last executing test programs: 17.966316186s ago: executing program 2 (id=105): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xfffffed3) getdents64(r1, &(0x7f0000001580)=""/247, 0xf7) openat(r2, &(0x7f0000000040)='./file2\x00', 0x200, 0x20) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x7, 0x4, 0x81, 0xffffffff, 0x3}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x48040, 0x6ab858183a7ef6ba) 17.104025582s ago: executing program 2 (id=121): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 17.063682718s ago: executing program 2 (id=122): mknodat$null(0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0), 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000005440)='./file0\x00', 0x89901) statx(r1, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) fanotify_init(0x200, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f80)={0x1, &(0x7f0000000fc0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 17.062470884s ago: executing program 2 (id=123): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)={[{@grpjquota}, {@discard}, {@resuid}, {@noload}, {@i_version}, {@data_err_ignore}]}, 0x3, 0x4fe, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x92042, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) write$sysctl(r0, &(0x7f0000000b00)='3\x00', 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x1e, 0x4, &(0x7f0000000c00)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x35}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x1e, 0x4, &(0x7f0000000c00)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x35}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0042, 0x1) r2 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x3000084, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x3000084, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_io_uring_setup(0x29d8, &(0x7f0000000540)={0x0, 0x2600, 0xc00, 0x2, 0xf}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8ffff) syz_clone(0x10000, &(0x7f0000000280)="9a660332ed5d06f316af81541a86d1b634aa6aa53839bdf1c50164531243fd28597b31d5d9d937be124c67c1f24c82dbede47413cb68d790c1e7b4adad2f8d2cfbc341f4b4e2ca03cb8f4c03e529f4ad9437e7d67a8eb302f85b174e15dfa60d2241247e03be6d85f154ff5e2d", 0x6d, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="71a41156b26fa789326418faa8ee6a3601d130309c9f0b9350614ec58726b2ea33a15beb78f39f359aa2eb2acb12753c649951ed47bf38dc7b45d41b96ebf1886972b1a163fe2b3d02942856fa30ed0fb9512e9555d16d2c3416ea1c2dfaf3a8de8bb88702bb6599ad5a623af003b2") (async) syz_clone(0x10000, &(0x7f0000000280)="9a660332ed5d06f316af81541a86d1b634aa6aa53839bdf1c50164531243fd28597b31d5d9d937be124c67c1f24c82dbede47413cb68d790c1e7b4adad2f8d2cfbc341f4b4e2ca03cb8f4c03e529f4ad9437e7d67a8eb302f85b174e15dfa60d2241247e03be6d85f154ff5e2d", 0x6d, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="71a41156b26fa789326418faa8ee6a3601d130309c9f0b9350614ec58726b2ea33a15beb78f39f359aa2eb2acb12753c649951ed47bf38dc7b45d41b96ebf1886972b1a163fe2b3d02942856fa30ed0fb9512e9555d16d2c3416ea1c2dfaf3a8de8bb88702bb6599ad5a623af003b2") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1d3042, 0x40) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1d3042, 0x40) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/59, 0x138000, 0x800, 0x9, 0x1}, 0x20) (async) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/59, 0x138000, 0x800, 0x9, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x28, {0x2, 0x4}, 0x9}, 0x1) 16.94916488s ago: executing program 2 (id=124): syz_emit_ethernet(0x17f, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000ed6a01492c00fc000000000000000000000000000001fe80000000000000000c0000000000aa2c000003", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB], 0x0) 16.162940834s ago: executing program 2 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00snapshot\x00\x00\x00\x00\x00\x00\x00\x001:0 1:1 N 16', 0x34) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000100000700100003801000001000000000000000000000000000000000000000000000000000000736e617030") 16.054242311s ago: executing program 32 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00snapshot\x00\x00\x00\x00\x00\x00\x00\x001:0 1:1 N 16', 0x34) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000100000700100003801000001000000000000000000000000000000000000000000000000000000736e617030") 7.480753342s ago: executing program 5 (id=198): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0x60000, 0x46, &(0x7f00000000c0)=""/70}]}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af04, &(0x7f0000000140)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000180)=0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x24000040) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000940)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x8, 0x140c, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8, 0x9, 0x1}}) r9 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xfffffe07}}, 0x40440d0) getsockname$packet(r10, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r10, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r9, &(0x7f0000001540)="7eeb99b6f78c67515ea2f0d01d76", 0xe, 0x94, &(0x7f0000001580)={0x11, 0x3, r11, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) sendmmsg$inet6(r1, &(0x7f00000013c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x32, @dev={0xfe, 0x80, '\x00', 0x11}, 0x9}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000280)="ccc03e4d6f72a4455de858be13ec0ba54291ebc583952cd04e8a4c19b6b4a1773f6010833680324d5dc1850e2b74082da49ce1237f657cee3576d80f902e2cfa8bc9bd38f8d832857aa849bcb2a4edd6d1", 0x51}, {&(0x7f0000000500)="1e3fb11d7438424e74f3aa5c705ad2e2d9b1fc6048ce7265d54f53c0116271b315ddacc98b7c07052b3fbccc0267b9a0ec72a8761f409fe3bc497b38b172ef7e0e54b4493ea9da8690cb2bf61a61528f5e8543333c2891b7f7a07092e5cff640b8bf07a13551510477bf265590a0c1f848fc36a3a93bd003bc82e4397bd5464215dbc2d3825fdcb6cfdf6b28057188aa898184a772aba5b6d24ab8781f92b3746b7ab370f7fcb2cd8e97eddf5e233bf6ac9e9d15fbee367f9b602085bd26999a1ffa25f358f5826ef6e1243f29110ca482c95fb504d41ba97f79d8a6314da15376654791ab14d2d91c73c2c182c558cb44dbeccd9a", 0xf5}, {&(0x7f0000000600)="c974a046eec0d4be3aae4b4eb3567bd29233dc7871d2254064a0e15266de552411f0d9aeea92a6c4edafe04c7c539f1ca905970fd9ad0d847bbaeeda3bfa6a397033553db67192d9319b235f902fa06cdfa850cdf6c92a15a92076aad08c31375088f3d82a6e2116dc39a8144657daed18713a31c0709791b8366a4934eced75410428ada1c0c12a8ded0a4d240a6a76ed9d32a5fed195efb1e043ae6637f534a4b5fa4cf28bdccefa65bf8073507e8fb262950c5051e00931ddbc23cdf94e823a841ae448de8bd7e91cfa149403984a3134a17cffbc0030c39d4126ed33feb3", 0xe0}, {&(0x7f0000000700)="df35035a2300dce08bb0d6d818a086e96496da6a1fd51f44a0ede981762b15cfc19a2986e8a01100d7aff01b641e16e412ea331ebc17f8c1385a59990dbe579971a44220af8d7d5796f4de1eb6359427b384aa92784520fc3e0d0161ca91b1323babbbd18ce9f8a824501409fa679c2de00674a98bb263219e08daec5211cc7e210f09be49545a3deae212dba52bfae56332fc50fac7d89af0", 0x99}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="00000000400000000000000029000000370000000c04000000000000c91000000000000000000000000000000001c910fe8000000000000000000000000000bb00010000980000000000000029000000390000009310010600000000ff010000000000000000000000000001fe8000000000000000000000000000bbfe880000000000000000000000000101ff020000000000000000000000000001fe880000000000000000000000000001fe8000000000000000000000000000bbfe80000000000000000000000000001100000000000000000000ffffac1e0101"], 0x3a8}}, {{&(0x7f0000000dc0)={0xa, 0x4e20, 0xef, @private0, 0x9}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000000e00)="65e5c94eb703f751bb67485c37d2d0a9c9cbd5137384553b234f0699e2b18f0b3b436144055c124307e4130025854982ca2c3178a074b45f2c0774501e9e11840d646bafb0911c65668acd4c1b83551149c2347667ac0c7bc8a81c17424f585eae685836a27b8dd4cbda624decd725f6ef0a47e9e3f66b1a94e717ef40516f8130368407c2b588f74ae928a5c5dc27d5fd7d5aa7107681121200e38bb7e752bddf39c78b9da6b4a3dcb669f9afffe9f552b379d321f9d6d09982688791ad958431eb4097f2776e3c8e1d4acd4913b0f46990afe67acf249013ceeafc258293017c1df701e26a29", 0xe7}, {&(0x7f0000000f00)="e96717606cdbc51aa6943da5c32b36513f2ae3a5219ed66c041de555e948c34a76d08a717b0cfe18faf9267c4fbf7ac6327a9ccf9d2c2e7bad5812dea3cc17f04f7b6c78859e5e9b638715d230", 0x4d}, {&(0x7f0000000f80)="f2d7d7fa6423a7488952b66025f48baa412166724b205c19971591d7eaa8b163642e8d83f70bfafa4a5b36310c31cf86d09eb2c170d465fd03e28d7aed553b58a0972c9d87ea7721787bdcd8e2f5a5aeda3e140e8d4ad346c3f8f5eb4e946d103dca42e5453d36a8a87fa863972c8b786ca4e081a51ea802567148e0d133dc3b1d528b62f288c609f5bdd22d5553f13a9ab1ffedbe98df7cc0e9e82145bcb89fc38b19799d3f819ad040ad1b8c18da61103b94438d4bcb", 0xb7}, {&(0x7f0000001040)="9fe1361289acb777ac095132c60133fea6702f7f30a6584f3e7d85d2c027427ce0cb43746e0e56d5a76ee8d44da72452bec7562fe9efb781e29eabdc9d74c82d7f2f9a79dff528bf039ad9c54d11f00be6c7d7658080a121dd6a9165414fd53198d9a4d0678a9a3d68c759b10625674e188829a610fabf9b005d2cc0d6d00ebee08b6c3081d61fb25041cdab17c741093e9fbdf4394e58c61d75205117a89a19f091370ffd1afef9dc26929bae3ef574891150b41e3a5d594d97f78f006a1e0f2bb4df5fd5a78faef339e053870138f8ecd6b59d0d3e880a29b158e1930df3d8b43d48ea3b0929db036f6feece6484", 0xef}], 0x4, &(0x7f0000001180)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x1, 0xa, 0x2, 0x5, 0x0, [@mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @local]}}}, @rthdrdstopts={{0x118, 0x29, 0x37, {0x3b, 0x1f, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x6}, @generic={0x4, 0xd2, "91b8dc9fe858625264fd8d9f22e3576afdd3ecdc03769f28f99575ab98a89ad8c7c95c3f1f70759fdff3a52eb1aaf20eb6bfaa85c6ff0868d2456cba868222681bde5b25afe4d358c9001f8ecb6848a36c42745b6a9d8a5b3b8328209c83588421d0528b2bd6df2b477b4e57db6f50aeac2c2530c08198c79aa1fb51791686c3ba3e3b646b2846efb44553864c74b902188369eadd44a2f18a4ac5544138e6aee6a546416f640e46508ae3c572da2bf0f5aed6b5a7b19bd0030b89cfb09733ed9815473eea91b94235925c796eed0586a1e4"}, @ra={0x5, 0x2, 0xac}, @calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0x5, [0x9, 0xfffffffffffffff8]}}, @enc_lim]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x16, 0x4, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x1, 0x4, [0xe, 0x7fffffffffffffff]}}, @jumbo={0xc2, 0x4, 0xd}, @jumbo={0xc2, 0x4, 0x1000}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x87, 0x6, 0x2, 0x3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x4}, @mcast2, @private0]}}}], 0x220}}], 0x2, 0x680c4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0) 5.669095691s ago: executing program 5 (id=211): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, r0, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x20000052) r3 = socket$netlink(0x10, 0x3, 0x14) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000200)={r3, &(0x7f0000000000)='-\'@:$&&)^\x00', 0x0, &(0x7f0000000080)={@_ha_fsid={[0x800, 0x2]}, {0x0, 0x2, 0xc, 0x532}}, 0x1, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x2}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x38, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, 'g!'}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_skbmod={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x84d}, 0x0) 5.622618774s ago: executing program 5 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRES16], &(0x7f0000000740), 0x400) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000b40)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000c00)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) (async) sendmsg$inet6(r1, &(0x7f0000000cc0)={&(0x7f0000000d00)={0xa, 0x4e24, 0x8004, @loopback, 0x6}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000d80)="d5", 0x1}], 0x1}, 0x40054) (async, rerun: 64) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000dc0)={0x0, @in6={{0xa, 0x4e21, 0xfffffff7, @empty, 0x1800}}, 0xd, 0x29, 0xfffffffc, 0x9, 0x8a, 0xc9}, 0x9c) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/115, 0x0, 0x80a0000}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000004c0)={0x1, 0x1, 0x0, &(0x7f0000000500)=""/100, 0x0, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580)) (async) fstat(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = getegid() (async) fstat(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000880)='./proc\x00', 0x2000, 0x800, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) (async) getresgid(&(0x7f0000000a40), &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)) getgroups(0x6, &(0x7f0000000b00)=[r4, r5, r6, r7, r8, r9]) (async, rerun: 32) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async, rerun: 32) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000005c0)=0x20000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="072529f32b8a39cf63002400000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000e80)=ANY=[@ANYBLOB="9c000000", @ANYRES32=r0, @ANYBLOB="00082dbd7000fedbdf25050000000800021400068008000700"/38, @ANYRES32=0x0, @ANYBLOB="060005004e2200000500050066000000080002000100000005000500570000003c000180060005004e20000008000600020000000800060000000000060001000a000000080003000a01010208000700", @ANYRES32=0x0, @ANYBLOB="06140500450006000000"], 0x9c}, 0x1, 0x0, 0x0, 0x2800}, 0x8000) 4.680998988s ago: executing program 5 (id=220): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ftruncate(r0, 0x7fff) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/resume', 0x1, 0x0) write(r2, &(0x7f0000000340)='0000:00:1', 0x9) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x800001c) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x595f, 0x400, 0x0, 0xb}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2004, 0xfffffffd, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./mysys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000080), 0x4, 0x526, &(0x7f0000000500)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTaC90LCFWVEBUnDm1I3CiKXUexK5rQQ3rkXolKnID/gBsHpJ44cOMGNy7lgFSgAjVIHIxmPEndxE4CceIm/v2kycx7M/X3Xtz3nudFnhfA0LoUEZsRcS4i7kTEVJ6f5Ftcb2/pdS9fPFzYevFwIYlW69bfk+x8mhcd/yb1Vv6a4xHx/e9E/CjZG7exvrEyX61W1vL0dLO2Ot1Y37i6XMhzynOzczMfX/uo3Le6vlf79fNvL9/4wW9/86Vnf9j85k/SYk3+9EJ2rrMe/dSuejEmO/JGI+LGcQQbkNH8/w+nT9raPhMR72ftfypGsncTADjLWq2paE11pgGAsy69/5+MpFDK5wImo1AoldpzeO/GRKFabzSvTNXv31uMbA7rYhQLd5erlZl8rvBiFJM0PZsdv0qXX0s/rlyLiHci4vHY+ex8aaFeXRzkBx8AGGJv7Rr//zXWHv87FQdVOADg+IwPugAAwIkz/gPA8DH+A8Dw+R/Gf98OBIAzwv0/AAwf4z8ADJ8Dx/9HJ1MOAOBEfO/mzXRrbbWff739pO6ri5XGSql2f6G0UF9bLS3V60vVSmmh1Tro9ar1+urshzvJxvrG7Vr9/r3m7eXa/FLldsWzBABg8N557+mf0kF/85Pz2RYdazkYq+FsKwy6AMDAjAy6AMDA+D4PDK9D3OObBoAzrssSvW35BEHS64InFn+F0+ry583/w7A6yvy/uQM43f6/+f9v9b0cwMkzhsPwarUSa/4DwJAxxw/0/Pt/rucjQp70vywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwWkxmW1IoZWuBb6Y/C6VSxIWIuBjF5O5ytTITEW9HxB/HimNpenbQhQYAjqjw1yRf/+vy1AeTu8+eS/49lu0j4sc/v/WzB/PN5tpsmv+PnfzmkzT/fHOtfG4QFQAAOl3fm5WN3+V833Ej//LFw4Xt7SSL+PzT9uKiadytfGufGY3RbD8exYiY+GeSp9vSzysjfYi/+SgiPrdd//F40BFhMpsDaa98ujt+GvtC3+N3/v53xy+8Vt9Cdi7dF7PfxWdjV+GAAz39tN1P5m0vbeJ5+yvEpWzfvf2PZz3U0aX9X9pct/b0f4Wd/m9kT/wka/OXdtL7l+T5h7/77p7M1lT73KOIL4x2i5/sxE+697/FDw5Zxz9/8cvv9zrX+kXE5a71316RupZ1s9PN2up0Y33j6nJtfqmyVLlXLs/Nzs18fO2j8nQ2R93++ftuMf72yZW3e8VP6z/RI/74/vWPrx2y/r/8z50ffmWf+N/4avf3/9194qdj4tcPGX9+4nrP5bvT+Is96n/A+x9XDhn/2V82Fg95KQBwAhrrGyvz1Wpl7YCD9LPmQdc4OPxBem//BhQjO4jNiM6ckSO8YDYpERFdr0k/Ub8ZVT6ug2Rg0X/V7xccdM8EHLdXjX7QJQEAAAAAAAAAAAAAAHpprG+sjHX/tlbfDgZdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6u/wYAAP//ydTDwA==") fchownat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x0, 0xee01, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a80)='cgroup.stat\x00', 0x275a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.241073733s ago: executing program 5 (id=229): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='mnt\x00', 0x4, &(0x7f0000000440), 0x0, 0x236, &(0x7f0000000480)="$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") ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000140)) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x8480, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000180)={@random="e90c630faca2", @link_local, @val={@val={0x88a8, 0x7, 0x1, 0x3}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x0, 0x8}}}}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000003e0007012cbd7006facbdf25037c00000400c380100001800c0010800500031d"], 0x28}, 0x1, 0x0, 0x0, 0xc111}, 0xc000) 3.644928707s ago: executing program 4 (id=237): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x63ba, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500002000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYBLOB="2f6bb09f8a1480ed7073a80651d5890c7f0185f75c61d5d567f852", @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0xfffffff7) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000480)={0xffffffffffffffff}) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}}, 0x64000) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000940), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000980)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x2cc}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x4be}]}, 0x44}}, 0x200000c0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0xa4) write(r8, &(0x7f0000000780)='3', 0x4e) semget(0x1, 0x1, 0x620) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000500)=0x4, 0x4) sendmmsg$inet(r2, &(0x7f00000005c0)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0xb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x10004004, &(0x7f00000001c0)={0xa, 0x4e21, 0x765, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x6}, 0x1c) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x12143, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000030000000000000000000000000000002b13addc33981c9210b4c3af7116e5523c97e2c005fba03616d312201d209a48c24c4b1753d1bf6914edf320634d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.588927686s ago: executing program 3 (id=240): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xd00, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000040}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000000}}], 0x2, 0x8000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYBLOB="7fc037addce2c70d2deb60a2ad8221866533de37ca499b9e80e3bfb580db8541", @ANYBLOB="01002abd7000fddbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0002000000000000000c009000fffffeffffffffff"], 0x54}, 0x1, 0x0, 0x0, 0x404c041}, 0x2400c080) r3 = syz_open_dev$video4linux(&(0x7f0000000100), 0xffffffff, 0xa8701) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) 3.532667891s ago: executing program 4 (id=241): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000700000000008520000002000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0xe8, &(0x7f0000000140)=""/232, 0x41000, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xd, 0x7, 0x4}, 0x10, 0xa149, 0xffffffffffffffff, 0x9, &(0x7f00000002c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x5, 0x2, 0x10, 0x4}, {0x4, 0x1, 0xa, 0x8}, {0x2, 0x4, 0x3, 0x5}, {0x4, 0x4, 0x8, 0x4}, {0x1, 0x1, 0x1, 0x5}, {0x1, 0x5, 0x3, 0x8}, {0x4, 0x1, 0x10, 0x7}, {0x5, 0x4, 0x8, 0x4}, {0x4, 0x1, 0x4, 0x6}], 0x10, 0x6}, 0x94) (async) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x60000) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/timer_list\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000980)={0x0, 0xa568, 0x80, 0x2, 0xb3}, &(0x7f0000000a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2bb1, 0x2000, 0x1, 0x2cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa280, 0x0, 0x0, 0xa91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ab9, 0x40, 0x0, 0x26e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29d5, 0x4000, 0x0, 0x115}, 0xffffffffffffffff}], 0x4, &(0x7f0000001c80)={0x2e, 0x1e, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, '\x00', {0xffff, 0xdce, 