_desync_factor mode=644 proc_handler=proc_dointvec data=ffff888052afe628 [ 1476.843736][T21206] cb->arg bucket: 283961, t ffffc9001d800000 n 0000000000000000 [ 1476.854083][T22707] procname=max_addresses mode=644 proc_handler=proc_dointvec data=ffff888052afe62c [ 1476.867459][ T27] , at: linkwatch_event+0xa/0x50 [ 1476.870228][ C1] bridge0: hello timer expired [ 1476.870227][ C0] nf_conntrack: new packet for ffff888019a78c00 [ 1476.870251][ C0] nf_nat: Already setup manip DST for ct ffff888019a78c00 (status bits 0x188) [ 1476.870257][ C1] bridge9: hello timer expired [ 1476.870544][T22707] procname=accept_ra_defrtr mode=644 proc_handler=proc_dointvec data=ffff888052afe630 [ 1476.877356][T16215] nf_conntrack: normal packet for ffff888024372780 [ 1476.880603][T22707] procname=ra_defrtr_metric mode=644 proc_handler=proc_douintvec_minmax data=ffff888052afe634 [ 1476.880635][T22707] procname=accept_ra_min_hop_limit mode=644 proc_handler=proc_dointvec data=ffff888052afe638 [ 1476.900361][ T27] 1 lock held by dhcpcd/3935: [ 1476.918125][T22707] procname=accept_ra_min_lft mode=644 proc_handler=proc_dointvec data=ffff888052afe63c [ 1476.946311][ T27] #0: [ 1476.952261][ C0] bridge1: hello timer expired [ 1476.976194][T22707] procname=accept_ra_pinfo mode=644 proc_handler=proc_dointvec data=ffff888052afe640 [ 1476.994965][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88805891aa98 is addr:2001::2 for cmd:0 at entry:ffff88807a8e7580 [ 1477.008173][T21206] cb->arg bucket: 283962, t ffffc9001d800000 n 0000000000000000 [ 1477.011047][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 1477.014157][T21206] cb->arg bucket: 283963, t ffffc9001d800000 n 0000000000000000 [ 1477.025224][T22707] procname=accept_ra_rtr_pref mode=644 proc_handler=proc_dointvec data=ffff888052afe648 [ 1477.042439][ T27] ffffffff8ed760e8 [ 1477.077419][ C0] virtqueue callback for ffff888141666200 (ffffffff84767210) [ 1477.077488][ C0] virtqueue interrupt with no work for ffff888141666000 [ 1477.095757][ C0] virtqueue interrupt with no work for ffff888141665e00 [ 1477.102847][T16215] Added buffer head 0 to ffff888141666200 [ 1477.110155][T16215] nf_conntrack: normal packet for ffff888024372a80 [ 1477.117272][T22707] procname=router_probe_interval mode=644 proc_handler=proc_dointvec_jiffies data=ffff888052afe64c [ 1477.121126][ T27] ( [ 1477.128475][T22707] procname=accept_ra_rt_info_min_plen mode=644 proc_handler=proc_dointvec data=ffff888052afe650 [ 1477.141917][T22707] procname=accept_ra_rt_info_max_plen mode=644 proc_handler=proc_dointvec data=ffff888052afe654 [ 1477.153862][ T27] rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x27f/0x1bf0 [ 1477.161921][ T27] 2 locks held by getty/4030: [ 1477.166731][ T27] #0: ffff88814d89f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1477.171445][T22707] procname=proxy_ndp mode=644 proc_handler=addrconf_sysctl_proxy_ndp data=ffff888052afe658 [ 1477.199345][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 1477.218484][T22707] procname=accept_source_route mode=644 proc_handler=proc_dointvec data=ffff888052afe65c [ 1477.230124][ T27] 4 locks held by kworker/u4:20/4612: [ 1477.235551][ T27] #0: ffff88801861e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1477.238142][T21206] cb->arg bucket: 283964, t ffffc9001d800000 n 