last executing test programs: 13m2.671592418s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) getpid() r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7800, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r4, 0x0, 0x0, 0xff, 0x1000, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7, 0x0, 0xfffffffc}}) setns(0xffffffffffffffff, 0x24020000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}}, 0x0) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f00000001c0)='wg1\x00', 0x4) 13m0.101232737s ago: executing program 4 (id=11): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00='], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m59.514684906s ago: executing program 4 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_mount_image$udf(&(0x7f0000000500), &(0x7f00000000c0)='./file3\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x43, 0xc11, &(0x7f0000000d00)="$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") write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8fedcb5d070811960000000186dd6372ce22667f2c"], 0x280) 12m44.442060877s ago: executing program 32 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_mount_image$udf(&(0x7f0000000500), &(0x7f00000000c0)='./file3\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x43, 0xc11, &(0x7f0000000d00)="$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") write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8fedcb5d070811960000000186dd6372ce22667f2c"], 0x280) 2m21.729550779s ago: executing program 2 (id=1821): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f00000000c0)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r3, 0x2000, 0x0) 2m20.550291706s ago: executing program 2 (id=1825): socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 2m17.372216975s ago: executing program 2 (id=1831): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x441, 0x0) r0 = open(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x240, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x1, 0x6, 0x4, 0x0, 0x6], 0x3}, {0x4, [0x1, 0x4, 0x1, 0x1, 0x5, 0x4], 0x1, 0x2}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x33}, 0xffffffff, 0xffffffff, 'dvmrp0\x00', 'ip6tnl0\x00', {0xff}, {}, 0xc, 0x5, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf, 0x6, [0x1f, 0x33, 0x14, 0x38, 0x18, 0xa, 0x1d, 0xe, 0x33, 0x2b, 0x31, 0x1c, 0x19, 0x2a, 0x3e, 0x1b], 0x2, 0xc1, 0x5}}}, {{@ip={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x30}, 0xff000000, 0xff, 'veth1_to_bridge\x00', 'veth1_macvtap\x00', {}, {}, 0x62, 0x0, 0x82}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xfffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 2m16.003442235s ago: executing program 2 (id=1834): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = userfaultfd(0x801) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone3(0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 2m14.954983181s ago: executing program 2 (id=1837): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008"], 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) 2m13.622366031s ago: executing program 2 (id=1839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000640)={@void, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @val={@val={0x88a8, 0x2, 0x1}, {0x8100, 0x7, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0xbc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}, {0xa000, 0x86da, 0x8}}}}}}, 0x32) 2m4.594543817s ago: executing program 5 (id=1856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8) connect$inet6(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 2m0.633119487s ago: executing program 5 (id=1861): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f00005b1000/0x3000)=nil, 0x3000, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x8020}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='afs_get_tree\x00', r7, 0x0, 0x10000000000001}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) 1m59.345012407s ago: executing program 5 (id=1863): r0 = syz_usb_connect(0x1, 0x3d, &(0x7f0000001840)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, &(0x7f0000003200)=""/4096, 