0x0, &(0x7f0000000c80)=@buf_max_buf="750aa411bf3ca69287df94090a242c35d6683c39b09ff30b13dd032817434994b56098cefc8ad1b25c5a2f79bce1cfc3747c9763b52358cbaabf0319c636391d93edc6f41dcbb0dd679ef2ffbb68212a9f832ac52c048f5bf496fa8ce8f77f67fe32269d899538dc1eaf7d892c28972c5c05ea690e91a016cec819fa3eceb6bd2e3492d4853bd1447bab1c3df436a00efbc5b9aac9b928c342caf2285a71385ab11b48109c10c775be7eef24e9310d0a2e4062954b654ffa7a0a9e38f89c0394767c493936431da9b6b3c2d4e2a94975cba5e51858f72d1b5c4d794da2f44945e9fe2b9a81014bcb92b21812f851a2e287513e6a7ea09063b3de112443a83aac678661ac41cf661d4aad4f141623bcf54e23cd0ff325cbc8bae1edfe75afef33c51c457efdd1216f46be373b3e3064ece3fff518bd6ac422791ef34fe9de624a8203dc66b3002f51c59a9897bd81854c4fcee4c687ae774f58a15e34bd950d3525896fe9f2778c3cdd6bde3b493fa2cc55fd536ffb064b163d740fbb13ac2968ab15a377df1f173400283f9206d4a43ee3801627d3da023bdff115ac4bc76b0c295b151cc01e7521c7e38bd7f538f569250ce3c56afd3d42d51a4f13dbc325ac7d73362f6d573ed9c163364f0b294f95af9fc2a382791d7b43bcbb7f154840a3556d3becba0b9263611d0ef03d38789aea448b82518c20d98388a2258ca5aaaf383c622f59f2db0e4de061d13e073a40c5ec6cb7d84197645882e1e596a6b08df8fd6cdddcd8ff87d996483d492b62bd8b0f7c3021f056eda6642c6c2c444d053d2a2a35c1034665b3497c20f754fc04b092cdee2ccd82851d1969aded1863fa57f3e0a3032e40fe2fecab6859eacae39e62c21f89e682a019e194f67f93d4572ceecc4ff9cdb9a7716cedcb9ce26f9de44279599b38eac2f3034105c940f2372ba97434f384b769d9d2f0d0156df20b8f542042214f7a69b8c17074cf75a0f49c4caa6d5aa2da5bf252a37c3c72f081b168dd45c10d6e0da1db5e741ec2e77dc9427447df54be992660f9b0b6b6563b690f1805a6e2ced52d5445686175932ab6335428921901de5773ac8c579aafd8ef9ad1ad95a8ed5518ec19596d429bb1bd0f26a3faf6eb4e171a57c48fdf1b7b32dd15c4d50af45bd452e4eb3193704cbbb6a9fe316dbce8a0be7625bdce26d5577b94a9d55166f944c46dbfc83100648b123f0ebe93ebcd326d2e80d1a90eb21d2403d3c8cef6fbdf1deb2118481d90ffe3e1c0f1aa55c95e501cd226e37fb75722078ababef032c664bcd7aaff2cf2a1c1a92d59cb89b05d8c9bff874e8d41050f70fce26bd3100b3806ae6522a31795fe3d13baae8b58d597fcb9b37142f6f2efbba674a5b818d0010eb72865db9b9755e0bc65d9416e35e06d6449c200cafee0694721e18f9e8a3b0c457822c27f967f2bd8241b0495b9b92b3ba157dfb9379af9bf26d05bd7f8a786874f7d462d4c26ca3e05d381afb84f3b2483bdd74b507fb3a91d18712f0ad39a6d0ccf8371e96ecacfcf686d5679e3432123aa2e5b914738fb8a5146407143e403ca677d5f11baaaed9bb060b4daa696acc70372c651f8c9175056f7434f1452c426813706af8a02dfacc856cf92285a354c7a06a89f7c1303b14798fb2d8bbd491674e9bce18258c88d0024a37b4285b32ba704dd846eb0d6fbdc50a7cac73a8917eb49e434e5b2732a236903fdb6a160983005417a571ec6f93c4ea539698d7c4c87c96fe4be3fb5732d4d2985bdcdaa999803c0de11ae7bf4509b357277e636a53cfa2c7373145ccbd94b69707b0c22b36a2e52d4b7c24d289f85bd56292dfab0424c7b05e1075361002c4d299b23c2fa40fff795296b8b4b74e1238a16c459e76a3ba08dc4c792fedbb2988f04835023620bed80027370b29e3d9baabe4ca596b7d5e48ee66fcb148c2f9db31dcf3c9d79406df9e2683f96880679a0f3ff04ee63b52fd5779cc40d3ca40f5da7d9e2a442fd6ae3c44ed7e9a0232b2276138cc8bcc7c15f497a45706d2f38baa4b07a183d494038752b2e19f4f96867e8024ee52c0b8ff0c37d6e69e6a98315f8470b32259d660938b97b41211e4921e8d8b9a9b6c005255b170f714f06adf6563bb460cc3f2091eb48f973635f138e419577aac68aa481873e08467e00f9c10d766d85327eff3be46ff6c79fe957a1762a72445782c35011ca7cfbb3f75a5453e3e16cf3383e6bc0877cf91a18fc4f38524c27d5db964d76e6d0648de21703f77b0e1ce8353981f70be8748d793dd39c49fb73e6e2a26cacdb988cb633f754d6f9edfd76700c7e88a5959b7063274539a51fb9e3a78c93c3216d131738bec8dc1883c1c5ae05af8821b9dd7f6bafe2f715e5b127b4e7d8ae941e3f57f79c0e65983736f717580897440596b6ada17c9fa77ae2959c5afae263c7df7aa8d40ffe94c95257f25c88badbcec56129f99868bd6e8d692c4cf10b17664397f0b1727c1d2433af5f6081395ec957094b3338b39f5128498920a3e9b3d5f99807db5613f5c11eaea40f13315e39e49626cbc0fb968e58ce17b3e5ee579a1a31a3e60e42d7c2a24a98fc1b6fd8c4b94a5931c3e1d02f6936621cfcaa75fba947449eb91de2ece42a95b9a8fbf1da2100c2548ee92e204a1614a9ac9554d7c2c0f7eab9e0befd65a238b6592efa033711748a2082d1aa2f49f175ed86db0796c7bd8dc368fba05fb8db3db5ff4e6de1f53bc2d58d3600eefc663bca761b1f958f17fab366483948bc1534e94c1e46bc7df2a15b5a0a2eee0cdba63e78625991c65460bf4bdb44f42203953d6222f950e5f349c70e02822c0787c8d4247fe90a697186a0714a61b18bd410113fe3010767c312278508e6e0fb70bea9fc7ece36874205d8e82eb78f718ac196ce17cdcaf3016fc35861daed2a3e95d291a0c8208d1a3bc30807c9b4f63521eb9f6a99bb397bc4cfe6fc8079634fbe58337f4a13bff74f87ff9630fba857f30844a4e95f095bd2df4f958cb36fcf1741e604375922f983620557b353c816508d1c8c1c76ab179961e3520354e86689c824abf5b62e6cc8de04643d9d68875d367502d521afc30dc516b423753b4f28b39bcfb3fac40c3eba509b52e82336e732d65f8fad0fcceb97fd62bc1f2b5e81e1c4e4abfdf0744778544807a45f185a2ee40efec9f5ee999a656b94279baf96595ed0351188a3bc26e092c348da0d3651f5dd5c687519537eb657fb896572acbea55e2259fe04d178bfbd3fddf8537956ee011585e428bea57f63104d2bcc85a3f996f74873c7106d5822b432e087c64fae5f65294987b2a381769433e042262c0305ad31aceaee40ec0a302fd8c3d1f7b7fcd6535ff330022751be7a84c9faddbb1a9d8166e4b1e6d410b33a587ee2489f20e9ce80edba7ff894b0826a7bfc3ee5b7a74d1a9225dc38a6f44eece481f9a1e86440105f30aaae33cd73ff858308ac70ac1d654d7d2aa803994e0bf4f724a476f1b3bd189b28e871e669fccde27d86ad214fa4f985cb56fac85e58e2b8b0dbc71cbc717b95ca49ff785196d406e00aeba4c68783b2029505cb4c02d96495a8cbb22b4c4a784a5ce080c0ae16d7ad6c1572ec8070ccbac6efa0b79e9a5cf8ddeb1aa04ba05f2c83eeab4bb99e92f1b94893dbd944e70a80c4573351c109e8c6f3e6dc3bbc8f1e6fdb4ebbbaa85ceace9769cf9ad02824eee3281f07f0536610040d14f4bf127349d2eb2ba0976dcd7585335e9565cb1931dee030044660c9f589e49182d5a80a48affede79ed5073e9674077e8bbb1c386c249a6b78b679ca87e73e0c9de610bd8b81f589dab3cb478ebfc24375fe72f40de2f76caf38dc8ac95cfb678382dcdbf35b7081d2235de28dbd013ad407aa0809cc4af804d5bff09a224cd673d5a691d594eb0c4e2aadc5cd17e4a293959992e869ce0d8f40b7be3e00c548a9448c8b7b97a069c2b8c00655bc676378b05c9e5afc8a4f69648ad0cfcc281b96b08c91c830ecb16207b21dd88e80b149318b4748b930b6413cd77ffb71289c973df4c7514ecf3e2e71a67b9fc046f7ff8e36fb1332329c8f1f951c82b00dfe8ee4ede7ce96c8d92b3aff9c4335d0b19c537d23089b0e37f19ed5ccf8a0b1786530a4b7c412c0bfc8aea5a5fecd157589342002cfce1de653f3dffd24e918afe9b5f323a1af529e9ddb86aa256af1fcbb71f4e1608e8f71c6ea2f4b14f3e5b1768620e80ff58b43fc4d149e34a17369a2a1f01dd73700f87006bd5fe11aa500068c07335311e2f2b7c8b40b7b0f03e5f8c19920f12a73a9546db4cc4c0118eaa5ae407ccfbfa9b655cfcb7ec8ffd72a208bef1cc500885fa934f3177560e838fd2b3ee3acc19c571d913cf5b2d4c667a3f375ec3e4e167adced157e9f9455986a95d61b3ecdc2adf6af4d762a47e990c7b7575514061efcc477dc2336b2750baf8423f4f31f3d23fa09e65663b188050b4a815cd1ca10b27efac8ce4dfd3a9ac78f1bac1dcd56982120aa6a56266e55c6e5e8a10d4757dcc0672b04d46c80d14e7b2b2db7bb89b86c12a0c963c1d2c5a26c04e15623afc1a3d43c86eaf6ba3dfdd2b68210133888e893c187ae4aed4c1e38193ed612f5dfaa08dc6d2c8db9a0b433567b0db51e9fcd874543c3f89920cb12b46357ed7d5ba921834be2a91ba1dc198f24b2e6a45e5d2fa5437c1e549ee928924e6fc71c58ff225a94dbc4676abcfd57e26835926a83071780d476abcc40a73348aff7b9912ccd91c717ffab3a4d5a855b71194a64958aa2d2868446e93df438be84fcdb51feae6d7b76ff9092e55442c2ecc47fd1a5948e31ef9e25edbbfc128ef17d5ea68884eaa6229bdd1ec587ec598dce7b72ca3108a14cdeae73dc52c664554e8397c4f890a5eb7ec30583bbbd39ffcc85865e76d2cac51b54806f75663e5ffa4818c7f13f337961c051ba9043c3782efcdb0c93607fcccbb846917af5cf2d1e5b2a17ce60ba385fc3428cb2ffed5196c2ce8e4faedb3a41f342d4e43626492b9b72839d747a3cec9872e6ce465602aa7c1b373fcba8b6d4a5c723c10affa332687b488c6aca4761dfdb150a00a243fb0b189603c08f464f2e0a1cad0b2f19693e02613057089b7976a24847da865a92ea7169e0c90cd62be5a40be67b7675f4c29ec24a56fee3af6efc877e71087e3eb32111ba2d367b5e19b11ed46117d365242916a8abf3a2c7c72318fadfcf508dd46c37c57a9d8ae8f381023b641aa7a439585fdfbf983592770919a27e053227fc7a37126ecafdc51f8abcdb00d1401ec94a0e2aaa198d4a170404937a694d9d1e4212be57a2e4f176cbac4bfd158d98e17bc5d561be7cf7667fd5bd17039c73b67c5ac228b6e096a59a386563fd34a9739325b9548337cb2341bdf001fdd1d2e3f7953456d83c0fa23adeebafac79b27c2fef63c6b6af61129399da532b02dbbb410f0a04091524bdee033e38d6c539dab5117260fd0cffffe24d732818e427f8fb89a6742af1249a41c4fcab3263d7fe9392fd3cbba5e1cdb1cd9b0b2e5d2a532fbe678dd31d383e581529cce0cf9a87a2537c5ef90ad2c8d6ae66b6c94d75cfa7203e29707a4e9417ca4c338fc71a2ef139c99c929d362340db8786e533f208cee302b2462c8c8ba50d526102f20d79eb28a48de5ba8e57f4df0fadfd95bff06ede8c5c89a7a337d2f027227bd69c43a6c70d547a3ec2103c5388957ad4090babbcde76ae8d1b7b32c2ac117c52100b7b64eb680425a39c2955e5af63c9ba2fc21a087"}}, &(0x7f0000001d00)) r4 = io_uring_setup(0x3ed1, &(0x7f0000000580)={0x0, 0x10e9, 0x80, 0x0, 0x3bf, 0x0, r3}) (async) exit(0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0xe40, 0xe40, &(0x7f0000000900)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) ppoll(&(0x7f0000000600)=[{r4}], 0x1, &(0x7f0000000640), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 3.249205325s ago: executing program 1 (id=243): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 3.248406877s ago: executing program 5 (id=244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.16022231s ago: executing program 33 (id=244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.153186907s ago: executing program 1 (id=246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xd, 0x4, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000840)={&(0x7f0000000880)="9668", 0x0, 0x0, 0x0, 0x3a79f9ca, r1}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x50, r3, 0x1, 0x4, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008010300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r7 = mq_open(&(0x7f0000000200)='\x00', 0x0, 0x1, &(0x7f0000000240)={0x100000000, 0x3, 0x1000, 0x3}) mq_notify(r7, &(0x7f0000000580)={0x0, 0x3f, 0x4, @thr={&(0x7f00000003c0)="ff38213cdc7ac4ec38cd42f06f083b34a6da3b62209f244e3a7cf95a4fbcaa3e086fafa6ad2d579d960c9e0161bdcdf877a263e015ee88c41ab51110473b4ba1866215b4f8e6ae0f51340875b2c927ae0f3d050c78228de595b409922a0d7088e14467d9eb85346c3b18733c1ed694a8dc066e0333cb6f668f621222d5b83d9777fa9622af2d1bcdea3512b9715de0ea41df74af274adf2c2741b233e61a45c54c7e4faa755832c1f30a155654c2424f1fd107cb70c859131072b3afa075de6692b3bc4923b4f2a29fd481b215a76f05ca77a5a5afec1ba0d9ae72b6e40bf7905d", &(0x7f00000004c0)="db57fecf05a10444fcf4f2ca87d94ee199977b3c46bc67b058ad5eaf9efffb1db1a11244b3bdb3fe3c74dac98a5f224cd736fa9b9123818d0f46f397365bb83c2001998fa345dcc218e2335f4c8352773a542a4e6fab2e3e965bc83cd24085b59e23a90c1f14c1a00917986b08691d29df871200a00ba8a05a425e3cf1ca4d06d98dc5fe5189e882d82b9da8b6c022b179bc961ac8abae438d5956c7a324"}}) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0206434, &(0x7f00000005c0)={0x800000082b, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r8, 0x40206435, &(0x7f0000000080)={0x0, r9}) 2.152461756s ago: executing program 3 (id=247): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000040)={0x1, 0x2}, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xe000, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x2, 0x5, @loopback, 0x7}, 0x1c) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) fchdir(r4) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.144735123s ago: executing program 4 (id=248): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x235000, 0x1000, 0x0, 0x4}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x4000}, 0x18, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4000}, 0x18, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) landlock_restrict_self(r2, 0x6) bind$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) listen(r4, 0x0) (async) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000100)=@file={0x1}, 0x6e) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) 2.115244963s ago: executing program 0 (id=249): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (fail_nth: 4) 1.996282519s ago: executing program 3 (id=250): unshare(0x400) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000380)={0x12a, 0x2, 0x83, 0x41, "36621d7f8cf42ad26d6903c5e28343747dc49d6fe500cd4f4ae850cf491b596b8d1189f73eefdb013f521dbbf1b1729e2072d324026118a19cd37930199a799fafc4e3bc87a32b810912db215db6f5720dccfe19ee61a350e5fe79b328497c90cf5b8a1faeb0f0e7140026740ca8f3b2e4f730d6523ebf1b698b9c213880ea96e0009af4e00000000071a3720a44c9525021134a377a67c16cf19878553f35c72fdf533a062bb7a1be22d31c2247485e534f2bc708a27372151e9d76ac8789bf1745c38499da63937c2101e9277b7e3aecbb20cf96c8e2be5c82ab26133731a7a3f8444060ea9a07eb8ddbf5484c0c9ae75efe45af1f873383f34200195d3ee49505d267c245c58cce3b6a6e42912feac044"}) 1.953964197s ago: executing program 4 (id=251): openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='mnt\x00', 0x4, &(0x7f0000000440), 0x0, 0x236, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x8480, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="280050003e0007012cbd7006facbdf25037c00000400c380100001800c0010800500031d"], 0x28}, 0x1, 0x0, 0x0, 0xc111}, 0xc000) 1.948344099s ago: executing program 1 (id=252): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x401, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9cb8}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000500)={'wpan4\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000580)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d2cbd7000fedbdf251700000008000300", @ANYRES32=r8, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a2800018008000100000000001c00038008000200020000000600010000eb1d4cae000300a3aa0000050002"], 0x64}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c088}, 0x4004004) (async) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c088}, 0x4004004) r9 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)='+[.\x00') write$binfmt_register(r9, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xa8, 0x3a, '#:', 0x3a, '\r\x90\xc5Y:LDC\x8a\x83p\x97(\f-\x95(\xa3\x112\xb5\t\xa1\xc0CR\x87{w\xaa\x02D\xd7\xcb\xb45L\x9c\xa2\x94\'B\x97\x0e\xea rO\xf6\x1fPv$o\xd4\xacC\xe0V\x1b\xe1\xf5\xceO\x02J\x01\xe8_\f!\x8dH\xf43!c\x8e\xc7 \xd7\xa0\xf06\xc4\xcce;a\xb3\xa8.U\xd4(8\xbf2o\xa7\x86\x8a\xcf\xe9\xd5pY3\xc4\x8b\xf9b*G\x10\xe4\xbd\xaez^\xfb\xef\xb4\xbfZW\x0fEKJ%\xd1\x04E+\xa1\xbfT\xd6)z\x19<\x1dq\x02\x01\xc1\xbd\xd3e-\xda\xf6\x8d\xe5\xcc\xb1\xf0\x9c\xdb&b8\x18\xf8\xbe\x96\x16\xbe\xd7\xdb\xdc\xbf\xe6\xb844\x8a\x8f\x13\x1d\xc4$j\xda\x15\x03\xbc\r4V\xbcZ\xe5YE\xc6\x14>\x14\xb9L\xfc\x87x\x98\xbd\xea.\x9e\xa5\xec\xa8]\xd0Q\xc1j\x96\xda\x84;,r\xee\xff\x12\f/p,\x9c\xa8\xe0\xc3\x8d\x9b%\x9f\xdct\xa2\x16\x8f\xa7\x1f\xfe\x03C\x89\x7f\x80}\xc7\xf6\x94\xba\xb0\x97o\x96\\\xc13\xefQo\xde\xb2\xf2\xc5G\x1e\x8d\xe1\xc8\xd3\xb8Je', 0x3a, './file0'}, 0x290) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) pipe2$9p(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840), 0x2004000, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@access_client}, {@noextend}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840), 0x2004000, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@access_client}, {@noextend}], [], 0x6b}}) write$P9_RREADDIR(r11, &(0x7f0000000900)={0x2a, 0x29, 0x2, {0x9aa, [{{0x8, 0x1, 0x7}, 0x1, 0x9, 0x7, './file0'}]}}, 0x2a) (async) write$P9_RREADDIR(r11, &(0x7f0000000900)={0x2a, 0x29, 0x2, {0x9aa, [{{0x8, 0x1, 0x7}, 0x1, 0x9, 0x7, './file0'}]}}, 0x2a) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x8fa7, 0x4) dup(r1) (async) dup(r1) listen(r1, 0x10040) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 1.89315686s ago: executing program 0 (id=253): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000340)='./file0\x00', 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='fl=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64=r0, @ANYBLOB=',group_id=', @ANYRESOCT=r0], 0xfb, 0x0, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x4}, [], {0x4, 0x1}, [], {0x10, 0x6}, {0x20, 0x2}}, 0x24, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) 1.863805588s ago: executing program 3 (id=254): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xdd, "496e25361a3a69f76f69f9dba992aba0cc8564a1b6207d0fd762d0958a6cbc56913dbe0377ed682639fb78bacc1148ed229071d607d3476452b007c4ecf14c7781e6677e786c28df6e5d82d8a1170a42b633a13b841aeb426b22f566db65b8ac08cce00534b6e2835b0150f5daaeb9396f877f1de9cf04087d8bef51249437f13cc7b4a9285a63bc5ea678448e0f09d718a2452b22ed6208f4ebb886e4060649e2430345b242486aa3a26f3776da4574212e43908ba1f8bed761826c86afe36256dff58b24ec643d584592ac4f7dfcc4bec8e62af291a049bcf889ac76"}, &(0x7f0000000140)=0xe5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0x4, 0x1, 0xfff, 0x1000, 0x9}, 0x14) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='nfs4\x00', 0x2100d, &(0x7f0000000280)='&#C\x00') pread64(r0, &(0x7f00000002c0)=""/66, 0x42, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x9c090, &(0x7f0000002400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/dlm-control\x00'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x3e}}, {@obj_user={'obj_user', 0x3d, '/dev/dlm-control\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise}]}}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000027c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002780)={&(0x7f0000002580)={0x1e0, 0x14, 0x100, 0x70bd26, 0x25dfdbfd, {0x11, 0x17}, [@INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "e9fa7993796bb60c21d00d18baea06e21d8ff82dfc5207608fb35f9a8fe77d85d32b7e9a130e75ff53d9bda22c1d9c0aa1796fe09a1f31fa0899c52cc3715d4ac244dae041ad353e4f7d8d0c2f6a270a99d75e4bc0a68e9d1457831ea61f7e0fabb60d27e932ef73d8f5be4e87589db3f0db2fc4f7330e5835918e05562c1838b4cdd3e42ed65f9444b07fa17367d80b23ccdedd2df57a65b7247bb7e78e08658eefcfbf8cb4a226769583ce0fb458dbb06b745e088a0a165df0e7823a652c634553b19a48c77f75ba48331ea454685374770ce295a566dd5c6fda8f7f427696bce49462b5ddaa4b364b24a02d92236b464cd1"}, @INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "0cac87b415dbf6122f2897b70bcc67b4e7135a87ea4d2a9d1254dd50d7122e50afe016efd28d4b0e3f7c5b36f13ebfe773b966e4722b80ca866dc705b6b1e536c9b403174d4bdf9a2d1a689f7281b4678e49a98e1a5152d6e6303f1e99f3c7eb9efb8ad1ed320e348b68fe957d9e18498b2506906528e8b94fc70818e74d3f0d08c81a049e9b8ff0806b6c6ef851962c2c03c09e7c9146ccb0cff1f921e68badd1b7447627e1d43e2b347c29ebb88b119d954cc3ab48020c6650eb039bda8b4efac3a1d0328c9a94a7baf0a7dfc1a9"}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, &(0x7f0000002800)={r1, @in6={{0xa, 0x4e23, 0x2, @mcast2, 0x6}}, 0x4e24}, 0x90) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f00000028c0), &(0x7f0000002900)=0x10) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000002940), &(0x7f0000002980)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002a40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000002b00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x3c, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000002b40)) syz_open_dev$video(&(0x7f0000002b80), 0x3ff, 0x424000) write$FUSE_IOCTL(r0, &(0x7f0000002bc0)={0x20, 0x0, r2, {0x7, 0x0, 0x23cf, 0x26c}}, 0x20) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000002c00)={0x17d, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x4, 'sed\x00', 0x15, 0x2, 0x7}, 0x2c) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002c40)={'nr0\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002c80)={'dummy0\x00'}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000002cc0)='./file0\x00', 0x4a200, 0xc3) ioctl$BTRFS_IOC_SCRUB_CANCEL(r10, 0x941c, 0x0) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000002d40), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002d80)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000002e40)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x24, r11, 0x264936c108377735, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) write$FUSE_ATTR(r0, &(0x7f0000002e80)={0x78, 0x0, r2, {0x7fffffffffffffff, 0x3, 0x0, {0x3, 0x6f, 0x8, 0x5, 0x9, 0x4, 0x4, 0x6, 0x4, 0xc000, 0x2, r3, r4, 0x2, 0x7}}}, 0x78) 1.778759696s ago: executing program 0 (id=255): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 1.708819584s ago: executing program 4 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200), 0x47ffffa, 0x130c40) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1260, 0xfffffffffffffff7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0xa0002, 0x1) r2 = semget(0x3, 0x4, 0x606) semop(r2, &(0x7f0000000280)=[{0x0, 0x3, 0x800}, {0x2, 0x4}, {0x0, 0x16ca, 0x1000}], 0x3) write(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './proc\x00'}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) add_key(0x0, 0x0, &(0x7f0000000240)="308201d4307c", 0x6, 0xffffffffffffffff) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r6, 0x65, 0x1, &(0x7f0000000280), 0x1d0) bind$can_raw(r6, &(0x7f00000002c0), 0x10) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r7, 0x65, 0x1, &(0x7f0000004740), 0x1d0) bind$can_raw(r7, &(0x7f0000004780), 0x10) dup3(r5, r6, 0x0) read$FUSE(r4, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002400)={0x50, 0x0, r8, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000002480)="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", 