last executing test programs: 8m47.859691625s ago: executing program 3 (id=2580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000240)=""/133, 0x85, 0x4640) 8m46.652271924s ago: executing program 3 (id=2582): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001140)=[{0x0}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{0x0}], 0x1}}], 0x3, 0x48000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000840)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0xd5}, 0x90) 8m45.165352711s ago: executing program 3 (id=2587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x10448) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000240)=""/133, 0x85, 0x4640) 8m43.655238527s ago: executing program 3 (id=2590): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000000280)=""/25, 0x19) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r4, 0x0) mlockall(0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000008, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xf46bd000) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, 0x0) 8m42.3287668s ago: executing program 3 (id=2595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x2, 0x0, &(0x7f0000000700)="c45c", 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_vif\x00') read$FUSE(r4, 0x0, 0x0) preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000000)=""/150, 0x96}], 0x1, 0xfffffffe, 0x92000000) read$FUSE(r4, &(0x7f00000037c0)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x30}}, 0x0) 8m40.897364455s ago: executing program 3 (id=2598): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/mdstat\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) read(r0, &(0x7f0000000280)=""/25, 0x19) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r6, 0x0) mlockall(0x2) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, 0x0) openat2(r0, &(0x7f00000000c0)='./cgroup/../file0\x00', &(0x7f0000000100)={0x2000, 0xc88f7bfa456ed010, 0x1}, 0x18) openat$cgroup_pressure(r5, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) 8m25.218555767s ago: executing program 32 (id=2598): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/mdstat\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) read(r0, &(0x7f0000000280)=""/25, 0x19) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r6, 0x0) mlockall(0x2) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, 0x0) openat2(r0, &(0x7f00000000c0)='./cgroup/../file0\x00', &(0x7f0000000100)={0x2000, 0xc88f7bfa456ed010, 0x1}, 0x18) openat$cgroup_pressure(r5, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) 7m29.157771023s ago: executing program 5 (id=2756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000240)=""/133, 0x85, 0x4640) 7m28.192669437s ago: executing program 5 (id=2758): setitimer(0x2, 0x0, 0x0) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) syz_clone(0xdca86080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flock(0xffffffffffffffff, 0x2) mknodat$null(0xffffffffffffffff, 0x0, 0xc000, 0x103) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/473, @ANYRES32=0x0], 0xfd, 0x5524, &(0x7f000000af80)="$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") 7m24.741654741s ago: executing program 5 (id=2765): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001840), 0xa0000, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001880)="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") r1 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007000000000000", @ANYRES32], 0x48) syz_emit_vhci(0x0, 0x14) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x40) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fcntl$notify(r1, 0x402, 0x3f) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) 7m20.24706488s ago: executing program 5 (id=2777): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3}, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) syz_open_pts(r4, 0x80) r5 = dup3(r0, r4, 0x80000) read$watch_queue(r5, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000036005d082bfd700403"], 0x20}, 0x1, 0x0, 0x0, 0x48854}, 0x24000080) 7m18.391693215s ago: executing program 5 (id=2780): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 7m14.12375401s ago: executing program 5 (id=2790): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 6m58.268049066s ago: executing program 33 (id=2790): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 9.056114565s ago: executing program 1 (id=3991): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000b80)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.977619096s ago: executing program 1 (id=3993): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x3c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x1a, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb88482c00001c00003b00"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x3c}}, 0x0) 8.86392604s ago: executing program 1 (id=3995): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000004a40), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000004a80)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004b80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004c00)={&(0x7f0000004c40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000004c80)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000004d00)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000004d80)={&(0x7f0000004dc0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfe, {0x0, 0x0, 0x0, r5, {0xffe0}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dd}, 0x4000080) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000004e00)={0x1, &(0x7f0000004e40)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 4.124089012s ago: executing program 6 (id=4059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f00000000c0)=0x0) r2 = eventfd2(0x3, 0x80000) io_pgetevents(r1, 0x2, 0x2, &(0x7f00000001c0)=[{}, {}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000340)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) io_destroy(r1) 3.948188166s ago: executing program 6 (id=4067): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0xffffffff, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x1, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x7, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.892133057s ago: executing program 0 (id=4068): ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @mcast2, 0x10}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="02", 0x1}], 0x1}}], 0x1, 0x1c010) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000a40)}) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x9048ef, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='usb', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./config\x00', &(0x7f0000000740)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000000c80)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000dc0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000e40)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000e80)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000ec0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) symlinkat(&(0x7f0000000fc0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000001140)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 3.892005408s ago: executing program 2 (id=4069): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.854174718s ago: executing program 0 (id=4070): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x7fffffff}}]}}]}, 0x48}}, 0x20040084) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x3004c8b9}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x4, {0x0, 0x0, 0x74, r12, {0xeffe068f8514295, 0x6}, {0xafabc05531515610, 0x2}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) 3.746029661s ago: executing program 2 (id=4071): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000300)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0) 3.648221853s ago: executing program 2 (id=4072): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001200), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001240)=0xd) r1 = open(&(0x7f0000001380)='./bus\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201002) 3.024167828s ago: executing program 4 (id=4075): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000880)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000008c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000900)={0x8, 0x0, &(0x7f0000000940)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000980)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000009c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a00)={0x8, 0x0, &(0x7f0000000a40)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a80)={0x4c, 0x0, &(0x7f0000000ac0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b40)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000cc0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.984754379s ago: executing program 0 (id=4076): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0x61, 0x80000000, 0xb, 0x5, 0x5a4}) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 2.9265627s ago: executing program 2 (id=4077): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000080)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x5, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2.872259371s ago: executing program 0 (id=4078): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000840000004000000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x1003, r0}, 0x38) 2.860621042s ago: executing program 4 (id=4079): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, 0x0) 2.830856132s ago: executing program 6 (id=4080): syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pselect6(0x40, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x25f44c0c, 0x6}, 0x0, 0x0, 0x0, 0x0) 2.776205984s ago: executing program 4 (id=4081): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) 2.776021634s ago: executing program 6 (id=4082): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002", 0x5) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x200, 0xfc000004, 0x7, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x2, 0x401, 0x1, 0x405, 0x0, 0x880, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x2000007, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x8, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0xac12, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x48e, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd2, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x4, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfe, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x1, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(0x0, &(0x7f00000003c0)={0x5, 0x5, 0x80, 0x1, 0x1, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f00000001c0)=0x5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xef, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.695675276s ago: executing program 0 (id=4083): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@setneightbl={0x34, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_PARMS={0x10, 0x6, 0x0, 0x1, [@NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x881}, 0x0) 2.586805538s ago: executing program 0 (id=4084): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, 0x0) syz_emit_vhci(&(0x7f0000003a00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0xf8d6}}]}}, 0xf) 2.362390833s ago: executing program 2 (id=4085): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x410, 0x240, 0x240, 0x240, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@private=0xa010102, @multicast2, 0xff000000, 0xffffffff, 0x7, 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb946432a1341d4c0}, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x8, 0x8, 0x9695, 0x0, 0x6, 0x4, 'bond_slave_1\x00', 'dvmrp1\x00', {0xff}, {}, 0x0, 0x19f}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast2, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xb8, 0x6, 0x0, 0x1, 0x0, "51059173bfd53824a126296d5a3d621d7c0ceaeb6d466c351d827490ee20197e1b8c79397f17a734aae4060e168bc4257a86f9dc10a0c9722a559db2b9ffd970"}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) 2.232144857s ago: executing program 2 (id=4086): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040440647800001db80d36609021c0001010080fa0904030000010100000a240100010a0002"], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x3, 0x0) ioctl(r3, 0xc4c85512, &(0x7f0000000180)) 2.232021427s ago: executing program 1 (id=3998): r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000200)={0x1, r0}) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@wrmsr={0x65, 0x20, {0x40000000, 0x10000}}, @code={0xa, 0x25, {"48c7c15d00010048c7c2010000000f01c10f01d9"}}], 0x45}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.11269561s ago: executing program 1 (id=4087): mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001200)='./config\x00', &(0x7f0000001240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r1, &(0x7f00000013c0)='1', 0x1) write$UHID_INPUT(r1, &(0x7f0000005100)={0xf, {"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", 0x1000}}, 0x1006) 1.970983463s ago: executing program 1 (id=4089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff1}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0xfffffffb, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x2, 0x140, 0x9cd0, 0x78e, 0x4000009, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x6, 0xfff, 0x26, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0xfffffffe, 0x800, 0x7, 0xffffffff, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000003, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0xf56e, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x4, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0x8000, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffe, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x4, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x2, 0x3fed, 0x2, 0x1, 0x2, 0x8, 0xffffffff, 0x7, 0x240, 0x4, 0x5, 0x2, 0xfffffffb, 0x1, 0x800, 0x7ffffffb, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0xfe, 0x6, 0x7, 0x7, 0x22c, 0x6, 0x3, 0x8, 0x9, 0xfffffffc, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e2, 0x2, 0x2, 0x5, 0x8, 0x1, 0x8, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x400001, 0x4, 0x7, 0x9, 0x9, 0x0, 0x7, 0x2, 0x4000004, 0x20000, 0x2, 0x80000000, 0x10000, 0xe, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0x0, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0x5, 0x7f, 0xe, 0x1, 0x3, 0xfff, 0x5, 0x7, 0x400000, 0x7, 0x40, 0x80000001, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0xffffffff, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x4000005, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff4, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0x5, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0xb, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x5, 0x101, 0x40000000, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x4, 0xceb6, 0x5, 0x9, 0x53c0, 0x6, 0x5, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0xfffffffc, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x1, 0x7f, 0xb, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x4, 0x5, 0x8, 0xffffff7d, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x79, 0x40, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x200, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x56, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x101, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x6, 0x4d2, 0x4000000, {0x8, 0x2, 0xa, 0x8, 0x8, 0xc}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x15f}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000cc0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000d00)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000d40)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000d80)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.852187886s ago: executing program 4 (id=4090): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000001380)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000013c0)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto(r1, &(0x7f0000001400)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000025c0)={0x1, &(0x7f0000002600)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.732166939s ago: executing program 4 (id=4091): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.650876021s ago: executing program 6 (id=4092): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000600)="64f3460f7f3f430f01c9c74424004b000000c74424022aab0000ff1c24c744240012000000c74424020e000000ff2c2466baf80cb88c0b948bef66bafc0c66ed66b80a000f00d066baf80cb8e648e88eef66bafc0cb093ee36f2ad470f01cf8fc93099f0", 0x64}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 632.171355ms ago: executing program 