0000000000000000 [ 1477.254572][T22707] procname=optimistic_dad mode=644 proc_handler=proc_dointvec data=ffff888052afe664 [ 1477.254605][ T27] #1: ffffc90005c57d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1477.268117][ C0] net_ratelimit: 47 callbacks suppressed [ 1477.268133][ C0] wireguard: wg0: Sending keepalive packet to peer 40 ([::1]:20003/0%0) [ 1477.275060][ C1] wireguard: wg0: Sending keepalive packet to peer 57 ([::1]:20002/0%0) [ 1477.282985][T16215] nf_conntrack: normal packet for ffff88803062c480 [ 1477.289300][ C1] wireguard: wg0: Sending keepalive packet to peer 39 (127.0.0.1:20002) [ 1477.297943][T22707] procname=use_optimistic mode=644 proc_handler=proc_dointvec data=ffff888052afe668 [ 1477.304898][T20965] nf_conntrack: normal packet for ffff88803062c300 [ 1477.326784][T22707] procname=mc_forwarding mode=444 proc_handler=proc_dointvec data=ffff888052afe66c [ 1477.329199][ C1] wireguard: wg2: Receiving keepalive packet from peer 43 ([::1]:20001/0%0) [ 1477.339149][ C0] wireguard: wg1: Receiving keepalive packet from peer 59 ([::1]:20001/0%0) [ 1477.356491][ T27] #2: ffffffff8ed69250 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 1477.366617][ C1] wireguard: wg1: Receiving keepalive packet from peer 41 (127.0.0.1:20001) [ 1477.375951][ T27] #3: ffffffff8db33578 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 1477.387502][ T27] 2 locks held by kworker/1:13/6905: [ 1477.393090][ T27] #0: ffff888018472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1477.395652][T22707] Not writable by anyone [ 1477.403690][ T27] #1: [ 1477.408487][ C0] wireguard: wg0: Sending keepalive packet to peer 52 ([::1]:20003/0%0) [ 1477.411525][ T27] ffffc9001c56fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0} [ 1477.421873][T16215] nf_conntrack: normal packet for ffff88802f902900 [ 1477.436370][ T27] , at: process_one_work+0x7b4/0x1160 [ 1477.436444][T22707] procname=disable_ipv6 mode=644 proc_handler=addrconf_sysctl_disable data=ffff888052afe670 [ 1477.441946][ C1] nf_conntrack: new packet for ffff88803062d080 [ 1477.458442][ C1] nf_nat: Already setup manip DST for ct ffff88803062d080 (status bits 0x188) [ 1477.463006][T22707] procname=accept_dad mode=644 proc_handler=proc_dointvec data=ffff888052afe678 [ 1477.467400][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1477.485702][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1477.495144][T22707] procname=force_tllao mode=644 proc_handler=proc_dointvec data=ffff888052afe67c [ 1477.496133][ C1] wireguard: wg2: Receiving keepalive packet from peer 55 ([::1]:20001/0%0) [ 1477.508075][ C0] wireguard: wg1: Sending keepalive packet to peer 48 (127.0.0.1:20003) [ 1477.513630][ C1] wireguard: wg0: Sending keepalive packet to peer 45 ([::1]:20002/0%0) [ 1477.522235][T16215] nf_conntrack: normal packet for ffff888024372180 [ 1477.537224][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88805891aa98 is addr:2001::2 for cmd:0 at entry:ffff88807a8e7580 [ 1477.540420][ T27] 3 locks held by kworker/u4:38/11946: [ 1477.550504][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 1477.564761][T21206] cb->arg bucket: 283965, t ffffc9001d800000 n 0000000000000000 [ 1477.564995][T22432] nf_conntrack: normal packet for ffff88803062de00 [ 1477.572580][ T27] 2 locks held by kworker/0:0/16215: [ 1477.584688][T22707] procname=ndisc_notify mode=644 proc_handler=proc_dointvec data=ffff888052afe680 [ 1477.594428][T22707] procname=suppress_frag_ndisc mode=644 proc_handler=proc_dointvec data=ffff888052afe684 [ 1477.596852][ T27] #0: ffff8880b8c3acd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x98/0x130 [ 1477.613924][T22707] procname=accept_ra_from_local mode=644 proc_handler=proc_dointvec data=ffff888052afe660 [ 1477.628289][T21206] cb->arg bucket: 283966, t ffffc9001d800000 n 0000000000000000 [ 1477.636347][T21206] cb->arg bucket: 283967, t ffffc9001d800000 n 0000000000000000 [ 1477.639888][T22707] procname=accept_ra_mtu mode=644 proc_handler=proc_dointvec data=ffff888052afe688 [ 1477.644561][ T27] #1: ffff8880b8c27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x400/0x740 [ 1477.667949][ T27] 3 locks held by kworker/u4:14/19457: [ 1477.670188][T22707] procname=stable_secret mode=600 proc_handler=addrconf_sysctl_stable_secret data=ffff888052afe694 [ 1477.688407][ T27] 3 locks held by syz.3.4865/21206: [ 1477.693833][ T27] 1 lock held by syz.1.4962/21740: [ 1477.699568][T22707] procname=use_oif_addrs_only mode=644 proc_handler=proc_dointvec data=ffff888052afe6a8 [ 1477.708892][ T27] #0: ffffffff9809a398 (nfnl_subsys_ipset){+.+.}-{3:3}, at: nfnetlink_rcv_msg+0xa58/0x1290 [ 1477.718352][T22707] procname=ignore_routes_with_linkdown mode=644 proc_handler=addrconf_sysctl_ignore_routes_with_linkdown data=ffff888052afe644 [ 1477.728065][ T27] 1 lock held by syz.1.4962/21741: [ 1477.738756][ T27] #0: ffffffff9809a398 (nfnl_subsys_ipset){+.+.}-{3:3}, at: nfnetlink_rcv_msg+0xa58/0x1290 [ 1477.745509][T22707] procname=drop_unicast_in_l2_multicast mode=644 proc_handler=proc_dointvec data=ffff888052afe674 [ 1477.749305][ T27] 1 lock held by syz.5.4986/21833: [ 1477.749322][ T27] #0: ffffffff9809a398 (nfnl_subsys_ipset){+.+.}-{3:3} [ 1477.766220][T19457] bond0: (slave geneve2): Send learning packet: mac 26:2b:50:03:09:0f vlan 0 [ 1477.768135][T19458] bond19: (slave bridge7): Send learning packet: mac 86:d6:7c:81:6c:26 vlan 0 [ 1477.773820][T19457] nf_conntrack: new packet for ffff888024372900 [ 1477.797983][T19457] nf_conntrack: nf_ct_destroy(ffff888024372900) [ 1477.804392][T19457] nf_conntrack: nf_ct_destroy: returning ct=ffff888024372900 to slab [ 1477.812539][T21206] cb->arg bucket: 283968, t ffffc9001d800000 n 0000000000000000 [ 1477.814260][T22707] procname=drop_unsolicited_na mode=644 proc_handler=proc_dointvec data=ffff888052afe68c [ 1477.830475][ T27] , at: nfnetlink_rcv_msg+0xa58/0x1290 [ 1477.830513][ T27] 1 lock held by syz.5.4986/21834: [ 1477.842904][T22870] ffff88807d6b8000 name hci3 bus 0 [ 1477.848223][T19458] bond19: (slave bridge7): Send learning packet: mac 86:d6:7c:81:6c:26 vlan 1 [ 1477.852915][ T27] #0: ffffffff9809a398 (nfnl_subsys_ipset){+.+.