last executing test programs: 2m18.859367029s ago: executing program 32 (id=638): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1801a, 0x2, 0x3}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='4', 0x1) landlock_restrict_self(r0, 0xa) 2m16.85790798s ago: executing program 33 (id=697): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='udp 2', 0x5) 2m16.84819787s ago: executing program 34 (id=698): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r0, &(0x7f0000000300)='0', 0x1) 1m54.351404429s ago: executing program 35 (id=859): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt_nfsd/portlist\x00', 0x2, 0x140) write(r0, &(0x7f0000000340)='4', 0x1) 1m52.501407647s ago: executing program 36 (id=912): landlock_create_ruleset(&(0x7f0000000040)={0x1801a, 0x2, 0x3}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='4', 0x1) 1m46.555975749s ago: executing program 8 (id=1221): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xa) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) 1m46.173712095s ago: executing program 8 (id=1234): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) munlockall() 1m45.978077858s ago: executing program 8 (id=1242): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d") 1m45.88048364s ago: executing program 8 (id=1245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="000088e5414f670bc70eaaaaaaaaaabb86dd63e8e8da000811ff00000000000000000000000000000000ff0200000000000000000000000000014e21007f000890"], 0x42) 1m45.418577017s ago: executing program 8 (id=1250): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x800, 0x0) read(r0, &(0x7f0000000200), 0x1000) 1m45.373199518s ago: executing program 8 (id=1251): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='4', 0x1) 1m44.700387588s ago: executing program 5 (id=1264): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8", 0x31}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000002010102000000000000000003000001140018800800034000000755080001400000000904"], 0x2c}}, 0x24000881) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1m44.549736621s ago: executing program 5 (id=1268): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000), 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) 1m44.224448096s ago: executing program 5 (id=1269): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1m43.516435646s ago: executing program 5 (id=1281): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) munlockall() 1m43.226985861s ago: executing program 5 (id=1287): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) memfd_create(&(0x7f0000000300)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/\xe0\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\v\x00\x00\x00\x00\x00\x00\x00\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000800", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 1m28.295336602s ago: executing program 3 (id=1355): mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d7970") write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a30", 0x2b) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000001") 1m28.140366045s ago: executing program 3 (id=1362): r0 = socket$inet6(0xa, 0x3, 0x18) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x4, 0x2) 1m28.115703305s ago: executing program 38 (id=1289): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='4', 0x1) 1m28.042463056s ago: executing program 3 (id=1365): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80a42, 0x47) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0x37e9, 0x2f92) 1m28.012127607s ago: executing program 6 (id=1366): pipe2$9p(0x0, 0x0) 1m27.940405608s ago: executing program 6 (id=1367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0xb4dac462410a8f85, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00020021", 0x4}], 0x3) 1m27.939457678s ago: executing program 3 (id=1376): pipe2$9p(0x0, 0x0) 1m27.647988973s ago: executing program 6 (id=1369): pipe2$watch_queue(&(0x7f0000001180), 0x80) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket(0x2, 0x80805, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m27.548449644s ago: executing program 3 (id=1371): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x73c, 0x30, 0x30, 0x0, @ib={0x1b, 0x6, 0x3ff, {"557f7f5f849d81b9f4518fa9e52be7ae"}, 0x4, 0x8c, 0x3}, @ib={0x1b, 0x7, 0x6, {"50916300000000000000000700"}, 0x6, 0x8, 0x3ff}}}, 0x118) 1m27.540889584s ago: executing program 39 (id=1371): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x73c, 0x30, 0x30, 0x0, @ib={0x1b, 0x6, 0x3ff, {"557f7f5f849d81b9f4518fa9e52be7ae"}, 0x4, 0x8c, 0x3}, @ib={0x1b, 0x7, 0x6, {"50916300000000000000000700"}, 0x6, 0x8, 0x3ff}}}, 0x118) 1m27.107317331s ago: executing program 6 (id=1377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000010a0108000000000000000002000009090001"], 0x38}}, 0x84) 1m27.044458452s ago: executing program 6 (id=1380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0xb4dac462410a8f85, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00020021", 0x4}], 0x3) 1m26.973631393s ago: executing program 6 (id=1381): socket$kcm(0x1e, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0xeffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000200)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000180)={0x7}) fsmount(r4, 0x0, 0x1) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x5) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') read$FUSE(r8, &(0x7f00000004c0)={0x2020}, 0x2020) 1m11.64662785s ago: executing program 40 (id=1381): socket$kcm(0x1e, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0xeffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000200)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000180)={0x7}) fsmount(r4, 0x0, 0x1) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x5) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') read$FUSE(r8, &(0x7f00000004c0)={0x2020}, 0x2020) 1m7.80521275s ago: executing program 4 (id=1539): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2708000000440003800800030003000000080003000b00000008000300165d00000800030000000000080001000010000008"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c00"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 1m7.636294482s ago: executing program 4 (id=1541): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='.\x00', 0x84406d, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r1, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x300, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x900, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000280)={0x0, 0x1, 0xc, 0x82, @vifc_lcl_addr=@multicast1, @local}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) prctl$PR_SET_NAME(0x4, 0x0) r10 = syz_pidfd_open(0x0, 0x0) r11 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r11, 0xc0045540, &(0x7f0000000080)=0x2) pidfd_getfd(r10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\xc0\x00') prctl$PR_SET_PTRACER(0x59616d61, 0x0) 1m7.192456859s ago: executing program 4 (id=1551): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100), 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000800", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 1m7.16075081s ago: executing program 4 (id=1553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xfaeccc0edd389ee1}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1m4.358863503s ago: executing program 4 (id=1586): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x10, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 1m3.449084797s ago: executing program 4 (id=1601): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, 0x0}, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r1}, 0x38) 48.213255253s ago: executing program 41 (id=1601): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, 0x0}, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r1}, 0x38) 13.054365638s ago: executing program 0 (id=1864): r0 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b40500000000000061"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x227, @time={0x65757100, 0xfff}, 0x0, {}, 0x67, 0x2}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r6, 0x4008af10, &(0x7f0000000040)={0x0, 0x7ae7}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200000000914130427bd7000f9dbdf250800450073727000080001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40cc010) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000000c0)=@generic={0x2, 0x8001, 0x4}) 12.782967193s ago: executing program 9 (id=1865): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000001f00)=ANY=[], 0x114c}, 0x1, 0x0, 0x0, 0xc004050}, 0x8000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 12.564612006s ago: executing program 0 (id=1868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0xb4dac462410a8f85, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00020021", 0x4}], 0x3) 12.502233397s ago: executing program 2 (id=1869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="a32a", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4040801) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f0000001300)=[{0x0}], 0x1, 0x142, 0xfffffffc) 12.30463943s ago: executing program 0 (id=1872): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000500)="c1", 0x30, 0x4, &(0x7f0000000540)={0x11, 0x1, r6, 0x1, 0x9, 0x6, @local}, 0x14) 12.186859731s ago: executing program 1 (id=1873): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200000000914130427bd7000f9dbdf250800450073"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40cc010) 12.089006713s ago: executing program 1 (id=1874): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x23ea5d1b09597025, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 12.066168663s ago: executing program 9 (id=1875): syz_emit_ethernet(0x32, &(0x7f0000000280)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x9, 0x24, 0x64, 0x0, 0x2, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast2]}, @cipso={0x86, 0x8, 0x0, [{0x7, 0x2}]}]}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x40446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x31}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) openat$vhost_vsock(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 11.560464061s ago: executing program 2 (id=1876): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1a000}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18}, 0x8050) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 11.341236475s ago: executing program 2 (id=1879): r0 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b40500000000000061"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x227, @time={0x65757100, 0xfff}, 0x0, {}, 0x67, 0x2}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r6, 0x4008af10, &(0x7f0000000040)={0x0, 0x7ae7}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200000000914130427bd7000f9dbdf250800450073727000080001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40cc010) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000000c0)=@generic={0x2, 0x8001, 0x4}) 11.080816179s ago: executing program 7 (id=1880): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)=0x2000000) 1.400014579s ago: executing program 1 (id=1881): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) open(0x0, 0x0, 0x44) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f407000904008100", 0x12) 1.389710549s ago: executing program 9 (id=1882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0xb4dac462410a8f85, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000440)}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00020021", 0x4}], 0x3) 1.374736879s ago: executing program 2 (id=1883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xfaeccc0edd389ee1}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, 0x0, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1.33025478s ago: executing program 1 (id=1884): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200000000914130427bd7000f9dbdf250800450073727000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40cc010) 1.29887024s ago: executing program 0 (id=1885): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000001f00)=ANY=[], 0x114c}, 0x1, 0x0, 0x0, 0xc004050}, 0x8000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.2951253s ago: executing program 7 (id=1886): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f00000000c0)="1c", 0xfffffffffffffd2c, 0xc0000, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 1.258943201s ago: executing program 1 (id=1887): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xa) 1.221135891s ago: executing program 7 (id=1888): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1a000}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18}, 0x8050) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.179822902s ago: executing program 9 (id=1889): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2e000039ffe5017891dd1baeacbb06ad160769f180d38b4c3d00f9dbdf250220300cff04"], 0x24}, 0x1, 0x0, 0x0, 0x20004005}, 0x80) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f00000016c0), 0x3af4701e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x25, 0x0, &(0x7f0000000180)) write$tun(0xffffffffffffffff, 0x0, 0x0) 933.352596ms ago: executing program 9 (id=1890): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x4, 0x2}}]}, 0x3c}}, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, 0x0) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x400, 0x1, 0x235}) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0xd000}], 0x1, &(0x7f0000001740)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 933.183226ms ago: executing program 2 (id=1891): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000880)="4a8e464b3d4657499ea54e5c7d563ff8776074ae642a55558dbfd1df9462b1259816b613ea02f9c5a2a4cc3bf701b7f4fa887e4ce6d2045a432a7b060f115097ae0e0e07f3f3704a688c03fccef3e273"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) 927.146566ms ago: executing program 7 (id=1900): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1a000}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18}, 0x8050) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 862.265007ms ago: executing program 2 (id=1892): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) accept4(r1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4840) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2) 664.83334ms ago: executing program 7 (id=1893): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002", 0x5) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 593.315701ms ago: executing program 0 (id=1894): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @nfc={0x27, 0x0, 0x0, 0x2}, @l2tp={0x2, 0x0, @empty, 0x2}, 0x40, 0x0, 0x0, 0x0, 0x51}) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) 522.615672ms ago: executing program 7 (id=1895): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x1000000010, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @private0, [0x0, 0x0, 0xffffff, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'veth0_to_team\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0xc, 0x0, 