6 (id=4093): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008a000000b70000000100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="0000e5ffffffffffffff00000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=4094): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) kernel console output (not intermixed with test programs): g (device loop2): dx_probe:966: inode #2: comm syz.2.170: Corrupt directory, running e2fsck is recommended [ 120.926455][ T4944] loop1: detected capacity change from 0 to 164 [ 121.611825][ T4950] loop1: detected capacity change from 0 to 512 [ 121.656016][ T4950] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,bsdgroups,,errors=continue. Quota mode: none. [ 121.680310][ T4952] autofs4:pid:4952:autofs_fill_super: called with bogus options [ 122.799948][ T4974] autofs4:pid:4974:autofs_fill_super: called with bogus options [ 123.081976][ T4984] autofs4:pid:4984:autofs_fill_super: called with bogus options [ 124.132084][ T4999] autofs4:pid:4999:autofs_fill_super: called with bogus options [ 124.494926][ T5012] autofs4:pid:5012:autofs_fill_super: called with bogus options [ 125.084372][ T5020] loop2: detected capacity change from 0 to 512 [ 125.302876][ T5020] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,bsdgroups,,errors=continue. Quota mode: none. [ 125.825611][ T5028] autofs4:pid:5028:autofs_fill_super: called with bogus options [ 126.104450][ T5037] autofs4:pid:5037:autofs_fill_super: called with bogus options [ 127.466927][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.474532][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.581993][ T5056] autofs4:pid:5056:autofs_fill_super: called with bogus options [ 131.070315][ T5098] autofs4:pid:5098:autofs_fill_super: called with bogus options [ 135.149681][ T5138] autofs4:pid:5138:autofs_fill_super: called with bogus options [ 137.832370][ T5177] autofs4:pid:5177:autofs_fill_super: called with bogus options [ 142.115273][ T5226] autofs4:pid:5226:autofs_fill_super: called with bogus options [ 142.417135][ T5235] autofs4:pid:5235:autofs_fill_super: called with bogus options [ 142.934476][ T5253] autofs4:pid:5253:autofs_fill_super: called with bogus options [ 142.949759][ T5247] autofs4:pid:5247:autofs_fill_super: called with bogus options [ 144.092378][ T5269] autofs4:pid:5269:autofs_fill_super: called with bogus options [ 155.269745][ T5398] autofs4:pid:5398:autofs_fill_super: called with bogus options [ 156.276669][ T5401] autofs4:pid:5401:autofs_fill_super: called with bogus options [ 157.082768][ T5425] Invalid ELF header magic: != ELF [ 157.381983][ T5426] overlayfs: failed to clone upperpath [ 161.830147][ T5477] autofs4:pid:5477:autofs_fill_super: called with bogus options [ 165.578314][ T5542] autofs4:pid:5542:autofs_fill_super: called with bogus options [ 170.305405][ T5615] autofs4:pid:5615:autofs_fill_super: called with bogus options [ 170.726663][ T1324] Bluetooth: hci3: command 0x0406 tx timeout [ 171.006837][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 171.012872][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 171.018946][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 173.640513][ T5661] autofs4:pid:5661:autofs_fill_super: called with bogus options [ 176.028384][ T5691] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 177.475265][ T5705] ip_tables: iptables: counters copy to user failed while replacing table [ 179.369138][ T5733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.406'. [ 182.508534][ T5784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.419'. [ 182.517595][ T5784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.419'. [ 182.526424][ T5784] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 183.115500][ T5790] overlayfs: failed to clone upperpath [ 183.272901][ T5798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.425'. [ 188.808022][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.814391][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.662586][ T6009] autofs4:pid:6009:autofs_fill_super: called with bogus options [ 202.030777][ T6050] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 202.030777][ T6050] [ 202.044707][ T6050] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 202.414354][ T6050] CIFS: Attempting to mount \\127.0.0.1\share [ 202.432092][ T6050] CIFS: VFS: Error connecting to socket. Aborting operation. [ 202.440011][ T6050] CIFS: VFS: cifs_mount failed w/return code = -111 [ 203.392499][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'. [ 206.400820][ T6110] autofs4:pid:6110:autofs_fill_super: called with bogus options [ 212.592006][ T6187] autofs4:pid:6187:autofs_fill_super: called with bogus options [ 214.860912][ T6220] overlayfs: failed to clone upperpath [ 217.526573][ T6262] autofs4:pid:6262:autofs_fill_super: called with bogus options [ 217.616076][ T6265] autofs4:pid:6265:autofs_fill_super: called with bogus options [ 220.636588][ T6307] autofs4:pid:6307:autofs_fill_super: called with bogus options [ 223.687152][ T6365] autofs4:pid:6365:autofs_fill_super: called with bogus options [ 227.362806][ T6423] autofs4:pid:6423:autofs_fill_super: called with bogus options [ 231.869652][ T6475] autofs4:pid:6475:autofs_fill_super: called with bogus options [ 236.187083][ T6544] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 237.369560][ T4569] Bluetooth: hci4: command 0x0406 tx timeout [ 246.988981][ T6688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.677'. [ 250.371885][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.385171][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.026155][ T6803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.712'. [ 279.567171][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.814'. [ 311.707054][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.713579][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.069032][ T4172] af_packet: tpacket_rcv: packet too big, clamped from 8514 to 3966. macoff=82 [ 373.129534][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.136007][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.386172][ T8560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1211'. [ 392.645896][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 394.703462][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 399.610393][ T8679] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 404.789339][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 414.674523][ T8844] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 415.306027][ T8860] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 419.716399][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 419.782053][ T8899] syz.1.1301 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 422.645440][ T8929] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 423.574768][ T8936] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 433.910596][ T9055] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 434.587182][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.597257][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 436.262962][ T9076] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 437.467010][ T9095] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 440.153029][ T9118] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 446.384475][ T9204] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 448.216023][ T9214] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 449.155255][ T9230] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 452.932665][ T9271] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 453.156201][ T9274] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 453.983191][ T9285] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 458.590843][ T9333] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 461.894033][ T9362] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 463.924047][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 464.344030][ T9378] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 465.983000][ T9394] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 467.740098][ T9413] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 468.625456][ T9420] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 471.150905][ T9444] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 472.789886][ T9459] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 473.309827][ T9461] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 474.849993][ T9466] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 478.982578][ T9528] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 481.219760][ T9544] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 484.885869][ T9577] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 484.943353][ T9579] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 487.786896][ T9603] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 488.622903][ T9617] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 496.010272][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.017427][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 497.644104][ T9708] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 498.345662][ T9714] mmap: syz.1.1531 (9714) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 498.997575][ T9726] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 500.780036][ T9742] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 504.006938][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 509.772281][ T9830] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 510.188026][ T9832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1563'. [ 511.466306][ T9850] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 512.581752][ T9851] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 513.349020][ T9861] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 514.146870][ T9866] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 514.757223][ T9870] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1574'. [ 516.757673][ T9886] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 517.418449][ T9906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1584'. [ 517.524677][ T9910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1586'. [ 517.741145][ T9915] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 521.234992][ T9947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1596'. [ 521.259799][ T9949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1597'. [ 524.272769][ T9978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1608'. [ 524.436280][ T9987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1609'. [ 527.644375][T10022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1619'. [ 527.713016][T10028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1623'. [ 529.420011][T10058] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 530.092305][T10070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1633'. [ 530.855582][T10079] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 531.406002][T10083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1636'. [ 534.522806][T10120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1648'. [ 540.307748][T10178] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 546.686660][T10268] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 552.571766][T10327] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 557.882363][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.912289][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 559.325251][T10394] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 569.145031][T10506] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 570.368434][T10518] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 577.247844][T10588] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 586.251303][T10676] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 589.910152][T10713] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 597.642257][T10790] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 601.337092][T10825] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 609.658725][T10916] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 611.945835][T10938] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 615.355484][T10970] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 616.195189][T10972] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 618.921867][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.928278][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.006753][T10994] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 620.213510][T11006] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 623.096851][T11033] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 624.667282][T11045] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 633.761698][T11143] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 635.642103][T11163] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 638.966555][T11189] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 645.071684][T11253] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 646.568882][T11273] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 649.203718][T11293] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 657.376619][T11392] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 668.241895][T11505] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 671.720314][T11539] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 680.161043][T11609] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 680.369295][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.376239][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.998882][T11626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 689.983725][T11692] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 691.232203][T11700] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 694.800720][T11735] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 698.936874][T11781] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 699.196841][T11782] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 700.058374][T11791] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 704.962608][T11847] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 710.163983][T11902] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 711.003629][T11910] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 713.126503][T11934] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 716.726502][T11960] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 724.175214][T12032] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 725.923867][T12048] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 728.598545][T12076] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 732.638205][T12124] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 736.669086][T12172] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 739.137442][T12195] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 741.768282][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.774692][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.840065][T12327] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 751.925880][T12343] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 760.241496][T12428] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 761.332163][T12442] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 765.065537][T12480] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 765.369406][T12449] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 768.872145][T12511] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 773.728777][T12561] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 775.089620][T12575] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 782.832164][T12628] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 787.032430][T12675] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 791.565779][T12723] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 792.315439][T12733] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 794.687770][T12755] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 796.370695][ T25] audit: type=1326 audit(1791951463.777:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.0.2379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc775f72d9 code=0x0 [ 801.150573][ T25] audit: type=1326 audit(1791951468.557:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12822 comm="syz.0.2390" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc775f72d9 code=0x0 [ 802.626614][ T25] audit: type=1326 audit(1791951470.037:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.1.2394" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf628b52d9 code=0x0 [ 