}-{3:3}, at: nfnetlink_rcv_msg+0xa58/0x1290 [ 1477.858417][T22707] procname=keep_addr_on_down mode=644 proc_handler=proc_dointvec data=ffff888052afe6ac [ 1477.878333][ T27] 1 lock held by syz.7.5074/22216: [ 1477.883615][ T27] #0: ffffffff9809a398 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x63/0x230 [ 1477.892968][T19457] bond0: (slave geneve2): Send learning packet: mac 26:2b:50:03:09:0f vlan 1 [ 1477.894347][T21206] cb->arg bucket: 283969, t ffffc9001d800000 n 0000000000000000 [ 1477.908414][ C0] nf_conntrack: new packet for ffff888019a78c00 [ 1477.914152][ T27] 3 locks held by kworker/1:3/22215: [ 1477.920069][ C0] nf_nat: Already setup manip DST for ct ffff888019a78c00 (status bits 0x188) [ 1477.920619][T22707] procname=seg6_enabled mode=644 proc_handler=proc_dointvec data=ffff888052afe6b0 [ 1477.925955][ T27] #0: ffff888018470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1477.946390][T19457] nf_conntrack: new packet for ffff888024372900 [ 1477.961603][T19457] nf_conntrack: nf_ct_destroy(ffff888024372900) [ 1477.967966][T19457] nf_conntrack: nf_ct_destroy: returning ct=ffff888024372900 to slab [ 1477.977105][T22707] procname=seg6_require_hmac mode=644 proc_handler=proc_dointvec data=ffff888052afe6b4 [ 1477.987120][ T27] #1: ffffc90005a17d00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1477.987201][T22707] procname=enhanced_dad mode=644 proc_handler=proc_dointvec data=ffff888052afe6b8 [ 1477.997408][T22870] hci3 ffff88807d6b8000 [ 1477.997427][T22870] hci3: [ 1477.997448][T22870] hci3: err 0x13 [ 1477.997461][T22870] hci3: cancelling interleave scan [ 1477.997516][T22870] channel 3 len 6 [ 1478.010257][T22707] procname=addr_gen_mode mode=644 proc_handler=addrconf_sysctl_addr_gen_mode data=ffff888052afe6bc [ 1478.038058][ T27] #2: ffffffff8db33578 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1478.039426][T22707] procname=disable_policy mode=644 proc_handler=addrconf_sysctl_disable_policy data=ffff888052afe6c0 [ 1478.058065][ T27] 1 lock held by syz.6.5155/22622: [ 1478.061552][T22707] procname=ndisc_tclass mode=644 proc_handler=proc_dointvec_minmax data=ffff888052afe6c4 [ 1478.066605][ T27] #0: [ 1478.076686][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88805891aa98 is addr:2001::2 for cmd:0 at entry:ffff88807a8e7580 [ 1478.076746][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 1478.077426][ C0] virtqueue callback for ffff888141666200 (ffffffff84767210) [ 1478.092175][ T27] ffffffff9809a398 [ 1478.093202][ C0] virtqueue interrupt with no work for ffff888141666000 [ 1478.102052][ T27] ( [ 1478.109080][ C0] virtqueue interrupt with no work for ffff888141665e00 [ 1478.109216][T22432] Added buffer head 0 to ffff888141666200 [ 1478.113229][ T27] nfnl_subsys_ipset [ 1478.135915][T22707] procname=rpl_seg_enabled mode=644 proc_handler=proc_dointvec_minmax data=ffff888052afe6c8 [ 1478.138079][T21206] cb->arg bucket: 283970, t ffffc9001d800000 n 0000000000000000 [ 1478.139946][T22707] procname=ioam6_enabled mode=644 proc_handler=proc_dou8vec_minmax data=ffff888052afe6d4 [ 1478.158312][ T3603] sd 0:0:1:0: cmd ffff888028265ee0 CDB: 0x2a [ 1478.158349][ T3603] Added buffer head 184 to ffff888025caf000 [ 1478.158624][ T27] ){+.+.}-{3:3} [ 1478.168392][ C1] virtqueue callback for ffff888025caf000 (ffffffff85445d80) [ 1478.168421][ C1] sd 0:0:1:0: cmd ffff888028265ee0 response 0 status 0x0 sense_len 0 [ 1478.168447][ C1] No more buffers in queue [ 1478.184223][T22707] procname=ioam6_id mode=644 proc_handler=proc_douintvec_minmax data=ffff888052afe6cc [ 1478.193097][ T7573] sd 0:0:1:0: cmd ffff88802694c920 CDB: 0x35 [ 1478.208101][T22707] procname=ioam6_id_wide mode=644 proc_handler=proc_douintvec data=ffff888052afe6d0 [ 1478.214251][ T7573] Added buffer head 184 to ffff888025caf000 [ 