'syz1\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) syz_usb_connect(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040001000010000904b8070259d1ca000905060200020d00060905820200020d320ca0dd6ca2e0f78c14008db45e3f86e911489248b400660ceb55"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) ioctl$TUNATTACHFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x18, 0x55, 0x1, 0x70bd2a, 0x2, {0x7, r7}}, 0x18}, 0x1, 0x0, 0x0, 0x805}, 0x40080c0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'vlan1\x00', 0x200}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 485.167063ms ago: executing program 9 (id=1896): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x4044890) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="666f6f23646e736572726f723d3120a11909b98b6beb329196f9ebdda50c906a5588df6996f431972ae2e0562c4bbf91f648e52712e630a2a4e61cee9abcc8dc8fd958ba81afcc3c2ec38670a5a73af75f8d1f4cc923e4c715a93f6fc8eb839f57bdce1c83de28f664ee0ff01c12cc9bd4cf7002f85ec3af38c609dd1ff5584b0ed274d40f2e2e2b6a1758167073ed7ad1d4fb180db81bd4ff6788487b93e926b77d9628da7f299365d2d3482f0c06cf6b3b524518c18aa8e3c218c91710063c00", 0xc1, 0xfffffffffffffffe) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f02000007683815b12e890300000a000000059afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000010007bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb5) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 268.433056ms ago: executing program 1 (id=1897): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000500)="c1", 0x30, 0x4, &(0x7f0000000540)={0x11, 0x1, r5, 0x1, 0x9, 0x6, @local}, 0x14) 0s ago: executing program 0 (id=1898): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200000000914130427bd7000f9dbdf250800450073727000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40cc010) kernel console output (not intermixed with test programs): :aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.513169][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.514909][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.516579][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.518271][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.519947][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.522681][ T7096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.524294][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.527086][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.529718][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.532087][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.533856][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.535534][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.537071][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.538708][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.540209][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.542441][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.544299][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.546024][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.547573][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.549229][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.550792][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.552921][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.555470][ T7096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.557329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.560855][ T7096] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.562672][ T7096] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.564293][ T7096] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.565695][ T7096] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.595722][ T4487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.596992][ T4487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.598454][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.608879][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.610152][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.612222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.686477][ T7129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.688126][ T7129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.711006][ T7132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.717685][ T7132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.729785][ T7134] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1096'. [ 99.833181][ T7138] FAULT_INJECTION: forcing a failure. [ 99.833181][ T7138] name fail_futex, interval 1, probability 0, space 0, times 0 [ 99.835345][ T7138] CPU: 1 PID: 7138 Comm: syz.5.1098 Not tainted syzkaller #0 [ 99.836552][ T7138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 99.838256][ T7138] Call trace: [ 99.838852][ T7138] dump_backtrace+0x1c4/0x1f0 [ 99.839701][ T7138] show_stack+0x2c/0x3c [ 99.840423][ T7138] __dump_stack+0x30/0x40 [ 99.841183][ T7138] dump_stack_lvl+0xf4/0x15c [ 99.841969][ T7138] dump_stack+0x1c/0x5c [ 99.842703][ T7138] should_fail_ex+0x3cc/0x524 [ 99.843521][ T7138] should_fail+0x14/0x24 [ 99.844292][ T7138] get_futex_key+0x18c/0xfb0 [ 99.845093][ T7138] futex_wake+0x10c/0x458 [ 99.845859][ T7138] do_futex+0x2c4/0x340 [ 99.846578][ T7138] mm_release+0x190/0x274 [ 99.847346][ T7138] exit_mm_release+0x30/0x40 [ 99.848163][ T7138] exit_mm+0x50/0x290 [ 99.848874][ T7138] do_exit+0x4d0/0x19ac [ 99.849544][ T7138] do_group_exit+0x198/0x238 [ 99.850316][ T7138] get_signal+0x11f4/0x133c [ 99.851080][ T7138] do_notify_resume+0x364/0x2c84 [ 99.851890][ T7138] el0_svc+0x98/0x128 [ 99.852583][ T7138] el0t_64_sync_handler+0x84/0xf0 [ 99.853419][ T7138] el0t_64_sync+0x18c/0x190 [ 99.969267][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1103'. [ 100.356161][ T4335] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 100.419162][ T7153] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1109'. [ 100.447207][ T4332] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 100.449407][ T4332] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 100.451865][ T4332] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 100.459482][ T4332] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 100.471891][ T4345] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 100.473582][ T4345] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 100.557678][ T7172] input: syz0 as /devices/virtual/input/input2 [ 100.582432][ T4341] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 100.640756][ T7158] chnl_net:caif_netlink_parms(): no params data found [ 100.651292][ T4341] Bluetooth: hci8: command 0x0409 tx timeout [ 100.696563][ T7158] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.700169][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.703018][ T7158] device bridge_slave_0 entered promiscuous mode [ 100.706169][ T7158] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.712882][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.714600][ T7158] device bridge_slave_1 entered promiscuous mode [ 100.770574][ T7158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.789239][ T7158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.850085][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.851929][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.885786][ T7158] team0: Port device team_slave_0 added [ 100.900015][ T7158] team0: Port device team_slave_1 added [ 100.917019][ T7158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.919747][ T7158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.929827][ T7158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.943326][ T7158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.947051][ T7158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.957126][ T7158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.049597][ T7158] device hsr_slave_0 entered promiscuous mode [ 101.085186][ T7158] device hsr_slave_1 entered promiscuous mode [ 101.122705][ T7158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.124096][ T7158] Cannot create hsr debugfs directory [ 101.125294][ T7198] netlink: 830 bytes leftover after parsing attributes in process `syz.8.1122'. [ 101.149080][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1127'. [ 101.210595][ T7158] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 101.282237][ T7158] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 101.559183][ T7222] binder: 7221:7222 tried to acquire reference to desc 0, got 1 instead [ 101.564319][ T7222] binder: 7221:7222 got transaction with invalid data ptr [ 101.567946][ T7222] binder: 7221:7222 transaction call to 7221:0 failed 17/29201/-14, size 0-24 line 3350 [ 101.577780][ T7158] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 101.599451][ T4377] binder: undelivered transaction 16, process died. [ 101.600637][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 101.602096][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.608118][ T7158] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 101.728237][ T7158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.745189][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.746798][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.749392][ T7158] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.755479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.757382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.761573][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.762942][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.773120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.784087][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.786150][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.791574][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.792895][ T5396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.798068][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.803267][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.816693][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.818984][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.826530][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.840921][ T7158] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.845639][ T7158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.850198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.852376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.853989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.855658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.857276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.858821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.860929][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.969194][ T7247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.974754][ T7247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.981379][ T7244] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(3) [ 102.169014][ T7158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.187031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.188734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.359102][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1152'. [ 102.447795][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.449648][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.467934][ T7158] device veth0_vlan entered promiscuous mode [ 102.521800][ T4335] Bluetooth: hci9: command 0x0409 tx timeout [ 102.741321][ T4341] Bluetooth: hci8: command 0x041b tx timeout [ 102.749291][ T7158] device veth1_vlan entered promiscuous mode [ 102.750910][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.752689][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.754336][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.758514][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.760467][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.763693][ T7287] netlink: 830 bytes leftover after parsing attributes in process `syz.8.1155'. [ 102.789960][ T7158] device veth0_macvtap entered promiscuous mode [ 102.794046][ T7289] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(3) [ 102.801703][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.807629][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.809341][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.810943][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.816224][ T7158] device veth1_macvtap entered promiscuous mode [ 102.833285][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.837864][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.839637][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.850377][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.852931][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.858092][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.861482][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.863382][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.865083][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.867003][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.869215][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.871970][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.873897][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.875704][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.877410][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.879210][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.882156][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.883892][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.886491][ T7158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.889102][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.890964][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.895565][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.897383][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.899259][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.909367][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.911848][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.913997][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.917064][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.918987][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.921021][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.922629][ T7297] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.924044][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.926856][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.928681][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.930337][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.936694][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.957940][ T7158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.974949][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.976904][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.978537][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.980339][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.983780][ T7297] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 102.986929][ T7297] device-mapper: ioctl: error adding target to table [ 102.993231][ T7158] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.994621][ T7158] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.995964][ T7158] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.997331][ T7158] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.100369][ T4740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.103105][ T4740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.105677][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.119300][ T4740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.121112][ T4740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.123596][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.428557][ T7307] device-mapper: ioctl: Invalid ioctl structure: name myp, dev f801 [ 103.486971][ T7315] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1166'. [ 103.534656][ T7323] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(3) [ 104.099153][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.105019][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.482525][ T7348] netlink: 830 bytes leftover after parsing attributes in process `syz.9.1179'. [ 104.567788][ T7354] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(3) [ 104.659910][ T7365] FAULT_INJECTION: forcing a failure. [ 104.659910][ T7365] name failslab, interval 1, probability 0, space 0, times 0 [ 104.669768][ T7365] CPU: 1 PID: 7365 Comm: syz.3.1186 Not tainted syzkaller #0 [ 104.671067][ T7365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 104.672802][ T7365] Call trace: [ 104.673417][ T7365] dump_backtrace+0x1c4/0x1f0 [ 104.674276][ T7365] show_stack+0x2c/0x3c [ 104.675009][ T7365] __dump_stack+0x30/0x40 [ 104.675739][ T7365] dump_stack_lvl+0xf4/0x15c [ 104.676567][ T7365] dump_stack+0x1c/0x5c [ 104.677246][ T7365] should_fail_ex+0x3cc/0x524 [ 104.678033][ T7365] __should_failslab+0xc0/0x11c [ 104.678867][ T7365] should_failslab+0x10/0x28 [ 104.679634][ T7365] kmem_cache_alloc+0x88/0x310 [ 104.680427][ T7365] mas_alloc_nodes+0x284/0x758 [ 104.681299][ T7365] mas_preallocate+0x13c/0x310 [ 104.682155][ T7365] vma_expand+0x20c/0x728 [ 104.682879][ T7365] mmap_region+0xb08/0x1860 [ 104.683628][ T7365] do_mmap+0xa64/0x1210 [ 104.684330][ T7365] vm_mmap_pgoff+0x194/0x298 [ 104.685094][ T7365] ksys_mmap_pgoff+0xd0/0x5a0 [ 104.685866][ T7365] __arm64_sys_mmap+0x108/0x120 [ 104.686678][ T7365] invoke_syscall+0x98/0x290 [ 104.687439][ T7365] el0_svc_common+0x13c/0x258 [ 104.688246][ T7365] do_el0_svc+0x5c/0x134 [ 104.688991][ T7365] el0_svc+0x58/0x128 [ 104.689657][ T7365] el0t_64_sync_handler+0x84/0xf0 [ 104.690521][ T7365] el0t_64_sync+0x18c/0x190 [ 104.694227][ T7370] device-mapper: table: 248:1: thin-pool: target type may not be included in a read-only table (-EINVAL) [ 104.696172][ T7370] device-mapper: ioctl: error adding target to table [ 104.800213][ T7375] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1191'. [ 104.811891][ T4335] Bluetooth: hci8: command 0x040f tx timeout [ 105.325962][ T7388] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(3) [ 105.475870][ T7392] Boot memory [48000000 50000000] offlining attempted [ 105.603079][ T7406] netlink: 830 bytes leftover after parsing attributes in process `syz.8.1204'. [ 105.623307][ T7403] device-mapper: table: 248:1: thin-pool: target type may not be included in a read-only table (-EINVAL) [ 105.625483][ T7403] device-mapper: ioctl: error adding target to table [ 105.676576][ T7410] FAULT_INJECTION: forcing a failure. [ 105.676576][ T7410] name failslab, interval 1, probability 0, space 0, times 0 [ 105.678635][ T7410] CPU: 1 PID: 7410 Comm: syz.5.1206 Not tainted syzkaller #0 [ 105.679948][ T7410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 105.681711][ T7410] Call trace: [ 105.682285][ T7410] dump_backtrace+0x1c4/0x1f0 [ 105.683121][ T7410] show_stack+0x2c/0x3c [ 105.683867][ T7410] __dump_stack+0x30/0x40 [ 105.684672][ T7410] dump_stack_lvl+0xf4/0x15c [ 105.685501][ T7410] dump_stack+0x1c/0x5c [ 105.686239][ T7410] should_fail_ex+0x3cc/0x524 [ 105.687105][ T7410] __should_failslab+0xc0/0x11c [ 105.687974][ T7410] should_failslab+0x10/0x28 [ 105.688773][ T7410] slab_pre_alloc_hook+0x6c/0x31c [ 105.689636][ T7410] kmem_cache_alloc_lru+0x60/0x284 [ 105.690470][ T7410] hugetlbfs_alloc_inode+0xdc/0x138 [ 105.691351][ T7410] new_inode_pseudo+0x68/0x1cc [ 105.692208][ T7410] new_inode+0x38/0x174 [ 105.692913][ T7410] hugetlbfs_get_inode+0x9c/0x4bc [ 105.693720][ T7410] hugetlb_file_setup+0x1f0/0x564 [ 105.694541][ T7410] __arm64_sys_memfd_create+0x300/0x458 [ 105.695472][ T7410] invoke_syscall+0x98/0x290 [ 105.696244][ T7410] el0_svc_common+0x13c/0x258 [ 105.697057][ T7410] do_el0_svc+0x5c/0x134 [ 105.697861][ T7410] el0_svc+0x58/0x128 [ 105.698529][ T7410] el0t_64_sync_handler+0x84/0xf0 [ 105.699370][ T7410] el0t_64_sync+0x18c/0x190 [ 105.781923][ T7418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.784567][ T7418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.887137][ T7428] netlink: 830 bytes leftover after parsing attributes in process `syz.8.1215'. [ 106.301817][ T7440] device-mapper: table: 248:1: zero-length target [ 106.303396][ T7440] device-mapper: ioctl: error adding target to table [ 106.489519][ T7450] FAULT_INJECTION: forcing a failure. [ 106.489519][ T7450] name failslab, interval 1, probability 0, space 0, times 0 [ 106.491890][ T7450] CPU: 1 PID: 7450 Comm: syz.6.1223 Not tainted syzkaller #0 [ 106.493203][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 106.494793][ T7450] Call trace: [ 106.495268][ T7450] dump_backtrace+0x1c4/0x1f0 [ 106.496020][ T7450] show_stack+0x2c/0x3c [ 106.496630][ T7450] __dump_stack+0x30/0x40 [ 106.497317][ T7450] dump_stack_lvl+0xf4/0x15c [ 106.498008][ T7450] dump_stack+0x1c/0x5c [ 106.498692][ T7450] should_fail_ex+0x3cc/0x524 [ 106.499519][ T7450] __should_failslab+0xc0/0x11c [ 106.500353][ T7450] should_failslab+0x10/0x28 [ 106.501162][ T7450] kmem_cache_alloc+0x88/0x310 [ 106.502013][ T7450] mas_alloc_nodes+0x284/0x758 [ 106.502838][ T7450] mas_preallocate+0x13c/0x310 [ 106.503672][ T7450] vma_expand+0x20c/0x728 [ 106.504447][ T7450] mmap_region+0xb08/0x1860 [ 106.505251][ T7450] do_mmap+0xa64/0x1210 [ 106.505990][ T7450] vm_mmap_pgoff+0x194/0x298 [ 106.506781][ T7450] ksys_mmap_pgoff+0xd0/0x5a0 [ 106.507618][ T7450] __arm64_sys_mmap+0x108/0x120 [ 106.508426][ T7450] invoke_syscall+0x98/0x290 [ 106.509246][ T7450] el0_svc_common+0x13c/0x258 [ 106.510032][ T7450] do_el0_svc+0x5c/0x134 [ 106.510758][ T7450] el0_svc+0x58/0x128 [ 106.511439][ T7450] el0t_64_sync_handler+0x84/0xf0 [ 106.512314][ T7450] el0t_64_sync+0x18c/0x190 [ 106.574296][ T7458] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1227'. [ 106.864841][ T7482] device-mapper: table: 248:1: zero-length target [ 106.865957][ T7482] device-mapper: ioctl: error adding target to table [ 106.891634][ T4341] Bluetooth: hci8: command 0x0419 tx timeout [ 106.922211][ T7484] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1239'. [ 107.840636][ T7517] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1253'. [ 108.171422][ T4335] Bluetooth: hci9: Controller not accepting commands anymore: ncmd = 0 [ 108.173543][ T4335] Bluetooth: hci9: Injecting HCI hardware error event [ 108.175877][ T4341] Bluetooth: hci9: hardware error 0x00 [ 108.256968][ T7545] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1264'. [ 109.552823][ T7582] syz.3.1274 (7582): drop_caches: 2 [ 109.611039][ T7620] netlink: 'syz.3.1285': attribute type 10 has an invalid length. [ 109.623246][ T7620] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.625472][ T7620] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.660550][ T7620] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.661793][ T7620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.663150][ T7620] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.664389][ T7620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.671870][ T7620] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 109.678247][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1285'. [ 109.680691][ T7627] device bridge_slave_1 left promiscuous mode [ 109.748298][ T7627] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.067118][ T7627] device bridge_slave_0 left promiscuous mode [ 110.074638][ T7627] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.202942][ T7627] bond0: (slave bridge0): Releasing backup interface [ 110.411394][ T4341] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 110.870648][ T7665] syz.9.1300 (7665): drop_caches: 2 [ 111.235358][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.237006][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.559558][ T7698] syz.6.1314 (7698): drop_caches: 2 [ 111.798649][ T7712] device syzkaller1 entered promiscuous mode [ 122.667562][ T4335] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 122.669862][ T4335] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 122.677163][ T4335] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 122.678765][ T4335] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 122.680692][ T4335] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 122.682395][ T4335] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 122.767168][ T7754] chnl_net:caif_netlink_parms(): no params data found [ 122.784043][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.785426][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.787145][ T7754] device bridge_slave_0 entered promiscuous mode [ 122.789769][ T7754] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.791060][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.793214][ T7754] device bridge_slave_1 entered promiscuous mode [ 122.800063][ T7754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.803455][ T7754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.810914][ T7754] team0: Port device team_slave_0 added [ 122.816524][ T7754] team0: Port device team_slave_1 added [ 122.822770][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.823946][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.827977][ T7754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.830389][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.832013][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.836386][ T7754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.882455][ T7754] device hsr_slave_0 entered promiscuous mode [ 122.931499][ T7754] device hsr_slave_1 entered promiscuous mode [ 122.981390][ T7754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.982752][ T7754] Cannot create hsr debugfs directory [ 123.093690][ T7754] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.184510][ T7754] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.263909][ T7754] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.363483][ T7754] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.533594][ T7784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.535287][ T7784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.609878][ T7754] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.623903][ T7789] FAULT_INJECTION: forcing a failure. [ 123.623903][ T7789] name failslab, interval 1, probability 0, space 0, times 0 [ 123.626000][ T7789] CPU: 1 PID: 7789 Comm: syz.9.1341 Not tainted syzkaller #0 [ 123.627229][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 123.628882][ T7789] Call trace: [ 123.629442][ T7789] dump_backtrace+0x1c4/0x1f0 [ 123.630280][ T7789] show_stack+0x2c/0x3c [ 123.631013][ T7789] __dump_stack+0x30/0x40 [ 123.631751][ T7789] dump_stack_lvl+0xf4/0x15c [ 123.632525][ T7789] dump_stack+0x1c/0x5c [ 123.633224][ T7789] should_fail_ex+0x3cc/0x524 [ 123.634025][ T7789] __should_failslab+0xc0/0x11c [ 123.634866][ T7789] should_failslab+0x10/0x28 [ 123.635663][ T7789] __kmem_cache_alloc_node+0x7c/0x318 [ 123.636475][ T7789] kmalloc_trace+0x48/0x94 [ 123.637255][ T7789] alloc_pipe_info+0xf0/0x4cc [ 123.638039][ T7789] create_pipe_files+0x8c/0x5c0 [ 123.638860][ T7789] __do_pipe_flags+0x5c/0x204 [ 123.639627][ T7789] do_pipe2+0xa0/0x250 [ 123.640246][ T7789] __arm64_sys_pipe2+0x5c/0x74 [ 123.640962][ T7789] invoke_syscall+0x98/0x290 [ 123.641725][ T7789] el0_svc_common+0x13c/0x258 [ 123.642465][ T7789] do_el0_svc+0x5c/0x134 [ 123.643079][ T7789] el0_svc+0x58/0x128 [ 123.643651][ T7789] el0t_64_sync_handler+0x84/0xf0 [ 123.644477][ T7789] el0t_64_sync+0x18c/0x190 [ 123.653795][ T7754] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.672472][ T7791] Option 'dnserror' to dns_resolver key: bad/missing value [ 123.692777][ T7754] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.704666][ T7793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.706455][ T7793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.742564][ T7754] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.801002][ T7754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.807027][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.808994][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.817860][ T7754] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.820785][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.823286][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.825097][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.826411][ T5396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.828415][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.836391][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.838155][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.839696][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.840817][ T5396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.844271][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.847385][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.850459][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.859127][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.865985][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.867793][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.869840][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.872997][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.875141][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.876724][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.878239][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.880565][ T7754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.911202][ T7793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.912895][ T7793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.916181][ T7793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.918355][ T7793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.943094][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.944690][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.950394][ T7754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.957712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.959859][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.975061][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.976863][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.979841][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.982215][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.993065][ T7754] device veth0_vlan entered promiscuous mode [ 124.000958][ T7754] device veth1_vlan entered promiscuous mode [ 124.016983][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.019091][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.020707][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.028858][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.034362][ T7754] device veth0_macvtap entered promiscuous mode [ 124.037005][ T7754] device veth1_macvtap entered promiscuous mode [ 124.043770][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.045305][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.046776][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.048340][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.049809][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.052452][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.054075][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.055736][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.057712][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.059649][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.062381][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.064036][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.065495][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.067084][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.068703][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.070408][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.080562][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.085564][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.087290][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.089098][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.096301][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.097937][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.099521][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.101031][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.104039][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.108660][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.110367][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.120636][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.123159][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.126134][ T7808] syz.6.1348 (7808): drop_caches: 2 [ 124.127901][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.129545][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.131035][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.133797][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.135520][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.137258][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.138912][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.140516][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.145618][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.147267][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.148836][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.150504][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.161117][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.164326][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.167769][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.169462][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.171684][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.176040][ T7754] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.177697][ T7754] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.179195][ T7754] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.180596][ T7754] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.229194][ T5396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.230531][ T5396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.233040][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.240767][ T5496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.242360][ T5496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.244367][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.306688][ T7817] syz.2.1328 (7817): drop_caches: 2 [ 124.411217][ T7823] FAULT_INJECTION: forcing a failure. [ 124.411217][ T7823] name failslab, interval 1, probability 0, space 0, times 0 [ 124.413581][ T7823] CPU: 1 PID: 7823 Comm: syz.3.1351 Not tainted syzkaller #0 [ 124.414836][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 124.416617][ T7823] Call trace: [ 124.417185][ T7823] dump_backtrace+0x1c4/0x1f0 [ 124.418013][ T7823] show_stack+0x2c/0x3c [ 124.418667][ T7823] __dump_stack+0x30/0x40 [ 124.419415][ T7823] dump_stack_lvl+0xf4/0x15c [ 124.420209][ T7823] dump_stack+0x1c/0x5c [ 124.420964][ T7823] should_fail_ex+0x3cc/0x524 [ 124.421755][ T7823] __should_failslab+0xc0/0x11c [ 124.422589][ T7823] should_failslab+0x10/0x28 [ 124.423431][ T7823] __kmem_cache_alloc_node+0x7c/0x318 [ 124.424380][ T7823] __kmalloc+0xc4/0x180 [ 124.425112][ T7823] alloc_pipe_info+0x1fc/0x4cc [ 124.425921][ T7823] create_pipe_files+0x8c/0x5c0 [ 124.426723][ T7823] __do_pipe_flags+0x5c/0x204 [ 124.427497][ T7823] do_pipe2+0xa0/0x250 [ 124.428134][ T7823] __arm64_sys_pipe2+0x5c/0x74 [ 124.428916][ T7823] invoke_syscall+0x98/0x290 [ 124.429691][ T7823] el0_svc_common+0x13c/0x258 [ 124.430468][ T7823] do_el0_svc+0x5c/0x134 [ 124.431174][ T7823] el0_svc+0x58/0x128 [ 124.431841][ T7823] el0t_64_sync_handler+0x84/0xf0 [ 124.432692][ T7823] el0t_64_sync+0x18c/0x190 [ 124.539680][ T7829] netlink: 'syz.9.1353': attribute type 10 has an invalid length. [ 124.543168][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.544738][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.566341][ T7829] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.567778][ T7829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.569816][ T7829] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.570954][ T7829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.580628][ T7829] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 124.685134][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.686810][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.731738][ T4341] Bluetooth: hci10: command 0x0409 tx timeout [ 124.782695][ T7845] null_blk: disk nullb1 created [ 124.818388][ T4335] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 124.820843][ T4335] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 124.825402][ T4335] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 124.827405][ T4335] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 124.829643][ T4335] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 124.831042][ T4335] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 125.084953][ T7850] chnl_net:caif_netlink_parms(): no params data found [ 125.143459][ T7850] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.145252][ T7850] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.146985][ T7850] device bridge_slave_0 entered promiscuous mode [ 125.149531][ T7850] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.150670][ T7850] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.152958][ T7850] device bridge_slave_1 entered promiscuous mode [ 125.159677][ T7850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.162427][ T7850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.169500][ T7850] team0: Port device team_slave_0 added [ 125.172404][ T7850] team0: Port device team_slave_1 added [ 125.177541][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.178793][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.183520][ T7850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.186071][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.187184][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.191101][ T7850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.223559][ T7866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.236547][ T7866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.254388][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.255994][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.263416][ T7850] device hsr_slave_0 entered promiscuous mode [ 125.308919][ T7850] device hsr_slave_1 entered promiscuous mode [ 125.331381][ T7850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.332729][ T7850] Cannot create hsr debugfs directory [ 125.398044][ T4335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.400059][ T4335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.407880][ T4335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.410137][ T4335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.412658][ T4335] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 125.414061][ T4335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.654769][ T4396] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.732868][ T4396] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.744998][ T7881] device-mapper: ioctl: Unable to rename non-existent device, to uuid § [ 125.788721][ T7883] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1377'. [ 125.803960][ T4396] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.813754][ T7887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.815333][ T7887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.932698][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.933937][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.983315][ T4396] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.043671][ T7850] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.061521][ T7876] chnl_net:caif_netlink_parms(): no params data found [ 126.079395][ T7876] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.080752][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.082703][ T7876] device bridge_slave_0 entered promiscuous mode [ 126.084850][ T7876] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.086107][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.087672][ T7876] device bridge_slave_1 entered promiscuous mode [ 126.094572][ T7876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.097293][ T7876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.163314][ T7850] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.167706][ T7876] team0: Port device team_slave_0 added [ 126.172889][ T7876] team0: Port device team_slave_1 added [ 126.178226][ T7876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.179487][ T7876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.188328][ T7876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.190870][ T7876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.192347][ T7876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.196651][ T7876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.254002][ T7850] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.302613][ T7876] device hsr_slave_0 entered promiscuous mode [ 126.342531][ T7876] device hsr_slave_1 entered promiscuous mode [ 126.381384][ T7876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.382784][ T7876] Cannot create hsr debugfs directory [ 126.434409][ T7850] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.692977][ T7876] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.811465][ T4341] Bluetooth: hci10: command 0x041b tx timeout [ 126.891597][ T4341] Bluetooth: hci11: command 0x0409 tx timeout [ 126.903799][ T7876] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.993883][ T7876] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.082676][ T7876] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.306823][ T7850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.343794][ T7850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.444045][ T7850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.455608][ T4341] Bluetooth: hci4: command 0x0409 tx timeout [ 127.472624][ T7850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.571924][ T7876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 127.603209][ T7876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 127.652487][ T7876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 127.749030][ T7876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 127.907918][ T7850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.935192][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.936902][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.944761][ T7850] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.948530][ T7876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.956802][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.958515][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.960125][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.961457][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.272761][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.274483][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.277425][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.279059][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.280284][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.282147][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.283807][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.285346][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.286776][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.290592][ T7876] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.294169][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.296315][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.298208][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.335334][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.337186][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.339445][ T4487] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.340693][ T4487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.342446][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.344275][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.345916][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.347593][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.349071][ T4487] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.350192][ T4487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.352370][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.353979][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.356035][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.366789][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.368830][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.370566][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.373451][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.377795][ T7850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.380094][ T7850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.387996][ T7876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.389797][ T7876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.393618][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.395416][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.396853][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.398413][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.400072][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.408233][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.409800][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.412365][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.413983][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.691688][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.795902][ T4396] device hsr_slave_0 left promiscuous mode [ 128.829439][ T7890] [U] ¹ÉMÙ­ÕÁQ& [ 128.835198][ T4396] device hsr_slave_1 left promiscuous mode [ 128.891446][ T4341] Bluetooth: hci10: command 0x040f tx timeout [ 128.906819][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.908355][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.910195][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.912410][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.971426][ T4341] Bluetooth: hci11: command 0x041b tx timeout [ 129.002358][ T4396] device veth1_macvtap left promiscuous mode [ 129.003609][ T4396] device veth0_macvtap left promiscuous mode [ 129.004663][ T4396] device veth1_vlan left promiscuous mode [ 129.005718][ T4396] device veth0_vlan left promiscuous mode [ 129.047127][ T4396] infiniband syz2: set down [ 129.089112][ T7983] Option 'dnserror' to dns_resolver key: bad/missing value [ 129.089494][ T7981] mmap: syz.9.1390 (7981) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.158588][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.160286][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.532343][ T4341] Bluetooth: hci4: command 0x041b tx timeout [ 129.910051][ T7995] device-mapper: ioctl: Unable to rename non-existent device, to uuid § [ 130.971344][ T4341] Bluetooth: hci10: command 0x0419 tx timeout [ 131.052865][ T4335] Bluetooth: hci11: command 0x040f tx timeout [ 131.194394][ T4396] team0 (unregistering): Port device team_slave_1 removed [ 131.402427][ T4396] team0 (unregistering): Port device team_slave_0 removed [ 131.597083][ T4396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.611223][ T4335] Bluetooth: hci4: command 0x040f tx timeout [ 131.792601][ T4396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.848228][ T5496] smc: removing ib device syz2 [ 133.141197][ T4335] Bluetooth: hci11: command 0x0419 tx timeout [ 133.343228][ T4396] bond0 (unregistering): Released all slaves [ 133.478656][ T7850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.492004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.493478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.507338][ T7876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.509145][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.510509][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.537574][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.539517][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.550453][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.560787][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.562748][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.569080][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.578686][ T7850] device veth0_vlan entered promiscuous mode [ 133.580230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.582385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.590060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.598644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.637710][ T7850] device veth1_vlan entered promiscuous mode [ 133.639505][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.640976][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.644524][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.646060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.653469][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.656060][ T7876] device veth0_vlan entered promiscuous mode [ 133.666574][ T7876] device veth1_vlan entered promiscuous mode [ 133.684232][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.685898][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.687505][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.689233][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.691327][ T4341] Bluetooth: hci4: command 0x0419 tx timeout [ 133.704835][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.708288][ T7850] device veth0_macvtap entered promiscuous mode [ 133.721626][ T7850] device veth1_macvtap entered promiscuous mode [ 133.738876][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.740493][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.748532][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.750533][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.751527][ T8018] binder: 8015:8018 tried to acquire reference to desc 0, got 1 instead [ 133.756583][ T8018] binder: 8015:8018 got transaction with invalid data ptr [ 133.757828][ T8018] binder: 8015:8018 transaction call to 8015:0 failed 22/29201/-14, size 0-24 line 3350 [ 133.765693][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.767541][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.769198][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.769504][ T8018] syz.9.1392 (8018): drop_caches: 2 [ 133.770844][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.770867][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.770876][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.770883][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.785123][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.786686][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.786871][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.788402][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.792839][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.794405][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.795934][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.797566][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.799096][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.802122][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.803811][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.805626][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.807232][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.808931][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.812071][ T7850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.815830][ T7876] device veth0_macvtap entered promiscuous mode [ 133.817849][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.819491][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.820927][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.839470][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.842149][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.843937][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.845596][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.847324][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.849382][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.851983][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.853607][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.855316][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.856848][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.870803][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.872958][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.874690][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.876315][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.877941][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.880563][ T7850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.889363][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.890919][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.893349][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.895579][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.897452][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.911582][ T7876] device veth1_macvtap entered promiscuous mode [ 133.915148][ T7850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.916711][ T7850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.918219][ T7850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.920270][ T7850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.943054][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.944940][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.946625][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.951101][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.959518][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.961867][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.963488][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.965180][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.966842][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.968683][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.970304][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.977998][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.979788][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.981865][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.983768][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.985601][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.987198][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.988853][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.990506][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.992610][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.994175][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.995801][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.003745][ T7876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.005113][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.006803][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.009418][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.066628][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.068683][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.070239][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.072341][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.074111][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.075806][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.077326][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.079125][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.080703][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.082801][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.084488][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.086174][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.087712][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.089403][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.090930][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.093247][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.095067][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.096868][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.098595][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.100407][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.103422][ T7876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.106994][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.108694][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.124975][ T7876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.126463][ T7876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.127977][ T7876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.129483][ T7876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.137691][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.138987][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.159882][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.187931][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.189329][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.193168][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.269634][ T8037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.288581][ T8037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.333844][ T5496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.335294][ T5496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.336614][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.362895][ T118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.364329][ T118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.366283][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.831207][ T4377] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 134.955536][ T8077] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 135.023228][ T4377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.025181][ T4377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.026908][ T4377] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 135.028564][ T4377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.043166][ T4377] usb 1-1: config 0 descriptor?? [ 135.168388][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1402'. [ 135.307078][ T8095] device syzkaller0 entered promiscuous mode [ 135.492233][ T8106] Option 'dnserror' to dns_resolver key: bad/missing value [ 135.669368][ T4377] usbhid 1-1:0.0: can't add hid device: -71 [ 135.670498][ T4377] usbhid: probe of 1-1:0.0 failed with error -71 [ 135.677604][ T4377] usb 1-1: USB disconnect, device number 5 [ 135.722395][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1412'. [ 136.554696][ T4380] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 136.603881][ T8133] netlink: 'syz.1.1416': attribute type 10 has an invalid length. [ 136.606215][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.607683][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.618973][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.620267][ T8133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.621577][ T8133] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.622776][ T8133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.625516][ T8133] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 136.634306][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 136.635752][ T8133] device bridge_slave_1 left promiscuous mode [ 136.636885][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.666612][ T8133] device bridge_slave_0 left promiscuous mode [ 136.667644][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.743080][ T4380] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.744559][ T4380] usb 1-1: config 0 has no interface number 0 [ 136.747187][ T4380] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 136.748737][ T4380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.750079][ T4380] usb 1-1: Product: syz [ 136.750765][ T4380] usb 1-1: Manufacturer: syz [ 136.752006][ T4380] usb 1-1: SerialNumber: syz [ 136.756712][ T4380] usb 1-1: config 0 descriptor?? [ 136.819479][ T8133] bond0: (slave bridge0): Releasing backup interface [ 136.964828][ T4380] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 136.977944][ T4380] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 136.980020][ T4380] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 136.983529][ T4380] usb 1-1: media controller created [ 136.988048][ T4380] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.731437][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.733206][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.094436][ T4380] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 138.140320][ T4380] usb 1-1: USB disconnect, device number 6 [ 138.297273][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.299161][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.338030][ T8167] netlink: 'syz.2.1429': attribute type 10 has an invalid length. [ 138.340160][ T8167] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.341638][ T8167] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.354745][ T8167] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.356079][ T8167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.357435][ T8167] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.358659][ T8167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.363280][ T8167] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 138.366927][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 138.368310][ T8167] device bridge_slave_1 left promiscuous mode [ 138.369515][ T8167] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.407599][ T8167] device bridge_slave_0 left promiscuous mode [ 138.408647][ T8167] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.532225][ T8167] bond0: (slave bridge0): Releasing backup interface [ 138.632262][ T8175] netlink: 'syz.1.1431': attribute type 17 has an invalid length. [ 139.286480][ T8207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.294977][ T8207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.559939][ T8221] device-mapper: ioctl: Unable to rename non-existent device, to § [ 140.315803][ T8249] device-mapper: ioctl: Unable to rename non-existent device, to § [ 141.270202][ T8264] device syzkaller1 entered promiscuous mode [ 141.365632][ T4335] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 141.368147][ T4335] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 141.370776][ T4335] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 141.384268][ T4335] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 141.386981][ T4335] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 141.390909][ T4335] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 141.511637][ T8287] device-mapper: ioctl: Unable to rename non-existent device, to § [ 141.588288][ T8273] chnl_net:caif_netlink_parms(): no params data found [ 141.608870][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.611375][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.613657][ T8273] device bridge_slave_0 entered promiscuous mode [ 141.616027][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.618113][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.638114][ T8273] device bridge_slave_1 entered promiscuous mode [ 141.707781][ T8273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.718395][ T8273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.740989][ T8304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.746136][ T8304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.758394][ T8273] team0: Port device team_slave_0 added [ 141.765804][ T8273] team0: Port device team_slave_1 added [ 141.801536][ T8273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.802759][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.807009][ T8273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.826209][ T8273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.828688][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.839296][ T8273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.902660][ T8273] device hsr_slave_0 entered promiscuous mode [ 141.931548][ T8273] device hsr_slave_1 entered promiscuous mode [ 141.983581][ T8273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.984920][ T8273] Cannot create hsr debugfs directory [ 142.145043][ T8273] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.253139][ T8273] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.322915][ T8273] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.432727][ T8273] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.485047][ T8319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.486950][ T8319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.569099][ T8326] device-mapper: ioctl: Unable to rename non-existent device, to § [ 142.643020][ T8273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.672387][ T8273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.712790][ T8273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 142.754644][ T8273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 142.763381][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'. [ 142.838611][ T8340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1494'. [ 142.878787][ T8273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.910259][ T8346] device-mapper: ioctl: Unable to rename non-existent device, to § [ 142.919925][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.922189][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.933168][ T8273] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.937687][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.939853][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.945400][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.946571][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.951136][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.965679][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.967599][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.971509][ T4341] Bluetooth: hci11: Controller not accepting commands anymore: ncmd = 0 [ 142.973176][ T4341] Bluetooth: hci11: Injecting HCI hardware error event [ 142.975641][ T4335] Bluetooth: hci11: hardware error 0x00 [ 142.975950][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.977902][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.981814][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.985436][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.998139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.000474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.011948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.036381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.042275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.052353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.063546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.379735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.391573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.397195][ T8273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.451282][ T4341] Bluetooth: hci12: command 0x0409 tx timeout [ 143.511984][ T8370] Core dump to core aborted: cannot preserve file permissions [ 143.545083][ T8273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.548827][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.550294][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.590483][ T8375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.600795][ T8375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.769078][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.771106][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.776121][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.778305][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.787974][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.789940][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.792547][ T8273] device veth0_vlan entered promiscuous mode [ 143.796831][ T8273] device veth1_vlan entered promiscuous mode [ 143.835652][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 143.837343][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 143.838937][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.840549][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.872989][ T8273] device veth0_macvtap entered promiscuous mode [ 143.879368][ T8273] device veth1_macvtap entered promiscuous mode [ 143.888887][ T8395] device-mapper: ioctl: Unable to rename non-existent device, to § [ 143.899452][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.901099][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.915850][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.917727][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.919487][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.929465][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.935047][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.938588][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.940421][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.954271][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.956074][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.957719][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.959270][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.978923][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.988452][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.990334][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.994975][ T8404] device-mapper: ioctl: name not supplied when creating device [ 144.006656][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.008531][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.010221][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.012841][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.014463][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.016157][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.017718][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.019447][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.021651][ T4341] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 144.023429][ T4341] Bluetooth: hci4: Injecting HCI hardware error event [ 144.026214][ T4345] Bluetooth: hci4: hardware error 0x00 [ 144.069478][ T8273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.082880][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.087521][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.089652][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.092373][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.094053][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.095964][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.097568][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.099232][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.100810][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.102692][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.104440][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.106260][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.107876][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.109552][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.116339][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.117923][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.119543][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.127870][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.129546][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.135335][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.146893][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.148642][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.176950][ T8273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.183950][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.185481][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.187078][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.189017][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.192351][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.193894][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.196713][ T8416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.198346][ T8416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.220351][ T8273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.222202][ T8273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.223523][ T8273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.225045][ T8273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.319260][ T5496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.320691][ T5496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.340213][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.353496][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.354866][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.356716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.451343][ T8431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.463667][ T8431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.478467][ T8432] device syzkaller0 entered promiscuous mode [ 144.584880][ T8435] device-mapper: ioctl: name not supplied when creating device [ 144.687697][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 145.013211][ T8459] device-mapper: ioctl: name not supplied when creating device [ 145.019377][ T8458] device syzkaller0 entered promiscuous mode [ 145.213652][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'. [ 145.451635][ T4335] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 145.532467][ T4335] Bluetooth: hci12: command 0x041b tx timeout [ 145.552158][ T8496] device-mapper: ioctl: name not supplied when creating device [ 145.590816][ T8497] netlink: 'syz.1.1548': attribute type 10 has an invalid length. [ 145.592457][ T8497] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1548'. [ 145.594353][ T8497] device dummy0 entered promiscuous mode [ 145.596229][ T8497] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 145.598936][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1550'. [ 145.600844][ T8499] device bridge_slave_1 left promiscuous mode [ 145.602614][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.634520][ T8499] device bridge_slave_0 left promiscuous mode [ 145.635750][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.813868][ T8499] bond0: (slave bridge0): Releasing backup interface [ 145.824846][ T4378] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.987682][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 146.004818][ T4378] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.006282][ T4378] usb 1-1: config 0 has no interface number 0 [ 146.008962][ T4378] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 146.010445][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.017708][ T4378] usb 1-1: Product: syz [ 146.018453][ T4378] usb 1-1: Manufacturer: syz [ 146.019219][ T4378] usb 1-1: SerialNumber: syz [ 146.030463][ T4378] usb 1-1: config 0 descriptor?? [ 146.065916][ T8530] device syzkaller0 entered promiscuous mode [ 146.235700][ T4378] dvb_usb_ec168: probe of 1-1:0.1 failed with error -71 [ 146.239607][ T4378] usb 1-1: USB disconnect, device number 7 [ 146.251737][ T4345] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 146.293084][ T8549] device-mapper: ioctl: Unable to rename non-existent device, to § [ 146.409296][ T8558] binder: 8556:8558 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 146.810856][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'. [ 146.917549][ T8599] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 147.483865][ T8641] device-mapper: ioctl: Unable to rename non-existent device, to § [ 147.611506][ T4345] Bluetooth: hci12: command 0x040f tx timeout [ 147.667852][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1573'. [ 147.854232][ T8663] device syzkaller0 entered promiscuous mode [ 147.948649][ T8669] device-mapper: ioctl: Unable to rename non-existent device, to § [ 148.965475][ T8710] device-mapper: ioctl: Unable to rename non-existent device, to § [ 149.033587][ T8716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.056618][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1595'. [ 149.058464][ T8716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.187328][ T8723] device syzkaller0 entered promiscuous mode [ 149.560941][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.568871][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.701507][ T4345] Bluetooth: hci12: command 0x0419 tx timeout [ 149.851553][ T8741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.855748][ T8741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.949846][ T8743] device-mapper: ioctl: Unable to rename non-existent device, to § [ 150.148756][ T8749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1607'. [ 152.829476][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.839483][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.028156][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'. [ 161.032313][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 161.085671][ T8783] device-mapper: ioctl: Unable to rename non-existent device, to § [ 161.098084][ T8785] Option 'dnserror' to dns_resolver key: bad/missing value [ 161.195218][ T8792] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1620'. [ 161.345929][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1625'. [ 161.421665][ T8808] device syzkaller0 entered promiscuous mode [ 161.427043][ T8815] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1628'. [ 161.558116][ T8821] Option 'dnserror' to dns_resolver key: bad/missing value [ 161.697005][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 161.831786][ T3901] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 162.022258][ T3901] usb 1-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.023909][ T3901] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.024934][ T3901] usb 1-1: New USB device found, idVendor=1e6d, idProduct=2d51, bcdDevice= 0.00 [ 162.026387][ T3901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.028984][ T3901] usb 1-1: config 0 descriptor?? [ 162.559937][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1645'. [ 162.746390][ T3901] usb 1-1: USB disconnect, device number 8 [ 162.837767][ T8856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1640'. [ 163.076634][ T8860] device syzkaller0 entered promiscuous mode [ 163.941794][ T7] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 164.123136][ T7] usb 1-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.125122][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.126196][ T7] usb 1-1: New USB device found, idVendor=1e6d, idProduct=2d51, bcdDevice= 0.00 [ 164.127671][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.135190][ T7] usb 1-1: config 0 descriptor?? [ 164.852968][ T7] usb 1-1: USB disconnect, device number 9 [ 165.007366][ T8960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.009098][ T8960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.160399][ T8966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1664'. [ 165.265226][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'. [ 165.396500][ T8968] device syzkaller0 entered promiscuous mode [ 165.847843][ T4335] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 165.850762][ T4335] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 165.859016][ T4341] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 165.863796][ T4341] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 165.865903][ T4341] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 165.868459][ T4341] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 165.875589][ T4345] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 165.877636][ T4345] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 165.897920][ T4345] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 165.901703][ T4345] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 165.903225][ T4345] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 165.904481][ T4345] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 166.110844][ T9003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1666'. [ 166.134813][ T9006] Option 'dnserror' to dns_resolver key: bad/missing value [ 166.143143][ T8957] chnl_net:caif_netlink_parms(): no params data found [ 166.205537][ T8957] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.206884][ T8957] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.208582][ T8957] device bridge_slave_0 entered promiscuous mode [ 166.210953][ T8957] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.212369][ T8957] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.213947][ T8957] device bridge_slave_1 entered promiscuous mode [ 166.221102][ T8957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.225207][ T8957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.235094][ T8957] team0: Port device team_slave_0 added [ 166.237644][ T8957] team0: Port device team_slave_1 added [ 166.244470][ T8957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.245673][ T8957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.249882][ T8957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.254730][ T8957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.256277][ T8957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.260624][ T8957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.303174][ T8957] device hsr_slave_0 entered promiscuous mode [ 166.341870][ T8957] device hsr_slave_1 entered promiscuous mode [ 166.381728][ T8957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.383036][ T8957] Cannot create hsr debugfs directory [ 166.490271][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1673'. [ 166.492358][ T9024] device bridge_slave_1 left promiscuous mode [ 166.493527][ T9024] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.522297][ T9024] device bridge_slave_0 left promiscuous mode [ 166.523626][ T9024] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.801380][ T9022] device syzkaller0 entered promiscuous mode [ 166.803506][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'. [ 166.994817][ T8957] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.085407][ T8957] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.173011][ T8957] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.195829][ T9044] device-mapper: ioctl: Invalid ioctl structure: name my, dev f802 [ 167.282504][ T8957] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.438922][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1685'. [ 167.500127][ T9059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.511078][ T9059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.516798][ T8957] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 167.542585][ T8957] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 167.582911][ T8957] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 167.677605][ T9067] device-mapper: ioctl: populate_table: no targets specified [ 167.761438][ T8957] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 167.876376][ T8957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.885885][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.887889][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.896926][ T8957] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.919345][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.921310][ T4365] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 167.921588][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.924513][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.925826][ T4740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.927705][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.929463][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.931024][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.932454][ T4740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.934420][ T4341] Bluetooth: hci13: command 0x0409 tx timeout [ 167.944585][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.960415][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.971924][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.975949][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.979376][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.999593][ T8957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.001716][ T8957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.004301][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.007581][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.011077][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.015128][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.018090][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.022924][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.026602][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.034391][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.102495][ T4365] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 168.104189][ T4365] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 168.107477][ T4365] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 168.109072][ T4365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.110883][ T4365] usb 1-1: Product: syz [ 168.111811][ T4365] usb 1-1: Manufacturer: syz [ 168.112563][ T4365] usb 1-1: SerialNumber: syz [ 168.124380][ T4365] usb 1-1: config 0 descriptor?? [ 168.126111][ T9063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.127494][ T9063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.204964][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.206702][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.216767][ T8957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.338451][ T9063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.340022][ T9063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.409181][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 168.495331][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1699'. [ 168.522463][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.525274][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.531053][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.534158][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.561717][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.568372][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.580248][ T8957] device veth0_vlan entered promiscuous mode [ 168.584821][ T8957] device veth1_vlan entered promiscuous mode [ 168.596618][ T4365] Error reading MAC address [ 168.599862][ T4365] usb 1-1: USB disconnect, device number 10 [ 168.620347][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.622396][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.627272][ T8957] device veth0_macvtap entered promiscuous mode [ 168.634087][ T8957] device veth1_macvtap entered promiscuous mode [ 168.647155][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.651637][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.653134][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.654911][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.656400][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.658003][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.659704][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.662258][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.663771][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.665369][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.666946][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.668660][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.670425][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.672654][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.674200][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.676108][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.677787][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.679509][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.681707][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.683492][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.685050][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.686744][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.688541][ T9105] device-mapper: ioctl: populate_table: no targets specified [ 168.690091][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.692973][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.694744][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.696552][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.699399][ T8957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.700985][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.702809][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.704392][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.705942][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.709826][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.717101][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.718980][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.720821][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.723933][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.725974][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.728037][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.730145][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.739039][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.741012][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.743784][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.745857][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.747669][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.749688][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.758115][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.759809][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.763151][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.765019][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.766677][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.768570][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.770287][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.778417][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.780120][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.782714][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.785400][ T8957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.788082][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.789824][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.807916][ T8957] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.809478][ T8957] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.810845][ T8957] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.813923][ T8957] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.908323][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.914341][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.917888][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.936538][ T4740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.946373][ T4740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.947855][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.135123][ T4380] asus 0018:0B05:0101.0002: hidraw0: I2C HID v0.00 Device [syz1] on syz0 [ 169.324669][ T9126] device syzkaller0 entered promiscuous mode [ 169.565297][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1709'. [ 169.632342][ T9133] device-mapper: ioctl: populate_table: no targets specified [ 170.013703][ T4341] Bluetooth: hci13: command 0x041b tx timeout [ 170.119285][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1718'. [ 170.326936][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1720'. [ 170.328699][ T9159] device bridge_slave_1 left promiscuous mode [ 170.329964][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.385783][ T9159] device bridge_slave_0 left promiscuous mode [ 170.387271][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.486353][ T9164] device-mapper: ioctl: populate_table: no targets specified [ 170.907038][ T9177] batman_adv: batadv0: Adding interface: veth0 [ 170.910388][ T9177] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.926184][ T9177] batman_adv: batadv0: Interface activated: veth0 [ 170.939322][ T9177] batman_adv: batadv0: Interface deactivated: veth0 [ 170.941409][ T9177] batman_adv: batadv0: Removing interface: veth0 [ 170.944806][ T9177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.946232][ T9177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.960514][ T9177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.962440][ T9177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.482958][ T9191] device-mapper: table: 248:2: thin-pool: Invalid argument count (-EINVAL) [ 171.484453][ T9191] device-mapper: ioctl: error adding target to table [ 171.664816][ T9199] mmap: syz.9.1736 (9199): VmData 43659264 exceed data ulimit 128. Update limits or use boot option ignore_rlimit_data. [ 171.931105][ T9213] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1742'. [ 171.940738][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'. [ 172.111453][ T4341] Bluetooth: hci13: command 0x040f tx timeout [ 172.300768][ T9226] Option 'dnserror' to dns_resolver key: bad/missing value [ 173.042460][ T9251] device-mapper: table: 248:2: thin-pool: Invalid argument count (-EINVAL) [ 173.044116][ T9251] device-mapper: ioctl: error adding target to table [ 173.120018][ T9255] device syzkaller0 entered promiscuous mode [ 173.313530][ T9267] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 173.623966][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1767'. [ 173.750993][ T9286] device-mapper: table: 248:2: thin-pool: Invalid argument count (-EINVAL) [ 173.761045][ T9286] device-mapper: ioctl: error adding target to table [ 173.860944][ T9289] Option 'dnserror' to dns_resolver key: bad/missing value [ 174.181409][ T4345] Bluetooth: hci13: command 0x0419 tx timeout [ 174.230458][ T9299] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 174.318288][ T9301] device syzkaller0 entered promiscuous mode [ 174.584633][ T9323] device-mapper: table: 248:2: thin-pool: Invalid argument count (-EINVAL) [ 174.588642][ T9323] device-mapper: ioctl: error adding target to table [ 174.606752][ T9324] Option 'dnserror' to dns_resolver key: bad/missing value [ 174.827543][ T9339] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 174.877823][ T9343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.888221][ T9343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.912591][ T9345] device syzkaller0 entered promiscuous mode [ 175.175008][ T9352] device-mapper: table: 248:2: thin-pool: Invalid argument count (-EINVAL) [ 175.176550][ T9352] device-mapper: ioctl: error adding target to table [ 175.473775][ T9363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.499357][ T9363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.929141][ T9376] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 175.995376][ T9378] device syzkaller0 entered promiscuous mode [ 176.170770][ T9380] device-mapper: table: 248:2: thin-pool: Invalid argument count (-EINVAL) [ 176.179481][ T9380] device-mapper: ioctl: error adding target to table [ 176.279044][ T9385] Option 'dnserror' to dns_resolver key: bad/missing value [ 177.980957][ T9420] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 178.065297][ T9422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.073938][ T9422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.276154][ T9423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.279216][ T9423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.333731][ T9427] device-mapper: table: 248:2: thin-pool: Invalid argument count (-EINVAL) [ 178.335366][ T9427] device-mapper: ioctl: error adding target to table [ 178.620792][ T9441] Option 'dnserror' to dns_resolver key: bad/missing value [ 186.970418][ T9390] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1807'. [ 187.051441][ T9447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.052951][ T9447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.082982][ T9447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.084398][ T9447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.133136][ T9452] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 187.232390][ T9458] device-mapper: table: 248:2: thin-pool: Invalid argument count (-EINVAL) [ 187.233972][ T9458] device-mapper: ioctl: error adding target to table [ 187.371984][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.373057][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.439904][ T9470] Option 'dnserror' to dns_resolver key: bad/missing value [ 187.546786][ T9475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1834'. [ 187.618763][ T9477] device syzkaller0 entered promiscuous mode [ 187.835359][ T9483] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 198.261237][ T9487] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1840'. [ 198.356095][ T9506] device syzkaller0 entered promiscuous mode [ 198.371057][ T9511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1846'. [ 198.407655][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 198.531760][ T9523] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 198.615770][ T9529] netlink: 'syz.7.1852': attribute type 10 has an invalid length. [ 198.714981][ T9533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.720818][ T9533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.374691][ T9588] netlink: 'syz.1.1867': attribute type 10 has an invalid length. [ 200.537282][ T9599] device syzkaller0 entered promiscuous mode [ 200.667780][ T9605] device syzkaller0 entered promiscuous mode [ 200.762508][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1873'. [ 211.528559][ T9639] netlink: 'syz.1.1881': attribute type 10 has an invalid length. [ 211.560444][ T9644] device syzkaller0 entered promiscuous mode [ 211.589194][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1884'. [ 211.989979][ T9669] binder: 9668:9669 tried to acquire reference to desc 0, got 1 instead [ 211.993196][ T9669] binder: 9668:9669 got transaction with invalid fd, -1 [ 211.994553][ T9669] binder: 9669:9668 translate fd failed [ 212.001519][ T9669] binder: 9668:9669 transaction async to 9668:0 failed 32/29201/-9, size 72-24 line 3432 [ 212.026331][ T4378] binder: undelivered transaction 28, process died. [ 212.041654][ T4378] binder: undelivered TRANSACTION_COMPLETE [ 212.042903][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 212.455763][ T9694] Option 'dnserror' to dns_resolver key: bad/missing value [ 212.724534][ T9702] device syzkaller0 entered promiscuous mode [ 212.936858][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'. [ 212.975933][ T28] INFO: task syz.1.698:6113 blocked for more than 143 seconds. [ 212.977453][ T28] Not tainted syzkaller #0 [ 212.978394][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 212.979999][ T28] task:syz.1.698 state:D stack:0 pid:6113 ppid:4329 flags:0x00000009 [ 212.990590][ T28] Call trace: [ 212.991386][ T28] __switch_to+0x2f4/0x550 [ 212.994723][ T28] __schedule+0xdb4/0x1a6c [ 212.998126][ T28] schedule+0xc4/0x170 [ 212.998951][ T28] schedule_preempt_disabled+0x18/0x2c [ 213.004814][ T28] __mutex_lock_common+0xb20/0x1f3c [ 213.012406][ T28] mutex_lock_nested+0x38/0x44 [ 213.013372][ T28] nfsd_shutdown_threads+0x60/0x204 [ 213.019422][ T28] nfsd_umount+0x48/0xf8 [ 213.020322][ T28] deactivate_locked_super+0xb4/0x128 [ 213.023784][ T28] deactivate_super+0xe4/0x104 [ 213.024709][ T28] cleanup_mnt+0x3a8/0x430 [ 213.029092][ T28] __cleanup_mnt+0x20/0x30 [ 213.030017][ T28] task_work_run+0x1f4/0x280 [ 213.033356][ T28] do_notify_resume+0x20f8/0x2c84 [ 213.034335][ T28] el0_svc+0x98/0x128 [ 213.037554][ T28] el0t_64_sync_handler+0x84/0xf0 [ 213.039318][ T28] el0t_64_sync+0x18c/0x190 [ 213.040748][ T28] INFO: task syz.0.697:6115 blocked for more than 143 seconds. [ 213.074846][ T28] Not tainted syzkaller #0 [ 213.077127][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.081334][ T28] task:syz.0.697 state:D stack:0 pid:6115 ppid:4334 flags:0x00000001 [ 213.084315][ T28] Call trace: [ 213.084989][ T28] __switch_to+0x2f4/0x550 [ 213.088338][ T28] __schedule+0xdb4/0x1a6c [ 213.089297][ T28] schedule+0xc4/0x170 [ 213.092328][ T28] schedule_preempt_disabled+0x18/0x2c [ 213.094656][ T28] __mutex_lock_common+0xb20/0x1f3c [ 213.096925][ T28] mutex_lock_nested+0x38/0x44 [ 213.097872][ T28] write_ports+0xbc/0x9f0 [ 213.099977][ T28] nfsctl_transaction_write+0x114/0x164 [ 213.102455][ T28] vfs_write+0x2a8/0x7c8 [ 213.103222][ T28] ksys_write+0x12c/0x228 [ 213.106405][ T28] __arm64_sys_write+0x7c/0x90 [ 213.107381][ T28] invoke_syscall+0x98/0x290 [ 213.109544][ T28] el0_svc_common+0x13c/0x258 [ 213.112947][ T28] do_el0_svc+0x5c/0x134 [ 213.113798][ T28] el0_svc+0x58/0x128 [ 213.115855][ T28] el0t_64_sync_handler+0x84/0xf0 [ 213.116786][ T28] el0t_64_sync+0x18c/0x190 [ 213.120184][ T28] [ 213.120184][ T28] Showing all locks held in the system: [ 213.127596][ T28] 1 lock held by rcu_tasks_kthre/12: [ 213.128834][ T28] #0: ffff800015567db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 213.130967][ T28] 1 lock held by rcu_tasks_trace/13: [ 213.132138][ T28] #0: ffff8000155685d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 213.134333][ T28] 1 lock held by khungtaskd/28: [ 213.135233][ T28] #0: ffff800015567440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 213.146106][ T28] 2 locks held by getty/4084: [ 213.147256][ T28] #0: ffff0000d6de7098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 213.151004][ T28] #1: ffff80001fa262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 [ 213.159672][ T28] 4 locks held by kworker/u4:6/4396: [ 213.160926][ T28] 3 locks held by syz.2.638/5988: [ 213.162682][ T28] #0: ffff0000d43a9268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 213.164486][ T28] #1: ffff0000c3f00460 (sb_writers#14){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 213.166354][ T28] #2: ffff8000157f4168 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xbc/0x9f0 [ 213.168088][ T28] 2 locks held by syz.1.698/6113: [ 213.169041][ T28] #0: ffff0000d1c2a0e0 (&type->s_umount_key#58){+.+.}-{3:3}, at: deactivate_super+0xdc/0x104 [ 213.171157][ C1] hrtimer: interrupt took 129302 ns [ 213.173832][ T28] #1: ffff8000157f4168 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x60/0x204 [ 213.175803][ T28] 3 locks held by syz.0.697/6115: [ 213.176790][ T28] #0: ffff0000cdaeb768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 213.178617][ T28] #1: ffff0001092c8460 (sb_writers#14){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 213.180419][ T28] #2: ffff8000157f4168 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xbc/0x9f0 [ 213.186666][ T28] 3 locks held by syz.4.859/6585: [ 213.187991][ T28] #0: ffff0000d3595768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 213.190058][ T28] #1: ffff0000f534e460 (sb_writers#14){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 213.192049][ T28] #2: ffff8000157f4168 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xbc/0x9f0 [ 213.194304][ T28] 3 locks held by syz.7.912/6692: [ 213.195565][ T28] #0: ffff000105121c68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 213.197527][ T28] #1: ffff0000fbf3e460 (sb_writers#14){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 213.199418][ T28] #2: ffff8000157f4168 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xbc/0x9f0 [ 213.201495][ T28] 3 locks held by syz.8.1251/7514: [ 213.202825][ T28] #0: ffff0000d35e7768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 213.205189][ T28] #1: ffff0000fb58e460 (sb_writers#14){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 213.207126][ T28] #2: ffff8000157f4168 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xbc/0x9f0 [ 213.209359][ T28] 3 locks held by syz.5.1289/7636: [ 213.210570][ T28] #0: ffff0000db96e368 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 213.213652][ T28] #1: ffff0001084dc460 (sb_writers#14){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 213.215849][ T28] #2: ffff8000157f4168 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xbc/0x9f0 [ 213.217816][ T28] 2 locks held by syz.6.1381/7891: [ 213.218922][ T28] #0: ffff00011492a0e0 (&type->s_umount_key#58){+.+.}-{3:3}, at: deactivate_super+0xdc/0x104 [ 213.229318][ T28] #1: ffff8000157f4168 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x60/0x204 [ 213.231723][ T28] 1 lock held by syz.7.1895/9696: [ 213.232946][ T28] 1 lock held by syz.7.1895/9699: [ 213.234197][ T28] #0: ffff800017a15a08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 213.236516][ T28] 1 lock held by syz.7.1895/9701: [ 213.237770][ T28] #0: ffff800017a15a08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 213.239637][ T28] 1 lock held by syz.7.1895/9703: [ 213.240525][ T28] #0: ffff800017a15a08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 213.242904][ T28] 1 lock held by syz.7.1895/9707: [ 213.244124][ T28] #0: ffff800017a15a08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 [ 213.246183][ T28] 1 lock held by syz.7.1895/9709: [ 213.247625][ T28] #0: ffff800017a15a08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 213.249501][ T28] 1 lock held by syz.1.1897/9700: [ 213.250670][ T28] #0: ffff800017a15a08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 213.252971][ T28] [ 213.253434][ T28] ============================================= [ 213.253434][ T28] [ 213.255222][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 213.256398][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 213.257547][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 213.259263][ T28] Call trace: [ 213.259854][ T28] dump_backtrace+0x1c4/0x1f0 [ 213.260667][ T28] show_stack+0x2c/0x3c [ 213.261346][ T28] __dump_stack+0x30/0x40 [ 213.262097][ T28] dump_stack_lvl+0xf4/0x15c [ 213.262889][ T28] dump_stack+0x1c/0x5c [ 213.263598][ T28] panic+0x2f8/0x7ac [ 213.264270][ T28] hung_task_panic+0x0/0x2c [ 213.265081][ T28] kthread+0x254/0x2e0 [ 213.265833][ T28] ret_from_fork+0x10/0x20 [ 213.266594][ T28] SMP: stopping secondary CPUs [ 213.267368][ T28] Kernel Offset: disabled [ 213.268071][ T28] CPU features: 0x0a0000,000f0097,a65bfea7 [ 213.269018][ T28] Memory Limit: none [ 213.595123][ T28] Rebooting in 86400 seconds..