803.263064][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.372921][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.103646][T12868] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 810.431915][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 811.259187][T12918] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 812.820049][T12935] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 813.758432][T12945] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 814.211685][T12953] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 819.614676][T12990] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 822.610784][T13017] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 822.644684][T13020] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 829.698792][T13072] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 831.433157][T13079] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 833.580315][T13098] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 835.669382][T13105] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 838.670777][ T25] audit: type=1326 audit(1791951506.077:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13135 comm="syz.1.2472" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf628b52d9 code=0x0 [ 842.991341][T13178] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 844.612834][T13190] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 849.122720][T13225] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 850.261938][T13245] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 852.273530][T13259] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 852.455057][ T25] audit: type=1326 audit(1791951519.857:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.1.2505" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf628b52d9 code=0x0 [ 854.214966][T13290] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 860.786420][T13347] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 861.731409][T13359] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 865.155497][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 865.171690][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 867.138296][T13398] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 867.474654][T13405] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 872.222426][T13434] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 872.895228][T13448] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 874.342278][T13462] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 882.324132][T13541] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 888.605332][ T25] audit: type=1326 audit(1791951556.007:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13593 comm="syz.4.2594" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe690bd02d9 code=0x0 [ 889.710702][T13605] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 889.734986][T13603] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 890.335966][T13614] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 891.218784][T13624] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 891.392774][T13626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 892.425315][T13628] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 894.938455][T13638] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 895.510566][T13632] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 895.846387][ T25] audit: type=1326 audit(1791951563.237:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.2.2610" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a772182d9 code=0x0 [ 897.878394][T13679] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 901.622815][T13707] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 903.946953][T13723] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 908.845986][T12096] Bluetooth: hci5: command 0x0409 tx timeout [ 909.118460][T13750] chnl_net:caif_netlink_parms(): no params data found [ 909.124540][ T25] audit: type=1326 audit(1791951576.527:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13777 comm="syz.0.2638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc775f72d9 code=0x0 [ 909.406796][T13791] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 909.357983][T13750] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.037000][T13750] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.187933][T13750] device bridge_slave_0 entered promiscuous mode [ 910.196848][T13750] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.204175][T13750] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.212439][T13750] device bridge_slave_1 entered promiscuous mode [ 911.110628][ T2360] Bluetooth: hci5: command 0x041b tx timeout [ 911.685168][T13750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.817215][T13750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.017993][T13750] team0: Port device team_slave_0 added [ 913.054004][T13750] team0: Port device team_slave_1 added [ 913.653547][T13750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.660710][T13750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.687516][T11880] Bluetooth: hci5: command 0x040f tx timeout [ 913.693852][T13750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.708601][T13750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.715697][T13750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.742105][T13750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.801344][T13750] device hsr_slave_0 entered promiscuous mode [ 914.115136][T13750] device hsr_slave_1 entered promiscuous mode [ 914.415586][T13750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 914.445384][T13750] Cannot create hsr debugfs directory [ 915.766298][T11880] Bluetooth: hci5: command 0x0419 tx timeout [ 916.866826][T13750] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 916.897552][T13750] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 916.911814][T13750] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 918.118081][T13750] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 919.639413][T13879] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 919.717920][ T25] audit: type=1326 audit(1791951587.127:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13884 comm="syz.0.2664" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc775f72d9 code=0x0 [ 920.636290][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.594554][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.993956][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.073513][T13750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.129974][T13750] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.193430][T13750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 923.233210][T13925] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 923.242766][ C0] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 923.400391][T13750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 923.791223][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 923.819197][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 923.836973][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 923.857491][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 923.932367][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.939554][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.032901][T13932] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 924.220243][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 924.232324][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 924.246982][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.254052][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.263208][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 924.275118][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 924.297388][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 924.334194][ T25] audit: type=1326 audit(1791951591.737:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13937 comm="syz.4.2678" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe690bd02d9 code=0x0 [ 924.437709][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 924.604396][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 924.613242][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 924.640106][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 924.652554][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 924.675559][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 924.687051][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 924.704474][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.450680][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 925.459550][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 925.467544][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 926.168352][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.191013][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.789778][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 926.803256][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 927.247111][T13987] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 927.972548][T13750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.518085][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 931.543082][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 931.653090][ T25] audit: type=1326 audit(1791951599.057:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14010 comm="syz.1.2691" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf628b52d9 code=0x0 [ 931.684866][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 932.112822][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 932.138201][T13750] device veth0_vlan entered promiscuous mode [ 932.147970][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 932.210249][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 932.456842][T13750] device veth1_vlan entered promiscuous mode [ 933.569264][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 933.641705][T14048] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 934.074926][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 934.113773][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 934.531990][T13750] device veth0_macvtap entered promiscuous mode [ 934.720085][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 934.741295][T13750] device veth1_macvtap entered promiscuous mode [ 935.609958][T14072] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 936.555057][T13750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.580058][T13750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.592180][T14077] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 936.602278][T13750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.619646][T13750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.763830][T13750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.799942][T13750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.024222][T14077] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 937.036953][T13750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.140693][T13750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.152905][T13750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.163760][T13750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.185332][T13750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.747089][T10600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 937.755997][T10600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 939.042294][T14094] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 939.059064][T13750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 939.142000][T13750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.181195][T13750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 939.202015][T13750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.281599][T13750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 939.316196][T13750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.351538][T13750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 939.392491][T13750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.492648][T13750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 939.555719][T14109] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 940.407232][T13750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.443154][T13750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.486521][T13750] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.687682][T13750] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.990004][T13750] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.201553][T13750] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.239356][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 941.255664][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 941.472471][ T1267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.567654][ T1267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.712048][T14132] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 943.586352][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 944.997782][ T1267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.016232][ T1267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.023829][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 945.509176][ T9] device hsr_slave_0 left promiscuous mode [ 945.627099][ T9] device hsr_slave_1 left promiscuous mode [ 945.656033][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.702007][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.732541][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 946.109172][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.321943][ T9] device bridge_slave_1 left promiscuous mode [ 946.330282][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.351789][ T9] device bridge_slave_0 left promiscuous mode [ 946.366363][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.400437][ T9] device veth1_macvtap left promiscuous mode [ 946.419147][ T9] device veth0_macvtap left promiscuous mode [ 946.425255][ T9] device veth1_vlan left promiscuous mode [ 946.462117][ T9] device veth0_vlan left promiscuous mode [ 949.073993][ T9] team0 (unregistering): Port device team_slave_1 removed [ 949.118353][ T9] team0 (unregistering): Port device team_slave_0 removed [ 949.169812][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.184635][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 949.765140][ T9] bond0 (unregistering): Released all slaves [ 952.649935][T14228] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 952.754352][ T25] audit: type=1326 audit(1791951620.157:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14234 comm="syz.4.2736" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe690bd02d9 code=0x0 [ 953.235127][T14251] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 954.024815][T14255] loop5: detected capacity change from 0 to 512 [ 954.709811][T14261] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 957.073720][T14277] loop5: detected capacity change from 0 to 1024 [ 957.161694][T14277] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 957.206945][T14277] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 957.503679][T14277] EXT4-fs error (device loop5): ext4_get_journal_inode:5187: inode #5: comm syz.5.2744: unexpected bad inode w/o EXT4_IGET_BAD [ 957.702996][T14277] EXT4-fs (loop5): no journal found [ 958.106794][T14277] EXT4-fs (loop5): can't get journal size [ 958.172568][T14277] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 959.117521][T14314] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 960.579404][T14336] loop5: detected capacity change from 0 to 128 [ 962.492841][T14356] loop5: detected capacity change from 0 to 1024 [ 962.563263][T14356] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 962.644323][T14356] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 962.684430][T14356] EXT4-fs error (device loop5): ext4_get_journal_inode:5187: inode #5: comm syz.5.2758: unexpected bad inode w/o EXT4_IGET_BAD [ 962.732266][T14356] EXT4-fs (loop5): no journal found [ 962.764920][T14356] EXT4-fs (loop5): can't get journal size [ 962.781808][T14356] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 962.965371][T14364] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 964.994727][T14386] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 966.529940][T14385] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 968.988999][T14423] IPVS: sh: FWM 3 0x00000003 - no destination available [ 971.294747][T14447] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 976.327169][T14492] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 978.306735][T14512] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 980.978799][T14563] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 981.747346][T14573] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 