1478.220583][T22870] channel 3 len 8 [ 1478.230421][ C1] virtqueue callback for ffff888025caf000 (ffffffff85445d80) [ 1478.230456][ C1] sd 0:0:1:0: cmd ffff88802694c920 response 0 status 0x0 sense_len 0 [ 1478.230482][ C1] No more buffers in queue [ 1478.230623][ T7573] sd 0:0:1:0: cmd ffff8880282662a0 CDB: 0x2a [ 1478.258291][T22707] procname=ndisc_evict_nocarrier mode=644 proc_handler=proc_dou8vec_minmax data=ffff888052afe6d5 [ 1478.260581][ T7573] Added buffer head 184 to ffff888025caf000 [ 1478.278316][T22707] procname=accept_untracked_na mode=644 proc_handler=proc_dointvec_minmax data=ffff888052afe690 [ 1478.283627][ T27] , at: nfnetlink_rcv_msg+0xa58/0x1290 [ 1478.294022][ C1] virtqueue callback for ffff888025caf000 (ffffffff85445d80) [ 1478.294053][ C1] sd 0:0:1:0: cmd ffff8880282662a0 response 0 status 0x0 sense_len 0 [ 1478.294079][ C1] No more buffers in queue [ 1478.320754][T20965] nf_conntrack: normal packet for ffff88803062c300 [ 1478.327663][ T27] 1 lock held by syz.6.5155/22624: [ 1478.328540][T22707] Registering net sysctl (net ffff888053d19c40): net/mpls/conf/geneve0 [ 1478.332885][ T27] #0: ffffffff9809a398 (nfnl_subsys_ipset){+.+.}-{3:3}, at: nfnetlink_rcv_msg+0xa58/0x1290 [ 1478.351648][ T27] 1 lock held by syz.6.5155/22627: [ 1478.356799][ T27] #0: ffffffff9809a398 (nfnl_subsys_ipset){+.+.}-{3:3}, at: nfnetlink_rcv_msg+0xa58/0x1290 [ 1478.357110][T22707] procname=input mode=644 proc_handler=mpls_conf_proc data=ffff8880771d3780 [ 1478.367339][ T27] 3 locks held by kworker/0:8/22678: [ 1478.367355][ T27] #0: ffff88814d566538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1478.367416][ T27] #1: ffffc900031c7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1478.367474][ T27] #2: ffffffff8ed760e8 (rtnl_mutex [ 1478.384506][T22870] hdev hci3 event 2 [ 1478.393323][ T27] ){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 1478.422207][ T27] 1 lock held by syz-executor/22707: [ 1478.422475][T21206] cb->arg bucket: 283971, t ffffc9001d800000 n 0000000000000000 [ 1478.427501][ T27] 1 lock held by syz-executor/22779: [ 1478.440854][ T27] #0: ffffffff8ed760e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 1478.450404][ T27] 3 locks held by syz.8.5192/22875: [ 1478.455956][ T27] #0: ffff8880784651e0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x20e/0x500 [ 1478.466140][ T27] #1: ffff888078464428 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x506/0x1060 [ 1478.476035][ C1] nf_conntrack: new packet for ffff88803062d080 [ 1478.476070][ C1] nf_nat: Already setup manip DST for ct ffff88803062d080 (status bits 0x188) [ 1478.476148][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1478.476243][ C1] nf_nat: Already setup manip SRC for ct ffff88803062d080 (status bits 0x188) [ 1478.518123][ T27] #2: ffffffff8eed5128 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xac/0x290 [ 1478.528936][T21206] cb->arg bucket: 283972, t ffffc9001d800000 n 0000000000000000 [ 1478.536646][T21206] cb->arg bucket: 283973, t ffffc9001d800000 n 0000000000000000 [ 1478.538071][ T27] 2 locks held by syz.4.5193/22881: [ 1478.551005][ T4612] tipc: TX(): has been stopped [ 1478.556676][T21206] cb->arg bucket: 283974, t ffffc9001d800000 n 0000000000000000 [ 1478.574661][ T27] [ 1478.577091][ T27] ============================================= [ 