0x1000) 1m58.571951358s ago: executing program 33 (id=1839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000640)={@void, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @val={@val={0x88a8, 0x2, 0x1}, {0x8100, 0x7, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0xbc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}, {0xa000, 0x86da, 0x8}}}}}}, 0x32) 1m56.130024215s ago: executing program 5 (id=1869): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xfff1}, {}, {0x5, 0xc}}}, 0x24}}, 0x20040054) 1m52.689531587s ago: executing program 5 (id=1878): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000104}, 0x20000050) 1m51.20481381s ago: executing program 5 (id=1880): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x3, 0xb) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000008c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000b40)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r2, @ANYBLOB="217891fd50f884d4d91b9e7a2ef745ebcc0d2575ab", @ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="e6b4cc6b6a9db5bf14d9581ad8c7827ee39d831213bdd0752a7f95640aad82b469bbe19b7956f1588a3667772c7709f4a46a04f6461bc9a5292025f98fefcc014500ad5b947df340a668d8f59e4d2edfd9091b0acae83881856a83ca525b0163d293e3bdad5e18ca9ec4def0269d49e73daa8930da1951b820a4fb28900757051c7d3566ceb79bfd7d43936d1d3302b0f55c7876a1ae0e8d92ee34a64383c57b89b93d3be29c4e81842df71a487dd388894d83f196a4f78d55e956d0772323ee37b415c86ea0089d8b3d297ef84acfe612a8b0a12a7c3ea3bae8316508f0edafe3ffdccfc2bb09dc23b42234d7c8384b82061af484", @ANYBLOB="c529e99f73bdf9746ab525d0d3d45b6d084d0555df67a9fc92f172cf122ab138cf685f40d595a4284aaf7d0d0b432ab0566f02f0ec1cff45dc182067ddf24aed2e7b978316ab043660191b93bac2976405e3c14adb9a54c49c587e80c1ba1d388e49113825b5ad2ddf80223fda7e468f61f070d8d76abcb308b3c46e8878995c349ca2bb4661733005921540464ed98aadb91fe3409164920ac1100fa2d44de7d1269361dbac526182e1b406dbfd"], 0x8) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_emit_ethernet(0x386, &(0x7f0000000d80)={@multicast, @link_local, @void, {@mpls_mc={0x8848, {[{0x10}, {0xc}, {0x5, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x8, 0x0, 0x1}], @ipv4=@gre={{0x16, 0x4, 0x1, 0x6, 0x360, 0x64, 0x0, 0x80, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast2, {[@lsrr={0x83, 0x7, 0xc9, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x22, 0x3, 0xf, [{@loopback, 0xdb5b}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}, {@multicast1, 0x7}, {@local, 0xff}]}, @timestamp={0x44, 0x18, 0x3d, 0x0, 0x6, [0xeaf, 0x1ff, 0x7fffffff, 0x6, 0x401]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xbb, 0x1, [0xe], "5e84ecd444630636985b6a6221677abc6dec04a536001b4e9590ba8a8d729ac5f8c846302a6c539f57266a9c6f548007d34810d456628dc5ca1f1dde2a53ebe678c08e38c192beb8d56f0c8a97eba450e19cfe7e185f230f9e8ca017b59b6c4fac04cd5ebf8f9156d4c4271ead8a296aaa3a7849aeeaf4e1b7197ed13f25cb002bd96655fcffa067e308b86d232bc83f200f738d50b3bd30b7a72c7bf9a393ece45a76ce8168c5ef16fa764d32eb35ef23192be4f67f0b837180bf"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x5, 0x8, 0xe49], "0f3c5a118f043ce8a831b96e9e7f62058b8badfd3b93084e6d98f9313e7da672323795f111e5443fd57893d3142872fc20c55acd8698774a7ac516e4a19ce2fde109b04b168536a3011182a5ca56428aa129d362ee05a0d5659b42bed743368404fe4a4a8afb09638586707501d6c6766596999fa7dea88cd2d607a0245fb286074715002f718d6d93687cfc3891f866dd79864ac042282a577f78c1e2bf76d6456e1d1b87c4cfdb4f54afbae9c354003d96fe1f1bf73e79bc4378cbf30c9798de523efed2116a14fe5d357ca1bc2ab7d1a791f4b1df"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "34268ad28184669376921fa85ac48c01f7c587b35e5792c1a94758a1e63db627ca7a8083d7cbac36858e020524d7c41dfd27b8fe78a9cf5d7e9cee509ab9c0cbb45e9e74c0070fcf5717a71d50229811d56593f0ccca"}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x1, 0x3, 0x0, 0x0, 0x4}, 0x1, {0x200}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0x5, 0x3, 0x1, 0x3, 0x0, 0xd}, 0x2, {0x2, 0x3, 0x2, 