last executing test programs: 3m10.486928539s ago: executing program 3 (id=15): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000740)={0x0, 0x1, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x800000000000c}) 3m3.724572494s ago: executing program 3 (id=25): eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000001240), 0x80000) socket$l2tp(0x2, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x1455, &(0x7f0000001540)={0x0, 0xf70c, 0x400, 0x1, 0x1e0}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x40000100) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = gettid() tkill(r3, 0x21) 3m1.174640256s ago: executing program 3 (id=28): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x44104}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r1, &(0x7f0000000600)=""/234, 0xea) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 2m59.692760352s ago: executing program 3 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) 2m58.880230072s ago: executing program 3 (id=32): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x0, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0xff}}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x36, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f0000000100)) lstat(0x0, &(0x7f0000000340)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000001040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 2m57.368530469s ago: executing program 3 (id=34): socket$igmp(0x2, 0x3, 0x2) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, &(0x7f00000002c0)={0x0, 0x44a3f1ed, 0x0, 0x8000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000", 0x7, 0xfffffffffffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 2m41.845626308s ago: executing program 32 (id=34): socket$igmp(0x2, 0x3, 0x2) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, &(0x7f00000002c0)={0x0, 0x44a3f1ed, 0x0, 0x8000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000", 0x7, 0xfffffffffffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 10.473697314s ago: executing program 5 (id=467): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x10, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1001}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8009}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 10.264713539s ago: executing program 5 (id=469): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'comedi_bond\x00', [0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) memfd_create(&(0x7f0000000f80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x03n\x0f\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x06\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3\x00\x00\x00\x00\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t\x8a/\x90\xd8\xb7\x80<\xef\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\x89\x9e\v\x9f\xa3\x03hSq\x95\x8f\xe1J\xd3#/f4\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;\x90$\xab\xfd\x92\xb0\xde\xfb\x91b0T\x87\xdd\x00\x1b4\xbb\x13^\xb1~\x02\xc0\xd7\x8e\xdc:8y\xb2\xb7i<[C`\\\x98T\xca\xb4N\xe3@\xa2\xa0\xae&\xde\xa2\xbc\x00'/1188, 0x5) fcntl$getown(0xffffffffffffffff, 0x9) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r1, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r2, 0x5418, 0x0) 10.22174488s ago: executing program 0 (id=470): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x48) openat$sysfs(0xffffffffffffff9c, 0x0, 0x100102, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0x0, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]}) write$P9_RSTATu(r3, 0x0, 0x6e) 9.920679258s ago: executing program 0 (id=471): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x648, 0x368, 0x578, 0x368, 0x190, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'wg0\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0xff, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth1_to_bridge\x00', {0x6}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x32}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x8, @ipv4=@private=0xa010101, 0x4e23}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xffffffff], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='0\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/mycluster/node/node0/local\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./config/cluster/mycluster/heartbeat/reg0/blocks\x00', 0x1, 0x0) write(r2, &(0x7f0000001300)='8\n', 0x2) 9.43178311s ago: executing program 4 (id=473): syz_usb_connect(0x0, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='270', 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.364041061s ago: executing program 5 (id=474): epoll_create(0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="05"], 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="85", 0x1, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={0x0, 0x0, 0x12a, 0x0, 0xfffffffe, 0xffff, 0x10000}, 0x28) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe00010000"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 8.065743083s ago: executing program 5 (id=476): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$inet(0x2, 0x5, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x205, 0x100, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10000}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}}, 0x0) 6.758239255s ago: executing program 0 (id=478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 6.613820669s ago: executing program 2 (id=479): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x15, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r2, 0x0, 0x18) unshare(0x40000000) 5.925662445s ago: executing program 5 (id=480): io_setup(0x401, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"]) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a0103"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) keyctl$chown(0x4, r4, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000400)={&(0x7f0000000280)=[{0x1e, 0x8611, 0x5e, &(0x7f00000000c0)='%:'}, {0x6, 0x0, 0x0, 0x0}], 0x2}) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x24000840) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.914287256s ago: executing program 1 (id=481): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi3\x00', 0x800, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802) ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x80000000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x2, 0x40, &(0x7f0000000000)={0x0, 0xb, 0xfffe, 0x42}, 0x8, 0x203ffffd, 0x300, 0x0, 0xeeb, 0x20002, 0x0}) 5.665482111s ago: executing program 1 (id=482): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xd0, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c50200864cafae016f2b7531451b8bdc", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) splice(r1, 0x0, r0, 0x0, 0x10000008eb8, 0x2) 4.8983551s ago: executing program 2 (id=483): unshare(0x22020400) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000200)={'pcl812\x00', [0x140, 0xc1, 0x4, 0xffffffff, 0x5, 0x1, 0x8002, 0x1000, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x2009, 0x8, 0x4ce, 0x80000000, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x200000, 0xaf, 0x0, 0x9, 0x1, 0x4]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x573, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x100003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x401, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000004, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3eb, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x3, 0x20b9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x6, 0x5, 0x0, 0x30b1d694, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.828651832s ago: executing program 4 (id=484): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'comedi_bond\x00', [0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) memfd_create(&(0x7f0000000f80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x03n\x0f\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x06\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3\x00\x00\x00\x00\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t\x8a/\x90\xd8\xb7\x80<\xef\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\x89\x9e\v\x9f\xa3\x03hSq\x95\x8f\xe1J\xd3#/f4\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;\x90$\xab\xfd\x92\xb0\xde\xfb\x91b0T\x87\xdd\x00\x1b4\xbb\x13^\xb1~\x02\xc0\xd7\x8e\xdc:8y\xb2\xb7i<[C`\\\x98T\xca\xb4N\xe3@\xa2\xa0\xae&\xde\xa2\xbc\x00'/1188, 0x5) fcntl$getown(0xffffffffffffffff, 0x9) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r1, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r2, 0x5418, 0x0) 4.732502914s ago: executing program 4 (id=485): eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000001240), 0x80000) socket$l2tp(0x2, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x20, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x40000100) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = gettid() tkill(r3, 0x21) 4.638062037s ago: executing program 0 (id=486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa8}}, 0x0) 4.581545828s ago: executing program 2 (id=487): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000006800010000fd0000000000000a000300040000000800060001000000080005"], 0x28}}, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000000c0)=0x8, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000002d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000004d40)={0x10, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f0000001c40)=[{{&(0x7f0000000380)=@phonet, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000001cc0)=""/4097, 0x1001}, 0x7}, {{&(0x7f0000001a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/203, 0xcb}], 0x1, &(0x7f00000001c0)=""/40, 0x28}, 0x2}], 0x2, 0x40000103, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8048810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c014}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendto$inet6(r1, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, &(0x7f00000003c0)="90", 0x49) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x0, 0x0) 4.50056992s ago: executing program 0 (id=488): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x648, 0x368, 0x578, 0x368, 0x190, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'wg0\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0xff, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth1_to_bridge\x00', {0x6}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x32}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x8, @ipv4=@private=0xa010101, 0x4e23}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xffffffff], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='0\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/mycluster/node/node0/local\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./config/cluster/mycluster/heartbeat/reg0/blocks\x00', 0x1, 0x0) write(r2, &(0x7f0000001300)='8\n', 0x2) 3.950384504s ago: executing program 2 (id=489): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0xf3f, 0x9, 0xf3e, 0x401}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) write(r1, &(0x7f0000000180), 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4, 0x0, 0xfe}) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000340)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000092870076000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount$pvfs2(&(0x7f0000000600), &(0x7f0000000280)='./proc\x00', &(0x7f0000000140), 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="7d7db73470e13d4da84fc4b2ff5c305df72d4b3b3f2201a28dc097cdc8013f83d4c96d6e9e602dda338f390cb69696f3e20c2e16be9f42c6e6dcc60b5c62776cb2b69f1155048d96c5611d22f7b6b791862f8ef4c2a356e594a328a0e6a096dd191db6672e1ef5f1fb822101095d05771d64eb75fa254d4ef04b6f60b824da9af082f9a58036c2053b00a79df6caae38e845e12d3335ce323df0397754ee4158baf3adec659b77765c292c4e04b8010cca116353eeb544506d400c5075dace28e5431e79ab238433ca6f8d1febaf1800d6bdbf7f701a952b0c0dd1b4010cde7e298762e5e2548fe9a72ce7d724357afd5dcf4607fe54b2"]) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) 3.651682681s ago: executing program 4 (id=490): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$inet(0x2, 0x5, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x205, 0x100, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10000}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}}, 0x0) 2.898756639s ago: executing program 4 (id=491): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_getnetconf={0x1c, 0x52, 0xe11, 0x70bd27, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44104}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 2.88623583s ago: executing program 2 (id=492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) 2.297993904s ago: executing program 1 (id=493): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x80, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x1, @loopback}}, 0x100, 0x0, 0xfffffffc, 0x2, 0x54, 0x3, 0x73}, 0x9c) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x3) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff9d) 1.63074958s ago: executing program 1 (id=494): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) flistxattr(r0, 0x0, 0x0) 1.522442183s ago: executing program 1 (id=495): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.495408284s ago: executing program 2 (id=496): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @broadcast}, 0x220, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000040)='geneve1\x00', 0x61, 0xb, 0x3ff}) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) write(r1, &(0x7f0000000150)='33554432\x00', 