0x2000, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004540)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r9, r10, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004600)={0x0, 0x0}, &(0x7f0000004640)=0xc) mount$tmpfs(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040), 0x820, &(0x7f0000004680)={[{@gid={'gid', 0x3d, r3}}, {@size={'size', 0x3d, [0x2d, 0x35, 0x33, 0x70, 0x34, 0x35]}}, {@inode64}, {@grpquota}], [{@uid_gt={'uid>', r9}}, {@smackfstransmute={'smackfstransmute', 0x3d, ')'}}, {@context={'context', 0x3d, 'user_u'}}, {@fowner_eq={'fowner', 0x3d, r11}}, {@audit}, {@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, 'proc\x00'}}, {@seclabel}]}) 1.587736119s ago: executing program 1 (id=257): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xd00, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000040}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000000}}], 0x2, 0x8000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYBLOB="7fc037addce2c70d2deb60a2ad8221866533de37ca499b9e80e3bfb580db8541", @ANYBLOB="01002abd7000fddbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0002000000000000000c009000fffffeffffffffff"], 0x54}, 0x1, 0x0, 0x0, 0x404c041}, 0x2400c080) r3 = syz_open_dev$video4linux(&(0x7f0000000100), 0xffffffff, 0xa8701) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) 1.51549609s ago: executing program 3 (id=258): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x21, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_choke={{}, {0x0, 0x2, [@TCA_CHOKE_MAX_P={0x0, 0x3, 0x1}, @TCA_CHOKE_MAX_P={0x0, 0x3, 0x170}, @TCA_CHOKE_PARMS={0x0, 0x1, {0x1, 0x6, 0x7, 0x1, 0x13, 0x8, 0x2}}]}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000004) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000010dbdf250000000080a62e6b2a4bf6cce515e74db007e8d61a35bfc11e680af953f6f11cec8b8f57cc008dc82dcc9db401aa6556cc9f7d0a", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'xfrm0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x80) r3 = socket(0x10, 0x3, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r5 = syz_open_dev$video(&(0x7f0000000200), 0x8, 0x8000) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f00000005c0)={0xa, 0x0, 0x1, {0xa, 0x1000, 0x4, 0x870}}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) socket$inet6(0xa, 0x5, 0x0) fsopen(&(0x7f0000000680)='v7\x00', 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x9, 0x200006}, 0x28) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0x2, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xb00, 0x46951}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bridge\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x2000000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000900)={0x1, 0x0, '\x00', {0x0, @bt={0xfffff001, 0x9, 0x0, 0x3, 0x6, 0x7f, 0xcd, 0xfffffffc, 0xf0a, 0x5, 0x85, 0x2, 0x3, 0x1, 0x52d9f1ba1b1546f8, 0x20, {0xffff7fff, 0x7ff}, 0xa, 0x2}}}) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x2000000, 0x8010, 0xffffffffffffffff, 0x0) 1.465033995s ago: executing program 0 (id=259): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) fchown(r1, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xfffffed3) getdents64(0xffffffffffffffff, &(0x7f0000001580)=""/247, 0xf7) openat(r1, &(0x7f0000000040)='./file2\x00', 0x200, 0x20) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x7, 0x4, 0x81, 0xffffffff, 0x3}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x48040, 0x6ab858183a7ef6ba) 1.355212279s ago: executing program 4 (id=260): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@delchain={0x260, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x234, 0x2, [@TCA_BPF_ACT={0x230, 0x1, [@m_skbmod={0x13c, 0xc, 0x0, 0x0, {{0xb}, {0xbc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x8001, 0xffffffffffffffff, 0xffffffff, 0x3}, 0x3}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3c95}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x664, 0x5, 0x94, 0x6}, 0x6}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x621, 0x7, 0x20000000, 0x8, 0xff}, 0x5}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x3, 0x20000000, 0x7855, 0x3}, 0xc}}]}, {0x58, 0x6, "f51f67ec79be0129849dff1b1f031b2d21b8ebb3988d16442c08ce346629703a4d0408a9a97022eaeb206c4d44150b18fd509f94ab2d714544aadeccf5482b04fc62a260ae04286cac825ca03eac6e5972579e21"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0xf0, 0x5, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x92, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x260}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r1 = socket(0x21, 0x803, 0x8) sendto(r1, &(0x7f00000003c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/100, 0x365}, {&(0x7f0000000640)=""/85, 0x7c}, {&(0x7f00000006c0)=""/4096, 0x197}, {&(0x7f00000016c0)=""/106, 0x645}, {&(0x7f0000001740)=""/73, 0x1b}, {&(0x7f00000017c0)=""/77, 0x14}, {&(0x7f0000001840)=""/154, 0x21}, {&(0x7f0000001900)=""/17, 0x1d8}], 0x21, &(0x7f0000001940)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000001a00)={0x77359400}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000001a40)={0x200100, 0xa0, 0xc}, 0x18) openat(r2, &(0x7f0000001a80)='./file0\x00', 0x131803, 0x1) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25df5bff, {0x0, 0x0, 0x0, r4, 0x50010, 0x50042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40040) 231.331464ms ago: executing program 1 (id=261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000100)=0xc, 0x4) listen(r0, 0x0) move_pages(0x0, 0x1efe, &(0x7f00000000c0), 0x0, &(0x7f0000000100), 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000880)={'#! ', './file0', [{0x20, '#! '}, {0x20, '#! '}, {0x20, ' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf/\xf2z\xb2\xa40 \x7f\xce~\x16`]\xd6\x93\x9f]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xdf\x9c\x94\xbd\xdc\xaa\a\xaa#\x13S\x04\x12$\xcb'}, {0x20, 'g]\'\x1e^'}, {0x20, '8u\xb6\xf71\xd9\a\x8f\xf7\x14\xb9\xf2z\x00g\xd5_\xee~\xcf\xc1\xc5\xbc\xd8\xf6\xe6\x18<\x97\xdb\xd4,J\xe4\x1b\xfa\xfc\xb1\x98\xf3\x85\x0e<\x13\xb2CY\x89\x9a\xbe\xbd\xadt\xf7\xc3\xf9\xa5\xd4\x12\xcf\x93\xed_\xd4\xd5\a\x17\xa3\xea\xd6\xfe\xdc\x05\b\xbf\xdc\x85h\xfa\xfa\x1b\xd5z\x8a\x1e\xee36Qv7<@\x94\x10\xb5\x06\x10\xcc\x11\xbc\xb2^!\xea\xe4\xdfr\x88\x82X{f\xabz\xb7\xf9d.'}], 0xa, "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"}, 0x2d4) close(r2) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000240)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa01800000000000004500004c000000000006907864010101ac1414a2000000009eb10764fcee4b798c182ea2ee9746675b49c59dbd796140bb6bd8813e1104a569056eac22cdd92645eb7dd3a3584a3f8f10cda9be9fbd9ad080b61f79e9090afb81c9e6b54fdc4701010000bc4ee4ecc158b4537f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ec000000907800001312471f66ed355d565f17f16b997ff93d0c1d12910000000000006f0000000000000000"], 0x0) 164.940985ms ago: executing program 3 (id=262): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100000000000000000000000000000000000000000000000000000000000000000000736e61703000") write(r1, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00snapshot\x00\x00\x00\x00\x00\x00\x00\x001:0 1:1 N', 0x31) ioctl(r1, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000700100003801000001000000000000000000000000000000000000000000000000000000736e61703000") ioctl(r1, 0xc138fd06, &(0x7f0000000000)="040000000000000000000000380100000000000000000000000000000000000000000000000000000000000000000000736e61703000") r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/dm-0\x00', 0x2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') setns(r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$smackfs_ipv6host(0xffffffffffffff9c, 0x0, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write(r2, &(0x7f0000000600)='\x00'/368, 0x170) 116.508796ms ago: executing program 0 (id=263): unshare(0x400) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000380)={0x12a, 0x2, 0x83, 0x41, "36621d7f8cf42ad26d6903c5e28343747dc49d6fe500cd4f4ae850cf491b596b8d1189f73eefdb013f521dbbf1b1729e2072d324026118a19cd37930199a799fafc4e3bc87a32b810912db215db6f5720dccfe19ee61a350e5fe79b328497c90cf5b8a1faeb0f0e7140026740ca8f3b2e4f730d6523ebf1b698b9c213880ea96e0009af4e00000000071a3720a44c9525021134a377a67c16cf19878553f35c72fdf533a062bb7a1be22d31c2247485e534f2bc708a27372151e9d76ac8789bf1745c38499da63937c2101e9277b7e3aecbb20cf96c8e2be5c82ab26133731a7a3f8444060ea9a07eb8ddbf5484c0c9ae75efe45af1f873383f34200195d3ee49505d267c245c58cce3b6a6e42912feac044"}) 486.3µs ago: executing program 0 (id=264): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100000000000000000000000000000000000000000000000000000000000000000000736e61703000") write(r1, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00snapshot\x00\x00\x00\x00\x00\x00\x00\x001:0 1:1 N', 0x31) ioctl(r1, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000700100003801000001000000000000000000000000000000000000000000000000000000736e61703000") ioctl(r1, 0xc138fd06, &(0x7f0000000000)="040000000000000000000000380100000000000000000000000000000000000000000000000000000000000000000000736e61703000") r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/dm-0\x00', 0x2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') setns(r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$smackfs_ipv6host(0xffffffffffffff9c, 0x0, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write(r2, &(0x7f0000000600)='\x00'/368, 0x170) 0s ago: executing program 1 (id=265): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000"], 0x0, 0x34}, 0x28) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000001208000000000095000000001400"/32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="050053000100db15b189000000000000"], 0x2c}}, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1df) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) add_key(&(0x7f0000000180)='rxrpc\x00', 0x0, &(0x7f00000003c0)="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", 0x108, 0xfffffffffffffffe) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) readv(r6, &(0x7f0000002100)=[{&(0x7f0000000140)=""/1, 0x1}, {0x0}], 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. [ 29.136868][ T4695] cgroup: Unknown subsys name 'net' [ 29.276852][ T4695] cgroup: Unknown subsys name 'cpuset' [ 29.278149][ T4695] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.447760][ T4695] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.977873][ T4710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.983718][ T4710] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.005403][ T4721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.005605][ T4721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.006053][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.006365][ T4721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.006455][ T4721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.006708][ T4721] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.006860][ T4721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.007203][ T4721] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.007393][ T4721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.007554][ T4721] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.007639][ T4721] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.007877][ T4721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.007972][ T4721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.008069][ T4721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.008720][ T4721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.009112][ T4721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.009247][ T4721] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.009301][ T4721] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.010062][ T4721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.010988][ T4721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.011273][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.011399][ T4721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.011550][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.358914][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.359151][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.359251][ T4706] bridge_slave_0: entered allmulticast mode [ 31.359786][ T4706] bridge_slave_0: entered promiscuous mode [ 31.366794][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.366840][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.366890][ T4706] bridge_slave_1: entered allmulticast mode [ 31.367324][ T4706] bridge_slave_1: entered promiscuous mode [ 31.402954][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.403882][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.419011][ T4706] team0: Port device team_slave_0 added [ 31.431604][ T4706] team0: Port device team_slave_1 added [ 31.469926][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.469992][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.470081][ T4707] bridge_slave_0: entered allmulticast mode [ 31.470511][ T4707] bridge_slave_0: entered promiscuous mode [ 31.472541][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.472549][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.472561][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.473334][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.473342][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.473354][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.481433][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.481453][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.481499][ T4716] bridge_slave_0: entered allmulticast mode [ 31.481900][ T4716] bridge_slave_0: entered promiscuous mode [ 31.483244][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.483264][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.483317][ T4716] bridge_slave_1: entered allmulticast mode [ 31.483706][ T4716] bridge_slave_1: entered promiscuous mode [ 31.490620][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.491862][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.498682][ T4716] team0: Port device team_slave_0 added [ 31.499372][ T4716] team0: Port device team_slave_1 added [ 31.504868][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.504876][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.504888][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.506122][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.506130][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.506143][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.516492][ T4716] hsr_slave_0: entered promiscuous mode [ 31.516805][ T4716] hsr_slave_1: entered promiscuous mode [ 31.537640][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.537680][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.537781][ T4717] bridge_slave_0: entered allmulticast mode [ 31.538205][ T4717] bridge_slave_0: entered promiscuous mode [ 31.539687][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.539707][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.539756][ T4717] bridge_slave_1: entered allmulticast mode [ 31.540230][ T4717] bridge_slave_1: entered promiscuous mode [ 31.540885][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.540910][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.540967][ T4707] bridge_slave_1: entered allmulticast mode [ 31.541403][ T4707] bridge_slave_1: entered promiscuous mode [ 31.553268][ T4706] hsr_slave_0: entered promiscuous mode [ 31.553547][ T4706] hsr_slave_1: entered promiscuous mode [ 31.553726][ T4706] debugfs: 'hsr0' already exists in 'hsr' [ 31.553757][ T4706] Cannot create hsr debugfs directory [ 31.565826][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.565882][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.565976][ T4712] bridge_slave_0: entered allmulticast mode [ 31.566415][ T4712] bridge_slave_0: entered promiscuous mode [ 31.581805][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.589320][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.589347][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.589408][ T4712] bridge_slave_1: entered allmulticast mode [ 31.589827][ T4712] bridge_slave_1: entered promiscuous mode [ 31.604709][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.611155][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.612274][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.613445][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.626631][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.646234][ T4712] team0: Port device team_slave_0 added [ 31.649834][ T4712] team0: Port device team_slave_1 added [ 31.650404][ T4717] team0: Port device team_slave_0 added [ 31.661686][ T4707] team0: Port device team_slave_0 added [ 31.663864][ T4717] team0: Port device team_slave_1 added [ 31.667970][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.667982][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.667998][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.668810][ T4707] team0: Port device team_slave_1 added [ 31.669037][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.669045][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.669058][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.690985][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.690997][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.691013][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.702279][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.702288][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.702300][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.702834][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.702841][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.702853][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.706627][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.706634][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.706646][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.716392][ T4717] hsr_slave_0: entered promiscuous mode [ 31.716985][ T4717] hsr_slave_1: entered promiscuous mode [ 31.717179][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 31.717189][ T4717] Cannot create hsr debugfs directory [ 31.718689][ T4716] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.724818][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.727349][ T4712] hsr_slave_0: entered promiscuous mode [ 31.727924][ T4712] hsr_slave_1: entered promiscuous mode [ 31.728128][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 31.728139][ T4712] Cannot create hsr debugfs directory [ 31.736209][ T4707] hsr_slave_0: entered promiscuous mode [ 31.737142][ T4707] hsr_slave_1: entered promiscuous mode [ 31.737350][ T4707] debugfs: 'hsr0' already exists in 'hsr' [ 31.737359][ T4707] Cannot create hsr debugfs directory [ 31.745026][ T4716] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.747960][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.761952][ T4716] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.762936][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.763222][ T4716] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.764638][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.810450][ T4706] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.811787][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.825841][ T4706] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.826933][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.830193][ T4706] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.831201][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.832781][ T4706] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.833750][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.834501][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.834532][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.834667][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.834694][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.886887][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.886936][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.887009][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.887037][ T4706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.897501][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.903448][ T4712] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.904600][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.904892][ T4712] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.909052][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.911363][ T4712] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.912363][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.916984][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.920361][ T4712] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.921538][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.922297][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.922729][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.926916][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.928417][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.948423][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.948483][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.948848][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.948866][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.958238][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.968101][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.981518][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.981541][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.983892][ T4717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.984821][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.985103][ T4717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.988445][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.988728][ T4717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.990262][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.997965][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.997987][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.002429][ T4717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.003446][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.017811][ T4706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.017825][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.054957][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.072590][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.079422][ T4707] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.084127][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.088495][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.100620][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.100646][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.100969][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.100986][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.101877][ T4707] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.102943][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.103234][ T4707] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.104090][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.115739][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.115751][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.122221][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.127876][ T4707] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.128992][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.137521][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.137547][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.180298][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.180338][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.215575][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.223629][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.242785][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.242816][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.248254][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.248279][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.262177][ T4707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.262192][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.271902][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.274879][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.321662][ T4706] veth0_vlan: entered promiscuous mode [ 32.323613][ T4706] veth1_vlan: entered promiscuous mode [ 32.340334][ T4706] veth0_macvtap: entered promiscuous mode [ 32.349952][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.351164][ T4706] veth1_macvtap: entered promiscuous mode [ 32.362561][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.363982][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.372672][ T1190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.373990][ T1190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.380543][ T4712] veth0_vlan: entered promiscuous mode [ 32.399232][ T4712] veth1_vlan: entered promiscuous mode [ 32.419077][ T4712] veth0_macvtap: entered promiscuous mode [ 32.420083][ T4712] veth1_macvtap: entered promiscuous mode [ 32.423170][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.425075][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.454295][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.467079][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.467196][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.467314][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.467414][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.485730][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.485783][ T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.494097][ T4716] veth0_vlan: entered promiscuous mode [ 32.508456][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.508470][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.516747][ T651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.516759][ T651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.519965][ T4716] veth1_vlan: entered promiscuous mode [ 32.522433][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.522443][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.531275][ T4717] veth0_vlan: entered promiscuous mode [ 32.541143][ T4717] veth1_vlan: entered promiscuous mode [ 32.547978][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.547989][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.551080][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.561276][ T4716] veth0_macvtap: entered promiscuous mode [ 32.563041][ T4716] veth1_macvtap: entered promiscuous mode [ 32.564759][ T4717] veth0_macvtap: entered promiscuous mode [ 32.569222][ T4717] veth1_macvtap: entered promiscuous mode [ 32.572686][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.573665][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.575174][ T1190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.580366][ T4712] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.680582][ T4707] veth0_vlan: entered promiscuous mode [ 32.691793][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.693639][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.702412][ T4707] veth1_vlan: entered promiscuous mode [ 32.711272][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.711285][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.716953][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.717159][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.765631][ T64] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.768545][ T1190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.785457][ T651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.785537][ T651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.785600][ T651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.019786][ T651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.019799][ T651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.024998][ T4707] veth0_macvtap: entered promiscuous mode [ 33.028951][ T4707] veth1_macvtap: entered promiscuous mode [ 33.036877][ T4723] Bluetooth: hci3: command tx timeout [ 33.036974][ T4723] Bluetooth: hci2: command tx timeout [ 33.037035][ T4723] Bluetooth: hci0: command tx timeout [ 33.037163][ T4720] Bluetooth: hci1: command tx timeout [ 33.040491][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.051980][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.066379][ T64] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.066413][ T64] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.066432][ T64] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.066448][ T64] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.086508][ T1190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.086523][ T1190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.106338][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.106352][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.116215][ T4720] Bluetooth: hci4: command tx timeout [ 33.118397][ T651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.118410][ T651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.133476][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.133490][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.263028][ T4907] fuse: Unknown parameter 'K3'‚ÂêÕO‰Œg‰÷Øžð¬üß}' [ 33.278744][ T4907] binder: 4906:4907 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 33.278761][ T4907] binder: 4907 RLIMIT_NICE not set [ 33.589487][ T4913] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8'. [ 33.623574][ T4916] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 33.689442][ T4919] ======================================================= [ 33.689442][ T4919] WARNING: The mand mount option has been deprecated and [ 33.689442][ T4919] and is ignored by this kernel. Remove the mand [ 33.689442][ T4919] option from the mount to silence this warning. [ 33.689442][ T4919] ======================================================= [ 33.691562][ T4919] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 33.719086][ T4919] capability: warning: `syz.2.7' uses 32-bit capabilities (legacy support in use) [ 34.149830][ T4928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 34.736484][ T4936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 34.737019][ T4936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'. [ 34.801752][ T4935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'. [ 35.115963][ T4723] Bluetooth: hci2: command tx timeout [ 35.116106][ T4723] Bluetooth: hci3: command tx timeout [ 35.116882][ T51] Bluetooth: hci0: command tx timeout [ 35.117222][ T4720] Bluetooth: hci1: command tx timeout [ 35.296217][ T4720] Bluetooth: hci4: command tx timeout [ 35.553492][ T4955] loop1: detected capacity change from 0 to 2048 [ 35.571028][ T4955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.685754][ T4962] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 35.732756][ T4963] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 35.734008][ T4963] EXT4-fs (loop1): Remounting filesystem read-only [ 35.757374][ T4965] loop2: detected capacity change from 0 to 512 [ 35.779024][ T4965] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.787329][ T4965] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 35.789204][ T4965] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.23: bg 0: block 248: padding at end of block bitmap is not set [ 35.789259][ T4965] loop2: lost filesystem error report for type 5 error -117 [ 35.790189][ T4965] Quota error (device loop2): write_blk: dquota write failed [ 35.790223][ T4965] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 35.790242][ T4965] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.23: Failed to acquire dquot type 1 [ 35.790253][ T4965] loop2: lost filesystem error report for type 5 error -28 [ 35.793836][ T4965] EXT4-fs (loop2): 1 truncate cleaned up [ 35.794493][ T4965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 35.880572][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 35.912874][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.988778][ T4974] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 36.196634][ T4971] loop2: detected capacity change from 0 to 256 [ 36.228094][ T4976] FAULT_INJECTION: forcing a failure. [ 36.228094][ T4976] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.228115][ T4976] CPU: 0 UID: 0 PID: 4976 Comm: syz.1.27 Not tainted syzkaller #0 PREEMPT [ 36.228132][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.228138][ T4976] Call trace: [ 36.228142][ T4976] show_stack+0x2c/0x3c (C) [ 36.228161][ T4976] __dump_stack+0x30/0x40 [ 36.228172][ T4976] dump_stack_lvl+0xd8/0x12c [ 36.228182][ T4976] dump_stack+0x1c/0x28 [ 36.228192][ T4976] should_fail_ex+0x418/0x58c [ 36.228203][ T4976] should_fail+0x14/0x24 [ 36.228213][ T4976] should_fail_usercopy+0x20/0x30 [ 36.228220][ T4976] _copy_from_iter+0x188/0x1064 [ 36.228228][ T4976] netlink_sendmsg+0x570/0x948 [ 36.228239][ T4976] __sock_sendmsg+0xc8/0x17c [ 36.228248][ T4976] ____sys_sendmsg+0x3d0/0x6c8 [ 36.228257][ T4976] ___sys_sendmsg+0x198/0x224 [ 36.228266][ T4976] __sys_sendmsg+0x158/0x204 [ 36.228275][ T4976] __arm64_sys_sendmsg+0x88/0x9c [ 36.228284][ T4976] invoke_syscall+0x98/0x244 [ 36.228301][ T4976] el0_svc_common+0xec/0x23c [ 36.228310][ T4976] do_el0_svc+0x4c/0x5c [ 36.228320][ T4976] el0_svc+0x60/0x1d8 [ 36.228331][ T4976] el0t_64_sync_handler+0x44/0x104 [ 36.228342][ T4976] el0t_64_sync+0x198/0x19c [ 36.242964][ T4978] loop4: detected capacity change from 0 to 256 [ 36.243301][ T4978] vfat: Unknown parameter 'batadv' [ 36.313015][ T4983] fuse: Bad value for 'fd' [ 36.406298][ T4986] netlink: 48 bytes leftover after parsing attributes in process `syz.2.25'. [ 36.574910][ T4981] device-mapper: table: 248:0: zero-length target [ 36.574925][ T4981] device-mapper: ioctl: error adding target to table [ 36.596534][ T4989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.31'. [ 36.598755][ T4989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.31'. [ 36.679478][ T4997] loop0: detected capacity change from 0 to 512 [ 36.690610][ T4997] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.690635][ T4997] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.709520][ T4997] EXT4-fs (loop0): 1 truncate cleaned up [ 36.724027][ T4997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.727986][ T4997] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6542: inode #12: comm syz.0.35: bad extra_isize 62 (inode size 256) [ 36.728525][ T4997] EXT4-fs (loop0): Remounting filesystem read-only [ 36.744154][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.804729][ T5004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 37.050098][ T5002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36'. [ 37.060409][ T5008] 9p: Bad value for 'rfdno' [ 37.103656][ T5005] sctp: [Deprecated]: syz.3.36 (pid 5005) Use of int in maxseg socket option. [ 37.103656][ T5005] Use struct sctp_assoc_value instead [ 37.104201][ T5005] overlay: Unknown parameter '/' [ 37.134722][ T5013] FAULT_INJECTION: forcing a failure. [ 37.134722][ T5013] name failslab, interval 1, probability 0, space 0, times 1 [ 37.134742][ T5013] CPU: 1 UID: 0 PID: 5013 Comm: syz.3.39 Not tainted syzkaller #0 PREEMPT [ 37.134752][ T5013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 37.134756][ T5013] Call trace: [ 37.134759][ T5013] show_stack+0x2c/0x3c (C) [ 37.134776][ T5013] __dump_stack+0x30/0x40 [ 37.134786][ T5013] dump_stack_lvl+0xd8/0x12c [ 37.134796][ T5013] dump_stack+0x1c/0x28 [ 37.134805][ T5013] should_fail_ex+0x418/0x58c [ 37.134816][ T5013] should_failslab+0xc4/0x120 [ 37.134827][ T5013] __kmalloc_noprof+0x108/0x6c8 [ 37.134835][ T5013] tomoyo_encode2+0x10c/0x330 [ 37.134845][ T5013] tomoyo_encode+0x34/0x50 [ 37.134854][ T5013] tomoyo_realpath_from_path+0x488/0x4dc [ 37.134863][ T5013] tomoyo_mount_permission+0x3b4/0x7e4 [ 37.134872][ T5013] tomoyo_sb_mount+0x48/0x60 [ 37.134882][ T5013] security_sb_mount+0xfc/0x308 [ 37.134889][ T5013] path_mount+0xb8/0xa88 [ 37.134898][ T5013] do_mount+0xe8/0x148 [ 37.134907][ T5013] __arm64_sys_mount+0x33c/0x388 [ 37.134916][ T5013] invoke_syscall+0x98/0x244 [ 37.134926][ T5013] el0_svc_common+0xec/0x23c [ 37.134935][ T5013] do_el0_svc+0x4c/0x5c [ 37.134944][ T5013] el0_svc+0x60/0x1d8 [ 37.134956][ T5013] el0t_64_sync_handler+0x44/0x104 [ 37.134966][ T5013] el0t_64_sync+0x198/0x19c [ 37.134978][ T5013] ERROR: Out of memory at tomoyo_realpath_from_path. [ 37.214736][ T4722] Bluetooth: hci0: command tx timeout [ 37.214765][ T4722] Bluetooth: hci3: command tx timeout [ 37.214782][ T4722] Bluetooth: hci2: command tx timeout [ 37.214929][ T4720] Bluetooth: hci1: command tx timeout [ 37.216652][ T5019] netlink: 'syz.2.38': attribute type 2 has an invalid length. [ 37.216668][ T5019] nbd: must specify a device to reconfigure [ 37.354919][ T4720] Bluetooth: hci4: command tx timeout [ 37.375494][ T5022] device-mapper: table: 248:0: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 37.375515][ T5022] device-mapper: ioctl: error adding target to table [ 37.447004][ T5032] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 37.580487][ T5035] device-mapper: table: 248:0: snap: unknown target type [ 37.580501][ T5035] device-mapper: ioctl: error adding target to table [ 37.899215][ T30] audit: type=1326 audit(37.880:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5009 comm="syz.2.38" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b788e8 code=0x7fc00000 [ 38.027810][ T5041] device-mapper: table: 248:0: zero-length target [ 38.027822][ T5041] device-mapper: ioctl: error adding target to table [ 38.165290][ T5047] can0: slcan on ttyS3. [ 38.334512][ T5047] can0 (unregistered): slcan off ttyS3. [ 38.443884][ T5054] fuse: Invalid rootmode [ 38.475458][ T5057] device-mapper: table: 248:0: too large device [ 38.475469][ T5057] device-mapper: ioctl: error adding target to table [ 38.482281][ T5060] loop1: detected capacity change from 0 to 512 [ 38.498410][ T5060] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.51: bg 0: block 5: invalid block bitmap [ 38.498434][ T5060] loop1: lost filesystem error report for type 5 error -117 [ 38.499098][ T5060] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 38.499110][ T5060] loop1: lost filesystem error report for type 5 error -117 [ 38.499309][ T5060] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.51: invalid indirect mapped block 3 (level 2) [ 38.499378][ T5060] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.499595][ T5060] EXT4-fs (loop1): 1 orphan inode deleted [ 38.499606][ T5060] EXT4-fs (loop1): 1 truncate cleaned up [ 38.500079][ T5060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.532749][ T5068] FAULT_INJECTION: forcing a failure. [ 38.532749][ T5068] name failslab, interval 1, probability 0, space 0, times 0 [ 38.532769][ T5068] CPU: 0 UID: 0 PID: 5068 Comm: syz.4.53 Not tainted syzkaller #0 PREEMPT [ 38.532782][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.532788][ T5068] Call trace: [ 38.532792][ T5068] show_stack+0x2c/0x3c (C) [ 38.532811][ T5068] __dump_stack+0x30/0x40 [ 38.532824][ T5068] dump_stack_lvl+0xd8/0x12c [ 38.532834][ T5068] dump_stack+0x1c/0x28 [ 38.532848][ T5068] should_fail_ex+0x418/0x58c [ 38.532860][ T5068] should_failslab+0xc4/0x120 [ 38.532871][ T5068] __kmalloc_cache_noprof+0x94/0x5fc [ 38.532880][ T5068] ctnetlink_alloc_filter+0xb8/0x968 [ 38.532891][ T5068] ctnetlink_del_conntrack+0x578/0x7b4 [ 38.532901][ T5068] nfnetlink_rcv_msg+0xad8/0x1044 [ 38.532910][ T5068] netlink_rcv_skb+0x238/0x414 [ 38.532919][ T5068] nfnetlink_rcv+0x218/0x16ec [ 38.532926][ T5068] netlink_unicast+0x600/0x7f8 [ 38.532935][ T5068] netlink_sendmsg+0x648/0x948 [ 38.532944][ T5068] __sock_sendmsg+0xc8/0x17c [ 38.532953][ T5068] ____sys_sendmsg+0x3d0/0x6c8 [ 38.532962][ T5068] ___sys_sendmsg+0x198/0x224 [ 38.532971][ T5068] __sys_sendmsg+0x158/0x204 [ 38.532980][ T5068] __arm64_sys_sendmsg+0x88/0x9c [ 38.532989][ T5068] invoke_syscall+0x98/0x244 [ 38.532999][ T5068] el0_svc_common+0xec/0x23c [ 38.533009][ T5068] do_el0_svc+0x4c/0x5c [ 38.533018][ T5068] el0_svc+0x60/0x1d8 [ 38.533029][ T5068] el0t_64_sync_handler+0x44/0x104 [ 38.533039][ T5068] el0t_64_sync+0x198/0x19c [ 38.822273][ T5076] __nla_validate_parse: 