0x15, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "13b6d10aa76f2fc726b3e2c674866918c04f41d1786cadd9353c9e1df35d7c8f8ad337b2fc489704bfc7052fbbe04eef33b80e0c9b90769e16d4a5158c77234498cdf45bf76ceacbd1333a54ca725dba8f0a3133116f26e7f3376fab30c78dfc2c63d4f9ca0609644ca69308e311004333c1965e8e417698cb841cbee2440828809faf3cfd41ed62ac2c9bf6b137b453ab6d01b7b91a7892f60d01914e18e0bc882b66e57479d5f863cdadbea8e10255aa82f9e597232a7d1cb661a2fa376c720c38b576e53a42028af831bd4528601a1bb2496752"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1m33.898929011s ago: executing program 34 (id=1880): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x3, 0xb) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000008c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000b40)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r2, @ANYBLOB="217891fd50f884d4d91b9e7a2ef745ebcc0d2575ab", @ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="e6b4cc6b6a9db5bf14d9581ad8c7827ee39d831213bdd0752a7f95640aad82b469bbe19b7956f1588a3667772c7709f4a46a04f6461bc9a5292025f98fefcc014500ad5b947df340a668d8f59e4d2edfd9091b0acae83881856a83ca525b0163d293e3bdad5e18ca9ec4def0269d49e73daa8930da1951b820a4fb28900757051c7d3566ceb79bfd7d43936d1d3302b0f55c7876a1ae0e8d92ee34a64383c57b89b93d3be29c4e81842df71a487dd388894d83f196a4f78d55e956d0772323ee37b415c86ea0089d8b3d297ef84acfe612a8b0a12a7c3ea3bae8316508f0edafe3ffdccfc2bb09dc23b42234d7c8384b82061af484", @ANYBLOB="c529e99f73bdf9746ab525d0d3d45b6d084d0555df67a9fc92f172cf122ab138cf685f40d595a4284aaf7d0d0b432ab0566f02f0ec1cff45dc182067ddf24aed2e7b978316ab043660191b93bac2976405e3c14adb9a54c49c587e80c1ba1d388e49113825b5ad2ddf80223fda7e468f61f070d8d76abcb308b3c46e8878995c349ca2bb4661733005921540464ed98aadb91fe3409164920ac1100fa2d44de7d1269361dbac526182e1b406dbfd"], 0x8) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_emit_ethernet(0x386, &(0x7f0000000d80)={@multicast, @link_local, @void, {@mpls_mc={0x8848, {[{0x10}, {0xc}, {0x5, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x8, 0x0, 0x1}], @ipv4=@gre={{0x16, 0x4, 0x1, 0x6, 0x360, 0x64, 0x0, 0x80, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast2, {[@lsrr={0x83, 0x7, 0xc9, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x22, 0x3, 0xf, [{@loopback, 0xdb5b}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}, {@multicast1, 0x7}, {@local, 0xff}]}, @timestamp={0x44, 0x18, 0x3d, 0x0, 0x6, [0xeaf, 0x1ff, 0x7fffffff, 0x6, 0x401]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xbb, 0x1, [0xe], "5e84ecd444630636985b6a6221677abc6dec04a536001b4e9590ba8a8d729ac5f8c846302a6c539f57266a9c6f548007d34810d456628dc5ca1f1dde2a53ebe678c08e38c192beb8d56f0c8a97eba450e19cfe7e185f230f9e8ca017b59b6c4fac04cd5ebf8f9156d4c4271ead8a296aaa3a7849aeeaf4e1b7197ed13f25cb002bd96655fcffa067e308b86d232bc83f200f738d50b3bd30b7a72c7bf9a393ece45a76ce8168c5ef16fa764d32eb35ef23192be4f67f0b837180bf"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x5, 0x8, 0xe49], "0f3c5a118f043ce8a831b96e9e7f62058b8badfd3b93084e6d98f9313e7da672323795f111e5443fd57893d3142872fc20c55acd8698774a7ac516e4a19ce2fde109b04b168536a3011182a5ca56428aa129d362ee05a0d5659b42bed743368404fe4a4a8afb09638586707501d6c6766596999fa7dea88cd2d607a0245fb286074715002f718d6d93687cfc3891f866dd79864ac042282a577f78c1e2bf76d6456e1d1b87c4cfdb4f54afbae9c354003d96fe1f1bf73e79bc4378cbf30c9798de523efed2116a14fe5d357ca1bc2ab7d1a791f4b1df"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "34268ad28184669376921fa85ac48c01f7c587b35e5792c1a94758a1e63db627ca7a8083d7cbac36858e020524d7c41dfd27b8fe78a9cf5d7e9cee509ab9c0cbb45e9e74c0070fcf5717a71d50229811d56593f0ccca"}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x1, 0x3, 0x0, 0x0, 0x4}, 0x1, {0x200}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0x5, 0x3, 0x1, 0x3, 0x0, 0xd}, 0x2, {0x2, 0x3, 0x2, 0x15, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "13b6d10aa76f2fc726b3e2c674866918c04f41d1786cadd9353c9e1df35d7c8f8ad337b2fc489704bfc7052fbbe04eef33b80e0c9b90769e16d4a5158c77234498cdf45bf76ceacbd1333a54ca725dba8f0a3133116f26e7f3376fab30c78dfc2c63d4f9ca0609644ca69308e311004333c1965e8e417698cb841cbee2440828809faf3cfd41ed62ac2c9bf6b137b453ab6d01b7b91a7892f60d01914e18e0bc882b66e57479d5f863cdadbea8e10255aa82f9e597232a7d1cb661a2fa376c720c38b576e53a42028af831bd4528601a1bb2496752"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 