0x9) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e0}}], 0x1, 0x4000004) socket$inet6(0xa, 0x3, 0x8000000003c) 1.390217146s ago: executing program 4 (id=497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 11.43658ms ago: executing program 5 (id=498): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) 11.14195ms ago: executing program 0 (id=499): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000006800010000fd0000000000000a000300040000000800060001000000080005"], 0x28}}, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000000c0)=0x8, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000002d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000004d40)={0x10, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f0000001c40)=[{{&(0x7f0000000380)=@phonet, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000001cc0)=""/4097, 0x1001}, 0x7}, {{&(0x7f0000001a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/203, 0xcb}], 0x1, &(0x7f00000001c0)=""/40, 0x28}, 0x2}], 0x2, 0x40000103, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8048810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c014}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendto$inet6(r1, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, &(0x7f00000003c0)="90", 0x49) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x0, 0x0) 0s ago: executing program 1 (id=500): eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000001240), 0x80000) socket$l2tp(0x2, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x40000100) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = gettid() tkill(r3, 0x21) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 41.471566][ T3850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.481223][ T3850] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. syzkaller login: [ 61.627751][ T4172] cgroup: Unknown subsys name 'net' [ 61.777056][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.243609][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.665234][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 64.743222][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 64.813162][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.821122][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.830034][ T4186] device bridge_slave_0 entered promiscuous mode [ 64.856004][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.863567][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.872014][ T4186] device bridge_slave_1 entered promiscuous mode [ 64.886914][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 64.896932][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 64.951874][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.961191][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 65.000044][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.014600][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.021838][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.029844][ T4194] device bridge_slave_0 entered promiscuous mode [ 65.068524][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.076358][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.084579][ T4194] device bridge_slave_1 entered promiscuous mode [ 65.105342][ T4186] team0: Port device team_slave_0 added [ 65.129954][ T4186] team0: Port device team_slave_1 added [ 65.182491][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.192774][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.199859][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.207903][ T4185] device bridge_slave_0 entered promiscuous mode [ 65.215774][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.222943][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.230640][ T4200] device bridge_slave_0 entered promiscuous mode [ 65.250352][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.257377][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.283445][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.297270][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.313913][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.321108][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.329228][ T4185] device bridge_slave_1 entered promiscuous mode [ 65.336133][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.343670][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.351492][ T4200] device bridge_slave_1 entered promiscuous mode [ 65.358923][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.366203][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.392321][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.435173][ T4194] team0: Port device team_slave_0 added [ 65.441152][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.449617][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.457595][ T4190] device bridge_slave_0 entered promiscuous mode [ 65.478562][ T4194] team0: Port device team_slave_1 added [ 65.499319][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.508625][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.516749][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.525426][ T4190] device bridge_slave_1 entered promiscuous mode [ 65.542376][ T4186] device hsr_slave_0 entered promiscuous mode [ 65.549218][ T4186] device hsr_slave_1 entered promiscuous mode [ 65.564072][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.574979][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.591755][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.620639][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.631192][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.654570][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.662013][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.688414][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.729769][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.737741][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.765360][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.779403][ T4185] team0: Port device team_slave_0 added [ 65.792893][ T4200] team0: Port device team_slave_0 added [ 65.807109][ T4190] team0: Port device team_slave_0 added [ 65.817954][ T4185] team0: Port device team_slave_1 added [ 65.832873][ T4200] team0: Port device team_slave_1 added [ 65.848649][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.855776][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.882077][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.896027][ T4190] team0: Port device team_slave_1 added [ 65.932598][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.939587][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.966246][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.978034][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.985343][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.012360][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.030028][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.037074][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.063294][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.088953][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.096255][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.122895][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.135581][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.142738][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.169205][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.192967][ T4194] device hsr_slave_0 entered promiscuous mode [ 66.201934][ T4194] device hsr_slave_1 entered promiscuous mode [ 66.208506][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.216743][ T4194] Cannot create hsr debugfs directory [ 66.278382][ T4190] device hsr_slave_0 entered promiscuous mode [ 66.285427][ T4190] device hsr_slave_1 entered promiscuous mode [ 66.292340][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.299898][ T4190] Cannot create hsr debugfs directory [ 66.317513][ T4185] device hsr_slave_0 entered promiscuous mode [ 66.324612][ T4185] device hsr_slave_1 entered promiscuous mode [ 66.331166][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.339204][ T4185] Cannot create hsr debugfs directory [ 66.392180][ T4174] Bluetooth: hci0: command 0x0409 tx timeout [ 66.398821][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 66.402023][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 66.411490][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 66.414726][ T4200] device hsr_slave_0 entered promiscuous mode [ 66.424758][ T4200] device hsr_slave_1 entered promiscuous mode [ 66.431744][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.439306][ T4200] Cannot create hsr debugfs directory [ 66.481496][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 66.689005][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.703610][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.714296][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.724157][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.783155][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.792186][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.820408][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.832357][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.859524][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.890181][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.903863][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.918022][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.969433][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.020897][ T4200] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.030853][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.041932][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.064338][ T4200] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.076400][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.101952][ T4200] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.114278][ T4200] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.131970][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.140753][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.151056][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.158317][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.167999][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.179681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.188975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.198870][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.205981][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.224880][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.248412][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.263936][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.280372][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.298977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.307969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.316289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.328478][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.336744][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.365026][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.376278][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.385681][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.395780][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.404780][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.414232][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.422717][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.432620][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.441033][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.448246][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.460469][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.467892][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.479769][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.500942][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.509836][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.518373][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.526856][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.534785][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.544908][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.553858][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.561135][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.569394][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.579217][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.587792][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.617630][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.630988][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.640412][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.649849][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.657078][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.665657][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.676004][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.685658][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.694652][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.704224][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.713025][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.722176][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.730832][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.737937][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.747171][