1478.577091][ T27] [ 1478.578173][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88805891aa98 is addr:2001::2 for cmd:0 at entry:ffff88807a8e7580 [ 1478.585602][ T27] NMI backtrace for cpu 1 [ 1478.598674][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 1478.602970][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1478.618864][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1478.629192][ T27] Call Trace: [ 1478.632488][ T27] [ 1478.635448][ T27] dump_stack_lvl+0x188/0x24e [ 1478.640140][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 1478.645548][ T27] ? show_regs_print_info+0x12/0x12 [ 1478.650754][ T27] ? load_image+0x410/0x410 [ 1478.655268][ T27] ? vprintk_emit+0x59f/0x6a0 [ 1478.659993][ T27] ? printk_sprint+0x460/0x460 [ 1478.664792][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 1478.669941][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1478.676099][ T27] ? _printk+0xda/0x130 [ 1478.680368][ T27] ? load_image+0x410/0x410 [ 1478.684883][ T27] ? load_image+0x410/0x410 [ 1478.689406][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1478.695655][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1478.701882][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1478.707879][ T27] watchdog+0xf0e/0xf50 [ 1478.712056][ T27] ? watchdog+0x1ed/0xf50 [ 1478.716398][ T27] kthread+0x29d/0x330 [ 1478.720473][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1478.725504][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1478.730099][ T27] ret_from_fork+0x1f/0x30 [ 1478.734798][ T27] [ 1478.739237][ T27] Sending NMI from CPU 1 to CPUs 0: [ 1478.744521][ C0] NMI backtrace for cpu 0 [ 1478.744534][ C0] CPU: 0 PID: 11499 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1478.744551][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1478.744561][ C0] Workqueue: krdsd rds_connect_worker [ 1478.744583][ C0] RIP: 0010:unwind_next_frame+0x1650/0x1fd0 [ 1478.744626][ C0] Code: 48 8d 7b 38 48 8b 44 24 40 0f 85 da 00 00 00 42 80 3c 28 00 74 05 e8 8f 91 9a 00 4c 8b 7b 38 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 74 91 9a 00 4c 8b 63 08 4c 8d 73 10 4c 89 [ 1478.744640][ C0] RSP: 0018:ffffc90004e7f4a0 EFLAGS: 00000a06 [ 1478.744653][ C0] RAX: 1ffff920009cfeaa RBX: ffffc90004e7f548 RCX: 0000000000000000 [ 1478.744664][ C0] RDX: 1ffffffff2037c95 RSI: 0000000000000000 RDI: ffffc90004e7f550 [ 1478.744675][ C0] RBP: dffffc0000000000 R08: ffffc90004e7f5a7 R09: ffffc90004e7f598 [ 1478.744686][ C0] R10: dffffc0000000000 R11: fffff520009cfeb5 R12: ffffffff901be4aa [ 1478.744697][ C0] R13: dffffc0000000000 R14: ffffc90004e7f598 R15: ffffc90004e7fa18 [ 1478.744708][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1478.744721][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1478.744732][ C0] CR2: 000055b78fae0f70 CR3: 000000007e1a3000 CR4: 00000000003506f0 [ 1478.744748][ C0] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1478.744758][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1478.744767][ C0] Call Trace: [ 1478.744773][ C0] [ 1478.744784][ C0] ? sock_alloc_inode+0x24/0xc0 [ 1478.744802][ C0] ? stack_trace_save+0xf0/0xf0 [ 1478.744866][ C0] arch_stack_walk+0x10c/0x140 [ 1478.744893][ C0] ? new_inode_pseudo+0x5f/0x1c0 [ 1478.744912][ C0] stack_trace_save+0xa6/0xf0 [ 