37.273453657s ago: executing program 3 (id=2088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c00038014000100767863616e31000000000000000000"], 0xb4}}, 0x0) 34.485934079s ago: executing program 3 (id=2094): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000780)=r4, 0x4) 34.262929953s ago: executing program 3 (id=2096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x445001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&\x00'/11, @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x2, 0x2, 0x73) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', @local}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x141000, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="080000f7020109e6671200800900456f002800660000401190780a010102ac0b00014e234e2200149078c10200006279cb37ac9ff5"], 0x36) socket$nl_audit(0x10, 0x3, 0x9) 30.658686777s ago: executing program 7 (id=2107): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 30.344667272s ago: executing program 7 (id=2111): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x3, 0x0, 0x16e11492d26c4e07, @local, @loopback, 0x10, 0x40, 0x202, 0x8}}) 30.263069193s ago: executing program 7 (id=2113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce2266"], 0x280) 25.925942678s ago: executing program 3 (id=2128): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xffcb, 0x0, 0x0, 0x0, 0x602, 0x0, 0xc4, 0x0, &(0x7f0000000480)="004b08000000000000006aeb062e1aca0896c62b8f83f5a95238bd79ea7b4729cbcb77781bb659b5d7d95321aa49fd28f81b7526f4bd65c642ceed925ebd000000ed3c372d76b913a52a76406fa3c869d5ff5b6a6327019cc9599548bb47c66300000000300520325cbe50cc9776a193e0ee1ba4dcc852a1f5c5ceee2f53284101aeb873b095a898c978c94a365bc4e81e20f60afd972eb54bab6b7ba8d5affbc98cbdb14573eb4493202eca8a0ecfebd0d2c5e1a2d7648c68572e1a4e19acb2d79b5b2e", 0x0}, 0x50) 25.8618866s ago: executing program 7 (id=2129): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 25.623603463s ago: executing program 3 (id=2133): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x400454a4, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 25.461822986s ago: executing program 7 (id=2136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000808500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000012008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 25.025618512s ago: executing program 7 (id=2139): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 24.829916525s ago: executing program 0 (id=2141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0xffdd) 24.412068172s ago: executing program 0 (id=2143): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xffcb, 0x0, 0x0, 0x0, 0x602, 0x0, 0xc4, 0x0, &(0x7f0000000480)="004b08000000000000006aeb062e1aca0896c62b8f83f5a95238bd79ea7b4729cbcb77781bb659b5d7d95321aa49fd28f81b7526f4bd65c642ceed925ebd000000ed3c372d76b913a52a76406fa3c869d5ff5b6a6327019cc9599548bb47c66300000000300520325cbe50cc9776a193e0ee1ba4dcc852a1f5c5ceee2f53284101aeb873b095a898c978c94a365bc4e81e20f60afd972eb54bab6b7ba8d5affbc98cbdb14573eb4493202eca8a0ecfebd0d2c5e1a2d7648c68572e1a4e19acb2d79b5b2e", 0x0}, 0x50) 24.282980894s ago: executing program 0 (id=2145): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)={0xc}, 0x8) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 24.090881826s ago: executing program 0 (id=2147): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 23.81078811s ago: executing program 0 (id=2148): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r1}, 0x10) 23.696010183s ago: executing program 0 (id=2150): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 22.273225524s ago: executing program 3 (id=2154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'batadv_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000180)={'batadv0\x00', 0x400}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 20.332537403s ago: executing program 1 (id=2157): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 20.195670385s ago: executing program 1 (id=2158): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='task_rename\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 