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.756338][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.765175][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.774634][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.785221][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.800517][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.821790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.848010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.857463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.898044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.909114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.919095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.929254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.954420][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.974460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.989043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.007140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.050769][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.064894][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.077527][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.088336][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.096791][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.106979][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.116653][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.135771][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.145397][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.161150][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.168306][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.186196][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.208507][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.221763][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.235752][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.244440][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.252009][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.260705][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.287042][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.307905][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.317357][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.325645][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.334159][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.342238][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.357994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.368741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.380474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.400924][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.417746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.425878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.433900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.443083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.452220][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.459282][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.467120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.482608][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 68.488785][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.497540][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 68.499215][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.504116][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 68.518903][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 68.532619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.540212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.549777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.559273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.561581][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 68.568541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.584192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.592751][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.599880][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.609952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.633842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.643870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.652662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.661225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.684403][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.720117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.729311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.739772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.748513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.767649][ T4194] device veth0_vlan entered promiscuous mode [ 68.783007][ T4186] device veth0_vlan entered promiscuous mode [ 68.792059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.799868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.808130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.817772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.826367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.834976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.845383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.854859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.864497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.875145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.884154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.893142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.902695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.910452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.918932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.935195][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.946538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.955844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.973595][ T4194] device veth1_vlan entered promiscuous mode [ 68.993051][ T4186] device veth1_vlan entered promiscuous mode [ 69.016653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.026561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.058677][ T4194] device veth0_macvtap entered promiscuous mode [ 69.072301][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.091864][ T4185] device veth0_vlan entered promiscuous mode [ 69.099418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.108654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.120278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.135802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.144819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.153577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.161408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.176191][ T4185] device veth1_vlan entered promiscuous mode [ 69.210757][ T4194] device veth1_macvtap entered promiscuous mode [ 69.245996][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.259627][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.278227][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.289087][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.304062][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.314166][ T4186] device veth0_macvtap entered promiscuous mode [ 69.327650][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.339943][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.355184][ T4186] device veth1_macvtap entered promiscuous mode [ 69.365446][ T4185] device veth0_macvtap entered promiscuous mode [ 69.377891][ T4185] device veth1_macvtap entered promiscuous mode [ 69.387880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.403602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.414250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.423563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.433152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.442388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.451082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.460126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.469884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.483718][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.493477][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.502513][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.511235][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.534675][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.545639][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.557268][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.564820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.574086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.582611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.590049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.599332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.640741][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.655650][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.666684][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.677235][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.689037][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.699988][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.710503][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.722376][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.731645][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.743023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.753573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.762504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.772432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.783647][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.793136][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.802257][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.811095][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.831802][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.842655][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.852944][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.865815][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.876696][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.903540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.922066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.929668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.938800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.958504][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.968697][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.977691][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.986865][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.012839][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.109123][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.120068][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.149912][ T4200] device veth0_vlan entered promiscuous mode [ 70.167145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.176412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.217491][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.238455][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.259101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.267852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.277130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.299141][ T4200] device veth1_vlan entered promiscuous mode [ 70.348407][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.361410][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.370811][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.379873][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.395723][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.417599][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.432880][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.466850][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.476288][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.493380][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.524069][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.531544][ T4200] device veth0_macvtap entered promiscuous mode [ 70.544236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.552105][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.568121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.575411][ T4255] Bluetooth: hci0: command 0x040f tx timeout [ 70.582771][ T4255] Bluetooth: hci3: command 0x040f tx timeout [ 70.586304][ T4264] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.589306][ T4255] Bluetooth: hci2: command 0x040f tx timeout [ 70.611868][ T4255] Bluetooth: hci1: command 0x040f tx timeout [ 70.612218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.632185][ T4255] Bluetooth: hci4: command 0x040f tx timeout [ 70.636548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.657213][ T4200] device veth1_macvtap entered promiscuous mode [ 70.680802][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.704094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.720551][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.722428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.738596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.835970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.885851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.899312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.919466][ T4190] device veth0_vlan entered promiscuous mode [ 