1478.744929][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 1478.744946][ C0] ? mark_lock+0x94/0x320 [ 1478.744969][ C0] save_stack+0x121/0x230 [ 1478.745008][ C0] ? __reset_page_owner+0x190/0x190 [ 1478.745023][ C0] ? free_unref_page_prepare+0x8e5/0x9e0 [ 1478.745049][ C0] ? free_unref_page+0x2e/0x3f0 [ 1478.745067][ C0] ? qlist_free_all+0x76/0xe0 [ 1478.745099][ C0] ? kasan_quarantine_reduce+0x144/0x160 [ 1478.745113][ C0] ? __kasan_slab_alloc+0x1e/0x80 [ 1478.745132][ C0] ? slab_post_alloc_hook+0x4b/0x490 [ 1478.745154][ C0] ? kmem_cache_alloc_lru+0x182/0x2e0 [ 1478.745169][ C0] ? sock_alloc_inode+0x24/0xc0 [ 1478.745186][ C0] ? page_ext_get+0x1e/0x2a0 [ 1478.745205][ C0] ? page_ext_get+0x1de/0x2a0 [ 1478.745224][ C0] __reset_page_owner+0x51/0x190 [ 1478.745242][ C0] free_unref_page_prepare+0x8e5/0x9e0 [ 1478.745265][ C0] free_unref_page+0x2e/0x3f0 [ 1478.745285][ C0] qlist_free_all+0x76/0xe0 [ 1478.745302][ C0] kasan_quarantine_reduce+0x144/0x160 [ 1478.745319][ C0] __kasan_slab_alloc+0x1e/0x80 [ 1478.745338][ C0] slab_post_alloc_hook+0x4b/0x490 [ 1478.745354][ C0] ? kmem_cache_alloc_lru+0x25f/0x2e0 [ 1478.745372][ C0] kmem_cache_alloc_lru+0x182/0x2e0 [ 1478.745387][ C0] ? sock_alloc_inode+0x24/0xc0 [ 1478.745403][ C0] sock_alloc_inode+0x24/0xc0 [ 1478.745416][ C0] ? sockfs_init_fs_context+0xa0/0xa0 [ 1478.745429][ C0] new_inode_pseudo+0x5f/0x1c0 [ 1478.745446][ C0] __sock_create+0x129/0x940 [ 1478.745468][ C0] rds_tcp_conn_path_connect+0x2ab/0x6e0 [ 1478.745490][ C0] ? rds_tcp_state_change+0x1f0/0x1f0 [ 1478.745513][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 1478.745531][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1478.745550][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1478.745574][ C0] rds_connect_worker+0x1ce/0x280 [ 1478.745587][ C0] ? process_one_work+0x7b4/0x1160 [ 1478.745605][ C0] process_one_work+0x8ab/0x1160 [ 1478.745628][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1478.745646][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1478.745665][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1478.745685][ C0] ? wq_worker_running+0x97/0x190 [ 1478.745700][ C0] worker_thread+0xaf5/0x12a0 [ 1478.745730][ C0] kthread+0x29d/0x330 [ 1478.745742][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1478.745757][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1478.745771][ C0] ret_from_fork+0x1f/0x30 [ 1478.745797][ C0] [ 1478.754152][T21206] cb->arg bucket: 283975, t ffffc9001d800000 n 0000000000000000 [ 1478.808091][ C1] wireguard: wg1: Handshake for peer 47 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 2) [ 1478.809289][T19457] nf_conntrack: normal packet for ffff888024373380 [ 1478.824812][T22870] hdev 0000000000000000 len 8 [ 1478.845581][ T58] bond_slave_0: bond_netdev_event received NETDEV_CHANGE [ 1478.888228][T22875] hci7 hcon ffff88803ae52000 handle 201 [ 1478.889388][ C1] bridge9: hello timer expired [ 1478.892529][T22875] hcon ffff88803ae52000 [ 1478.895544][ C1] bridge0: hello timer expired [ 1478.948130][ C0] nf_conntrack: new packet for ffff888019a78c00 [ 1478.960002][T22241] nf_conntrack: normal packet for ffff888024373380 [ 1478.964846][ C0] nf_nat: Already setup manip DST for ct ffff888019a78c00 (status bits 0x188) [ 1478.970248][ T58] bond0: (slave bond_slave_0): bond_slave_netdev_event called