982.918035][ T25] audit: type=1326 audit(1791951650.327:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14564 comm="syz.4.2801" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe690bd02d9 code=0x0 [ 983.154242][ T25] audit: type=1326 audit(1791951650.557:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.2.2802" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a772182d9 code=0x0 [ 987.480498][T14647] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 987.492186][T14648] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 987.528577][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.528663][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.755833][T14653] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 988.491311][T14662] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 992.764743][T14727] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 994.908634][T14741] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 995.067572][T14723] chnl_net:caif_netlink_parms(): no params data found [ 995.749013][T11874] Bluetooth: hci2: command 0x0409 tx timeout [ 995.949212][T14723] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.951295][T14723] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.952114][T14723] device bridge_slave_0 entered promiscuous mode [ 995.957873][T14723] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.957949][T14723] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.992154][T14723] device bridge_slave_1 entered promiscuous mode [ 996.594369][T14769] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 996.771063][T14723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.803554][T14723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.867208][T14723] team0: Port device team_slave_0 added [ 996.903038][T14723] team0: Port device team_slave_1 added [ 997.816164][T12495] Bluetooth: hci2: command 0x041b tx timeout [ 998.071489][T14723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.071503][T14723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 998.071521][T14723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.074592][T14723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.074604][T14723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 998.074621][T14723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.307782][T14723] device hsr_slave_0 entered promiscuous mode [ 998.446250][T14723] device hsr_slave_1 entered promiscuous mode [ 998.449384][T14723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 998.449504][T14723] Cannot create hsr debugfs directory [ 1000.157758][ T2360] Bluetooth: hci2: command 0x040f tx timeout [ 1000.261291][T14808] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 1000.277074][ C0] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 1001.045246][T14820] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1001.643814][T14723] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1001.661377][T14723] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1001.667178][T14723] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1001.669366][T14723] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1002.752572][ T2360] Bluetooth: hci2: command 0x0419 tx timeout [ 1003.583796][T14723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.606013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1003.609191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1003.621142][T14723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.625081][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1003.625670][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1003.626040][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.626105][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.634999][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1004.947935][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1004.948429][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1004.948718][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.948744][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.949027][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1004.949647][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1004.950264][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1004.951276][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1004.951808][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1005.501993][T14862] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1005.504903][T14862] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1005.505762][T14862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1005.505826][T14862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1005.568312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1005.569188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1005.587659][T14723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1005.993530][T14723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1005.994754][T10600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1005.995206][T10600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1005.995764][T10600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1005.996319][T10600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1005.997639][T10600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1006.453459][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1006.453579][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1006.519789][T14723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.989641][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1006.990090][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1007.029172][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1007.029664][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1007.032562][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1007.033004][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1007.035496][T14723] device veth0_vlan entered promiscuous mode [ 1007.045515][T14723] device veth1_vlan entered promiscuous mode [ 1007.073700][T14723] device veth0_macvtap entered promiscuous mode [ 1007.082607][T14723] device veth1_macvtap entered promiscuous mode [ 1007.090383][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.226183][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.226197][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.226209][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.226220][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.226229][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.226241][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.226249][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.226271][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.226279][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.227980][T14723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.228094][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1007.228586][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1007.229007][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1007.229451][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1007.229849][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1007.230261][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1007.230673][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1007.231110][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1007.423064][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.423200][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.423337][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.423382][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.423842][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.423925][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.424142][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.424207][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.424679][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.424725][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.453266][T14723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.458759][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1007.470905][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1007.543870][T14723] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.544183][T14723] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.544435][T14723] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.544630][T14723] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.988580][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.988597][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.988819][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1008.047092][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.946430][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.946647][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1012.335202][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1012.337741][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1012.338590][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1012.339005][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1013.731258][T14986] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1016.011082][T15010] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1017.604938][T15015] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1018.241944][T15043] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1018.452139][T15045] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1019.317411][T15047] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1020.322041][T15063] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1022.123875][T15083] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1022.427662][T15087] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1022.673930][T15091] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1022.694698][ T25] audit: type=1326 audit(1791951690.097:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.1.2896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf628b52d9 code=0x0 [ 1026.935881][T15130] loop6: detected capacity change from 0 to 512 [ 1028.020780][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.121232][T15149] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1028.692015][T15145] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1028.939778][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.944681][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.966833][ T25] audit: type=1326 audit(1791951697.367:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.0.2917" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc775f72d9 code=0x0 [ 1030.243541][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.390462][T15185] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1032.479534][T15208] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1034.529491][T15215] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1034.676219][ T25] audit: type=1326 audit(1791951702.067:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.1.2928" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf628b52d9 code=0x0 [ 1037.891619][ T9] device hsr_slave_0 left promiscuous mode [ 1037.892098][ T9] device hsr_slave_1 left promiscuous mode [ 1037.892685][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1037.892715][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1037.893223][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1037.893241][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1037.893726][ T9] device bridge_slave_1 left promiscuous mode [ 1037.893819][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.903705][ T9] device bridge_slave_0 left promiscuous mode [ 1037.960138][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.965478][ T9] device veth1_macvtap left promiscuous mode [ 1037.965562][ T9] device veth0_macvtap left promiscuous mode [ 1037.965634][ T9] device veth1_vlan left promiscuous mode [ 1037.965694][ T9] device veth0_vlan left promiscuous mode [ 1038.664900][T15258] loop6: detected capacity change from 0 to 128 [ 1038.860626][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1038.908777][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1039.096265][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.143774][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.391171][T15279] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1040.616720][ T9] bond0 (unregistering): Released all slaves [ 1042.545500][T15312] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1043.083803][T15334] loop6: detected capacity change from 0 to 512 [ 1044.054601][T15343] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1048.741787][T15418] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1049.381077][T15426] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1049.397250][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.403570][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.495358][ T25] audit: type=1326 audit(1791951716.897:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15424 comm="syz.0.2972" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc775f72d9 code=0x0 [ 1050.019353][T15444] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1050.294454][T15428] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1055.125667][T15485] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1056.796087][T15546] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1056.869011][T15550] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1057.634331][T15558] loop6: detected capacity change from 0 to 1024 [ 1058.263219][T15558] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1058.273110][T15558] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1058.350472][T15558] EXT4-fs error (device loop6): ext4_get_journal_inode:5187: inode #5: comm syz.6.3000: unexpected bad inode w/o EXT4_IGET_BAD [ 1058.405869][T15558] EXT4-fs (loop6): no journal found [ 1058.487995][T15558] EXT4-fs (loop6): can't get journal size [ 1059.261203][T15558] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 1063.732698][T15638] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1064.361066][T15642] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1065.308963][T15655] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1067.710542][T15702] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1067.760800][T15678] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1072.517308][T15766] loop6: detected capacity change from 0 to 512 [ 1073.463558][T15765] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1073.796033][T15788] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1074.027447][T15794] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1074.122571][T15796] loop6: detected capacity change from 0 to 128 [ 1075.845309][ T25] audit: type=1326 audit(1791951743.247:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.6.3055" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63d98b52d9 code=0x0 [ 1078.395023][T15864] loop6: detected capacity change from 0 to 128 [ 1080.908741][T15891] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1082.433789][ T25] audit: type=1326 audit(1791951749.837:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15894 comm="syz.1.3073" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf628b52d9 code=0x0 [ 1083.518090][T15922] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1089.780526][T15986] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1090.707943][T15997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1095.171191][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1102.677847][T16104] loop6: detected capacity change from 0 to 128 [ 1106.922494][T16118] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1107.586429][ T25] audit: type=1326 audit(1791951774.837:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.6.3131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63d98b52d9 code=0x0 [ 1108.041848][ T25] audit: type=1326 audit(1791951775.447:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.2.3132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a772182d9 code=0x0 [ 1110.558728][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.558765][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1111.524509][ T25] audit: type=1326 audit(1791951778.927:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.2.3137" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a772182d9 code=0x0 [ 1114.882408][T16222] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1118.560483][T12498] Bluetooth: hci2: command 0x0406 tx timeout [ 1120.951851][T16249] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1124.826328][T16291] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1132.974294][T16382] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1137.422557][T16430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1140.485028][ T25] audit: type=1326 audit(1791951807.887:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16449 comm="syz.2.3194" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a772182d9 code=0x0 [ 1140.576545][T16469] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1143.586451][ T25] audit: type=1326 audit(1791951810.997:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.2.3200" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a772182d9 code=0x0 [ 1148.337738][T16516] loop6: detected capacity change from 0 to 512 [ 1148.911270][T16528] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1149.752033][ T25] audit: type=1326 audit(1791951817.157:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16530 comm="syz.1.3211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf628b52d9 code=0x0 [ 1154.062277][ T25] audit: type=1326 audit(1791951821.467:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16548 comm="syz.4.3215" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe690bd02d9 code=0x0 [ 1154.357878][T16559] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1155.924040][T16566] loop6: detected capacity change from 0 to 512 [ 1158.688405][T16584] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1158.698347][T16584] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1158.706776][T16584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1158.714224][T16584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1166.529495][T16664] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1169.234220][T16679] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1169.268455][T16679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1169.285069][T16679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1169.295502][T16679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1170.517628][T16695] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1171.848065][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.854489][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1172.266317][T16706] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1175.711055][T16721] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1180.418627][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1180.428598][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1180.436919][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1180.444500][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1184.210803][T16756] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1184.315651][T16758] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1187.105740][T16769] loop6: detected capacity change from 0 to 512 [ 1187.524233][T16769] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1187.904038][T16780] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1188.188978][T16783] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1188.684580][T16790] loop6: detected capacity change from 0 to 512 [ 1189.996448][T16792] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1191.020317][T16814] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1194.095754][T16838] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1196.744170][T16859] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1196.925839][T16861] loop6: detected capacity change from 0 to 512 [ 1198.323567][T16880] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1199.483637][T16887] loop6: detected capacity change from 0 to 512 [ 1200.184885][T16897] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1201.130996][T16909] loop6: detected capacity change from 0 to 512 [ 1201.658206][T16911] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1202.851404][ T25] audit: type=1326 audit(1791951870.257:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.6.3307" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63d98b52d9 code=0x0 [ 1205.652890][ T25] audit: type=1326 audit(1791951873.057:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16950 comm="syz.6.3314" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63d98b52d9 code=0x0 [ 1213.899322][T17017] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1217.624979][ T25] audit: type=1326 audit(1791951885.027:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17043 comm="syz.0.3334" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc775f72d9 code=0x0 [ 1224.209675][T17122] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1230.519625][ T25] audit: type=1326 audit(1791951897.927:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17194 comm="syz.6.3372" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63d98b52d9 code=0x0 [ 1233.490333][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.498820][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.710809][T17251] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20002 [ 1242.170313][ T25] audit: type=1326 audit(1791951909.577:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.1.3401" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf628b52d9 code=0x0 [ 1246.241061][ T25] audit: type=1326 audit(1791951913.647:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17320 comm="syz.6.3411" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63d98b52d9 code=0x0 [ 1248.686360][ T25] audit: type=1326 audit(1791951916.097:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17340 comm="syz.2.3417" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a772182d9 code=0x0 [ 1255.019872][T17423] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1259.000932][T17472] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1262.984182][T17508] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1270.924438][ T25] audit: type=1326 audit(1791951938.327:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17572 comm="syz.4.3481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe690bd02d9 code=0x0 [ 1278.056691][ T25] audit: type=1326 audit(1791951945.437:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17655 comm="syz.1.3507" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf628b52d9 code=0x0 [ 1283.752510][ T25] audit: type=1326 audit(1791951951.157:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17722 comm="syz.0.3524" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc775f72d9 code=0x0 [ 1295.560132][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1295.567285][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.855699][T17869] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1307.185126][T17932] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1310.704965][T17996] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1312.550954][T18040] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1315.383911][T18102] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1317.499932][T18150] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1319.811016][T18200] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1322.229803][T18264] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1323.759783][T18303] device syzkaller0 entered promiscuous mode [ 1326.543043][T18333] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1326.557534][T18330] tipc: Started in network mode [ 1326.562802][T18330] tipc: Node identity 4, cluster identity 4711 [ 1326.569105][T18330] tipc: Node number set to 4 [ 1328.704326][T18358] tipc: Started in network mode [ 1328.709535][T18358] tipc: Node identity 4, cluster identity 4711 [ 1328.715874][T18358] tipc: Node number set to 4 [ 1329.717880][T18385] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1349.676930][T18609] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1355.069787][T18662] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1356.568842][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.575194][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.793191][ T9916] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.778959][T18757] chnl_net:caif_netlink_parms(): no params data found [ 1369.227880][ T9916] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.359293][T12099] Bluetooth: hci1: command 0x0409 tx timeout [ 1369.408924][T18757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.419104][T18757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.430889][T18757] device bridge_slave_0 entered promiscuous mode [ 1369.443036][T18757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.454616][T18757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.465870][T18757] device bridge_slave_1 entered promiscuous mode [ 1369.526846][ T9916] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.841300][ T9916] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.854984][T18757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1369.872512][T18757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1370.053689][T18757] team0: Port device team_slave_0 added [ 1370.085350][T18757] team0: Port device team_slave_1 added [ 1370.819890][ T9916] tipc: Left network mode [ 1370.851438][T18757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1370.869989][T18757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1370.928148][T18757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1371.411083][T18757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1371.452947][T12101] Bluetooth: hci1: command 0x041b tx timeout [ 1371.535846][T18757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1371.803857][T18757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1372.700479][T18757] device hsr_slave_0 entered promiscuous mode [ 1372.747318][T18757] device hsr_slave_1 entered promiscuous mode [ 1373.350169][T18757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1373.357871][T18757] Cannot create hsr debugfs directory [ 1373.846140][T12099] Bluetooth: hci1: command 0x040f tx timeout [ 1373.895103][T18890] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1376.588530][T12096] Bluetooth: hci1: command 0x0419 tx timeout [ 1377.704029][T18945] device syzkaller0 entered promiscuous mode [ 1378.613581][ T9916] device hsr_slave_0 left promiscuous mode [ 1378.624236][ T9916] device hsr_slave_1 left promiscuous mode [ 1378.631907][ T9916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1378.639726][ T9916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1378.655424][ T9916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1378.663185][ T9916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1378.671393][ T9916] device bridge_slave_1 left promiscuous mode [ 1378.684603][ T9916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.952228][ T9916] device bridge_slave_0 left promiscuous mode [ 1378.994809][ T9916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.675069][ T9916] device veth1_macvtap left promiscuous mode [ 1379.682354][ T9916] device veth0_macvtap left promiscuous mode [ 1379.694322][ T9916] device veth1_vlan left promiscuous mode [ 1379.700591][ T9916] device veth0_vlan left promiscuous mode [ 1380.064923][ T9916] team0 (unregistering): Port device team_slave_1 removed [ 1380.081865][ T9916] team0 (unregistering): Port device team_slave_0 removed [ 1380.094961][ T9916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1380.111600][ T9916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1380.285212][ T9916] bond0 (unregistering): Released all slaves [ 1380.639915][T18757] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1381.297899][T18757] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1381.393815][T18757] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1381.440447][T18757] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1381.502302][T18757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.521458][T18757] 8021q: adding VLAN 0 to HW filter on device team0 [ 1381.596993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1381.620008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1381.631571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1381.652428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1381.661584][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.668795][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1381.777734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1381.841101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1381.867672][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.874784][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1381.883641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1381.911581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1382.025576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1382.121003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1382.344106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1382.378779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1382.402102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1382.416608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1382.470194][T18757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1382.533730][T18757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1383.048315][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1383.081643][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1383.092847][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1383.101864][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1383.232310][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1383.270573][T19042] device syzkaller0 entered promiscuous mode [ 1384.145678][T19075] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1384.709400][T19088] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1385.064285][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1385.074739][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1386.083748][T18757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1386.146091][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1386.157137][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1386.198185][T19114] loop6: detected capacity change from 0 to 512 [ 1386.246706][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1386.265597][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1386.291977][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1386.330969][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1386.516536][T18757] device veth0_vlan entered promiscuous mode [ 1386.564557][T18757] device veth1_vlan entered promiscuous mode [ 1386.617786][T19134] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1387.880341][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1387.898224][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1388.082370][T19153] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1388.655497][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1389.061672][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1389.130466][T18757] device veth0_macvtap entered promiscuous mode [ 1389.303901][T18757] device veth1_macvtap entered promiscuous mode [ 1389.920823][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1389.964599][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.140686][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1390.152665][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.348023][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1390.559035][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.640887][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1390.671373][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.682460][T18757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1390.692588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1390.706251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1390.718616][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1390.733811][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.745588][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1390.757704][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.768048][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1390.778791][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.791098][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1390.802559][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.425537][T18757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1391.437381][T18757] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.446422][T18757] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.455306][T18757] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.465316][T18757] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.587725][T19196] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1391.611690][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.620240][ T9943] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1391.660699][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.676789][ T9943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1391.706448][ T9943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1391.887152][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.895581][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.918824][ T9943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1393.577945][ T7322] device syz_tun left promiscuous mode [ 1393.812007][ T1267] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.059241][ T1267] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.221022][ T1267] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.722587][T19257] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1395.926486][T17126] Bluetooth: hci4: command 0x0409 tx timeout [ 1395.967128][ T1267] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.992511][T19227] chnl_net:caif_netlink_parms(): no params data found [ 1396.053762][T19227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.067385][T19227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.093751][T19227] device bridge_slave_0 entered promiscuous mode [ 1396.109948][T19227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.117641][T19227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.125714][T19227] device bridge_slave_1 entered promiscuous mode [ 1396.182315][T19227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.194485][T19227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.304724][T19227] team0: Port device team_slave_0 added [ 1397.374866][T19227] team0: Port device team_slave_1 added [ 1397.404565][ T1267] tipc: Left network mode [ 1397.479997][T19287] overlayfs: failed to clone upperpath [ 1397.495437][T19227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.511907][T19227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.548848][T19294] 9pnet_virtio: no channels available for device syz [ 1397.587544][T19227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.617951][T19227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.625102][T19227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.674597][T19227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.737085][T19272] syz.1.3924 (19272) used greatest stack depth: 16656 bytes left [ 1397.844154][T19328] tipc: Enabling of bearer rejected, failed to enable media [ 1397.869316][T19227] device hsr_slave_0 entered promiscuous mode [ 1397.896800][T19227] device hsr_slave_1 entered promiscuous mode [ 1397.905793][T19227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1397.922483][T19227] Cannot create hsr debugfs directory [ 1398.016383][T17125] Bluetooth: hci4: command 0x041b tx timeout [ 1398.134936][T19343] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1398.147771][T19343] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1398.254411][T19359] netlink: 'syz.6.3942': attribute type 2 has an invalid length. [ 1398.279919][T19359] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3942'. [ 1398.588881][T19387] 9pnet_virtio: no channels available for device syz [ 1398.763398][ T1267] device hsr_slave_0 left promiscuous mode [ 1398.766106][T10043] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1398.780535][ T1267] device hsr_slave_1 left promiscuous mode [ 1398.800563][ T1267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1398.820237][ T1267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.846797][ T1267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1398.863886][ T1267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.876453][ T1267] device bridge_slave_1 left promiscuous mode [ 1398.889468][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.904500][ T1267] device bridge_slave_0 left promiscuous mode [ 1398.927992][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.940547][ T1267] device veth1_macvtap left promiscuous mode [ 1398.953849][ T1267] device veth0_macvtap left promiscuous mode [ 1398.970274][ T1267] device veth1_vlan left promiscuous mode [ 1398.980640][ T1267] device veth0_vlan left promiscuous mode [ 1399.046403][T10043] usb 7-1: Using ep0 maxpacket: 16 [ 1399.167168][T10043] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1399.312219][ T1267] team0 (unregistering): Port device team_slave_1 removed [ 1399.330537][ T1267] team0 (unregistering): Port device team_slave_0 removed [ 1399.345043][ T1267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1399.346450][T10043] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1399.379102][ T1267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1399.380178][T10043] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.401365][T10043] usb 7-1: Product: syz [ 1399.405725][T10043] usb 7-1: Manufacturer: syz [ 1399.410795][T10043] usb 7-1: SerialNumber: syz [ 1399.421386][T10043] usb 7-1: config 0 descriptor?? [ 1399.463632][ T1267] bond0 (unregistering): Released all slaves [ 1399.471318][T10043] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1399.482958][T10043] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1399.511228][T19227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1399.525421][T19227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1399.540957][T19227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1399.553812][T19227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1399.629428][T19227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.666179][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1399.678534][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1399.697145][T19227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.707403][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1399.716838][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1399.726542][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.733653][ T4344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.768573][T19465] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3964'. [ 1399.795852][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1399.820146][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1399.830925][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1399.839779][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.847061][ T4344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.855391][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1399.865222][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1399.895298][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1399.906714][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1399.915090][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1399.926553][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1399.934896][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1399.945541][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1399.954334][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1399.964107][T19473] netlink: 'syz.0.3966': attribute type 1 has an invalid length. [ 1399.983398][T19473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1399.999066][T19474] bond1: (slave geneve2): making interface the new active one [ 1400.011407][T19474] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1400.022961][T19227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1400.036687][T19227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1400.044915][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1400.059327][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1400.068133][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1400.097410][T17117] Bluetooth: hci4: command 0x040f tx timeout [ 1400.116152][T10043] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1400.236870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1400.245036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1400.271647][T19227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1400.345762][T19504] netlink: 'syz.1.3975': attribute type 1 has an invalid length. [ 1400.631153][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1400.643507][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1400.656207][T10043] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1400.676247][T10043] em28xx 7-1:0.0: board has no eeprom [ 1400.713129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1400.740776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1400.762802][T19227] device veth0_vlan entered promiscuous mode [ 1400.781923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1400.800593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1400.824957][T19227] device veth1_vlan entered promiscuous mode [ 1400.872099][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1400.900920][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1400.913447][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1400.922364][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1400.939028][T19227] device veth0_macvtap entered promiscuous mode [ 1400.949669][T19227] device veth1_macvtap entered promiscuous mode [ 1400.993672][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.006065][T10043] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1401.008750][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.017337][T10043] em28xx 7-1:0.0: dvb set to bulk mode. [ 1401.026739][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.052545][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.063618][T10043] usb 7-1: USB disconnect, device number 2 [ 1401.076624][T10043] em28xx 7-1:0.0: Disconnecting em28xx [ 1401.098063][T12096] em28xx 7-1:0.0: Binding DVB extension [ 1401.102780][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.125852][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.150311][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.168950][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.173863][T12096] em28xx 7-1:0.0: Registering input extension [ 1401.180386][T19227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1401.201914][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1401.213182][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1401.219009][T10043] em28xx 7-1:0.0: Closing input extension [ 1401.225415][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1401.235566][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1401.272842][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.293870][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.311229][T10043] em28xx 7-1:0.0: Freeing device [ 1401.323077][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.376083][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.385933][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.403035][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.417535][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.431418][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.444248][T19227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1401.469637][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1401.484640][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1401.498869][T19227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.516439][T19227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.525321][T19227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.540327][T19544] netlink: 'syz.0.3989': attribute type 1 has an invalid length. [ 1401.553543][T19227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.694683][ T9943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.712047][ T9943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.741279][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1401.753575][ T9943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.785386][ T9943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.794992][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1402.180200][T17125] Bluetooth: hci4: command 0x0419 tx timeout [ 1402.458907][ T9943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.497467][T19579] chnl_net:caif_netlink_parms(): no params data found [ 1402.514733][T19610] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4015'. [ 1402.559858][ T9943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.627030][ T9943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.643120][T19579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.650582][T19579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.659829][T19579] device bridge_slave_0 entered promiscuous mode [ 1402.681709][ T9943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.696564][T19579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.708796][T19625] FAULT_INJECTION: forcing a failure. [ 1402.708796][T19625] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.721549][T19579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.722438][T19579] device bridge_slave_1 entered promiscuous mode [ 1402.753250][T19579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1402.764408][T19579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1402.777054][T19629] phram: illegal start address [ 1402.781995][T19625] CPU: 0 PID: 19625 Comm: syz.2.4020 Not tainted syzkaller #0 [ 1402.789601][T19625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1402.799854][T19625] Call Trace: [ 1402.803191][T19625] [ 1402.806183][T19625] dump_stack_lvl+0x188/0x250 [ 1402.811009][T19625] ? show_regs_print_info+0x20/0x20 [ 1402.816387][T19625] ? load_image+0x410/0x410 [ 1402.817502][T19579] team0: Port device team_slave_0 added [ 1402.820898][T19625] ? __might_sleep+0xf0/0xf0 [ 1402.828818][T19579] team0: Port device team_slave_1 added [ 1402.831332][T19625] ? __lock_acquire+0x7d40/0x7d40 [ 1402.842021][T19625] should_fail+0x383/0x4b0 [ 1402.846743][T19625] should_failslab+0x5/0x20 [ 1402.851323][T19579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1402.851327][T19625] slab_pre_alloc_hook+0x51/0xc0 [ 1402.858686][T19579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1402.863262][T19625] ? __request_module+0x31c/0x980 [ 1402.894618][T19625] __kmalloc_track_caller+0x69/0x330 [ 1402.899911][T19625] ? __request_module+0x31c/0x980 [ 1402.904945][T19625] kstrdup+0x32/0x70 [ 1402.909005][T19625] __request_module+0x31c/0x980 [ 1402.913350][T19579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1402.913978][T19625] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 1402.928516][T19579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1402.929300][T19625] ? umd_cleanup+0x110/0x110 [ 1402.929320][T19625] ? aa_get_newest_label+0xf5/0x5a0 [ 1402.938559][T19579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1402.940796][T19625] ? end_current_label_crit_section+0x170/0x170 [ 1402.940826][T19625] ? apparmor_capable+0x12c/0x190 [ 1402.947733][T19579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1402.972281][T19625] ? bpf_lsm_capable+0x5/0x10 [ 1402.972377][T19625] ? security_capable+0x85/0xb0 [ 1402.972421][T19625] ? capable+0x84/0xe0 [ 1402.972460][T19625] ? wext_ioctl_dispatch+0x470/0x470 [ 1403.013233][T19625] ? iw_handler_get_private+0x1e0/0x1e0 [ 1403.019026][T19625] wext_ioctl_dispatch+0xaa/0x470 [ 1403.024127][T19625] ? iw_handler_get_private+0x1e0/0x1e0 [ 1403.029667][T19625] wext_handle_ioctl+0x114/0x1d0 [ 1403.034601][T19625] ? call_commit_handler+0xf0/0xf0 [ 1403.039708][T19625] sock_ioctl+0x143/0x700 [ 1403.044295][T19625] ? sock_poll+0x420/0x420 [ 1403.048710][T19625] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1403.053696][T19625] ? security_file_ioctl+0x7c/0xa0 [ 1403.058856][T19625] ? sock_poll+0x420/0x420 [ 1403.063282][T19625] __se_sys_ioctl+0xfa/0x170 [ 1403.067962][T19625] do_syscall_64+0x4c/0xa0 [ 1403.072539][T19625] ? clear_bhb_loop+0x30/0x80 [ 1403.077301][T19625] ? clear_bhb_loop+0x30/0x80 [ 1403.081984][T19625] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1403.087888][T19625] RIP: 0033:0x7fa349bd22d9 [ 1403.092363][T19625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1403.112207][T19625] RSP: 002b:00007fa347e2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1403.120754][T19625] RAX: ffffffffffffffda RBX: 00007fa349e59fa0 RCX: 00007fa349bd22d9 [ 1403.128834][T19625] RDX: 00002000000024c0 RSI: 0000000000008b1a RDI: 0000000000000003 [ 1403.136879][T19625] RBP: 00007fa349c69888 R08: 0000000000000000 R09: 0000000000000000 [ 1403.144860][T19625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1403.153004][T19625] R13: 00007fa349e5a038 R14: 00007fa349e59fa0 R15: 00007ffd9867a598 [ 1403.160966][T19625] [ 1403.164010][ C0] vkms_vblank_simulate: vblank timer overrun [ 1403.183679][T19579] device hsr_slave_0 entered promiscuous mode [ 1403.194824][T19579] device hsr_slave_1 entered promiscuous mode [ 1403.202083][T19579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1403.226067][T19579] Cannot create hsr debugfs