70.946732][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.985070][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.999722][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.015835][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.033445][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.044186][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.056477][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.088907][ T4190] device veth1_vlan entered promiscuous mode [ 71.095569][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.115505][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.129447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.139547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.151404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.169259][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.190044][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.210717][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.228387][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.238482][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.256549][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.267962][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.314349][ T4271] IPv6: Can't replace route, no match found [ 71.321763][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.332735][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.345561][ T4200] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.356329][ T4200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.377088][ T4200] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.391551][ T4200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.459118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.489244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.595091][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.601316][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 71.603886][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.648175][ T4190] device veth0_macvtap entered promiscuous mode [ 72.709026][ T4276] sched: RT throttling activated [ 72.750388][ T4255] Bluetooth: hci1: command 0x0419 tx timeout [ 72.757307][ T4255] Bluetooth: hci2: command 0x0419 tx timeout [ 72.763774][ T4255] Bluetooth: hci3: command 0x0419 tx timeout [ 72.770085][ T4255] Bluetooth: hci0: command 0x0419 tx timeout [ 72.780350][ T4255] Bluetooth: hci4: command 0x0419 tx timeout [ 72.811311][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 72.821299][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 72.831298][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 72.841303][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 72.851302][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 72.861301][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 72.871301][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 72.881296][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 72.891293][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 73.202919][ T4277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 73.268048][ T4283] FAULT_INJECTION: forcing a failure. [ 73.268048][ T4283] name failslab, interval 1, probability 0, space 0, times 1 [ 73.285144][ T4283] CPU: 0 PID: 4283 Comm: syz.0.6 Not tainted syzkaller #0 [ 73.292313][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.302394][ T4283] Call Trace: [ 73.305676][ T4283] [ 73.308596][ T4283] dump_stack_lvl+0x188/0x250 [ 73.313286][ T4283] ? show_regs_print_info+0x20/0x20 [ 73.318502][ T4283] ? load_image+0x410/0x410 [ 73.323001][ T4283] ? __might_sleep+0xf0/0xf0 [ 73.327594][ T4283] ? __lock_acquire+0x7d40/0x7d40 [ 73.332617][ T4283] should_fail+0x383/0x4b0 [ 73.337046][ T4283] should_failslab+0x5/0x20 [ 73.341558][ T4283] slab_pre_alloc_hook+0x51/0xc0 [ 73.346487][ T4283] ? copy_mm+0x8b6/0x13d0 [ 73.350808][ T4283] kmem_cache_alloc+0x3d/0x280 [ 73.355588][ T4283] copy_mm+0x8b6/0x13d0 [ 73.359787][ T4283] ? copy_signal+0x610/0x610 [ 73.364411][ T4283] ? __init_rwsem+0x11e/0x160 [ 73.369152][ T4283] ? copy_signal+0x501/0x610 [ 73.373954][ T4283] copy_process+0x17a7/0x3e70 [ 73.378699][ T4283] ? __pidfd_prepare+0x140/0x140 [ 73.383671][ T4283] ? verify_lock_unused+0x140/0x140 [ 73.388947][ T4283] kernel_clone+0x23f/0x990 [ 73.393491][ T4283] ? create_io_thread+0x180/0x180 [ 73.398531][ T4283] __x64_sys_clone+0x19a/0x210 [ 73.403301][ T4283] ? __ia32_sys_vfork+0x130/0x130 [ 73.408327][ T4283] ? lockdep_hardirqs_on+0x94/0x140 [ 73.413530][ T4283] do_syscall_64+0x4c/0xa0 [ 73.417950][ T4283] ? clear_bhb_loop+0x30/0x80 [ 73.422628][ T4283] ? clear_bhb_loop+0x30/0x80 [ 73.427414][ T4283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.433311][ T4283] RIP: 0033:0x7ffb6d4d8159 [ 73.437822][ T4283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.455208][ T4190] device veth1_macvtap entered promiscuous mode [ 73.457520][ T4283] RSP: 002b:00007ffb6b72ffd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 73.472219][ T4283] RAX: ffffffffffffffda RBX: 00007ffb6d75ffa0 RCX: 00007ffb6d4d8159 [ 73.480193][ T4283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.488174][ T4283] RBP: 00007ffb6d56f06b R08: 0000000000000000 R09: 0000000000000000 [ 73.496157][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.504209][ T4283] R13: 00007ffb6d760038 R14: 00007ffb6d75ffa0 R15: 00007fffd47fedd8 [ 73.512272][ T4283] [ 73.602002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.634970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.663197][ T21] cfg80211: failed to load regulatory.db [ 73.807874][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.191581][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.220236][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.338730][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.814578][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.825463][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.836107][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.864684][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.893070][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.981947][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.014976][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.081826][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.100644][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.122181][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.141514][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.155725][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.167760][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.192923][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.204038][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.216984][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.226495][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.247297][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.301947][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.313852][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.863893][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.872977][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.881845][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.892287][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.935336][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.988506][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.135477][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.006914][ T4299] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 79.025733][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.066519][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.090154][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.475898][ T4319] process 'syz.1.14' launched './file0' with NULL argv: empty string added [ 80.700879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.765744][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.780579][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.809055][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.503901][ T4174] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.891486][ T4174] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 84.276115][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.292579][ T4174] usb 4-1: config 0 descriptor?? [ 84.325083][ T4345] ======================================================= [ 84.325083][ T4345] WARNING: The mand mount option has been deprecated and [ 84.325083][ T4345] and is ignored by this kernel. Remove the mand [ 84.325083][ T4345] option from the mount to silence this warning. [ 84.325083][ T4345] ======================================================= [ 84.436264][ T4352] comedi comedi2: comedi_config --init_data is deprecated [ 85.772442][ T4174] usb 4-1: can't set config #0, error -71 [ 85.799440][ T4174] usb 4-1: USB disconnect, device number 2 [ 85.940474][ T4357] FAULT_INJECTION: forcing a failure. [ 85.940474][ T4357] name failslab, interval 1, probability 0, space 0, times 0 [ 85.953871][ T4357] CPU: 0 PID: 4357 Comm: syz.1.21 Not tainted syzkaller #0 [ 85.961112][ T4357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 85.971279][ T4357] Call Trace: [ 85.974574][ T4357] [ 85.977528][ T4357] dump_stack_lvl+0x188/0x250 [ 85.982446][ T4357] ? show_regs_print_info+0x20/0x20 [ 85.987674][ T4357] ? load_image+0x410/0x410 [ 85.992209][ T4357] ? __lock_acquire+0x7d40/0x7d40 [ 85.997277][ T4357] should_fail+0x383/0x4b0 [ 86.001927][ T4357] should_failslab+0x5/0x20 [ 86.006454][ T4357] slab_pre_alloc_hook+0x51/0xc0 [ 86.011416][ T4357] ? fib_insert_alias+0x300/0x1280 [ 86.016655][ T4357] kmem_cache_alloc+0x3d/0x280 [ 86.021631][ T4357] fib_insert_alias+0x300/0x1280 [ 86.026596][ T4357] ? lockdep_rtnl_is_held+0x22/0x30 [ 86.031823][ T4357] ? fib_find_node+0x28a/0x2f0 [ 86.036615][ T4357] fib_trie_unmerge+0x308/0xce0 [ 86.041531][ T4357] fib_unmerge+0xbc/0x350 [ 86.045990][ T4357] fib4_rule_configure+0xe0/0xb00 [ 86.051133][ T4357] fib_nl_newrule+0x131a/0x1e00 [ 86.056016][ T4357] ? __mutex_trylock_common+0x15c/0x260 [ 86.061595][ T4357] ? rcu_lock_release+0x20/0x20 [ 86.066492][ T4357] ? fib_rules_seq_read+0xf0/0xf0 [ 86.071533][ T4357] ? __mutex_lock_common+0x435/0x2400 [ 86.076973][ T4357] ? fib_rules_seq_read+0xf0/0xf0 [ 86.082041][ T4357] rtnetlink_rcv_msg+0x7f1/0xf10 [ 86.087030][ T4357] ? rtnetlink_bind+0x80/0x80 [ 86.091731][ T4357] ? lock_chain_count+0x20/0x20 [ 86.096624][ T4357] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 86.102557][ T4357] ? lockdep_hardirqs_on+0x94/0x140 [ 86.107873][ T4357] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 86.114327][ T4357] ? _raw_spin_unlock+0x40/0x40 [ 86.119313][ T4357] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 86.125944][ T4357] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 86.131876][ T4357] ? __copy_skb_header+0x3ba/0x4f0 [ 86.137031][ T4357] ? rcu_read_unlock_special+0xf0/0x4a0 [ 86.142813][ T4357] netlink_rcv_skb+0x1e9/0x430 [ 86.147609][ T4357] ? rtnetlink_bind+0x80/0x80 [ 86.152320][ T4357] ? netlink_ack+0xb10/0xb10 [ 86.157067][ T4357] ? __rcu_read_unlock+0x78/0xd0 [ 86.162045][ T4357] netlink_unicast+0x78f/0x940 [ 86.166857][ T4357] netlink_sendmsg+0x8ba/0xbe0 [ 86.171724][ T4357] ? netlink_getsockopt+0x570/0x570 [ 86.176947][ T4357] ? aa_sock_msg_perm+0x94/0x150 [ 86.182091][ T4357] ? apparmor_socket_sendmsg+0x88/0x230 [ 86.187745][ T4357] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 86.193053][ T4357] ? security_socket_sendmsg+0x7c/0xa0 [ 86.198535][ T4357] ? netlink_getsockopt+0x570/0x570 [ 86.203849][ T4357] ____sys_sendmsg+0x5be/0x8f0 [ 86.208739][ T4357] ? __sys_sendmsg_sock+0x30/0x30 [ 86.213797][ T4357] ? import_iovec+0x6f/0xa0 [ 86.218341][ T4357] ___sys_sendmsg+0x236/0x2e0 [ 86.223168][ T4357] ? __sys_sendmsg+0x290/0x290 [ 86.228010][ T4357] __se_sys_sendmsg+0x1b7/0x2a0 [ 86.232907][ T4357] ? __x64_sys_sendmsg+0x80/0x80 [ 86.237868][ T4357] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 86.243893][ T4357] ? lockdep_hardirqs_on+0x94/0x140 [ 86.249211][ T4357] do_syscall_64+0x4c/0xa0 [ 86.253781][ T4357] ? clear_bhb_loop+0x30/0x80 [ 86.258485][ T4357] ? clear_bhb_loop+0x30/0x80 [ 86.263188][ T4357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.269113][ T4357] RIP: 0033:0x7f8b8f22c159 [ 86.273552][ T4357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.293261][ T4357] RSP: 002b:00007f8b8d463028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.301699][ T4357] RAX: ffffffffffffffda RBX: 00007f8b8f4b4090 RCX: 00007f8b8f22c159 [ 86.309697][ T4357] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 86.317687][ T4357] RBP: 00007f8b8f2c306b R08: 0000000000000000 R09: 0000000000000000 [ 86.324847][ T4227] Bluetooth: hci0: command 0x0401 tx timeout [ 86.325702][ T4357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.339694][ T4357] R13: 00007f8b8f4b4128 R14: 00007f8b8f4b4090 R15: 00007fffd7134018 [ 86.347719][ T4357] [ 86.350828][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.367100][ T4358] db_root: cannot be changed: target drivers registered [ 87.490096][ T4368] netdevsim netdevsim2: Direct firmware load for ¹ failed with error -2 [ 87.505795][ T4368] netdevsim netdevsim2: Falling back to sysfs fallback for: ¹ [ 90.729097][ T4391] xt_connbytes: Forcing CT accounting to be enabled [ 90.736503][ T4391] Cannot find set identified by id 0 to match [ 95.400355][ T4422] netdevsim netdevsim4: Direct firmware load for ¹ failed with error -2 [ 95.423217][ T4422] netdevsim netdevsim4: Falling back to sysfs fallback for: ¹ [ 96.983391][ T4431] netlink: 5180 bytes leftover after parsing attributes in process `syz.4.44'. [ 98.272117][ T4436] comedi comedi1: Minor 524288 is invalid! [ 98.548772][ T26] audit: type=1800 audit(1791087706.000:2): pid=4441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.47" name="idProduct" dev="configfs" ino=32741 res=0 errno=0 [ 98.807714][ T4447] device syzkaller0 entered promiscuous mode [ 100.254611][ T4455] xt_policy: output policy not valid in PREROUTING and INPUT [ 102.156204][ T4473] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 103.065333][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 103.082634][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 103.093402][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 103.103527][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 103.113675][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 103.391627][ T4227] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.661534][ T4227] usb 2-1: Using ep0 maxpacket: 16 [ 103.793145][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.853173][ T4227] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.016869][ T4227] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.107611][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.260471][ T4227] usb 2-1: config 0 descriptor?? [ 104.904845][ T4227] HID 045e:07da: Invalid code 65791 type 1 [ 105.100403][ T4227] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input5 [ 105.192140][ T4227] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 105.427395][ T4230] usb 2-1: USB disconnect, device number 2 [ 106.004454][ T4504] fido_id[4504]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 107.631465][ T4491] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.921635][ T4491] usb 1-1: Using ep0 maxpacket: 16 [ 108.045996][ T4491] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 108.281831][ T4491] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.332299][ T4491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.340312][ T4491] usb 1-1: Product: syz [ 108.394809][ T4491] usb 1-1: Manufacturer: syz [ 108.413055][ T4491] usb 1-1: SerialNumber: syz [ 108.451093][ T4491] usb 1-1: config 0 descriptor?? [ 110.162583][ T4256] usb 1-1: USB disconnect, device number 2 [ 111.662412][ T4491] Bluetooth: hci5: command 0x0409 tx timeout [ 112.181081][ T4547] netdevsim netdevsim1: Direct firmware load for ¹ failed with error -2 [ 112.333010][ T4547] netdevsim netdevsim1: Falling back to sysfs fallback for: ¹ [ 113.118584][ T4530] chnl_net:caif_netlink_parms(): no params data found [ 113.371543][ T4530] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.378899][ T4530] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.387966][ T4530] device bridge_slave_0 entered promiscuous mode [ 113.397445][ T4530] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.406772][ T4530] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.415445][ T4530] device bridge_slave_1 entered promiscuous mode [ 113.544010][ T4530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.895336][ T4230] Bluetooth: hci5: command 0x041b tx timeout [ 114.026354][ T4530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.779120][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.870835][ T4530] team0: Port device team_slave_0 added [ 114.909002][ T4530] team0: Port device team_slave_1 added [ 114.957842][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.054592][ T4575] orangefs_mount: mount request failed with -4 [ 115.167300][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 115.317523][ T4530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.374508][ T4530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.861353][ T4530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.097377][ T4229] Bluetooth: hci5: command 0x040f tx timeout [ 116.722601][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.098340][ T4530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.106234][ T4595] netdevsim netdevsim0: Direct firmware load for ¹ failed with error -2 [ 117.141753][ T4595] netdevsim netdevsim0: Falling back to sysfs fallback for: ¹ [ 117.161911][ T4530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.362923][ T4530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.434557][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.501911][ T4530] device hsr_slave_0 entered promiscuous mode [ 117.509048][ T4530] device hsr_slave_1 entered promiscuous mode [ 118.743937][ T1111] Bluetooth: hci5: command 0x0419 tx timeout [ 118.786274][ T4530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.821661][ T4530] Cannot create hsr debugfs directory [ 119.657564][ T4619] orangefs_mount: mount request failed with -4 [ 121.841223][ T4530] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.864498][ T4530] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.072631][ T4530] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.113411][ T4530] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.681871][ T4530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.753463][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.773092][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.898186][ T4530] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.972432][ T4677] netdevsim netdevsim0: Direct firmware load for ¹ failed with error -2 [ 123.981361][ T4677] netdevsim netdevsim0: Falling back to sysfs fallback for: ¹ [ 124.367038][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.427864][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.540898][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.548351][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.610204][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.620695][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.629287][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.636520][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.644474][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.655683][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.762453][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.806764][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.829092][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.870352][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.082444][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.091930][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.119726][ T4530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.251732][ T4530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.325144][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.347336][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.481946][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.512756][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.571528][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.828002][ T144] device hsr_slave_0 left promiscuous mode [ 125.876888][ T144] device hsr_slave_1 left promiscuous mode [ 125.950745][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.971603][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.128832][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.198400][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.349947][ T144] device bridge_slave_1 left promiscuous mode [ 126.365379][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.488234][ T144] device bridge_slave_0 left promiscuous mode [ 126.524073][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.626993][ T144] device veth1_macvtap left promiscuous mode [ 126.640304][ T144] device veth0_macvtap left promiscuous mode [ 126.649996][ T144] device veth1_vlan left promiscuous mode [ 126.691339][ T144] device veth0_vlan left promiscuous mode [ 127.499155][ T4728] XFS (loop0): Invalid device [./loop0], error=-16 [ 128.262921][ T144] team0 (unregistering): Port device team_slave_1 removed [ 128.290268][ T144] team0 (unregistering): Port device team_slave_0 removed [ 128.328665][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.360699][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.475534][ T4737] fuse: Bad value for 'fd' [ 128.527652][ T144] bond0 (unregistering): Released all slaves [ 129.023035][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.030800][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.078283][ T4530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.923974][ T4759] orangefs_mount: mount request failed with -4 [ 131.381802][ T4780] XFS (loop0): Invalid device [./loop0], error=-16 [ 132.305596][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.352164][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.423145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.440548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.466113][ T4530] device veth0_vlan entered promiscuous mode [ 132.488221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.512844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.649904][ T4530] device veth1_vlan entered promiscuous mode [ 132.841881][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.851719][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.905889][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.942027][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.995910][ T4530] device veth0_macvtap entered promiscuous mode [ 133.024589][ T4530] device veth1_macvtap entered promiscuous mode [ 133.034724][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.041056][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.105450][ T4530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.141398][ T4530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.191293][ T4530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.223441][ T4530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.251311][ T4530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.332507][ T4530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.402280][ T4530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.491445][ T4530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.511523][ T4530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.547603][ T4530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.558520][ T4530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.569647][ T4530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.656344][ T4530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.819755][ T4530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.909663][ T4829] FAULT_INJECTION: forcing a failure. [ 133.909663][ T4829] name failslab, interval 1, probability 0, space 0, times 0 [ 133.911357][ T4530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.929089][ T4829] CPU: 0 PID: 4829 Comm: syz.1.141 Not tainted syzkaller #0 [ 133.939821][ T4829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.949910][ T4829] Call Trace: [ 133.953221][ T4829] [ 133.956178][ T4829] dump_stack_lvl+0x188/0x250 [ 133.960981][ T4829] ? show_regs_print_info+0x20/0x20 [ 133.966386][ T4829] ? load_image+0x410/0x410 [ 133.970927][ T4829] ? __lock_acquire+0x7d40/0x7d40 [ 133.975983][ T4829] should_fail+0x383/0x4b0 [ 133.980435][ T4829] should_failslab+0x5/0x20 [ 133.984966][ T4829] slab_pre_alloc_hook+0x51/0xc0 [ 133.990030][ T4829] ? key_alloc+0x302/0x1030 [ 133.994563][ T4829] kmem_cache_alloc+0x3d/0x280 [ 133.999363][ T4829] key_alloc+0x302/0x1030 [ 134.003738][ T4829] keyring_alloc+0x41/0xa0 [ 134.005748][ T4530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.008223][ T4829] join_session_keyring+0x139/0x440 [ 134.023859][ T4829] lookup_user_key+0x512/0x1160 [ 134.028754][ T4829] ? lookup_user_key_possessed+0x40/0x40 [ 134.034425][ T4829] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 134.040450][ T4829] ? __might_fault+0xb3/0x110 [ 134.045162][ T4829] ? _copy_from_user+0x111/0x170 [ 134.050134][ T4829] __se_sys_add_key+0x311/0x410 [ 134.055274][ T4829] ? __x64_sys_add_key+0xc0/0xc0 [ 134.060242][ T4829] ? lockdep_hardirqs_on+0x94/0x140 [ 134.062167][ T4530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.065470][ T4829] ? __x64_sys_add_key+0x1c/0xc0 [ 134.080326][ T4829] do_syscall_64+0x4c/0xa0 [ 134.085045][ T4829] ? clear_bhb_loop+0x30/0x80 [ 134.089771][ T4829] ? clear_bhb_loop+0x30/0x80 [ 134.094589][ T4829] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.100519][ T4829] RIP: 0033:0x7f8b8f22c159 [ 134.104965][ T4829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.124594][ T4829] RSP: 002b:00007f8b8d484028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 134.133022][ T4829] RAX: ffffffffffffffda RBX: 00007f8b8f4b3fa0 RCX: 00007f8b8f22c159 [ 134.140999][ T4829] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 134.149061][ T4829] RBP: 00007f8b8f2c306b R08: fffffffffffffffd R09: 0000000000000000 [ 134.157132][ T4829] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 134.165115][ T4829] R13: 00007f8b8f4b4038 R14: 00007f8b8f4b3fa0 R15: 00007fffd7134018 [ 134.173194][ T4829] [ 134.254343][ T4530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.300504][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.319069][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.348710][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.377098][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.397900][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.410145][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.531408][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.214131][ T4530] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.266647][ T4530] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.296449][ T4530] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.309613][ T4530] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.361342][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 135.481856][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.555115][ T7] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 135.689682][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.712208][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.731541][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 135.740737][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.754300][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.786748][ T7] usb 1-1: Product: syz [ 135.799210][ T4356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.817360][ T7] usb 1-1: Manufacturer: syz [ 135.824707][ T4356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.832726][ T7] usb 1-1: SerialNumber: syz [ 135.857828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.120547][ T4866] netdevsim netdevsim4: Direct firmware load for ¹ failed with error -2 [ 136.129903][ T4866] netdevsim netdevsim4: Falling back to sysfs fallback for: ¹ [ 136.938709][ T7] usb 1-1: USB disconnect, device number 3 [ 137.962166][ T4886] XFS (loop0): Invalid device [./loop0], error=-16 [ 138.161789][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.441477][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 138.561820][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.652207][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.876167][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 138.937221][ T4892] orangefs_mount: mount request failed with -4 [ 138.961305][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.986448][ T7] usb 1-1: config 0 descriptor?? [ 139.060824][ T7] hub 1-1:0.0: bad descriptor, ignoring hub [ 139.111424][ T7] hub: probe of 1-1:0.0 failed with error -5 [ 139.143134][ T7] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 139.329833][ T4904] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 141.261358][ T4233] usb 1-1: USB disconnect, device number 4 [ 144.252650][ T4951] orangefs_mount: mount request failed with -4 [ 144.556463][ T4962] FAULT_INJECTION: forcing a failure. [ 144.556463][ T4962] name failslab, interval 1, probability 0, space 0, times 0 [ 144.749634][ T4962] CPU: 1 PID: 4962 Comm: syz.5.176 Not tainted syzkaller #0 [ 144.757200][ T4962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 144.767465][ T4962] Call Trace: [ 144.770749][ T4962] [ 144.773681][ T4962] dump_stack_lvl+0x188/0x250 [ 144.778370][ T4962] ? copy_process+0x17a7/0x3e70 [ 144.783248][ T4962] ? __x64_sys_clone+0x19a/0x210 [ 144.788231][ T4962] ? show_regs_print_info+0x20/0x20 [ 144.793466][ T4962] ? load_image+0x410/0x410 [ 144.798054][ T4962] should_fail+0x383/0x4b0 [ 144.802594][ T4962] should_failslab+0x5/0x20 [ 144.807208][ T4962] slab_pre_alloc_hook+0x51/0xc0 [ 144.812153][ T4962] ? anon_vma_clone+0xbc/0x4d0 [ 144.816925][ T4962] kmem_cache_alloc+0x3d/0x280 [ 144.821718][ T4962] anon_vma_clone+0xbc/0x4d0 [ 144.826335][ T4962] anon_vma_fork+0x85/0x520 [ 144.830837][ T4962] ? copy_mm+0x8b6/0x13d0 [ 144.835163][ T4962] ? dup_userfaultfd+0xa7/0x5e0 [ 144.840043][ T4962] copy_mm+0x9df/0x13d0 [ 144.844268][ T4962] ? copy_signal+0x610/0x610 [ 144.848873][ T4962] ? __init_rwsem+0x11e/0x160 [ 144.853568][ T4962] ? copy_signal+0x501/0x610 [ 144.858174][ T4962] copy_process+0x17a7/0x3e70 [ 144.862901][ T4962] ? __pidfd_prepare+0x140/0x140 [ 144.867867][ T4962] ? verify_lock_unused+0x140/0x140 [ 144.873100][ T4962] kernel_clone+0x23f/0x990 [ 144.877633][ T4962] ? create_io_thread+0x180/0x180 [ 144.882703][ T4962] __x64_sys_clone+0x19a/0x210 [ 144.887477][ T4962] ? __ia32_sys_vfork+0x130/0x130 [ 144.892540][ T4962] ? lockdep_hardirqs_on+0x94/0x140 [ 144.897834][ T4962] do_syscall_64+0x4c/0xa0 [ 144.902252][ T4962] ? clear_bhb_loop+0x30/0x80 [ 144.906939][ T4962] ? clear_bhb_loop+0x30/0x80 [ 144.911623][ T4962] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.917706][ T4962] RIP: 0033:0x7f1b6389a159 [ 144.922126][ T4962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.941846][ T4962] RSP: 002b:00007f1b61af1fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 144.950279][ T4962] RAX: ffffffffffffffda RBX: 00007f1b63b21fa0 RCX: 00007f1b6389a159 [ 144.958259][ T4962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000600 [ 144.966235][ T4962] RBP: 00007f1b6393106b R08: 0000000000000000 R09: 0000000000000000 [ 144.974226][ T4962] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 144.982216][ T4962] R13: 00007f1b63b22038 R14: 00007f1b63b21fa0 R15: 00007ffded9f5708 [ 144.990210][ T4962] [ 145.562303][ T4993] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 145.816979][ T5001] XFS (loop0): Invalid device [./loop0], error=-16 [ 146.939241][ T5007] orangefs_mount: mount request failed with -4 [ 151.976938][ T5069] FAULT_INJECTION: forcing a failure. [ 151.976938][ T5069] name failslab, interval 1, probability 0, space 0, times 0 [ 152.026917][ T5069] CPU: 0 PID: 5069 Comm: syz.4.199 Not tainted syzkaller #0 [ 152.034294][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.044393][ T5069] Call Trace: [ 152.047710][ T5069] [ 152.050662][ T5069] dump_stack_lvl+0x188/0x250 [ 152.055478][ T5069] ? show_regs_print_info+0x20/0x20 [ 152.060797][ T5069] ? load_image+0x410/0x410 [ 152.065424][ T5069] ? __might_sleep+0xf0/0xf0 [ 152.070135][ T5069] ? __lock_acquire+0x7d40/0x7d40 [ 152.075186][ T5069] ? _find_next_bit+0x1f0/0x200 [ 152.080174][ T5069] should_fail+0x383/0x4b0 [ 152.084628][ T5069] should_failslab+0x5/0x20 [ 152.089169][ T5069] slab_pre_alloc_hook+0x51/0xc0 [ 152.094135][ T5069] __kmalloc_node+0x6d/0x3a0 [ 152.098773][ T5069] ? sbitmap_init_node+0x2a6/0x6b0 [ 152.103921][ T5069] sbitmap_init_node+0x2a6/0x6b0 [ 152.108904][ T5069] sbitmap_queue_init_node+0x3b/0xa60 [ 152.114393][ T5069] ? __raw_spin_lock_init+0x41/0x100 [ 152.119717][ T5069] blk_mq_init_tags+0x179/0x370 [ 152.124863][ T5069] blk_mq_alloc_rq_map+0x7f/0x1a0 [ 152.129928][ T5069] __blk_mq_alloc_map_and_request+0x8e/0x320 [ 152.136117][ T5069] blk_mq_alloc_map_and_requests+0xd0/0x4d0 [ 152.142052][ T5069] blk_mq_alloc_tag_set+0x794/0xf30 [ 152.147380][ T5069] loop_add+0x257/0x890 [ 152.151585][ T5069] loop_control_ioctl+0x124/0x550 [ 152.156740][ T5069] ? xor_init+0x60/0x60 [ 152.161025][ T5069] ? bpf_lsm_file_ioctl+0x5/0x10 [ 152.166079][ T5069] ? security_file_ioctl+0x7c/0xa0 [ 152.171220][ T5069] ? xor_init+0x60/0x60 [ 152.175610][ T5069] __se_sys_ioctl+0xfa/0x170 [ 152.180326][ T5069] do_syscall_64+0x4c/0xa0 [ 152.185056][ T5069] ? clear_bhb_loop+0x30/0x80 [ 152.189871][ T5069] ? clear_bhb_loop+0x30/0x80 [ 152.194628][ T5069] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.200645][ T5069] RIP: 0033:0x7f2dacb85159 [ 152.205096][ T5069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.224997][ T5069] RSP: 002b:00007f2daaddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.233463][ T5069] RAX: ffffffffffffffda RBX: 00007f2dace0cfa0 RCX: 00007f2dacb85159 [ 152.241473][ T5069] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 152.249485][ T5069] RBP: 00007f2dacc1c06b R08: 0000000000000000 R09: 0000000000000000 [ 152.257631][ T5069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.265781][ T5069] R13: 00007f2dace0d038 R14: 00007f2dace0cfa0 R15: 00007ffeb49a6cf8 [ 152.273892][ T5069] [ 152.335875][ T5069] blk-mq: reduced tag depth (128 -> 64) [ 152.439716][ T5084] binder: BINDER_SET_CONTEXT_MGR already set [ 152.446132][ T5084] binder: 5071:5084 ioctl 4018620d 200000001000 returned -16 [ 155.457685][ T5109] netlink: 'syz.5.209': attribute type 10 has an invalid length. [ 155.635399][ T5113] XFS (loop0): Invalid device [./loop0], error=-16 [ 157.129440][ T5122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.213'. [ 157.561362][ T4233] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 158.485209][ T5152] XFS (loop0): Invalid device [./loop0], error=-16 [ 158.561411][ T4233] usb 5-1: not running at top speed; connect to a high speed hub [ 158.684186][ T4233] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.719408][ T4233] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 158.738066][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.099921][ T4233] usb 5-1: Found UVC 1.00 device (046d:0825) [ 160.541887][ T5178] gadgetfs: bound to dummy_udc driver [ 160.641678][ T4233] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 160.703012][ T4233] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 161.071632][ T4233] usb 5-1: USB disconnect, device number 2 [ 164.409785][ T5204] XFS (loop0): Invalid device [./loop0], error=-16 [ 168.360167][ T5248] Zero length message leads to an empty skb [ 168.795779][ T5264] XFS (loop0): Invalid device [./loop0], error=-16 [ 170.207843][ T4256] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 170.475292][ T4256] usb 1-1: Using ep0 maxpacket: 16 [ 171.342051][ T4256] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 171.541605][ T4256] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 171.569853][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.594732][ T4256] usb 1-1: Product: syz [ 171.611335][ T4256] usb 1-1: Manufacturer: syz [ 171.616074][ T4256] usb 1-1: SerialNumber: syz [ 171.642811][ T4256] r8152-cfgselector 1-1: config 0 descriptor?? [ 172.051917][ T4256] r8152-cfgselector 1-1: Unknown version 0x0000 [ 172.830745][ T4256] r8152-cfgselector 1-1: Unknown version 0x0000 [ 172.840181][ T4256] r8152-cfgselector 1-1: bad CDC descriptors [ 172.878225][ T4256] r8152-cfgselector 1-1: Unknown version 0x0000 [ 172.888721][ T4256] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 173.201468][ T4227] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 173.221988][ T5321] XFS (loop0): Invalid device [./loop0], error=-16 [ 173.602012][ T4227] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.633340][ T4227] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 173.651576][ T4227] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.660937][ T4227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.687444][ T4227] usb 6-1: config 0 descriptor?? [ 173.716719][ T5326] ALSA: mixer_oss: invalid OSS volume 'Destination' [ 173.723675][ T5326] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 173.772166][ T4227] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 174.091980][ T5317] FAULT_INJECTION: forcing a failure. [ 174.091980][ T5317] name failslab, interval 1, probability 0, space 0, times 0 [ 174.114233][ T5317] CPU: 1 PID: 5317 Comm: syz.5.262 Not tainted syzkaller #0 [ 174.121613][ T5317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 174.131866][ T5317] Call Trace: [ 174.135168][ T5317] [ 174.138117][ T5317] dump_stack_lvl+0x188/0x250 [ 174.142913][ T5317] ? show_regs_print_info+0x20/0x20 [ 174.148159][ T5317] ? load_image+0x410/0x410 [ 174.152697][ T5317] ? __might_sleep+0xf0/0xf0 [ 174.157322][ T5317] ? __lock_acquire+0x7d40/0x7d40 [ 174.162560][ T5317] should_fail+0x383/0x4b0 [ 174.167017][ T5317] should_failslab+0x5/0x20 [ 174.171536][ T5317] slab_pre_alloc_hook+0x51/0xc0 [ 174.176502][ T5317] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 174.182243][ T5317] ? __get_vm_area_node+0x119/0x2d0 [ 174.187483][ T5317] __get_vm_area_node+0x119/0x2d0 [ 174.192547][ T5317] __vmalloc_node_range+0xef/0x8b0 [ 174.197695][ T5317] ? prealloc_elems_and_freelist+0x86/0x1c0 [ 174.203616][ T5317] ? mutex_unlock+0x10/0x10 [ 174.208158][ T5317] bpf_map_area_alloc+0xd4/0xe0 [ 174.213038][ T5317] ? prealloc_elems_and_freelist+0x86/0x1c0 [ 174.218971][ T5317] prealloc_elems_and_freelist+0x86/0x1c0 [ 174.224742][ T5317] stack_map_alloc+0x3b0/0x550 [ 174.229722][ T5317] map_create+0x481/0x2330 [ 174.234173][ T5317] ? bpf_lsm_bpf+0x5/0x10 [ 174.238538][ T5317] __sys_bpf+0x30a/0x6f0 [ 174.242806][ T5317] ? bpf_link_show_fdinfo+0x380/0x380 [ 174.248229][ T5317] __x64_sys_bpf+0x78/0x90 [ 174.252669][ T5317] do_syscall_64+0x4c/0xa0 [ 174.257105][ T5317] ? clear_bhb_loop+0x30/0x80 [ 174.261802][ T5317] ? clear_bhb_loop+0x30/0x80 [ 174.266532][ T5317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.272459][ T5317] RIP: 0033:0x7f1b6389a159 [ 174.276896][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.296525][ T5317] RSP: 002b:00007f1b61af2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.305001][ T5317] RAX: ffffffffffffffda RBX: 00007f1b63b21fa0 RCX: 00007f1b6389a159 [ 174.312985][ T5317] RDX: 0000000000000048 RSI: 00002000000005c0 RDI: 0000000000000000 [ 174.320966][ T5317] RBP: 00007f1b6393106b R08: 0000000000000000 R09: 0000000000000000 [ 174.328948][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.336943][ T5317] R13: 00007f1b63b22038 R14: 00007f1b63b21fa0 R15: 00007ffded9f5708 [ 174.345039][ T5317] [ 175.690921][ T5348] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 175.731388][ T5348] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.267'. [ 175.757056][ T5350] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 175.782768][ T5350] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.267'. [ 176.130452][ T4231] usb 6-1: USB disconnect, device number 2 [ 176.280516][ T5359] Mass Storage Function, version: 2009/09/11 [ 176.287074][ T5359] LUN: removable file: (no medium) [ 177.530138][ T5378] XFS (loop0): Invalid device [./loop0], error=-16 [ 180.663522][ T4233] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 181.111473][ T4233] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.241392][ T4491] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 181.889187][ T4233] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.900285][ T4233] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 181.910417][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.924243][ T4233] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 181.933397][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.642121][ T4491] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 182.711016][ T4491] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.886762][ T4491] usb 6-1: Product: syz [ 183.021468][ T4491] usb 6-1: Manufacturer: syz [ 183.055358][ T4491] usb 6-1: SerialNumber: syz [ 183.082230][ T4491] usb 6-1: config 0 descriptor?? [ 183.225084][ T4233] [drm] Initialized gud 1.0.0 20200422 for 3-1:1.0 on minor 2 [ 183.378030][ T4491] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 003 [ 183.651860][ T4233] gud 3-1:1.0: [drm] Cannot find any crtc or sizes [ 183.944622][ T4233] usb 3-1: USB disconnect, device number 2 [ 184.783544][ T5487] fuse: Bad value for 'fd' [ 184.942341][ T5477] i2c i2c-1: failure reading status [ 184.957299][ T5487] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 185.394780][ T4256] usb 6-1: USB disconnect, device number 3 [ 185.881458][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 186.121468][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 187.051455][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.130141][ T7] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 187.139645][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.212098][ T5516] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 187.412120][ T7] usb 1-1: config 0 descriptor?? [ 188.463600][ T7] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 188.521681][ T7] usb 1-1: USB disconnect, device number 6 [ 191.602831][ T4491] Bluetooth: hci3: command 0x0406 tx timeout [ 192.450804][ T4491] Bluetooth: hci2: command 0x0406 tx timeout [ 192.496716][ T4491] Bluetooth: hci0: command 0x0406 tx timeout [ 192.620624][ T4491] Bluetooth: hci4: command 0x0406 tx timeout [ 193.565996][ T5573] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 193.966189][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 194.475136][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.481673][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.952721][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 195.418411][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.309992][ T21] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 196.381058][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.150367][ T21] usb 2-1: config 0 descriptor?? [ 198.541457][ T21] usb 2-1: can't set config #0, error -71 [ 198.576539][ T21] usb 2-1: USB disconnect, device number 3 [ 200.706607][ T5637] block nbd4: NBD_DISCONNECT [ 203.823449][ T5649] fuse: Bad value for 'fd' [ 203.844516][ T5649] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 205.312318][ T4491] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 206.391347][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 206.472072][ T5681] netlink: 'syz.1.346': attribute type 10 has an invalid length. [ 206.663869][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 206.971606][ T21] usb 5-1: device descriptor read/all, error -71 [ 206.991582][ T4491] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 207.000309][ T4491] usb 3-1: can't read configurations, error -71 [ 210.506700][ T5723] comedi comedi2: comedi_config --init_data is deprecated [ 212.050642][ T5736] zram0: detected capacity change from 0 to 65536 [ 214.024118][ T5749] overlayfs: failed to resolve './file0': -2 [ 218.854216][ T5788] zram: Cannot change disksize for initialized device [ 220.174707][ T5782] orangefs_mount: mount request failed with -4 [ 220.701654][ T5801] overlayfs: failed to resolve './file0': -2 [ 225.930893][ T5836] zram: Cannot change disksize for initialized device [ 226.745742][ T5839] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 227.084058][ T5848] overlayfs: failed to resolve './file0': -2 [ 228.012601][ T5847] orangefs_mount: mount request failed with -4 [ 228.345685][ T5872] XFS (loop0): Invalid device [./loop0], error=-16 [ 231.215254][ T5890] zram: Cannot change disksize for initialized device [ 232.659036][ T4231] Bluetooth: hci5: command 0x0406 tx timeout [ 233.391379][ T5907] fuse: Bad value for 'fd' [ 233.661445][ T4227] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 233.938785][ T4227] usb 1-1: Using ep0 maxpacket: 8 [ 234.072172][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.092761][ T5919] XFS (loop0): Invalid device [./loop0], error=-16 [ 234.195982][ T4227] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 234.383222][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.612882][ T4227] usb 1-1: config 0 descriptor?? [ 234.711807][ T4229] Bluetooth: hci0: command 0x0401 tx timeout [ 234.907147][ T4227] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 236.133813][ T5937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.412'. [ 236.903210][ T4227] usb 1-1: USB disconnect, device number 7 [ 237.516103][ T5945] zram: Cannot change disksize for initialized device [ 238.285903][ T5951] overlayfs: failed to resolve './file1': -2 [ 240.840837][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'. [ 240.988427][ T5970] bridge1: port 1(veth0_to_bond) entered blocking state [ 241.010062][ T5970] bridge1: port 1(veth0_to_bond) entered disabled state [ 241.878658][ T5970] device veth0_to_bond entered promiscuous mode [ 242.049179][ T5984] fuse: Bad value for 'fd' [ 242.146147][ T5987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.426'. [ 242.321509][ T4227] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 242.458997][ T5994] zram: Cannot change disksize for initialized device [ 242.584648][ T5996] overlayfs: failed to resolve './file1': -2 [ 244.431689][ T4227] usb 6-1: Using ep0 maxpacket: 8 [ 244.571679][ T4227] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.611480][ T4227] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 244.651478][ T4227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.699863][ T4227] usb 6-1: config 0 descriptor?? [ 245.446199][ T4227] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 245.556775][ T6011] overlayfs: missing 'workdir' [ 245.587490][ T4227] usb 6-1: USB disconnect, device number 4 [ 248.311625][ T4229] Bluetooth: hci0: command 0x0401 tx timeout [ 248.729688][ T6029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.440'. [ 249.253732][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'. [ 250.831722][ T6036] zram: Cannot change disksize for initialized device [ 251.437214][ T6046] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 251.442163][ T6044] FAULT_INJECTION: forcing a failure. [ 251.442163][ T6044] name failslab, interval 1, probability 0, space 0, times 0 [ 251.492551][ T6044] CPU: 0 PID: 6044 Comm: syz.5.446 Not tainted syzkaller #0 [ 251.499917][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 251.510010][ T6044] Call Trace: [ 251.513332][ T6044] [ 251.516330][ T6044] dump_stack_lvl+0x188/0x250 [ 251.521128][ T6044] ? show_regs_print_info+0x20/0x20 [ 251.526467][ T6044] ? load_image+0x410/0x410 [ 251.531039][ T6044] ? __might_sleep+0xf0/0xf0 [ 251.535662][ T6044] ? __lock_acquire+0x7d40/0x7d40 [ 251.540734][ T6044] should_fail+0x383/0x4b0 [ 251.545282][ T6044] should_failslab+0x5/0x20 [ 251.549820][ T6044] slab_pre_alloc_hook+0x51/0xc0 [ 251.555266][ T6044] kmem_cache_alloc_trace+0x47/0x290 [ 251.560722][ T6044] ? nfs_alloc_client+0x50/0x660 [ 251.565775][ T6044] nfs_alloc_client+0x50/0x660 [ 251.570600][ T6044] nfs4_alloc_client+0xd0/0xa00 [ 251.575485][ T6044] ? nfs40_shutdown_client+0x80/0x80 [ 251.580982][ T6044] ? rcu_lock_release+0x5/0x20 [ 251.585775][ T6044] ? nfs_get_client+0x9db/0xd80 [ 251.590649][ T6044] ? __lock_acquire+0x7d40/0x7d40 [ 251.595793][ T6044] ? do_raw_spin_lock+0x128/0x2f0 [ 251.600855][ T6044] ? do_raw_spin_unlock+0x11d/0x230 [ 251.606093][ T6044] nfs_get_client+0x9f4/0xd80 [ 251.610811][ T6044] ? __debug_object_init+0x253/0xc80 [ 251.616133][ T6044] nfs4_set_client+0x364/0x4e0 [ 251.620934][ T6044] ? nfs4_create_referral_server+0x5b0/0x5b0 [ 251.627045][ T6044] nfs4_create_server+0x4c0/0xe50 [ 251.632134][ T6044] ? nfs4_set_ds_client+0x490/0x490 [ 251.636812][ T6051] fuse: Bad value for 'fd' [ 251.637408][ T6044] ? get_nfs_version+0x1e7/0x200 [ 251.646980][ T6044] ? nfs_get_tree+0x10ae/0x1510 [ 251.651883][ T6044] nfs4_try_get_tree+0x45/0x110 [ 251.656764][ T6044] vfs_get_tree+0x88/0x270 [ 251.661193][ T6044] do_new_mount+0x247/0xa40 [ 251.665725][ T6044] __se_sys_mount+0x2e3/0x3d0 [ 251.670413][ T6044] ? __x64_sys_mount+0xc0/0xc0 [ 251.675173][ T6044] ? lockdep_hardirqs_on+0x94/0x140 [ 251.680383][ T6044] ? __x64_sys_mount+0x1c/0xc0 [ 251.685246][ T6044] do_syscall_64+0x4c/0xa0 [ 251.689817][ T6044] ? clear_bhb_loop+0x30/0x80 [ 251.694511][ T6044] ? clear_bhb_loop+0x30/0x80 [ 251.699389][ T6044] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.705386][ T6044] RIP: 0033:0x7f1b6389a159 [ 251.709829][ T6044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.730254][ T6044] RSP: 002b:00007f1b61af2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 251.738967][ T6044] RAX: ffffffffffffffda RBX: 00007f1b63b21fa0 RCX: 00007f1b6389a159 [ 251.747051][ T6044] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 251.755311][ T6044] RBP: 00007f1b6393106b R08: 0000200000000140 R09: 0000000000000000 [ 251.763293][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.771347][ T6044] R13: 00007f1b63b22038 R14: 00007f1b63b21fa0 R15: 00007ffded9f5708 [ 251.779521][ T6044] [ 254.778911][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 255.148861][ T6076] zram: Cannot change disksize for initialized device [ 255.913347][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.920005][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.031238][ T6080] binder: BINDER_SET_CONTEXT_MGR already set [ 256.037615][ T6080] binder: 6071:6080 ioctl 4018620d 200000001000 returned -16 [ 258.272682][ T6102] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 259.638505][ T6120] xt_TPROXY: Can be used only with -p tcp or -p udp [ 259.703973][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 259.807232][ T6125] syz.4.472 uses obsolete (PF_INET,SOCK_PACKET) [ 259.943739][ T4227] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 260.106899][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'. [ 261.551784][ T4227] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.592665][ T4227] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 261.606610][ T4227] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 261.638303][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.672064][ T4227] usb 1-1: config 0 descriptor?? [ 261.733113][ T4227] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 261.751839][ T4227] dvb-usb: bulk message failed: -22 (3/0) [ 261.791764][ T4227] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 261.831814][ T4227] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 261.855867][ T4227] usb 1-1: media controller created [ 261.882289][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.108774][ T4227] dvb-usb: bulk message failed: -22 (6/0) [ 262.128033][ T4227] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 262.207672][ T4227] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 262.280758][ T4227] dvb-usb: schedule remote query interval to 150 msecs. [ 262.319849][ T4227] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 262.335055][ T4227] usb 1-1: USB disconnect, device number 8 [ 262.434219][ T4227] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 263.126346][ T6148] FAULT_INJECTION: forcing a failure. [ 263.126346][ T6148] name failslab, interval 1, probability 0, space 0, times 0 [ 263.365389][ T6148] CPU: 1 PID: 6148 Comm: syz.2.479 Not tainted syzkaller #0 [ 263.372770][ T6148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 263.382945][ T6148] Call Trace: [ 263.386341][ T6148] [ 263.389293][ T6148] dump_stack_lvl+0x188/0x250 [ 263.394325][ T6148] ? show_regs_print_info+0x20/0x20 [ 263.399549][ T6148] ? load_image+0x410/0x410 [ 263.404080][ T6148] ? __lock_acquire+0x7d40/0x7d40 [ 263.409324][ T6148] ? rcu_lock_release+0x5/0x20 [ 263.414305][ T6148] should_fail+0x383/0x4b0 [ 263.418925][ T6148] should_failslab+0x5/0x20 [ 263.423710][ T6148] slab_pre_alloc_hook+0x51/0xc0 [ 263.428680][ T6148] kmem_cache_alloc_trace+0x47/0x290 [ 263.434015][ T6148] ? ipt_init_net+0x61/0x190 [ 263.438625][ T6148] ipt_init_net+0x61/0x190 [ 263.443421][ T6148] ops_init+0x360/0x5f0 [ 263.447634][ T6148] setup_net+0x39e/0xa10 [ 263.451961][ T6148] ? copy_net_ns+0x5b0/0x5b0 [ 263.456741][ T6148] ? copy_net_ns+0x324/0x5b0 [ 263.461352][ T6148] ? down_read_killable+0x1ce/0x340 [ 263.466562][ T6148] copy_net_ns+0x33e/0x5b0 [ 263.470997][ T6148] create_new_namespaces+0x3ce/0x700 [ 263.476505][ T6148] unshare_nsproxy_namespaces+0x116/0x160 [ 263.482356][ T6148] ksys_unshare+0x4f6/0x8e0 [ 263.486877][ T6148] ? __lock_acquire+0x7d40/0x7d40 [ 263.492088][ T6148] ? sighand_ctor+0x40/0x40 [ 263.496744][ T6148] ? lock_chain_count+0x20/0x20 [ 263.501718][ T6148] ? syscall_enter_from_user_mode+0x21/0x70 [ 263.507712][ T6148] __x64_sys_unshare+0x34/0x40 [ 263.512761][ T6148] do_syscall_64+0x4c/0xa0 [ 263.517185][ T6148] ? clear_bhb_loop+0x30/0x80 [ 263.521871][ T6148] ? clear_bhb_loop+0x30/0x80 [ 263.526585][ T6148] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.532873][ T6148] RIP: 0033:0x7f226dbed159 [ 263.537315][ T6148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.557438][ T6148] RSP: 002b:00007f226be45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 263.566421][ T6148] RAX: ffffffffffffffda RBX: 00007f226de74fa0 RCX: 00007f226dbed159 [ 263.574531][ T6148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 263.582599][ T6148] RBP: 00007f226dc8406b R08: 0000000000000000 R09: 0000000000000000 [ 263.590982][ T6148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.599363][ T6148] R13: 00007f226de75038 R14: 00007f226de74fa0 R15: 00007ffc9fe801c8 [ 263.607438][ T6148] [ 263.821962][ T6157] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 264.041362][ T4227] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 264.291469][ T4227] usb 6-1: Using ep0 maxpacket: 32 [ 264.430205][ T4227] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.449221][ T4227] usb 6-1: config 0 has no interface number 0 [ 264.621644][ T4227] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 264.644491][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.670685][ T4227] usb 6-1: Product: syz [ 264.687576][ T4227] usb 6-1: Manufacturer: syz [ 264.705533][ T4227] usb 6-1: SerialNumber: syz [ 264.735476][ T4227] usb 6-1: config 0 descriptor?? [ 264.782690][ T4227] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 264.811314][ T4227] usb 6-1: selecting invalid altsetting 1 [ 264.827510][ T4227] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 264.864624][ T4227] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 264.889521][ T4227] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 264.918651][ T4227] usb 6-1: media controller created [ 264.956532][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.038616][ T6175] fuse: Bad value for 'fd' [ 265.049560][ T6177] xt_TPROXY: Can be used only with -p tcp or -p udp [ 265.064858][ T6175] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 265.331352][ T4230] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 265.859932][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.081394][ T4227] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 266.482536][ T6180] orangefs_mount: mount request failed with -4 [ 266.485568][ T4227] zl10353_read_register: readreg error (reg=127, ret==-110) [ 266.496673][ T4230] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 266.506190][ T4230] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 266.516424][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.529944][ T6155] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 266.554638][ T4230] usb 1-1: config 0 descriptor?? [ 266.599756][ T4230] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 266.678563][ T4230] dvb-usb: bulk message failed: -22 (3/0) [ 266.686206][ T4227] usb 6-1: USB disconnect, device number 5 [ 266.725665][ T4230] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 266.761688][ T4230] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 266.771132][ T4230] usb 1-1: media controller created [ 266.798141][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.834639][ T4230] dvb-usb: bulk message failed: -22 (6/0) [ 266.850940][ T4230] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 266.893536][ T4230] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 266.926649][ T4230] dvb-usb: schedule remote query interval to 150 msecs. [ 266.938520][ T4230] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 266.955375][ T6191] FAULT_INJECTION: forcing a failure. [ 266.955375][ T6191] name failslab, interval 1, probability 0, space 0, times 0 [ 266.963168][ T4230] usb 1-1: USB disconnect, device number 9 [ 266.971297][ T6191] CPU: 0 PID: 6191 Comm: syz.1.493 Not tainted syzkaller #0 [ 266.981980][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 266.992151][ T6191] Call Trace: [ 266.995455][ T6191] [ 266.998411][ T6191] dump_stack_lvl+0x188/0x250 [ 267.003122][ T6191] ? show_regs_print_info+0x20/0x20 [ 267.008359][ T6191] ? load_image+0x410/0x410 [ 267.012895][ T6191] ? __might_sleep+0xf0/0xf0 [ 267.017512][ T6191] ? __lock_acquire+0x7d40/0x7d40 [ 267.022649][ T6191] ? __debug_object_init+0x253/0xc80 [ 267.027962][ T6191] should_fail+0x383/0x4b0 [ 267.032424][ T6191] should_failslab+0x5/0x20 [ 267.036950][ T6191] slab_pre_alloc_hook+0x51/0xc0 [ 267.041924][ T6191] kmem_cache_alloc_trace+0x47/0x290 [ 267.047227][ T6191] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 267.053319][ T6191] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 267.059059][ T6191] ? sctp_stream_interleave_init+0x54/0x90 [ 267.064946][ T6191] sctp_association_new+0x15d4/0x2400 [ 267.070392][ T6191] sctp_connect_new_asoc+0x2da/0x6a0 [ 267.075883][ T6191] ? __sctp_connect+0xd80/0xd80 [ 267.080759][ T6191] ? __local_bh_enable_ip+0x136/0x1c0 [ 267.086160][ T6191] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 267.091733][ T6191] ? security_sctp_bind_connect+0x85/0xb0 [ 267.097482][ T6191] sctp_sendmsg+0x15e1/0x2940 [ 267.102296][ T6191] ? sctp_getsockopt+0x8a0/0x8a0 [ 267.107343][ T6191] ? aa_af_perm+0x340/0x340 [ 267.111878][ T6191] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 267.118318][ T6191] ? aa_sock_msg_perm+0x94/0x150 [ 267.123276][ T6191] ? sock_rps_record_flow+0x17/0x3b0 [ 267.128943][ T6191] ? inet_sendmsg+0xca/0x2a0 [ 267.133568][ T6191] __sys_sendto+0x46d/0x620 [ 267.138099][ T6191] ? __ia32_sys_getpeername+0x80/0x80 [ 267.143525][ T6191] ? lock_chain_count+0x20/0x20 [ 267.148407][ T6191] __x64_sys_sendto+0xda/0xf0 [ 267.153110][ T6191] do_syscall_64+0x4c/0xa0 [ 267.157547][ T6191] ? clear_bhb_loop+0x30/0x80 [ 267.162251][ T6191] ? clear_bhb_loop+0x30/0x80 [ 267.166948][ T6191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.172871][ T6191] RIP: 0033:0x7f8b8f22c159 [ 267.177646][ T6191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.197378][ T6191] RSP: 002b:00007f8b8d484028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 267.205932][ T6191] RAX: ffffffffffffffda RBX: 00007f8b8f4b3fa0 RCX: 00007f8b8f22c159 [ 267.214011][ T6191] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003 [ 267.222004][ T6191] RBP: 00007f8b8f2c306b R08: 0000200000000000 R09: 000000000000001c [ 267.230084][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.238164][ T6191] R13: 00007f8b8f4b4038 R14: 00007f8b8f4b3fa0 R15: 00007fffd7134018 [ 267.246377][ T6191] [ 267.367148][ T4230] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 268.173925][ T6200] zram: Cannot change disksize for initialized device [ 269.528917][ T6202] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 269.568901][ T6201] [ 269.571265][ T6201] ====================================================== [ 269.578318][ T6201] WARNING: possible circular locking dependency detected [ 269.585345][ T6201] syzkaller #0 Not tainted [ 269.589769][ T6201] ------------------------------------------------------ [ 269.596870][ T6201] syz.5.498/6201 is trying to acquire lock: [ 269.602766][ T6201] ffff888073f11f98 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 269.614154][ T6201] [ 269.614154][ T6201] but task is already holding lock: [ 269.621510][ T6201] ffff888073f10120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 269.630548][ T6201] [ 269.630548][ T6201] which lock already depends on the new lock. [ 269.630548][ T6201] [ 269.640940][ T6201] [ 269.640940][ T6201] the existing dependency chain (in reverse order) is: [ 269.649946][ T6201] [ 269.649946][ T6201] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 269.657669][ T6201] lock_sock_nested+0x44/0x100 [ 269.662963][ T6201] smc_listen_out+0xd4/0x3c0 [ 269.668090][ T6201] smc_listen_work+0x52a/0xd10 [ 269.673371][ T6201] process_one_work+0x867/0xff0 [ 269.678742][ T6201] worker_thread+0xad7/0x12a0 [ 269.684048][ T6201] kthread+0x42e/0x520 [ 269.688785][ T6201] ret_from_fork+0x1f/0x30 [ 269.693833][ T6201] [ 269.693833][ T6201] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 269.704308][ T6201] __lock_acquire+0x38f7/0x7d40 [ 269.709722][ T6201] lock_acquire+0x19f/0x400 [ 269.715048][ T6201] __flush_work+0x116/0x210 [ 269.720159][ T6201] __cancel_work_timer+0x3f4/0x560 [ 269.726013][ T6201] smc_clcsock_release+0x5c/0xe0 [ 269.731482][ T6201] __smc_release+0x644/0x7b0 [ 269.736624][ T6201] smc_close_non_accepted+0xd1/0x1f0 [ 269.742558][ T6201] smc_close_active+0xae2/0xea0 [ 269.748078][ T6201] __smc_release+0x9c/0x7b0 [ 269.753408][ T6201] smc_release+0x2c1/0x520 [ 269.758360][ T6201] sock_close+0xbf/0x210 [ 269.763250][ T6201] __fput+0x212/0x8c0 [ 269.768043][ T6201] task_work_run+0x125/0x1a0 [ 269.773661][ T6201] exit_to_user_mode_loop+0x10f/0x130 [ 269.779649][ T6201] exit_to_user_mode_prepare+0xee/0x180 [ 269.785732][ T6201] syscall_exit_to_user_mode+0x16/0x40 [ 269.791801][ T6201] do_syscall_64+0x58/0xa0 [ 269.796751][ T6201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.803177][ T6201] [ 269.803177][ T6201] other info that might help us debug this: [ 269.803177][ T6201] [ 269.813395][ T6201] Possible unsafe locking scenario: [ 269.813395][ T6201] [ 269.820847][ T6201] CPU0 CPU1 [ 269.826290][ T6201] ---- ---- [ 269.831742][ T6201] lock(sk_lock-AF_SMC/1); [ 269.836252][ T6201] lock((work_completion)(&new_smc->smc_listen_work)); [ 269.845717][ T6201] lock(sk_lock-AF_SMC/1); [ 269.852759][ T6201] lock((work_completion)(&new_smc->smc_listen_work)); [ 269.860055][ T6201] [ 269.860055][ T6201] *** DEADLOCK *** [ 269.860055][ T6201] [ 269.868194][ T6201] 2 locks held by syz.5.498/6201: [ 269.873230][ T6201] #0: ffff8880744ca010 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 269.883412][ T6201] #1: ffff888073f10120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 269.893066][ T6201] [ 269.893066][ T6201] stack backtrace: [ 269.898953][ T6201] CPU: 1 PID: 6201 Comm: syz.5.498 Not tainted syzkaller #0 [ 269.906248][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 269.916575][ T6201] Call Trace: [ 269.919882][ T6201] [ 269.922933][ T6201] dump_stack_lvl+0x188/0x250 [ 269.926707][ T6206] fuse: Bad value for 'fd' [ 269.927647][ T6201] ? load_image+0x410/0x410 [ 269.936771][ T6201] ? show_regs_print_info+0x20/0x20 [ 269.942007][ T6201] ? print_circular_bug+0x12b/0x1a0 [ 269.947242][ T6201] check_noncircular+0x2f8/0x400 [ 269.952295][ T6201] ? deref_stack_reg+0xd0/0x120 [ 269.957214][ T6201] ? look_up_lock_class+0x71/0x110 [ 269.962364][ T6201] ? print_deadlock_bug+0x5d0/0x5d0 [ 269.967676][ T6201] ? lockdep_lock+0xf1/0x1f0 [ 269.972301][ T6201] ? lock_release+0xb5/0x8a0 [ 269.976932][ T6201] ? mark_lock+0x94/0x320 [ 269.981285][ T6201] ? _find_first_zero_bit+0xd1/0xf0 [ 269.986694][ T6201] __lock_acquire+0x38f7/0x7d40 [ 269.991670][ T6201] ? deref_stack_reg+0xd0/0x120 [ 269.996577][ T6201] ? verify_lock_unused+0x140/0x140 [ 270.001924][ T6201] ? mark_lock+0x94/0x320 [ 270.006289][ T6201] ? __lock_acquire+0x13b3/0x7d40 [ 270.011346][ T6201] ? lockdep_lock+0xf1/0x1f0 [ 270.015975][ T6201] lock_acquire+0x19f/0x400 [ 270.020510][ T6201] ? __flush_work+0xfa/0x210 [ 270.025397][ T6201] ? read_lock_is_recursive+0x10/0x10 [ 270.030899][ T6201] __flush_work+0x116/0x210 [ 270.035440][ T6201] ? __flush_work+0xfa/0x210 [ 270.040079][ T6201] ? flush_work+0x20/0x20 [ 270.044522][ T6201] ? try_to_grab_pending+0xfb/0x820 [ 270.050020][ T6201] ? mark_lock+0x94/0x320 [ 270.054379][ T6201] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 270.060518][ T6201] ? lock_chain_count+0x20/0x20 [ 270.065501][ T6201] ? mark_lock+0x94/0x320 [ 270.069874][ T6201] ? __cancel_work_timer+0x36a/0x560 [ 270.075190][ T6201] __cancel_work_timer+0x3f4/0x560 [ 270.080335][ T6201] ? cancel_work_sync+0x20/0x20 [ 270.085238][ T6201] ? __local_bh_enable_ip+0x136/0x1c0 [ 270.090723][ T6201] ? lockdep_hardirqs_on+0x94/0x140 [ 270.095951][ T6201] ? __local_bh_enable_ip+0x136/0x1c0 [ 270.101345][ T6201] ? _local_bh_enable+0xa0/0xa0 [ 270.106880][ T6201] smc_clcsock_release+0x5c/0xe0 [ 270.111965][ T6201] __smc_release+0x644/0x7b0 [ 270.116607][ T6201] smc_close_non_accepted+0xd1/0x1f0 [ 270.121946][ T6201] smc_close_active+0xae2/0xea0 [ 270.126836][ T6201] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 270.132698][ T6201] __smc_release+0x9c/0x7b0 [ 270.137263][ T6201] smc_release+0x2c1/0x520 [ 270.141732][ T6201] sock_close+0xbf/0x210 [ 270.146013][ T6201] ? sock_mmap+0x90/0x90 [ 270.150285][ T6201] __fput+0x212/0x8c0 [ 270.154302][ T6201] task_work_run+0x125/0x1a0 [ 270.158932][ T6201] exit_to_user_mode_loop+0x10f/0x130 [ 270.164428][ T6201] exit_to_user_mode_prepare+0xee/0x180 [ 270.170236][ T6201] syscall_exit_to_user_mode+0x16/0x40 [ 270.175742][ T6201] do_syscall_64+0x58/0xa0 [ 270.180299][ T6201] ? clear_bhb_loop+0x30/0x80 [ 270.185012][ T6201] ? clear_bhb_loop+0x30/0x80 [ 270.189726][ T6201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.195834][ T6201] RIP: 0033:0x7f1b6389a159 [ 270.200281][ T6201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.220010][ T6201] RSP: 002b:00007ffded9f5868 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 270.228631][ T6201] RAX: 0000000000000000 RBX: 00007ffded9f5950 RCX: 00007f1b6389a159 [ 270.236640][ T6201] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 270.244740][ T6201] RBP: 0000000000041c9c R08: 0000000000000001 R09: 0000000000000000 [ 270.252932][ T6201] R10: 0000001b2e820000 R11: 0000000000000246 R12: 00007ffded9f5990 [ 270.260953][ T6201] R13: 00007f1b63b21fac R14: 0000000000041cd7 R15: 00007f1b63b21fa0 [ 270.269252][ T6201]