4 callbacks suppressed [ 38.822304][ T5076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 38.942602][ T5078] loop0: detected capacity change from 0 to 512 [ 38.957744][ T5078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 39.040341][ T5084] device-mapper: table: 248:0: snapshot: requires 4 or more arguments (-EINVAL) [ 39.040361][ T5084] device-mapper: ioctl: error adding target to table [ 39.293721][ T4720] Bluetooth: hci1: command tx timeout [ 39.294482][ T4720] Bluetooth: hci2: command tx timeout [ 39.294752][ T4720] Bluetooth: hci3: command tx timeout [ 39.294814][ T4720] Bluetooth: hci0: command tx timeout [ 39.369757][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.433710][ T4722] Bluetooth: hci4: command tx timeout [ 39.520997][ T5099] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 39.548309][ T5100] device-mapper: table: 248:0: snap: unknown target type [ 39.548328][ T5100] device-mapper: ioctl: error adding target to table [ 39.827298][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 39.849396][ T5105] fuse: Invalid rootmode [ 40.005744][ T5116] netlink: 'syz.0.63': attribute type 2 has an invalid length. [ 40.005762][ T5116] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.63'. [ 40.005771][ T5116] nbd: must specify a device to reconfigure [ 40.318123][ T5126] FAULT_INJECTION: forcing a failure. [ 40.318123][ T5126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.318144][ T5126] CPU: 1 UID: 0 PID: 5126 Comm: syz.1.70 Not tainted syzkaller #0 PREEMPT [ 40.318155][ T5126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 40.318161][ T5126] Call trace: [ 40.318164][ T5126] show_stack+0x2c/0x3c (C) [ 40.318182][ T5126] __dump_stack+0x30/0x40 [ 40.318193][ T5126] dump_stack_lvl+0xd8/0x12c [ 40.318203][ T5126] dump_stack+0x1c/0x28 [ 40.318212][ T5126] should_fail_ex+0x418/0x58c [ 40.318223][ T5126] should_fail+0x14/0x24 [ 40.318233][ T5126] should_fail_usercopy+0x20/0x30 [ 40.318240][ T5126] _inline_copy_from_user+0x3c/0x174 [ 40.318248][ T5126] kstrtouint_from_user+0xcc/0x174 [ 40.318255][ T5126] proc_fail_nth_write+0x9c/0x234 [ 40.318264][ T5126] vfs_write+0x2a4/0xa0c [ 40.318271][ T5126] ksys_write+0x12c/0x228 [ 40.318278][ T5126] __arm64_sys_write+0x84/0x98 [ 40.318285][ T5126] invoke_syscall+0x98/0x244 [ 40.318295][ T5126] el0_svc_common+0xec/0x23c [ 40.318310][ T5126] do_el0_svc+0x4c/0x5c [ 40.318320][ T5126] el0_svc+0x60/0x1d8 [ 40.318331][ T5126] el0t_64_sync_handler+0x44/0x104 [ 40.318343][ T5126] el0t_64_sync+0x198/0x19c [ 40.545012][ T5132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 40.758948][ T5136] fuse: Invalid rootmode [ 40.820773][ T5139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.74'. [ 40.863854][ T5141] syz.4.74 uses obsolete (PF_INET,SOCK_PACKET) [ 40.871709][ T5147] loop0: detected capacity change from 0 to 1024 [ 40.872585][ T5147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.887476][ T5147] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c028, mo2=0002] [ 40.887507][ T5147] System zones: 0-1, 3-12 [ 40.888678][ T5147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.550430][ T5162] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 41.569381][ T5164] device-mapper: table: 248:0: too large device [ 41.569390][ T5164] device-mapper: ioctl: error adding target to table [ 41.631081][ T5166] loop1: detected capacity change from 0 to 128 [ 41.644365][ T5166] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.653034][ T5166] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 41.675882][ T4707] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.744408][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.799309][ T5173] fuse: Bad value for 'rootmode' [ 41.825453][ T5176] No source specified [ 41.828847][ T5176] loop3: detected capacity change from 0 to 512 [ 41.868907][ T5176] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 41.868929][ T5176] FAT-fs (loop3): Filesystem has been set read-only [ 41.869713][ T5176] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 41.912741][ T5184] process 'syz.4.89' launched './file2' with NULL argv: empty string added [ 41.945919][ T5184] netlink: 128 bytes leftover after parsing attributes in process `syz.4.89'. [ 41.947433][ T5184] loop4: detected capacity change from 0 to 128 [ 41.948656][ T5187] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(9) [ 41.962426][ T5184] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.014502][ T5194] loop3: detected capacity change from 0 to 128 [ 42.023730][ T5194] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.025370][ T5194] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 42.042179][ T5199] netlink: 'syz.0.94': attribute type 2 has an invalid length. [ 42.045818][ T4706] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.046688][ T5206] netlink: 'syz.0.94': attribute type 2 has an invalid length. [ 42.106570][ T5207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 42.272375][ T5201] netlink: 'syz.0.94': attribute type 2 has an invalid length. [ 42.356760][ T5215] fuse: Bad value for 'rootmode' [ 42.390218][ T5222] device-mapper: table: 248:0: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 42.390237][ T5222] device-mapper: ioctl: error adding target to table [ 42.423741][ T5227] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(939524100.16777217.0), cmd(9) [ 42.457696][ T5231] openvswitch: netlink: Duplicate or invalid key (type 0). [ 42.457773][ T5231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 42.459002][ T5231] capability: warning: `syz.0.103' uses deprecated v2 capabilities in a way that may be insecure [ 42.459227][ T5231] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 42.459325][ T5231] overlayfs: overlapping lowerdir path [ 42.617874][ T4716] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.634070][ T5238] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 42.646905][ T5240] loop4: detected capacity change from 0 to 128 [ 42.663054][ T5240] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.666455][ T5240] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 42.679842][ T4716] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.891152][ T5250] fuse: Bad value for 'rootmode' [ 42.987593][ T5256] openvswitch: netlink: Message has 2 unknown bytes. [ 43.172270][ T5262] device-mapper: table: 248:0: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 43.172288][ T5262] device-mapper: ioctl: error adding target to table [ 43.404840][ T5281] fuse: Unknown parameter 'use00000000000000000000' [ 43.429063][ T5283] loop2: detected capacity change from 0 to 512 [ 43.429518][ T5283] EXT4-fs: Ignoring removed i_version option [ 43.429780][ T5283] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.442464][ T5283] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 43.442480][ T5283] loop2: lost filesystem error report for type 5 error -117 [ 43.443598][ T5283] EXT4-fs (loop2): 2 truncates cleaned up [ 43.444044][ T5283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.448111][ T5282] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.123: bg 0: block 5: invalid block bitmap [ 43.467133][ T5283] Injecting memory failure for pfn 0x1352e1 at process virtual address 0x20000000 [ 43.472190][ T5283] Memory failure: 0x1352e1: corrupted page was clean: dropped without side effects [ 43.472305][ T5283] Memory failure: 0x1352e1: recovery action for clean LRU page: Recovered [ 43.485693][ T4712] EXT4-fs error (device loop2): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 43.486842][ T4712] EXT4-fs error (device loop2): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 43.548193][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 44.286414][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 44.304488][ T5289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.322510][ T5305] netlink: 'syz.0.129': attribute type 2 has an invalid length. [ 44.322524][ T5305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 44.443051][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 44.468756][ T5305] psci: CPU1 killed (polled 0 ms) [ 44.499594][ T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.549056][ T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.568271][ T4720] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.569329][ T4720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.570110][ T4720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.571586][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.580330][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.663778][ T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.705261][ T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.757341][ T5318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.133'. [ 44.757367][ T5318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.133'. [ 44.785639][ T5318] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 44.799555][ T5318] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 44.802725][ T5318] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 44.837499][ T5325] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 44.858613][ T14] bridge_slave_1: left allmulticast mode [ 44.858641][ T14] bridge_slave_1: left promiscuous mode [ 44.859027][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.881464][ T14] bridge_slave_0: left allmulticast mode [ 44.881483][ T14] bridge_slave_0: left promiscuous mode [ 44.881581][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.967717][ T5328] device-mapper: table: 248:0: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 44.967735][ T5328] device-mapper: ioctl: error adding target to table [ 45.406741][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.410857][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.418259][ T14] bond0 (unregistering): Released all slaves [ 45.713425][ T14] hsr_slave_0: left promiscuous mode [ 45.718652][ T14] hsr_slave_1: left promiscuous mode [ 45.719012][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.719034][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.720112][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.720121][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.793051][ T14] veth1_macvtap: left promiscuous mode [ 45.793088][ T14] veth0_macvtap: left promiscuous mode [ 45.793137][ T14] veth1_vlan: left promiscuous mode [ 45.793178][ T14] veth0_vlan: left promiscuous mode [ 45.847805][ T5348] loop4: detected capacity change from 0 to 128 [ 45.848542][ T5346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.137'. [ 45.873732][ T5348] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.887272][ T5348] openvswitch: netlink: IP tunnel dst address not specified [ 45.929142][ T5353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.137'. [ 45.935942][ T4716] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.289776][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 46.409991][ T14] team0 (unregistering): Port device team_slave_1 removed [ 46.421089][ T14] team0 (unregistering): Port device team_slave_0 removed [ 46.466706][ T5363] netlink: 536 bytes leftover after parsing attributes in process `syz.0.140'. [ 46.526562][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 46.712158][ T4720] Bluetooth: hci2: command tx timeout [ 47.057829][ T5312] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.059417][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.059483][ T5312] bridge_slave_0: entered allmulticast mode [ 47.061939][ T5312] bridge_slave_0: entered promiscuous mode [ 47.072114][ T5312] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.073557][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.073622][ T5312] bridge_slave_1: entered allmulticast mode [ 47.075649][ T5312] bridge_slave_1: entered promiscuous mode [ 47.105089][ T5388] batman_adv: batadv0: Adding interface: syzkaller0 [ 47.105103][ T5388] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.105122][ T5388] batman_adv: batadv0: Interface activated: syzkaller0 [ 47.138114][ T5312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.138269][ T5386] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 47.150306][ T5390] loop1: detected capacity change from 0 to 2048 [ 47.150639][ T5390] ext4: Unknown parameter 'rootcontext' [ 47.157591][ T5386] batman_adv: batadv0: Removing interface: syzkaller0 [ 47.187028][ T5312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.230094][ T5312] team0: Port device team_slave_0 added [ 47.237217][ T5312] team0: Port device team_slave_1 added [ 47.277670][ T5312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.277687][ T5312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.277698][ T5312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.281492][ T5312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.281503][ T5312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.281513][ T5312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.540767][ T5312] hsr_slave_0: entered promiscuous mode [ 47.545722][ T5312] hsr_slave_1: entered promiscuous mode [ 47.548386][ T5312] debugfs: 'hsr0' already exists in 'hsr' [ 47.548415][ T5312] Cannot create hsr debugfs directory [ 47.665437][ T5410] loop3: detected capacity change from 0 to 128 [ 47.681454][ T5410] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.703700][ T5410] openvswitch: netlink: IP tunnel dst address not specified [ 47.750600][ T4706] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.760966][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 47.856715][ T5417] bridge0: port 3(veth1_to_bridge) entered blocking state [ 47.856761][ T5417] bridge0: port 3(veth1_to_bridge) entered disabled state [ 47.856840][ T5417] veth1_to_bridge: entered allmulticast mode [ 47.857429][ T5418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.150'. [ 47.857478][ T5417] veth1_to_bridge: entered promiscuous mode [ 47.857552][ T5417] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 47.858229][ T5417] bridge0: port 3(veth1_to_bridge) entered blocking state [ 47.858263][ T5417] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 47.860430][ T5312] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.862828][ T5312] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.903461][ T5312] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.908604][ T5312] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.911278][ T5312] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.938535][ T5312] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.958163][ T5312] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.977184][ T5312] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.050036][ T5425] overlayfs: failed to resolve './file0/file1': -2 [ 48.143462][ T5312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.146300][ T5312] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.149907][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.149939][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.166887][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.166912][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.169721][ T5435] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000 [ 48.180086][ T5435] tipc: Started in network mode [ 48.180107][ T5435] tipc: Node identity 7f000001, cluster identity 4711 [ 48.180623][ T5435] tipc: Enabled bearer , priority 10 [ 48.292952][ T5447] FAULT_INJECTION: forcing a failure. [ 48.292952][ T5447] name failslab, interval 1, probability 0, space 0, times 0 [ 48.292981][ T5447] CPU: 0 UID: 0 PID: 5447 Comm: syz.3.155 Not tainted syzkaller #0 PREEMPT [ 48.292995][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 48.293002][ T5447] Call trace: [ 48.293006][ T5447] show_stack+0x2c/0x3c (C) [ 48.293026][ T5447] __dump_stack+0x30/0x40 [ 48.293039][ T5447] dump_stack_lvl+0xd8/0x12c [ 48.293051][ T5447] dump_stack+0x1c/0x28 [ 48.293062][ T5447] should_fail_ex+0x418/0x58c [ 48.293076][ T5447] should_failslab+0xc4/0x120 [ 48.293089][ T5447] __kmalloc_noprof+0x108/0x6c8 [ 48.293098][ T5447] tomoyo_realpath_from_path+0xbc/0x4dc [ 48.293111][ T5447] tomoyo_path_number_perm+0x1f0/0x500 [ 48.293121][ T5447] tomoyo_file_ioctl+0x2c/0x3c [ 48.293133][ T5447] security_file_ioctl+0xdc/0x2b0 [ 48.293144][ T5447] __arm64_sys_ioctl+0xb0/0x1cc [ 48.293152][ T5447] invoke_syscall+0x98/0x244 [ 48.293165][ T5447] el0_svc_common+0xec/0x23c [ 48.293177][ T5447] do_el0_svc+0x4c/0x5c [ 48.293188][ T5447] el0_svc+0x60/0x1d8 [ 48.293202][ T5447] el0t_64_sync_handler+0x44/0x104 [ 48.293214][ T5447] el0t_64_sync+0x198/0x19c [ 48.293225][ T5447] ERROR: Out of memory at tomoyo_realpath_from_path. [ 48.378986][ T5450] device-mapper: table: 248:0: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 48.379008][ T5450] device-mapper: ioctl: error adding target to table [ 48.664879][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 48.903826][ T4720] Bluetooth: hci2: command tx timeout [ 48.957552][ T5312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.293724][ T4381] tipc: Node number set to 2130706433 [ 49.686586][ T5312] veth0_vlan: entered promiscuous mode [ 49.687001][ T5497] fuse: Unknown parameter 'user_id00000000000000000000' [ 49.698088][ T5312] veth1_vlan: entered promiscuous mode [ 49.744310][ T5312] veth0_macvtap: entered promiscuous mode [ 49.749755][ T5312] veth1_macvtap: entered promiscuous mode [ 49.778022][ T5312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.827883][ T5312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.922830][ T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.922962][ T14] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.922983][ T14] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.922998][ T14] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.990204][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.990222][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.060131][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.060147][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.086384][ T4398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 50.377981][ T5519] __nla_validate_parse: 2 callbacks suppressed [ 50.377995][ T5519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 50.443360][ T5523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.167'. [ 50.467412][ T5523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'. [ 50.697556][ T5537] fuse: Unknown parameter 'user_id00000000000000000000' [ 50.912085][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.912119][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.912137][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.912733][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.960397][ T4720] Bluetooth: hci2: command tx timeout [ 51.630050][ T5559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'. [ 51.631514][ T5561] loop5: detected capacity change from 0 to 512 [ 51.649493][ T5561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.666101][ T5559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.178'. [ 51.670413][ T5561] EXT4-fs error (device loop5): ext4_group_add:1738: inode #7: comm syz.5.179: iget: checksum invalid [ 51.671505][ T5561] EXT4-fs warning (device loop5): ext4_group_add:1740: Error opening resize inode [ 51.768384][ T5566] Zero length message leads to an empty skb [ 51.957999][ T5574] loop4: detected capacity change from 0 to 128 [ 51.977752][ T5574] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.015469][ T5568] loop1: detected capacity change from 0 to 1024 [ 52.017220][ T5574] openvswitch: netlink: Tunnel attr 7427 out of range max 16 [ 52.046166][ T5312] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.066780][ T5568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.068999][ T4716] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.217087][ T5580] vhci_hcd vhci_hcd.3: invalid port number 129 [ 52.217104][ T5580] vhci_hcd vhci_hcd.3: invalid port number 129 [ 52.295360][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.403321][ T5596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.190'. [ 52.417874][ T5596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.190'. [ 