19.798404441s ago: executing program 1 (id=2159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x100, 0xffffffffffffffff, 0x10000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r2, &(0x7f0000000340), 0x0}, 0x20) 19.798129111s ago: executing program 1 (id=2160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 19.511610815s ago: executing program 1 (id=2161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 19.511275955s ago: executing program 1 (id=2162): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 19.135348262s ago: executing program 6 (id=2164): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x400454a4, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 18.706140208s ago: executing program 6 (id=2165): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) socket$caif_stream(0x25, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a30000000001400000011000100"], 0xe8}}, 0x0) 16.023704748s ago: executing program 6 (id=2166): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 15.538112816s ago: executing program 6 (id=2167): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xffcb, 0x0, 0x0, 0x0, 0x602, 0x0, 0xc4, 0x0, &(0x7f0000000480)="004b08000000000000006aeb062e1aca0896c62b8f83f5a95238bd79ea7b4729cbcb77781bb659b5d7d95321aa49fd28f81b7526f4bd65c642ceed925ebd000000ed3c372d76b913a52a76406fa3c869d5ff5b6a6327019cc9599548bb47c66300000000300520325cbe50cc9776a193e0ee1ba4dcc852a1f5c5ceee2f53284101aeb873b095a898c978c94a365bc4e81e20f60afd972eb54bab6b7ba8d5affbc98cbdb14573eb4493202eca8a0ecfebd0d2c5e1a2d7648c68572e1a4e19acb2d79b5b2e", 0x0}, 0x50) 15.447505837s ago: executing program 6 (id=2168): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 15.336291289s ago: executing program 6 (id=2169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_init\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) 8.994635914s ago: executing program 35 (id=2139): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 7.674690975s ago: executing program 36 (id=2150): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 6.60682585s ago: executing program 37 (id=2154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'batadv_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000180)={'batadv0\x00', 0x400}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 4.01571278s ago: executing program 38 (id=2162): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 0s ago: executing program 39 (id=2169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_init\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) kernel console output (not intermixed with test programs): ee802154 phy1 wpan1: encryption failed: -22 [ 254.951745][ T7049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.616'. [ 256.858617][ T7062] tmpfs: Bad value for 'mpol' [ 256.927936][ T7064] device bridge0 entered promiscuous mode [ 256.931081][ T7064] batman_adv: batadv0: Adding interface: macsec1 [ 256.932940][ T7064] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.940130][ T7064] batman_adv: batadv0: Interface activated: macsec1 [ 256.975222][ T7068] netlink: 156 bytes leftover after parsing attributes in process `syz.0.624'. [ 257.069815][ T7071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.625'. [ 257.909128][ T7075] netlink: 'syz.2.625': attribute type 10 has an invalid length. [ 258.213877][ T7078] loop3: detected capacity change from 0 to 4096 [ 260.265057][ T7121] netlink: 'syz.3.639': attribute type 10 has an invalid length. [ 261.411116][ T7130] loop3: detected capacity change from 0 to 4096 [ 264.313016][ T7165] netlink: 156 bytes leftover after parsing attributes in process `syz.1.656'. [ 264.713591][ T7170] loop2: detected capacity change from 0 to 4096 [ 265.751232][ T7197] netlink: 156 bytes leftover after parsing attributes in process `syz.3.668'. [ 266.402022][ T7214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.674'. [ 266.404942][ T7214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.674'. [ 267.419125][ T7224] loop5: detected capacity change from 0 to 4096 [ 267.463586][ T7228] netlink: 156 bytes leftover after parsing