directory [ 1403.280607][T19634] device syzkaller0 entered promiscuous mode [ 1403.507200][T18758] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 1403.531540][T18758] CPU: 1 PID: 18758 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1403.539603][T18758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1403.549660][T18758] Workqueue: hci0 hci_rx_work [ 1403.554439][T18758] Call Trace: [ 1403.557801][T18758] [ 1403.560845][T18758] dump_stack_lvl+0x188/0x250 [ 1403.565703][T18758] ? show_regs_print_info+0x20/0x20 [ 1403.570909][T18758] ? load_image+0x410/0x410 [ 1403.575437][T18758] sysfs_create_dir_ns+0x26a/0x290 [ 1403.580639][T18758] ? sysfs_warn_dup+0xa0/0xa0 [ 1403.585321][T18758] ? ret_from_fork+0x1f/0x30 [ 1403.590006][T18758] ? do_raw_spin_unlock+0x11d/0x230 [ 1403.595240][T18758] kobject_add_internal+0x5ba/0xcd0 [ 1403.600516][T18758] kobject_add+0x160/0x230 [ 1403.605036][T18758] ? kobject_init+0x1c0/0x1c0 [ 1403.609816][T18758] ? __raw_spin_lock_init+0x41/0x100 [ 1403.615218][T18758] ? klist_children_get+0x50/0x50 [ 1403.620340][T18758] ? get_device_parent+0x121/0x3e0 [ 1403.625690][T18758] device_add+0x470/0x1050 [ 1403.630236][T18758] ? cancel_work+0x20/0x20 [ 1403.634761][T18758] hci_conn_add_sysfs+0xd1/0x1e0 [ 1403.639891][T18758] hci_conn_complete_evt+0x5e7/0x1460 [ 1403.645279][T18758] ? hci_inquiry_result_evt+0x420/0x420 [ 1403.651348][T18758] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1403.657338][T18758] ? lock_chain_count+0x20/0x20 [ 1403.662201][T18758] ? __rwlock_init+0x140/0x140 [ 1403.666985][T18758] hci_event_packet+0x8ba/0x1310 [ 1403.671951][T18758] ? _raw_spin_unlock+0x40/0x40 [ 1403.676815][T18758] ? rcu_lock_release+0x20/0x20 [ 1403.681765][T18758] ? hci_send_to_monitor+0x9c/0x4a0 [ 1403.687005][T18758] hci_rx_work+0x255/0xa10 [ 1403.691446][T18758] process_one_work+0x867/0xff0 [ 1403.696315][T18758] ? worker_detach_from_pool+0x240/0x240 [ 1403.701952][T18758] ? lockdep_hardirqs_off+0x70/0x100 [ 1403.707339][T18758] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1403.712467][T18758] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1403.718236][T18758] ? wq_worker_running+0x97/0x170 [ 1403.723382][T18758] worker_thread+0xad7/0x12a0 [ 1403.728088][T18758] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1403.734107][T18758] kthread+0x42e/0x520 [ 1403.738182][T18758] ? rcu_lock_release+0x20/0x20 [ 1403.743037][T18758] ? kthread_blkcg+0xd0/0xd0 [ 1403.747638][T18758] ret_from_fork+0x1f/0x30 [ 1403.752071][T18758] [ 1403.759156][T18758] kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 1403.773527][T18758] Bluetooth: hci0: failed to register connection device [ 1404.139808][T19687] dummy0 speed is unknown, defaulting to 1000 [ 1404.162433][T19688] device syzkaller0 entered promiscuous mode [ 1404.185108][T19687] dummy0 speed is unknown, defaulting to 1000 [ 1404.224430][T19687] dummy0 speed is unknown, defaulting to 1000 [ 1404.246340][T12101] Bluetooth: hci5: command 0x0409 tx timeout [ 1404.294660][T19693] jffs2: notice: (19693) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1404.304634][T19696] FAULT_INJECTION: forcing a failure. [ 1404.304634][T19696] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.342673][T19696] CPU: 0 PID: 19696 Comm: syz.2.4041 Not tainted syzkaller #0 [ 1404.350177][T19696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1404.360235][T19696] Call Trace: [ 1404.363514][T19696] [ 1404.366448][T19696] dump_stack_lvl+0x188/0x250 [ 1404.371140][T19696] ? show_regs_print_info+0x20/0x20 [ 1404.376351][T19696] ? load_image+0x410/0x410 [ 1404.381013][T19696] ? __might_sleep+0xf0/0xf0 [ 1404.385621][T19696] ? __lock_acquire+0x7d40/0x7d40 [ 1404.390656][T19696] should_fail+0x383/0x4b0 [ 1404.395080][T19696] should_failslab+0x5/0x20 [ 1404.399580][T19696] slab_pre_alloc_hook+0x51/0xc0 [ 1404.404524][T19696] kmem_cache_alloc_trace+0x47/0x290 [ 1404.409818][T19696] ? __list_lru_init+0x535/0xac0 [ 1404.411646][T12101] dummy0 speed is unknown, defaulting to 1000 [ 1404.414796][T19696] __list_lru_init+0x535/0xac0 [ 1404.422727][T19687] infiniband syz0: set active [ 1404.425861][T19696] alloc_super+0x787/0x970 [ 1404.435317][T19696] ? kill_litter_super+0xa0/0xa0 [ 1404.440280][T19696] sget_fc+0x2d4/0x6f0 [ 1404.444366][T19696] ? kill_litter_super+0xa0/0xa0 [ 1404.449312][T19696] ? mqueue_get_tree+0xe0/0xe0 [ 1404.451539][T19687] infiniband syz0: added dummy0 [ 1404.454168][T19696] get_tree_nodev+0x26/0x160 [ 1404.454193][T19696] vfs_get_tree+0x88/0x270 [ 1404.468003][T19696] fc_mount+0x18/0xa0 [ 1404.472072][T19696] mq_init_ns+0x39d/0x510 [ 1404.476410][T19696] copy_ipcs+0x2ea/0x4b0 [ 1404.480756][T19696] create_new_namespaces+0x212/0x700 [ 1404.486106][T19696] unshare_nsproxy_namespaces+0x116/0x160 [ 1404.491837][T19696] ksys_unshare+0x4f6/0x8e0 [ 1404.496412][T19696] ? __lock_acquire+0x7d40/0x7d40 [ 1404.501444][T19696] ? sighand_ctor+0x40/0x40 [ 1404.505950][T19696] ? lock_chain_count+0x20/0x20 [ 1404.510809][T19696] ? syscall_enter_from_user_mode+0x21/0x70 [ 1404.516727][T19696] __x64_sys_unshare+0x34/0x40 [ 1404.521533][T19696] do_syscall_64+0x4c/0xa0 [ 1404.525988][T19696] ? clear_bhb_loop+0x30/0x80 [ 1404.530844][T19696] ? clear_bhb_loop+0x30/0x80 [ 1404.535876][T19696] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1404.541779][T19696] RIP: 0033:0x7fa349bd22d9 [ 1404.546197][T19696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1404.565890][T19696] RSP: 002b:00007fa347e2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1404.574309][T19696] RAX: ffffffffffffffda RBX: 00007fa349e59fa0 RCX: 00007fa349bd22d9 [ 1404.582386][T19696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 1404.590368][T19696] RBP: 00007fa349c69888 R08: 0000000000000000 R09: 0000000000000000 [ 1404.598341][T19696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1404.606314][T19696] R13: 00007fa349e5a038 R14: 00007fa349e59fa0 R15: 00007ffd9867a598 [ 1404.614444][T19696] [ 1404.617605][ C0] vkms_vblank_simulate: vblank timer overrun [ 1404.668368][T19687] RDS/IB: syz0: added [ 1404.694628][T19687] smc: adding ib device syz0 with port count 1 [ 1404.719598][T19687] smc: ib device syz0 port 1 has pnetid [ 1404.749239][T12101] dummy0 speed is unknown, defaulting to 1000 [ 1404.802530][T19687] dummy0 speed is unknown, defaulting to 1000 [ 1405.040997][T19687] dummy0 speed is unknown, defaulting to 1000 [ 1405.188764][T19579] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1405.210648][T19579] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1405.232672][T19579] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1405.252075][T19579] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1405.253475][T19687] dummy0 speed is unknown, defaulting to 1000 [ 1405.372956][T19579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1405.393574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1405.413338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1405.442016][T19687] dummy0 speed is unknown, defaulting to 1000 [ 1405.444171][T19579] 8021q: adding VLAN 0 to HW filter on device team0 [ 1405.465789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1405.481092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1405.490774][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.497898][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.526429][T10043] Bluetooth: hci0: command 0x0409 tx timeout [ 1405.536991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1405.553974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1405.564719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1405.577190][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.584415][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.593288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1405.603211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1405.621814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1405.633396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1405.644633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1405.671571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1405.685117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1405.718476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1405.747043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1405.768186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1405.796776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1405.824182][T19687] dummy0 speed is unknown, defaulting to 1000 [ 1406.014706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1406.039084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1406.060644][T19579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.085079][T19687] dummy0 speed is unknown, defaulting to 1000 [ 1406.104941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1406.121266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1406.183930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1406.195791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1406.224811][T19579] device veth0_vlan entered promiscuous mode [ 1406.242943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1406.266764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1406.307214][T19579] device veth1_vlan entered promiscuous mode [ 1406.326061][T10043] Bluetooth: hci5: command 0x041b tx timeout [ 1406.356065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1406.374212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1406.392616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1406.432003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1406.473490][T19579] device veth0_macvtap entered promiscuous mode [ 1406.500913][ T9943] device hsr_slave_0 left promiscuous mode [ 1406.513548][ T9943] device hsr_slave_1 left promiscuous mode [ 1406.531234][ T9943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1406.539678][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1406.556972][ T9943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1406.564519][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1406.583488][ T9943] device bridge_slave_1 left promiscuous mode [ 1406.597540][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.607223][ T9943] device bridge_slave_0 left promiscuous mode [ 1406.613604][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.631926][ T9943] device veth1_macvtap left promiscuous mode [ 1406.640657][ T9943] device veth0_macvtap left promiscuous mode [ 1406.654669][ T9943] device veth1_vlan left promiscuous mode [ 1406.677412][ T9943] device veth0_vlan left promiscuous mode [ 1407.028791][ T9943] team0 (unregistering): Port device team_slave_1 removed [ 1407.072512][ T9943] team0 (unregistering): Port device team_slave_0 removed [ 1407.100358][ T9943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1407.130476][ T9943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1407.288622][ T9943] bond0 (unregistering): Released all slaves [ 1407.329317][T19579] device veth1_macvtap entered promiscuous mode [ 1407.341525][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1407.352078][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1407.393353][T19579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1407.422528][T19579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.445999][T19579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1407.471311][T19579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.480338][T19830] capability: warning: `syz.4.4074' uses 32-bit capabilities (legacy support in use) [ 1407.494888][T19579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1407.534792][T19579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.560795][T19579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1407.572411][T19579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.588290][T19579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1407.596364][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1407.616131][T17110] Bluetooth: hci0: command 0x041b tx timeout [ 1407.637432][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1407.689619][T19579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.716125][T19579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.738923][T19579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.806056][T19579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.815908][T19579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.856119][T19579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.880190][T19579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.905791][T19579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.946553][T19579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1407.961195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1407.986877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1408.016724][T19579] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.052688][T19579] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.062735][T19579] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.088381][T19579] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.099770][T19858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4077'. [ 1408.220940][T16403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.241856][T16403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.262951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1408.285117][T16403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.293428][T19860] x_tables: duplicate underflow at hook 1 [ 1408.300153][T16403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.308989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1408.406984][T17125] Bluetooth: hci5: command 0x040f tx timeout [ 1408.557016][ T25] audit: type=1800 audit(1791952075.967:49): pid=19868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4087" name="subclass" dev="configfs" ino=77307 res=0 errno=0 [ 1408.596132][ T25] audit: type=1800 audit(1791952075.997:50): pid=19868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4087" name="protocol" dev="configfs" ino=76482 res=0 errno=0 [ 1408.660440][T17110] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1408.747907][T19871] device syzkaller0 entered promiscuous mode [ 1409.006260][T17110] usb 3-1: too many configurations: 102, using maximum allowed: 8 [ 1409.028175][T19876] dummy0 speed is unknown, defaulting to 1000 [ 1409.100352][T17110] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1409.115999][T17110] usb 3-1: config 1 has no interface number 0 [ 1409.226284][T17110] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1409.234450][T17110] usb 3-1: config 1 has no interface number 0 [ 1409.326218][T17110] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1409.334327][T17110] usb 3-1: config 1 has no interface number 0 [ 1409.436192][T17110] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1409.444219][T17110] usb 3-1: config 1 has no interface number 0 [ 1409.556205][T17110] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1409.564224][T17110] usb 3-1: config 1 has no interface number 0 [ 1409.677220][T17110] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1409.685261][T17110] usb 3-1: config 1 has no interface number 0 [ 1409.806289][T17110] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1409.814304][T17110] usb 3-1: config 1 has no interface number 0 [ 1409.875879][T19876] chnl_net:caif_netlink_parms(): no params data found [ 1409.926449][T17110] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1409.946012][T17110] usb 3-1: config 1 has no interface number 0 [ 1409.992214][T19876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.040656][T19876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.084817][T19876] device bridge_slave_0 entered promiscuous mode [ 1410.108141][T19876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.126136][T17110] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1410.138629][T19876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.151051][T17110] usb 3-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 1410.166967][T19876] device bridge_slave_1 entered promiscuous mode [ 1410.176381][T17110] usb 3-1: Product: syz [ 1410.180549][T17110] usb 3-1: Manufacturer: syz [ 1410.215841][T17110] usb 3-1: SerialNumber: syz [ 1410.245591][T19876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.278718][T19876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.333111][T19876] team0: Port device team_slave_0 added [ 1410.352442][T19876] team0: Port device team_slave_1 added [ 1410.384746][T19876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.401900][T19876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1410.448901][T19876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.476547][T19876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.493412][T19876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1410.520328][T17125] Bluetooth: hci5: command 0x0419 tx timeout [ 1410.550475][T19876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.578102][T17110] usb 3-1: 3:72 : does not exist [ 1410.583343][T17110] usb 3-1: 3:199 : does not exist [ 1410.629983][ T4201] [ 1410.632444][ T4201] ====================================================== [ 1410.639445][ T4201] WARNING: possible circular locking dependency detected [ 1410.646516][ T4201] syzkaller #0 Not tainted [ 1410.650924][ T4201] ------------------------------------------------------ [ 1410.657918][ T4201] kworker/u5:6/4201 is trying to acquire lock: [ 1410.664060][ T4201] ffffffff8e3b4048 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x95/0x780 [ 1410.673336][ T4201] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1410.673336][ T4201] but task is already holding lock: [ 1410.680682][ T4201] ffffffff8e3946c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_key_refresh_complete_evt+0x3d6/0x880 [ 1410.691176][ T4201] [ 1410.691176][ T4201] which lock already depends on the new lock. [ 1410.691176][ T4201] [ 1410.701576][ T4201] [ 1410.701576][ T4201] the existing dependency chain (in reverse order) is: [ 1410.710579][ T4201] [ 1410.710579][ T4201] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 1410.718310][ T4201] __mutex_lock_common+0x1e5/0x2400 [ 1410.724110][ T4201] mutex_lock_nested+0x17/0x20 [ 1410.729521][ T4201] hci_remote_features_evt+0x5d9/0xa10 [ 1410.735556][ T4201] hci_event_packet+0x600/0x1310 [ 1410.741102][ T4201] hci_rx_work+0x255/0xa10 [ 1410.746042][ T4201] process_one_work+0x867/0xff0 [ 1410.751512][ T4201] worker_thread+0xad7/0x12a0 [ 1410.756887][ T4201] kthread+0x42e/0x520 [ 1410.761483][ T4201] ret_from_fork+0x1f/0x30 [ 1410.766416][ T4201] [ 1410.766416][ T4201] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 1410.773693][ T4201] __mutex_lock_common+0x1e5/0x2400 [ 1410.779411][ T4201] mutex_lock_nested+0x17/0x20 [ 1410.784678][ T4201] l2cap_chan_connect+0xfb/0xe20 [ 1410.790199][ T4201] l2cap_sock_connect+0x5a3/0x770 [ 1410.795893][ T4201] kernel_connect+0x11c/0x180 [ 1410.801061][ T4201] rfcomm_dlc_open+0x600/0x10c0 [ 1410.806434][ T4201] rfcomm_sock_connect+0x2e9/0x600 [ 1410.812126][ T4201] __sys_connect+0x3cb/0x450 [ 1410.817215][ T4201] __x64_sys_connect+0x76/0x80 [ 1410.822473][ T4201] do_syscall_64+0x4c/0xa0 [ 1410.827390][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1410.833781][ T4201] [ 1410.833781][ T4201] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 1410.841132][ T4201] __lock_acquire+0x38f7/0x7d40 [ 1410.846488][ T4201] lock_acquire+0x19f/0x400 [ 1410.851501][ T4201] __mutex_lock_common+0x1e5/0x2400 [ 1410.857199][ T4201] mutex_lock_nested+0x17/0x20 [ 1410.862457][ T4201] rfcomm_security_cfm+0x95/0x780 [ 1410.867977][ T4201] hci_key_refresh_complete_evt+0x44f/0x880 [ 1410.874360][ T4201] hci_event_packet+0x5d6/0x1310 [ 1410.879786][ T4201] hci_rx_work+0x255/0xa10 [ 1410.884695][ T4201] process_one_work+0x867/0xff0 [ 1410.890041][ T4201] worker_thread+0xad7/0x12a0 [ 1410.895217][ T4201] kthread+0x42e/0x520 [ 1410.899777][ T4201] ret_from_fork+0x1f/0x30 [ 1410.904696][ T4201] [ 1410.904696][ T4201] other info that might help us debug this: [ 1410.904696][ T4201] [ 1410.914902][ T4201] Chain exists of: [ 1410.914902][ T4201] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 1410.914902][ T4201] [ 1410.927467][ T4201] Possible unsafe locking scenario: [ 1410.927467][ T4201] [ 1410.934925][ T4201] CPU0 CPU1 [ 1410.940610][ T4201] ---- ---- [ 1410.945948][ T4201] lock(hci_cb_list_lock); [ 1410.950443][ T4201] lock(&hdev->lock); [ 1410.956998][ T4201] lock(hci_cb_list_lock); [ 1410.963989][ T4201] lock(rfcomm_mutex); [ 1410.968389][ T4201] [ 1410.968389][ T4201] *** DEADLOCK *** [ 1410.968389][ T4201] [ 1410.976504][ T4201] 4 locks held by kworker/u5:6/4201: [ 1410.981765][ T4201] #0: ffff88807c62e938 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 1410.992103][ T4201] #1: ffffc90002fefd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 1411.003483][ T4201] #2: ffff88805e2d4478 (&hdev->lock){+.+.}-{3:3}, at: hci_key_refresh_complete_evt+0x5e/0x880 [ 1411.013811][ T4201] #3: ffffffff8e3946c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_key_refresh_complete_evt+0x3d6/0x880 [ 1411.024785][ T4201] [ 1411.024785][ T4201] stack backtrace: [ 1411.030656][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 1411.038188][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1411.048218][ T4201] Workqueue: hci4 hci_rx_work [ 1411.052877][ T4201] Call Trace: [ 1411.056132][ T4201] [ 1411.059056][ T4201] dump_stack_lvl+0x188/0x250 [ 1411.063708][ T4201] ? load_image+0x410/0x410 [ 1411.068181][ T4201] ? show_regs_print_info+0x20/0x20 [ 1411.073361][ T4201] ? print_circular_bug+0x12b/0x1a0 [ 1411.078552][ T4201] check_noncircular+0x2f8/0x400 [ 1411.083479][ T4201] ? print_deadlock_bug+0x5d0/0x5d0 [ 1411.088651][ T4201] ? lockdep_lock+0xf1/0x1f0 [ 1411.093224][ T4201] ? mark_lock+0x94/0x320 [ 1411.097622][ T4201] ? _find_first_zero_bit+0xd1/0xf0 [ 1411.102824][ T4201] __lock_acquire+0x38f7/0x7d40 [ 1411.107676][ T4201] ? verify_lock_unused+0x140/0x140 [ 1411.112855][ T4201] lock_acquire+0x19f/0x400 [ 1411.117336][ T4201] ? rfcomm_security_cfm+0x95/0x780 [ 1411.122543][ T4201] ? __might_sleep+0xf0/0xf0 [ 1411.127143][ T4201] ? read_lock_is_recursive+0x10/0x10 [ 1411.132498][ T4201] __mutex_lock_common+0x1e5/0x2400 [ 1411.137679][ T4201] ? rfcomm_security_cfm+0x95/0x780 [ 1411.142861][ T4201] ? rcu_lock_release+0x20/0x20 [ 1411.147789][ T4201] ? __mutex_trylock_common+0x15c/0x260 [ 1411.153333][ T4201] ? rfcomm_security_cfm+0x95/0x780 [ 1411.158510][ T4201] ? mutex_lock_io_nested+0x60/0x60 [ 1411.163690][ T4201] ? l2cap_security_cfm+0x12b4/0x1340 [ 1411.169038][ T4201] ? l2cap_disconn_cfm+0xc0/0xc0 [ 1411.174051][ T4201] mutex_lock_nested+0x17/0x20 [ 1411.178794][ T4201] rfcomm_security_cfm+0x95/0x780 [ 1411.183958][ T4201] ? mark_lock+0x94/0x320 [ 1411.188275][ T4201] ? rfcomm_send_msc+0x340/0x340 [ 1411.193211][ T4201] ? rfcomm_send_msc+0x340/0x340 [ 1411.198134][ T4201] hci_key_refresh_complete_evt+0x44f/0x880 [ 1411.204004][ T4201] hci_event_packet+0x5d6/0x1310 [ 1411.208914][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 1411.213759][ T4201] ? rcu_lock_release+0x20/0x20 [ 1411.218590][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 1411.223772][ T4201] hci_rx_work+0x255/0xa10 [ 1411.228169][ T4201] process_one_work+0x867/0xff0 [ 1411.233016][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 1411.238622][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 1411.243939][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1411.248960][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1411.254479][ T4201] ? wq_worker_running+0x97/0x170 [ 1411.259475][ T4201] worker_thread+0xad7/0x12a0 [ 1411.264222][ T4201] kthread+0x42e/0x520 [ 1411.268261][ T4201] ? rcu_lock_release+0x20/0x20 [ 1411.273092][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 1411.277668][ T4201] ret_from_fork+0x1f/0x30 [ 1411.282063][ T4201] [ 1411.300061][T17110] usb 3-1: USB disconnect, device number 5 [ 1411.320801][T17117] Bluetooth: hci3: command 0x0409 tx timeout [ 1411.356858][T19876] device hsr_slave_0 entered promiscuous mode [ 1411.368567][T19876] device hsr_slave_1 entered promiscuous mode [ 1411.375202][T19876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1411.399257][T19876] Cannot create hsr debugfs directory [ 1411.588759][ T9943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.669653][ T9943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.728282][ T9943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.780498][ T9943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.702244][ T9943] device hsr_slave_0 left promiscuous mode [ 1412.708831][ T9943] device hsr_slave_1 left promiscuous mode [ 1412.715062][ T9943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1412.723344][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.733287][ T9943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1412.741542][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.756500][ T9943] device bridge_slave_1 left promiscuous mode [ 1412.762844][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.777208][ T9943] device bridge_slave_0 left promiscuous mode [ 1412.784821][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.794748][ T9943] device veth1_macvtap left promiscuous mode [ 1412.806342][ T9943] device veth0_macvtap left promiscuous mode [ 1412.812566][ T9943] device veth1_vlan left promiscuous mode [ 1412.826746][ T9943] device veth0_vlan left promiscuous mode [ 1412.881488][ T9943] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1412.898013][ T9943] bond1 (unregistering): Released all slaves [ 1412.990958][ T9943] team0 (unregistering): Port device team_slave_1 removed [ 1413.002611][ T9943] team0 (unregistering): Port device team_slave_0 removed [ 1413.014015][ T9943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1413.028857][ T9943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1413.080798][ T9943] bond0 (unregistering): Released all slaves [ 1413.883117][ T9943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.991034][ T9943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.111662][ T9943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.231703][ T9943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.363832][ T9943] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.430618][ T9943] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.546740][ T9943] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.648140][ T9943] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.756976][ T9943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.857212][ T9943] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.900199][ T9943] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.960312][ T9943] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.073970][ T9943] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.120819][ T9943] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.169040][ T9943] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.250552][ T9943] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.934413][ T9943] device hsr_slave_0 left promiscuous mode [ 1416.941900][ T9943] device hsr_slave_1 left promiscuous mode [ 1416.948801][ T9943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1416.957953][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1416.967783][ T9943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1416.975272][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.983950][ T9943] device bridge_slave_1 left promiscuous mode [ 1416.992443][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.001080][ T9943] device bridge_slave_0 left promiscuous mode [ 1417.007397][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.018702][ T9943] device hsr_slave_0 left promiscuous mode [ 1417.031281][ T9943] device hsr_slave_1 left promiscuous mode [ 1417.038398][ T9943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1417.045821][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1417.053655][ T9943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1417.061454][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1417.070168][ T9943] device bridge_slave_1 left promiscuous mode [ 1417.076494][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.084555][ T9943] device bridge_slave_0 left promiscuous mode [ 1417.096101][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.114614][ T9943] device hsr_slave_0 left promiscuous mode [ 1417.121309][ T9943] device hsr_slave_1 left promiscuous mode [ 1417.127879][ T9943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1417.135290][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1417.143502][ T9943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1417.151120][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1417.158765][ T9943] device bridge_slave_1 left promiscuous mode [ 1417.165068][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.173453][ T9943] device bridge_slave_0 left promiscuous mode [ 1417.180480][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.190693][ T9943] device hsr_slave_0 left promiscuous mode [ 1417.196906][ T9943] device hsr_slave_1 left promiscuous mode [ 1417.203016][ T9943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1417.210684][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1417.218564][ T9943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1417.226183][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1417.233763][ T9943] device bridge_slave_1 left promiscuous mode [ 1417.240294][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.248388][ T9943] device bridge_slave_0 left promiscuous mode [ 1417.254515][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.264041][ T9943] device hsr_slave_0 left promiscuous mode [ 1417.270302][ T9943] device hsr_slave_1 left promiscuous mode [ 1417.276808][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1417.284277][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1417.292653][ T9943] device bridge_slave_1 left promiscuous mode [ 1417.299149][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.307080][ T9943] device bridge_slave_0 left promiscuous mode [ 1417.313208][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.324294][ T9943] rdma_rxe: ignoring netdev event = 10 for dummy0 [ 1417.332796][ T9943] device veth1_macvtap left promiscuous mode [ 1417.339114][ T9943] device veth0_macvtap left promiscuous mode [ 1417.345222][ T9943] device veth1_vlan left promiscuous mode [ 1417.351321][ T9943] device veth0_vlan left promiscuous mode [ 1417.357767][ T9943] device veth1_macvtap left promiscuous mode [ 1417.363850][ T9943] device veth0_macvtap left promiscuous mode [ 1417.370322][ T9943] device veth1_vlan left promiscuous mode [ 1417.376181][ T9943] device veth0_vlan left promiscuous mode [ 1417.382595][ T9943] device veth1_macvtap left promiscuous mode [ 1417.389131][ T9943] device veth0_macvtap left promiscuous mode [ 1417.395154][ T9943] device veth1_vlan left promiscuous mode [ 1417.402157][ T9943] device veth0_vlan left promiscuous mode [ 1417.409395][ T9943] device veth1_macvtap left promiscuous mode [ 1417.415399][ T9943] device veth0_macvtap left promiscuous mode [ 1417.421973][ T9943] device veth1_vlan left promiscuous mode [ 1417.427814][ T9943] device veth0_vlan left promiscuous mode [ 1417.608558][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.614849][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1417.634922][ T9943] infiniband syz0: set down [ 1417.701045][ T9943] team0 (unregistering): Port device team_slave_1 removed [ 1417.714770][ T9943] team0 (unregistering): Port device team_slave_0 removed [ 1417.726889][ T9943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1417.740873][ T9943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1417.792441][ T9943] bond0 (unregistering): Released all slaves [ 1417.848840][ T9943] team0 (unregistering): Port device team_slave_1 removed [ 1417.859190][ T9943] team0 (unregistering): Port device team_slave_0 removed [ 1417.871992][ T9943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1417.883861][ T9943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1417.932613][ T9943] bond0 (unregistering): Released all slaves [ 1417.990947][ T9943] team0 (unregistering): Port device team_slave_1 removed [ 1418.002389][ T9943] team0 (unregistering): Port device team_slave_0 removed [ 1418.016850][ T9943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.030104][ T9943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.078588][ T9943] bond0 (unregistering): Released all slaves [ 1418.130262][ T9943] team0 (unregistering): Port device team_slave_1 removed [ 1418.140719][ T9943] team0 (unregistering): Port device team_slave_0 removed [ 1418.153071][ T9943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.169318][ T9943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.201638][ T9201] smc: removing ib device syz0 [ 1418.214379][ T9943] bond0 (unregistering): Released all slaves [ 1418.241819][ T9943] team0 (unregistering): Port device team_slave_1 removed [ 1418.255272][ T9943] team0 (unregistering): Port device team_slave_0 removed [ 1418.265557][ T9943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.281041][ T9943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.328204][ T9943] bond0 (unregistering): Released all slaves [ 1418.340043][T17125] dummy0 speed is unknown, defaulting to 1000 [ 1418.348095][T12101] infiniband syz0: ib_query_port failed (-19)