52.499938][ T5599] loop4: detected capacity change from 0 to 128 [ 52.580719][ T5599] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.597237][ T5599] openvswitch: netlink: Tunnel attr 7427 out of range max 16 [ 52.803206][ T4716] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.933691][ T5611] device-mapper: table: 248:0: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 52.933712][ T5611] device-mapper: ioctl: error adding target to table [ 52.968246][ T5616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.197'. [ 53.131962][ T4720] Bluetooth: hci2: command tx timeout [ 53.190579][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.198'. [ 53.262615][ T5631] netlink: 132 bytes leftover after parsing attributes in process `syz.0.201'. [ 53.387398][ T5640] loop3: detected capacity change from 0 to 128 [ 53.394756][ T5640] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.400089][ T5641] fuse: Bad value for 'fd' [ 54.387567][ T5646] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 54.421962][ T4706] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.449122][ T5648] loop4: detected capacity change from 0 to 128 [ 54.468748][ T5648] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.555359][ T5648] openvswitch: netlink: Tunnel attr 7427 out of range max 16 [ 54.753752][ T4716] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.823066][ T5657] loop4: detected capacity change from 0 to 256 [ 55.106785][ T30] audit: type=1326 audit(311.097:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5673 comm="syz.1.215" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f788e8 code=0x7fc00000 [ 55.281860][ T30] audit: type=1326 audit(311.267:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5673 comm="syz.1.215" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa0f788e8 code=0x7fc00000 [ 55.337012][ T5687] device-mapper: table: 248:0: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 55.337032][ T5687] device-mapper: ioctl: error adding target to table [ 55.505725][ T5695] loop4: detected capacity change from 0 to 512 [ 55.696490][ T5695] EXT4-fs (loop4): 1 truncate cleaned up [ 55.696963][ T5695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.718239][ T5695] Bluetooth: MGMT ver 1.23 [ 55.774824][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.885909][ T5703] __nla_validate_parse: 4 callbacks suppressed [ 55.885924][ T5703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'. [ 55.911625][ T5703] FAULT_INJECTION: forcing a failure. [ 55.911625][ T5703] name failslab, interval 1, probability 0, space 0, times 0 [ 55.911645][ T5703] CPU: 0 UID: 0 PID: 5703 Comm: syz.1.222 Not tainted syzkaller #0 PREEMPT [ 55.911658][ T5703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 55.911664][ T5703] Call trace: [ 55.911667][ T5703] show_stack+0x2c/0x3c (C) [ 55.911686][ T5703] __dump_stack+0x30/0x40 [ 55.911697][ T5703] dump_stack_lvl+0xd8/0x12c [ 55.911707][ T5703] dump_stack+0x1c/0x28 [ 55.911716][ T5703] should_fail_ex+0x418/0x58c [ 55.911727][ T5703] should_failslab+0xc4/0x120 [ 55.911741][ T5703] kmem_cache_alloc_node_noprof+0x98/0x604 [ 55.911749][ T5703] __alloc_skb+0x1f0/0x610 [ 55.911760][ T5703] netlink_alloc_large_skb+0xd4/0x114 [ 55.911770][ T5703] netlink_sendmsg+0x4c4/0x948 [ 55.911779][ T5703] __sock_sendmsg+0xc8/0x17c [ 55.911788][ T5703] ____sys_sendmsg+0x3d0/0x6c8 [ 55.911797][ T5703] ___sys_sendmsg+0x198/0x224 [ 55.911806][ T5703] __sys_sendmsg+0x158/0x204 [ 55.911815][ T5703] __arm64_sys_sendmsg+0x88/0x9c [ 55.911824][ T5703] invoke_syscall+0x98/0x244 [ 55.911834][ T5703] el0_svc_common+0xec/0x23c [ 55.911844][ T5703] do_el0_svc+0x4c/0x5c [ 55.911853][ T5703] el0_svc+0x60/0x1d8 [ 55.911864][ T5703] el0t_64_sync_handler+0x44/0x104 [ 55.911874][ T5703] el0t_64_sync+0x198/0x19c [ 55.950758][ T5709] device-mapper: table: 248:0: zero-length target [ 55.950769][ T5709] device-mapper: ioctl: error adding target to table [ 56.032488][ T5701] loop5: detected capacity change from 0 to 512 [ 56.049066][ T5714] loop1: detected capacity change from 0 to 128 [ 56.059126][ T5714] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.063896][ T5701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.065832][ T5714] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.086174][ T5714] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 56.086195][ T5714] FAT-fs (loop1): Filesystem has been set read-only [ 56.097673][ T5721] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 56.204516][ T5312] EXT4-fs error (device loop5): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 56.215019][ T5312] EXT4-fs error (device loop5): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 56.215720][ T5312] EXT4-fs error (device loop5): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 56.216141][ T5312] EXT4-fs error (device loop5): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 56.218848][ T5312] EXT4-fs error (device loop5): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 56.219123][ T5312] EXT4-fs error (device loop5): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 56.220636][ T5312] EXT4-fs error (device loop5): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 56.269988][ T5312] EXT4-fs error (device loop5): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 56.276942][ T5312] EXT4-fs error (device loop5): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 56.282027][ T5312] EXT4-fs error (device loop5): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 56.692462][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 56.695767][ T5745] netlink: 244 bytes leftover after parsing attributes in process `syz.0.234'. [ 56.750180][ T5751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 57.019473][ T5312] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.265655][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.297429][ T5771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 57.304753][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.233824][ T5772] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 58.257356][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.315927][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.400458][ T5780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'. [ 58.408674][ T5778] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 58.408687][ T5778] netlink: 1496 bytes leftover after parsing attributes in process `syz.1.246'. [ 58.447255][ T5780] FAULT_INJECTION: forcing a failure. [ 58.447255][ T5780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.447276][ T5780] CPU: 0 UID: 0 PID: 5780 Comm: syz.0.249 Not tainted syzkaller #0 PREEMPT [ 58.447296][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 58.447303][ T5780] Call trace: [ 58.447307][ T5780] show_stack+0x2c/0x3c (C) [ 58.447329][ T5780] __dump_stack+0x30/0x40 [ 58.447341][ T5780] dump_stack_lvl+0xd8/0x12c [ 58.447351][ T5780] dump_stack+0x1c/0x28 [ 58.447360][ T5780] should_fail_ex+0x418/0x58c [ 58.447371][ T5780] should_fail+0x14/0x24 [ 58.447381][ T5780] should_fail_usercopy+0x20/0x30 [ 58.447388][ T5780] _copy_from_iter+0x188/0x1064 [ 58.447396][ T5780] netlink_sendmsg+0x570/0x948 [ 58.447407][ T5780] __sock_sendmsg+0xc8/0x17c [ 58.447416][ T5780] ____sys_sendmsg+0x3d0/0x6c8 [ 58.447425][ T5780] ___sys_sendmsg+0x198/0x224 [ 58.447434][ T5780] __sys_sendmsg+0x158/0x204 [ 58.447443][ T5780] __arm64_sys_sendmsg+0x88/0x9c [ 58.447453][ T5780] invoke_syscall+0x98/0x244 [ 58.447463][ T5780] el0_svc_common+0xec/0x23c [ 58.447472][ T5780] do_el0_svc+0x4c/0x5c [ 58.447481][ T5780] el0_svc+0x60/0x1d8 [ 58.447492][ T5780] el0t_64_sync_handler+0x44/0x104 [ 58.447502][ T5780] el0t_64_sync+0x198/0x19c [ 58.548765][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.549241][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.549486][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.550708][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.551027][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.590972][ T12] bridge_slave_1: left allmulticast mode [ 58.590994][ T12] bridge_slave_1: left promiscuous mode [ 58.591083][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.599880][ T12] bridge_slave_0: left allmulticast mode [ 58.599893][ T12] bridge_slave_0: left promiscuous mode [ 58.599955][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.624931][ T5791] loop4: detected capacity change from 0 to 128 [ 58.628338][ T5792] fuse: Unknown parameter 'fl' [ 58.649206][ T5791] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.741424][ T4716] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.771091][ T5802] IPVS: set_ctl: invalid protocol: 381 172.30.0.4:20001 [ 58.800703][ T5806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.255'. [ 58.839956][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.841087][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.849861][ T12] bond0 (unregistering): Released all slaves [ 58.857808][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 58.899751][ T5812] bridge2: port 1(veth0_to_bond) entered blocking state [ 58.899793][ T5812] bridge2: port 1(veth0_to_bond) entered disabled state [ 58.899860][ T5812] veth0_to_bond: entered allmulticast mode [ 58.900368][ T5812] veth0_to_bond: entered promiscuous mode [ 59.016882][ T5809] proc: Unknown parameter 'size' [ 59.345036][ T12] hsr_slave_0: left promiscuous mode [ 59.345327][ T12] hsr_slave_1: left promiscuous mode [ 59.345690][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.345702][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.347138][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.347154][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.246908][ T5837] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 60.295657][ T12] veth1_macvtap: left promiscuous mode [ 60.295691][ T12] veth0_macvtap: left promiscuous mode [ 60.295747][ T12] veth1_vlan: left promiscuous mode [ 60.295781][ T12] veth0_vlan: left promiscuous mode [ 60.407185][ T5843] device-mapper: table: 248:0: snapshot: requires 4 or more arguments (-EINVAL) [ 60.407202][ T5843] device-mapper: ioctl: error adding target to table [ 60.634130][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.634245][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.634765][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.634886][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.635189][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.635314][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.635645][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.635767][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.636097][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.636208][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.736766][ T4720] Bluetooth: hci2: command tx timeout [ 65.043983][ T5860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 65.281771][ C0] sched: DL replenish lagged too much [ 65.287401][ T4720] Bluetooth: hci2: command tx timeout [ 65.642076][ C0] net_ratelimit: 24451 callbacks suppressed [ 65.642093][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 65.642207][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 65.642326][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 65.642443][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 65.642803][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 65.642914][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 65.643024][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 65.643133][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 65.643498][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 65.643616][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 66.853815][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.864377][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 67.952703][ T4720] Bluetooth: hci2: command tx timeout [ 70.652042][ C0] net_ratelimit: 29502 callbacks suppressed [ 70.652060][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 70.652177][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 70.652288][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 70.652426][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 70.652777][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 70.652889][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 70.652998][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 70.653115][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 70.653475][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 70.653595][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.022388][ T4720] Bluetooth: hci2: command tx timeout [ 75.661821][ C0] net_ratelimit: 32361 callbacks suppressed [ 75.661838][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 75.662153][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 75.662260][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.662369][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.662468][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 75.662769][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 75.662880][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.662977][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.663073][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 75.663384][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 80.671937][ C0] net_ratelimit: 33391 callbacks suppressed [ 80.671954][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 80.672053][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.672150][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.672245][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 80.672563][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 80.672664][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.672868][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.672994][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 80.673317][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 80.673422][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.681803][ C0] net_ratelimit: 33488 callbacks suppressed [ 85.681821][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.681922][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 85.682234][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 85.682343][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.682456][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.682558][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 85.682873][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 85.682971][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.683068][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.683172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 90.691817][ C0] net_ratelimit: 33455 callbacks suppressed [ 90.691833][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 90.692160][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 90.692261][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.692378][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.692477][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 90.692860][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 90.692964][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.693064][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.693163][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 90.693483][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 95.701762][ C0] net_ratelimit: 33985 callbacks suppressed [ 95.701779][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.701884][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.701983][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.702080][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.702187][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 95.702722][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 95.702819][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 95.702918][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.703015][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.703112][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.712244][ C0] net_ratelimit: 32237 callbacks suppressed [ 100.712260][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 100.712369][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 100.712471][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.712568][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.712673][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.712770][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.712867][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 100.713397][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 100.713499][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 100.713604][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.721787][ C0] net_ratelimit: 33988 callbacks suppressed [ 105.721804][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.721906][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.722013][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 105.722544][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 105.722648][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 105.722746][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.722843][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.722939][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 105.723038][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.723135][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.731779][ C0] net_ratelimit: 34111 callbacks suppressed [ 110.731796][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.731910][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 110.732446][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 110.732544][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 110.732642][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.732739][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.732844][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 110.732945][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.733042][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.733139][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 115.741757][ C0] net_ratelimit: 34090 callbacks suppressed [ 115.741773][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.741876][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.741974][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 115.742072][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.742169][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.742285][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 115.742851][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 115.742948][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 115.743046][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.743143][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.751883][ C0] net_ratelimit: 34004 callbacks suppressed [ 120.751899][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 120.752008][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 120.752107][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.752203][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.752307][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 120.752410][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.752508][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.752605][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 120.753122][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 120.753253][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 120.793774][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 43s! [ 120.793805][ C0] Showing busy workqueues and worker pools: [ 120.793810][ C0] workqueue events: flags=0x100 [ 120.793845][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=20 refcnt=21 [ 120.793862][ C0] in-flight: 866:request_firmware_work_func for 117s [ 120.793883][ C0] pending: 6*nsim_dev_hwstats_traffic_work, vmstat_shepherd, psi_avgs_work, delayed_vfree_work, 4*psi_avgs_work, 5*ovs_dp_masks_rebalance, l2cap_chan_timeout [ 120.793950][ C0] workqueue events_unbound: flags=0x2 [ 120.793954][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=32 refcnt=33 [ 120.793968][ C0] in-flight: 4854:cfg80211_wiphy_work for 57s ,14:linkwatch_event for 60s linkwatch_event ,5049:cfg80211_wiphy_work for 58s cfg80211_wiphy_work ,651:cfg80211_wiphy_work for 58s cfg80211_wiphy_work ,1151:cfg80211_wiphy_work for 57s ,64:cfg80211_wiphy_work for 32s ,1190:cfg80211_wiphy_work for 31s [ 120.794073][ C0] pending: macvlan_process_broadcast, 2*cfg80211_wiphy_work, 2*macvlan_process_broadcast, crng_reseed, cfg80211_wiphy_work, toggle_allocation_gate, 5*nsim_dev_trap_report_work, macvlan_process_broadcast, cfg80211_wiphy_work, macvlan_process_broadcast, flush_memcg_stats_dwork, cfg80211_wiphy_work, nsim_dev_trap_report_work, 3*macvlan_process_broadcast [ 120.794167][ C0] workqueue events_power_efficient: flags=0x82 [ 120.794172][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=8 refcnt=9 [ 120.794184][ C0] in-flight: 40:wg_ratelimiter_gc_entries for 33s [ 120.794200][ C0] pending: gc_worker, neigh_managed_work, neigh_periodic_work, do_cache_clean, neigh_managed_work, neigh_periodic_work, reg_check_chans_work [ 120.794256][ C0] workqueue events_freezable_pwr_efficient: flags=0x86 [ 120.794260][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 120.794273][ C0] pending: sync_hw_clock [ 120.794288][ C0] workqueue events_dfl_long: flags=0x2 [ 120.794296][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=6 refcnt=7 [ 120.794310][ C0] pending: 6*defense_work_handler [ 120.794326][ C0] workqueue netns: flags=0x6000a [ 120.794331][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 120.794344][ C0] in-flight: 12:cleanup_net for 63s [ 120.794363][ C0] workqueue mm_percpu_wq: flags=0x108 [ 120.794367][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.794381][ C0] pending: vmstat_update [ 120.794399][ C0] workqueue writeback: flags=0x4a [ 120.794403][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=3 refcnt=6 MAYDAY [ 120.794416][ C0] in-flight: 33(RESCUER):wb_workfn for 28s [ 120.794432][ C0] pending: mayday_cursor_func, wb_workfn, wb_update_bandwidth_workfn [ 120.794497][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 120.794501][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=7 [ 120.794513][ C0] in-flight: 5051:addrconf_dad_work for 60s [ 120.794529][ C0] inactive: 3*addrconf_dad_work [ 120.794543][ C0] workqueue bat_events: flags=0x6000a [ 120.794547][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=42 MAYDAY [ 120.794559][ C0] in-flight: 2854(RESCUER):batadv_tt_purge for 7s [ 120.794574][ C0] pending: mayday_cursor_func [ 120.794584][ C0] inactive: 2*batadv_tt_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, 5*batadv_mcast_mla_update, 4*batadv_purge_orig, 5*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 7*batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge [ 120.794719][ C0] workqueue wg-kex-wg0: flags=0x6 [ 120.794723][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 120.794735][ C0] pending: wg_packet_handshake_send_worker [ 120.794748][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.794753][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.794767][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 120.794783][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.794787][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.794801][ C0] pending: wg_packet_encrypt_worker [ 120.794813][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.794817][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.794831][ C0] pending: wg_packet_encrypt_worker [ 120.794842][ C0] workqueue wg-kex-wg0: flags=0x6 [ 120.794846][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 120.794859][ C0] pending: wg_packet_handshake_send_worker [ 120.794871][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.794875][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.794889][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 120.794905][ C0] workqueue wg-kex-wg1: flags=0x6 [ 120.794909][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 120.794922][ C0] pending: wg_packet_handshake_send_worker [ 120.794934][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.794938][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.794952][ C0] pending: wg_packet_encrypt_worker [ 120.794963][ C0] workqueue wg-kex-wg0: flags=0x6 [ 120.794968][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 120.794980][ C0] pending: wg_packet_handshake_send_worker [ 120.794992][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.794996][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.795010][ C0] pending: wg_packet_encrypt_worker [ 120.795021][ C0] workqueue wg-kex-wg0: flags=0x6 [ 120.795025][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 120.795037][ C0] pending: wg_packet_handshake_send_worker [ 120.795049][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.795053][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.795067][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 120.795082][ C0] workqueue wg-kex-wg1: flags=0x6 [ 120.795086][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 120.795099][ C0] pending: wg_packet_handshake_send_worker [ 120.795111][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.795115][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.795129][ C0] pending: wg_packet_encrypt_worker [ 120.795140][ C0] workqueue wg-kex-wg2: flags=0x6 [ 120.795144][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 120.795156][ C0] pending: wg_packet_handshake_send_worker [ 120.795168][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.795172][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.795186][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 120.795202][ C0] workqueue wg-kex-wg1: flags=0x6 [ 120.795206][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 120.795218][ C0] pending: wg_packet_handshake_send_worker [ 120.795230][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.795234][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.795248][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 120.795264][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.795269][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.795283][ C0] pending: wg_packet_encrypt_worker [ 120.795298][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.795303][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.795318][ C0] pending: wg_packet_encrypt_worker [ 120.795341][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=43s workers=8 idle: 9 5033 4381 10 4709 4810 4891 [ 120.795392][ C0] pool 8: cpus=0-1 flags=0x6 nice=0 hung=7s workers=11 manager: 42 [ 120.795410][ C0] Showing backtraces of busy workers in stalled worker pools: [ 120.795415][ C0] pool 2: [ 120.795418][ C0] task:kworker/0:2 state:R running task stack:0 pid:866 tgid:866 ppid:2 task_flags:0x4288060 flags:0x00000010 [ 120.795433][ C0] Workqueue: events request_firmware_work_func [ 120.795441][ C0] Call trace: [ 120.795444][ C0] __switch_to+0x2b4/0x6e4 (T) [ 120.795457][ C0] __schedule+0x135c/0x2b00 [ 120.795467][ C0] preempt_schedule_common+0xd4/0x190 [ 120.795477][ C0] preempt_schedule+0x60/0x78 [ 120.795486][ C0] __local_bh_enable_ip+0x16c/0x234 [ 120.795495][ C0] __alloc_skb+0x1c8/0x610 [ 120.795505][ C0] alloc_uevent_skb+0x78/0x1ec [ 120.795514][ C0] kobject_uevent_net_broadcast+0x2d4/0x53c [ 120.795523][ C0] kobject_uevent_env+0x518/0x944 [ 120.795531][ C0] kobject_uevent+0x2c/0x3c [ 120.795539][ C0] device_del+0x5f8/0x71c [ 120.795549][ C0] firmware_fallback_sysfs+0x330/0x930 [ 120.795557][ C0] _request_firmware+0xb34/0xf5c [ 120.795564][ C0] request_firmware_work_func+0xa4/0x24c [ 120.795572][ C0] process_scheduled_works+0x91c/0x1250 [ 120.795582][ C0] worker_thread+0x798/0xbd0 [ 120.795591][ C0] kthread+0x304/0x3d4 [ 120.795599][ C0] ret_from_fork+0x10/0x20 [ 125.761811][ C0] net_ratelimit: 34056 callbacks suppressed [ 125.761826][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.761938][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.762036][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 125.762133][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.762230][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.762339][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 125.762891][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 125.762989][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 125.763087][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.763183][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.013911][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.023060][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.771801][ C0] net_ratelimit: 34090 callbacks suppressed [ 130.771818][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.771919][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 130.772440][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 130.772542][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 130.772641][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.772745][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.772841][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 130.772938][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.773041][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.773138][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 135.781776][ C0] net_ratelimit: 34122 callbacks suppressed [ 135.781793][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.781898][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.782005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 135.782122][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.782220][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.782327][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 135.782849][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 135.782947][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 135.783059][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.783156][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.791810][ C0] net_ratelimit: 34011 callbacks suppressed [ 140.791826][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 140.792385][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 140.792486][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 140.792586][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.792705][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.792802][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 140.792899][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.792996][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.793093][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 140.793626][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 145.801768][ C0] net_ratelimit: 34011 callbacks suppressed [ 145.801784][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 145.801885][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.801983][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.802081][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 145.802620][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 145.802717][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 145.802821][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.802925][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.803037][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 145.803134][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.812062][ C0] net_ratelimit: 34098 callbacks suppressed [ 150.812078][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 150.812178][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 150.812284][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.812399][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.812499][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 150.812597][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.812694][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.812790][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 150.813319][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 150.813423][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 150.873673][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 73s! [ 150.873711][ C0] Showing busy workqueues and worker pools: [ 150.873715][ C0] workqueue events: flags=0x100 [ 150.873721][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=20 refcnt=21 [ 150.873737][ C0] in-flight: 866:request_firmware_work_func for 147s [ 150.873758][ C0] pending: 6*nsim_dev_hwstats_traffic_work, vmstat_shepherd, psi_avgs_work, delayed_vfree_work, 4*psi_avgs_work, 5*ovs_dp_masks_rebalance, l2cap_chan_timeout [ 150.873827][ C0] workqueue events_unbound: flags=0x2 [ 150.873832][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=32 refcnt=33 [ 150.873845][ C0] in-flight: 4854:cfg80211_wiphy_work for 87s ,14:linkwatch_event for 90s linkwatch_event ,5049:cfg80211_wiphy_work for 88s cfg80211_wiphy_work ,651:cfg80211_wiphy_work for 88s cfg80211_wiphy_work ,1151:cfg80211_wiphy_work for 87s ,64:cfg80211_wiphy_work for 63s ,1190:cfg80211_wiphy_work for 61s [ 150.873952][ C0] pending: macvlan_process_broadcast, 2*cfg80211_wiphy_work, 2*macvlan_process_broadcast, crng_reseed, cfg80211_wiphy_work, toggle_allocation_gate, 5*nsim_dev_trap_report_work, macvlan_process_broadcast, cfg80211_wiphy_work, macvlan_process_broadcast, flush_memcg_stats_dwork, cfg80211_wiphy_work, nsim_dev_trap_report_work, 3*macvlan_process_broadcast [ 150.874046][ C0] workqueue events_power_efficient: flags=0x82 [ 150.874050][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=9 refcnt=10 [ 150.874063][ C0] in-flight: 40:wg_ratelimiter_gc_entries for 63s [ 150.874079][ C0] pending: gc_worker, neigh_managed_work, neigh_periodic_work, do_cache_clean, neigh_managed_work, neigh_periodic_work, reg_check_chans_work, check_lifetime [ 150.874141][ C0] workqueue events_freezable_pwr_efficient: flags=0x86 [ 150.874145][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.874158][ C0] pending: sync_hw_clock [ 150.874172][ C0] workqueue events_dfl_long: flags=0x2 [ 150.874177][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=6 refcnt=7 [ 150.874189][ C0] pending: 6*defense_work_handler [ 150.874203][ C0] workqueue netns: flags=0x6000a [ 150.874208][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 150.874220][ C0] in-flight: 12:cleanup_net for 93s [ 150.874238][ C0] workqueue mm_percpu_wq: flags=0x108 [ 150.874242][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 150.874256][ C0] pending: vmstat_update [ 150.874274][ C0] workqueue writeback: flags=0x4a [ 150.874278][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=3 refcnt=6 MAYDAY [ 150.874296][ C0] in-flight: 33(RESCUER):wb_workfn for 58s [ 150.874312][ C0] pending: mayday_cursor_func, wb_workfn, wb_update_bandwidth_workfn [ 150.874379][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 150.874384][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=7 [ 150.874396][ C0] in-flight: 5051:addrconf_dad_work for 90s [ 150.874411][ C0] inactive: 3*addrconf_dad_work [ 150.874424][ C0] workqueue bat_events: flags=0x6000a [ 150.874429][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=42 MAYDAY [ 150.874441][ C0] in-flight: 2854(RESCUER):batadv_tt_purge for 15s [ 150.874456][ C0] pending: mayday_cursor_func [ 150.874465][ C0] inactive: batadv_tt_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, 5*batadv_mcast_mla_update, 4*batadv_purge_orig, 5*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 7*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_tt_purge [ 150.874599][ C0] workqueue wg-kex-wg0: flags=0x6 [ 150.874604][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.874616][ C0] pending: wg_packet_handshake_send_worker [ 150.874629][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 150.874633][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 150.874648][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 150.874664][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 150.874668][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 150.874682][ C0] pending: wg_packet_encrypt_worker [ 150.874694][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 150.874698][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 150.874712][ C0] pending: wg_packet_encrypt_worker [ 150.874723][ C0] workqueue wg-kex-wg0: flags=0x6 [ 150.874727][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.874739][ C0] pending: wg_packet_handshake_send_worker [ 150.874752][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 150.874756][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 150.874770][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 150.874786][ C0] workqueue wg-kex-wg1: flags=0x6 [ 150.874790][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.874803][ C0] pending: wg_packet_handshake_send_worker [ 150.874815][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 150.874819][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 150.874833][ C0] pending: wg_packet_encrypt_worker [ 150.874844][ C0] workqueue wg-kex-wg0: flags=0x6 [ 150.874848][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.874860][ C0] pending: wg_packet_handshake_send_worker [ 150.874872][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 150.874877][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 150.874890][ C0] pending: wg_packet_encrypt_worker [ 150.874901][ C0] workqueue wg-kex-wg0: flags=0x6 [ 150.874906][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.874918][ C0] pending: wg_packet_handshake_send_worker [ 150.874930][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 150.874934][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 150.874948][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 150.874964][ C0] workqueue wg-kex-wg1: flags=0x6 [ 150.874968][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.874980][ C0] pending: wg_packet_handshake_send_worker [ 150.874992][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 150.874996][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 150.875010][ C0] pending: wg_packet_encrypt_worker [ 150.875021][ C0] workqueue wg-kex-wg2: flags=0x6 [ 150.875025][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.875037][ C0] pending: wg_packet_handshake_send_worker [ 150.875049][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 150.875053][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 150.875067][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 150.875083][ C0] workqueue wg-kex-wg1: flags=0x6 [ 150.875087][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 150.875099][ C0] pending: wg_packet_handshake_send_worker [ 150.875111][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 150.875116][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 150.875129][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 150.875146][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 150.875150][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 150.875164][ C0] pending: wg_packet_encrypt_worker [ 150.875175][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 150.875179][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 150.875193][ C0] pending: wg_packet_encrypt_worker [ 150.875215][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=73s workers=8 idle: 9 5033 4381 10 4709 4810 4891 [ 150.875266][ C0] pool 8: cpus=0-1 flags=0x6 nice=0 hung=15s workers=11 manager: 42 [ 150.875285][ C0] Showing backtraces of busy workers in stalled worker pools: [ 150.875294][ C0] pool 2: [ 150.875297][ C0] task:kworker/0:2 state:R running task stack:0 pid:866 tgid:866 ppid:2 task_flags:0x4288060 flags:0x00000010 [ 150.875314][ C0] Workqueue: events request_firmware_work_func [ 150.875324][ C0] Call trace: [ 150.875327][ C0] __switch_to+0x2b4/0x6e4 (T) [ 150.875341][ C0] __schedule+0x135c/0x2b00 [ 150.875351][ C0] preempt_schedule_common+0xd4/0x190 [ 150.875360][ C0] preempt_schedule+0x60/0x78 [ 150.875370][ C0] __local_bh_enable_ip+0x16c/0x234 [ 150.875378][ C0] __alloc_skb+0x1c8/0x610 [ 150.875389][ C0] alloc_uevent_skb+0x78/0x1ec [ 150.875398][ C0] kobject_uevent_net_broadcast+0x2d4/0x53c [ 150.875407][ C0] kobject_uevent_env+0x518/0x944 [ 150.875415][ C0] kobject_uevent+0x2c/0x3c [ 150.875423][ C0] device_del+0x5f8/0x71c [ 150.875433][ C0] firmware_fallback_sysfs+0x330/0x930 [ 150.875441][ C0] _request_firmware+0xb34/0xf5c [ 150.875448][ C0] request_firmware_work_func+0xa4/0x24c [ 150.875456][ C0] process_scheduled_works+0x91c/0x1250 [ 150.875466][ C0] worker_thread+0x798/0xbd0 [ 150.875475][ C0] kthread+0x304/0x3d4 [ 150.875483][ C0] ret_from_fork+0x10/0x20 [ 153.606492][ T4710] Bluetooth: hci3: command 0x0406 tx timeout [ 153.606533][ T4710] Bluetooth: hci1: command 0x0406 tx timeout [ 153.606554][ T4710] Bluetooth: hci0: command 0x0406 tx timeout [ 155.821987][ C0] net_ratelimit: 33942 callbacks suppressed [ 155.822004][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 155.822104][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 155.822203][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.822307][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.822418][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 155.822525][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.822622][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.822719][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 155.823247][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 155.823360][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 160.831820][ C0] net_ratelimit: 36271 callbacks suppressed [ 160.831837][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 160.832368][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 160.832476][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 160.832575][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.832681][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.832778][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.832875][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.832972][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 160.833068][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.833165][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.841899][ C0] net_ratelimit: 33657 callbacks suppressed [ 165.841917][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 165.842016][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 165.842116][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.842213][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.842317][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.842422][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.842519][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 165.842626][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.842723][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.842829][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 170.851927][ C0] net_ratelimit: 32923 callbacks suppressed [ 170.851944][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 170.852472][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 170.852570][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 170.852668][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.852775][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.852874][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.852972][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.853069][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 170.853165][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.853262][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.861765][ C0] net_ratelimit: 33030 callbacks suppressed [ 175.861781][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 175.861885][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.861983][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.862080][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 175.862400][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 175.862927][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 175.863024][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 175.863122][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.863219][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.863321][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.871756][ C0] net_ratelimit: 33776 callbacks suppressed [ 180.871773][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 180.871885][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.871996][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.872096][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 180.872414][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 180.872931][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:b9:b4:13:2d:a4, vlan:0) [ 180.873029][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 180.873134][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.873231][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.873337][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.952135][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 103s! [ 180.952176][ C0] Showing busy workqueues and worker pools: [ 180.952181][ C0] workqueue events: flags=0x100 [ 180.952187][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=20 refcnt=21 [ 180.952203][ C0] in-flight: 866:request_firmware_work_func for 177s [ 180.952224][ C0] pending: 6*nsim_dev_hwstats_traffic_work, vmstat_shepherd, psi_avgs_work, delayed_vfree_work, 4*psi_avgs_work, 5*ovs_dp_masks_rebalance, l2cap_chan_timeout [ 180.952295][ C0] workqueue events_unbound: flags=0x2 [ 180.952300][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=32 refcnt=33 [ 180.952315][ C0] in-flight: 4854:cfg80211_wiphy_work for 117s ,14:linkwatch_event for 120s linkwatch_event ,5049:cfg80211_wiphy_work for 118s cfg80211_wiphy_work ,651:cfg80211_wiphy_work for 118s cfg80211_wiphy_work ,1151:cfg80211_wiphy_work for 117s ,64:cfg80211_wiphy_work for 93s ,1190:cfg80211_wiphy_work for 91s [ 180.952425][ C0] pending: macvlan_process_broadcast, 2*cfg80211_wiphy_work, 2*macvlan_process_broadcast, crng_reseed, cfg80211_wiphy_work, toggle_allocation_gate, 5*nsim_dev_trap_report_work, macvlan_process_broadcast, cfg80211_wiphy_work, macvlan_process_broadcast, flush_memcg_stats_dwork, cfg80211_wiphy_work, nsim_dev_trap_report_work, 3*macvlan_process_broadcast [ 180.952518][ C0] workqueue events_power_efficient: flags=0x82 [ 180.952523][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=14 refcnt=15 [ 180.952535][ C0] in-flight: 40:wg_ratelimiter_gc_entries for 93s [ 180.952551][ C0] pending: gc_worker, neigh_managed_work, neigh_periodic_work, do_cache_clean, neigh_managed_work, neigh_periodic_work, reg_check_chans_work, 6*check_lifetime [ 180.952613][ C0] workqueue events_freezable_pwr_efficient: flags=0x86 [ 180.952618][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 180.952630][ C0] pending: sync_hw_clock [ 180.952645][ C0] workqueue events_dfl_long: flags=0x2 [ 180.952650][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=6 refcnt=7 [ 180.952662][ C0] pending: 6*defense_work_handler [ 180.952677][ C0] workqueue netns: flags=0x6000a [ 180.952682][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 180.952694][ C0] in-flight: 12:cleanup_net for 123s [ 180.952712][ C0] workqueue mm_percpu_wq: flags=0x108 [ 180.952717][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 180.952731][ C0] pending: vmstat_update [ 180.952749][ C0] workqueue writeback: flags=0x4a [ 180.952753][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=3 refcnt=6 MAYDAY [ 180.952765][ C0] in-flight: 33(RESCUER):wb_workfn for 88s [ 180.952782][ C0] pending: mayday_cursor_func, wb_workfn, wb_update_bandwidth_workfn [ 180.952845][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 180.952849][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=13 [ 180.952862][ C0] in-flight: 5051:addrconf_dad_work for 120s [ 180.952877][ C0] inactive: 3*addrconf_dad_work, 6*addrconf_verify_work [ 180.952897][ C0] workqueue bat_events: flags=0x6000a [ 180.952902][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=41 MAYDAY [ 180.952914][ C0] in-flight: 2854(RESCUER):batadv_dat_purge for 4s [ 180.952931][ C0] pending: mayday_cursor_func [ 180.952941][ C0] inactive: batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, 5*batadv_mcast_mla_update, 4*batadv_purge_orig, 5*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 7*batadv_iv_send_outstanding_bat_ogm_packet, 3*batadv_tt_purge [ 180.953059][ C0] workqueue hci0: flags=0x20012 [ 180.953064][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 180.953079][ C0] in-flight: 4720:hci_cmd_sync_work for 29s [ 180.953096][ C0] workqueue hci1: flags=0x20012 [ 180.953101][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 180.953114][ C0] in-flight: 4722:hci_cmd_sync_work for 29s [ 180.953132][ C0] workqueue hci3: flags=0x20012 [ 180.953136][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 180.953150][ C0] in-flight: 51:hci_cmd_sync_work for 29s [ 180.953167][ C0] workqueue hci4: flags=0x20012 [ 180.953171][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 180.953185][ C0] pending: hci_cmd_timeout [ 180.953197][ C0] workqueue hci4: flags=0x20012 [ 180.953201][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 180.953215][ C0] in-flight: 4710:hci_cmd_sync_work for 14s [ 180.953234][ C0] workqueue wg-kex-wg0: flags=0x6 [ 180.953238][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 180.953250][ C0] pending: wg_packet_handshake_send_worker [ 180.953263][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 180.953268][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 180.953281][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 180.953304][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 180.953309][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 180.953324][ C0] pending: wg_packet_encrypt_worker [ 180.953338][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 180.953342][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 180.953356][ C0] pending: wg_packet_encrypt_worker [ 180.953367][ C0] workqueue wg-kex-wg0: flags=0x6 [ 180.953371][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 180.953383][ C0] pending: wg_packet_handshake_send_worker [ 180.953395][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 180.953400][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 180.953413][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 180.953430][ C0] workqueue wg-kex-wg1: flags=0x6 [ 180.953434][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 180.953447][ C0] pending: wg_packet_handshake_send_worker [ 180.953459][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 180.953463][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 180.953477][ C0] pending: wg_packet_encrypt_worker [ 180.953488][ C0] workqueue wg-kex-wg0: flags=0x6 [ 180.953492][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 180.953504][ C0] pending: wg_packet_handshake_send_worker [ 180.953516][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 180.953520][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 180.953534][ C0] pending: wg_packet_encrypt_worker [ 180.953545][ C0] workqueue wg-kex-wg0: flags=0x6 [ 180.953549][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 180.953561][ C0] pending: wg_packet_handshake_send_worker [ 180.953573][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 180.953577][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 180.953591][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 180.953607][ C0] workqueue wg-kex-wg1: flags=0x6 [ 180.953611][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 180.953623][ C0] pending: wg_packet_handshake_send_worker [ 180.953635][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 180.953639][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 180.953654][ C0] pending: wg_packet_encrypt_worker [ 180.953665][ C0] workqueue wg-kex-wg2: flags=0x6 [ 180.953669][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 180.953681][ C0] pending: wg_packet_handshake_send_worker [ 180.953693][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 180.953697][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 180.953711][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 180.953727][ C0] workqueue wg-kex-wg1: flags=0x6 [ 180.953731][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 180.953743][ C0] pending: wg_packet_handshake_send_worker [ 180.953755][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 180.953759][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 180.953773][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 180.953789][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 180.953793][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 180.953807][ C0] pending: wg_packet_encrypt_worker [ 180.953818][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 180.953822][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 180.953836][ C0] pending: wg_packet_encrypt_worker [ 180.953859][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=103s workers=8 idle: 9 5033 4381 10 4709 4810 4891 [ 180.953910][ C0] pool 8: cpus=0-1 flags=0x6 nice=0 hung=4s workers=11 manager: 42 [ 180.953927][ C0] pool 9: cpus=0-1 node=0 flags=0x4 nice=-20 hung=12s workers=8 idle: 4723 4713 4721 4708 [ 180.953960][ C0] Showing backtraces of busy workers in stalled worker pools: [ 180.953965][ C0] pool 2: [ 180.953968][ C0] task:kworker/0:2 state:R running task stack:0 pid:866 tgid:866 ppid:2 task_flags:0x4288060 flags:0x00000010 [ 180.953983][ C0] Workqueue: events request_firmware_work_func [ 180.953992][ C0] Call trace: [ 180.953996][ C0] __switch_to+0x2b4/0x6e4 (T) [ 180.954011][ C0] __schedule+0x135c/0x2b00 [ 180.954021][ C0] preempt_schedule_common+0xd4/0x190 [ 180.954031][ C0] preempt_schedule+0x60/0x78 [ 180.954040][ C0] __local_bh_enable_ip+0x16c/0x234 [ 180.954049][ C0] __alloc_skb+0x1c8/0x610 [ 180.954058][ C0] alloc_uevent_skb+0x78/0x1ec [ 180.954068][ C0] kobject_uevent_net_broadcast+0x2d4/0x53c [ 180.954077][ C0] kobject_uevent_env+0x518/0x944 [ 180.954085][ C0] kobject_uevent+0x2c/0x3c [ 180.954093][ C0] device_del+0x5f8/0x71c [ 180.954103][ C0] firmware_fallback_sysfs+0x330/0x930 [ 180.954111][ C0] _request_firmware+0xb34/0xf5c [ 180.954118][ C0] request_firmware_work_func+0xa4/0x24c [ 180.954126][ C0] process_scheduled_works+0x91c/0x1250 [ 180.954135][ C0] worker_thread+0x798/0xbd0 [ 180.954145][ C0] kthread+0x304/0x3d4 [ 180.954153][ C0] ret_from_fork+0x10/0x20 [ 184.031749][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 185.038264][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4695/2:b..l [ 185.040030][ C0] rcu: (detected by 0, t=10502 jiffies, g=11705, q=1432 ncpus=1) [ 185.041716][ C0] task:syz-executor state:R running task stack:0 pid:4695 tgid:4695 ppid:4694 task_flags:0x400100 flags:0x00000000 [ 185.044661][ C0] Call trace: [ 185.045370][ C0] __switch_to+0x2b4/0x6e4 (T) [ 185.046370][ C0] __schedule+0x135c/0x2b00 [ 185.047238][ C0] preempt_schedule_common+0xd4/0x190 [ 185.048301][ C0] preempt_schedule+0x60/0x78 [ 185.049207][ C0] _raw_spin_unlock_irqrestore+0x94/0x98 [ 185.050451][ C0] do_send_sig_info+0x94/0xd4 [ 185.051480][ C0] group_send_sig_info+0x1d4/0x200 [ 185.052553][ C0] kill_pid_info_type+0x11c/0x210 [ 185.053531][ C0] kill_proc_info+0xf4/0x1b0 [ 185.054563][ C0] __arm64_sys_kill+0x8c/0x2bc [ 185.055684][ C0] invoke_syscall+0x98/0x244 [ 185.056724][ C0] el0_svc_common+0xec/0x23c [ 185.057725][ C0] do_el0_svc+0x4c/0x5c [ 185.058651][ C0] el0_svc+0x60/0x1d8 [ 185.059605][ C0] el0t_64_sync_handler+0x44/0x104 [ 185.060813][ C0] el0t_64_sync+0x198/0x19c [ 185.061890][ C0] rcu: rcu_preempt kthread starved for 3724 jiffies! g11705 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 185.064504][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 185.066767][ C0] rcu: RCU grace-period kthread stack dump: [ 185.068068][ C0] task:rcu_preempt state:R running task stack:0 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00000010 [ 185.071187][ C0] Call trace: [ 185.071942][ C0] __switch_to+0x2b4/0x6e4 (T) [ 185.073117][ C0] __schedule+0x135c/0x2b00 [ 185.074099][ C0] schedule+0x13c/0x20c [ 185.075038][ C0] schedule_timeout+0x13c/0x28c [ 185.076134][ C0] rcu_gp_fqs_loop+0x260/0xde8 [ 185.077163][ C0] rcu_gp_kthread+0x148/0x230 [ 185.078211][ C0] kthread+0x304/0x3d4 [ 185.079099][ C0] ret_from_fork+0x10/0x20 [ 185.080033][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 185.081364][ C0] CPU: 0 UID: 0 PID: 2854 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT [ 185.083286][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 185.085367][ C0] Workqueue: bat_events batadv_dat_purge [ 185.086418][ C0] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 185.088076][ C0] pc : kasan_quarantine_put+0xc0/0x1c4 [ 185.089161][ C0] lr : kasan_quarantine_put+0xb4/0x1c4 [ 185.090151][ C0] sp : ffff80008f7e6620 [ 185.090931][ C0] x29: ffff80008f7e6620 x28: 1fffe000307d9bc7 x27: 1fffe000307daae2 [ 185.092555][ C0] x26: 0000000001432110 x25: ffff0000ccb63b00 x24: 1fffe000307d9bd5 [ 185.094269][ C0] x23: 0000000000000000 x22: ffff000183ed5700 x21: 0000000000000000 [ 185.096133][ C0] x20: ffff0000c1b2b3c0 x19: 0000000000096980 x18: ffff80011b876000 [ 185.097825][ C0] x17: 0000000000020010 x16: 0038dd8600000000 x15: 0000000000000001 [ 185.099619][ C0] x14: 0000000080309ed4 x13: 00000000a8f64bf0 x12: ffff8000800203f0 [ 185.101387][ C0] x11: ffff80008b24ae28 x10: 0000000000000003 x9 : 0000000000000001 [ 185.103127][ C0] x8 : 00000000000000c0 x7 : 0000000000000000 x6 : 000000000000003f [ 185.104807][ C0] x5 : 0000000000000040 x4 : 0000000000000008 x3 : ffff8000801557b0 [ 185.106597][ C0] x2 : 0000000000000002 x1 : ffff0000ccb63b00 x0 : ffff80011b876000 [ 185.108335][ C0] Call trace: [ 185.109048][ C0] kasan_quarantine_put+0xc0/0x1c4 (P) [ 185.110225][ C0] __kasan_slab_free+0x8c/0xa4 [ 185.111193][ C0] kmem_cache_free+0x184/0x680 [ 185.112115][ C0] __skb_ext_put+0xdc/0x174 [ 185.113061][ C0] __skb_ext_del+0x13c/0x1f0 [ 185.114020][ C0] br_nf_dev_queue_xmit+0x3cc/0x215c [ 185.115079][ C0] NF_HOOK+0x5b0/0x63c [ 185.115893][ C0] br_nf_post_routing+0x8ec/0xd10 [ 185.116922][ C0] nf_hook_slow+0xc8/0x224 [ 185.117870][ C0] NF_HOOK+0x1ec/0x394 [ 185.118738][ C0] br_forward_finish+0xd8/0x120 [ 185.119858][ C0] br_nf_hook_thresh+0x344/0x3e8 [ 185.121018][ C0] br_nf_forward_finish+0x304/0x8cc [ 185.122213][ C0] NF_HOOK+0x5b0/0x63c [ 185.123131][ C0] br_nf_forward_ip+0x540/0x6ac [ 185.124236][ C0] br_nf_forward+0x614/0x14e4 [ 185.125247][ C0] nf_hook_slow+0xc8/0x224 [ 185.126253][ C0] NF_HOOK+0x1ec/0x394 [ 185.127198][ C0] __br_forward+0x2d8/0x43c [ 185.128239][ C0] deliver_clone+0x70/0xcc [ 185.129250][ C0] maybe_deliver+0x98/0x128 [ 185.130306][ C0] br_flood+0x28c/0x5c0 [ 185.131117][ C0] br_handle_frame_finish+0xd78/0x14c4 [ 185.132284][ C0] br_nf_hook_thresh+0x344/0x3e8 [ 185.133412][ C0] br_nf_pre_routing_finish_ipv6+0x7ac/0xaa4 [ 185.134846][ C0] br_nf_pre_routing_ipv6+0x2c4/0x5f8 [ 185.136119][ C0] br_nf_pre_routing+0x6e0/0x1168 [ 185.137308][ C0] br_handle_frame+0xeb0/0x10dc [ 185.138452][ C0] __netif_receive_skb_core+0x848/0x2a3c [ 185.139770][ C0] __netif_receive_skb_one_core+0x70/0x110 [ 185.141120][ C0] __netif_receive_skb+0x34/0x128 [ 185.142190][ C0] process_backlog+0x588/0x14e0 [ 185.143230][ C0] __napi_poll+0xb4/0x328 [ 185.144064][ C0] net_rx_action+0x5b0/0xc14 [ 185.145015][ C0] handle_softirqs+0x324/0xcbc [ 185.146078][ C0] __do_softirq+0x14/0x20 [ 185.147085][ C0] ____do_softirq+0x14/0x20 [ 185.148116][ C0] call_on_irq_stack+0x30/0x48 [ 185.149119][ C0] do_softirq_own_stack+0x20/0x2c [ 185.150130][ C0] do_softirq+0x90/0xf8 [ 185.151001][ C0] __local_bh_enable_ip+0x190/0x234 [ 185.152174][ C0] _raw_spin_unlock_bh+0x3c/0x4c [ 185.153293][ C0] __batadv_dat_purge+0x20c/0x2bc [ 185.154436][ C0] batadv_dat_purge+0x28/0x78 [ 185.155474][ C0] process_scheduled_works+0x91c/0x1250 [ 185.156565][ C0] rescuer_thread+0x68c/0xd90 [ 185.157508][ C0] kthread+0x304/0x3d4 [ 185.158377][ C0] ret_from_fork+0x10/0x20 [ 185.166395][ T4723] Bluetooth: hci4: command 0x0406 tx timeout