attributes in process `syz.0.681'. [ 268.446070][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.498660][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.500826][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.504175][ T7240] device bridge_slave_0 left promiscuous mode [ 268.507622][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.531949][ T7240] device bridge_slave_1 left promiscuous mode [ 268.533954][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.590202][ T7240] bond0: (slave bond_slave_0): Releasing backup interface [ 268.668553][ T7240] bond0: (slave bond_slave_1): Releasing backup interface [ 268.786134][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.809989][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.888506][ T7240] team0: Port device team_slave_0 removed [ 268.960568][ T7240] team0: Port device team_slave_1 removed [ 268.968846][ T7240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.981099][ T7240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.993659][ T7240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.006066][ T7240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.043965][ T7240] bond0: (slave wlan1): Releasing backup interface [ 269.847254][ T7268] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 269.894424][ T4602] Bluetooth: hci1: Frame reassembly failed (-84) [ 270.243929][ T7263] could not allocate digest TFM handle sha384-ssse3 [ 270.315701][ T7276] loop1: detected capacity change from 0 to 4096 [ 272.066687][ T4315] Bluetooth: hci1: command 0x1003 tx timeout [ 272.142953][ T4322] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 273.228663][ T7316] loop3: detected capacity change from 0 to 4096 [ 273.237714][ T7323] netlink: 'syz.5.711': attribute type 10 has an invalid length. [ 278.132792][ T7371] netlink: 'syz.1.725': attribute type 10 has an invalid length. [ 278.424615][ T7377] netlink: 156 bytes leftover after parsing attributes in process `syz.2.728'. [ 281.733369][ T7400] loop3: detected capacity change from 0 to 1024 [ 282.676581][ T7411] netlink: 'syz.2.738': attribute type 10 has an invalid length. [ 283.725696][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 283.826404][ T7432] bridge4: port 1(ip6gretap1) entered blocking state [ 283.836176][ T7432] bridge4: port 1(ip6gretap1) entered disabled state [ 283.843519][ T7432] device ip6gretap1 entered promiscuous mode [ 283.915130][ T7432] device veth3 entered promiscuous mode [ 283.921217][ T7432] bridge4: port 2(veth3) entered blocking state [ 283.925141][ T7432] bridge4: port 2(veth3) entered disabled state [ 285.327130][ T7455] loop0: detected capacity change from 0 to 1024 [ 285.416500][ T7455] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 285.419104][ T7455] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.623278][ T4313] EXT4-fs (loop0): unmounting filesystem. [ 286.057171][ T7475] netlink: 'syz.3.751': attribute type 10 has an invalid length. [ 286.669512][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 286.729450][ T7503] loop5: detected capacity change from 0 to 1024 [ 286.753145][ T7504] bridge5: port 1(ip6gretap1) entered blocking state [ 286.761209][ T7504] bridge5: port 1(ip6gretap1) entered disabled state [ 286.772668][ T7504] device ip6gretap1 entered promiscuous mode [ 286.784696][ T7503] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 286.792179][ T7503] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.852620][ T7500] device veth3 entered promiscuous mode [ 286.854421][ T7500] bridge5: port 2(veth3) entered blocking state [ 286.857150][ T7500] bridge5: port 2(veth3) entered disabled state [ 287.373515][ T4539] EXT4-fs (loop5): unmounting filesystem. [ 287.704662][ T7477] loop2: detected capacity change from 0 to 40427 [ 287.746024][ T7477] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 287.748258][ T7477] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 287.823418][ T7515] loop5: detected capacity change from 0 to 1024 [ 287.852503][ T7477] F2FS-fs (loop2): invalid crc value [ 288.043050][ T7477] F2FS-fs (loop2): Found nat_bits in checkpoint [ 288.119410][ T7526] netlink: 'syz.3.763': attribute type 10 has an invalid length. [ 288.271518][ T7477] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 288.273572][ T7477] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 289.461694][ T7550] loop1: detected capacity change from 0 to 1024 [ 289.620264][ T7546] sctp: failed to load transform for md5: -2 [ 289.686093][ T7550] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 289.688608][ T7550] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.650734][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 290.885195][ T7575] loop1: detected capacity change from 0 to 1024 [ 290.896210][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 292.179828][ T7585] netlink: 'syz.0.780': attribute type 10 has an invalid length. [ 292.184459][ T7585] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 292.719665][ T7598] loop3: detected capacity change from 0 to 1024 [ 293.525893][ T7598] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 293.528462][ T7598] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.625872][ T4311] EXT4-fs (loop3): unmounting filesystem. [ 294.026137][ T7620] netlink: 'syz.3.789': attribute type 29 has an invalid length. [ 294.210783][ T7622] netlink: 596 bytes leftover after parsing attributes in process `syz.3.789'. [ 294.688342][ T7619] loop0: detected capacity change from 0 to 1024 [ 294.716889][ T7620] netlink: 'syz.3.789': attribute type 29 has an invalid length. [ 297.171606][ T7649] netlink: 'syz.3.794': attribute type 10 has an invalid length. [ 300.857073][ T7665] loop0: detected capacity change from 0 to 40427 [ 300.868451][ T7665] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 300.870891][ T7665] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 301.581756][ T7665] F2FS-fs (loop0): invalid crc value [ 301.611199][ T7665] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 302.003390][ T7693] netlink: 'syz.1.808': attribute type 10 has an invalid length. [ 303.110365][ T7708] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.127519][ T7708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.131417][ T7708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.087321][ T4322] Bluetooth: hci0: unexpected event for opcode 0x2016 [ 306.144028][ T7719] loop5: detected capacity change from 0 to 40427 [ 306.219796][ T7719] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 306.222049][ T7719] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 306.248895][ T7719] F2FS-fs (loop5): invalid crc value [ 307.158753][ T7719] F2FS-fs (loop5): Found nat_bits in checkpoint [ 307.237028][ T7744] netlink: 'syz.1.823': attribute type 10 has an invalid length. [ 307.254065][ T7719] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 307.256242][ T7719] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 309.070659][ T27] audit: type=1326 audit(2000000056.783:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86b5aba8 code=0x7ffc0000 [ 309.091492][ T27] audit: type=1326 audit(2000000056.783:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86b5aba8 code=0x7ffc0000 [ 309.625375][ T27] audit: type=1326 audit(2000000056.953:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff86b5aba8 code=0x7ffc0000 [ 309.631312][ T27] audit: type=1326 audit(2000000056.953:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86b5aba8 code=0x7ffc0000 [ 309.638277][ T27] audit: type=1326 audit(2000000056.953:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86b5aba8 code=0x7ffc0000 [ 309.644153][ T27] audit: type=1326 audit(2000000056.973:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff86b5aba8 code=0x7ffc0000 [ 309.654255][ T27] audit: type=1326 audit(2000000056.973:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86b5aba8 code=0x7ffc0000 [ 309.660318][ T27] audit: type=1326 audit(2000000056.973:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86b5aba8 code=0x7ffc0000 [ 309.711393][ T27] audit: type=1326 audit(2000000056.983:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=445 compat=0 ip=0xffff86b5aba8 code=0x7ffc0000 [ 309.717623][ T27] audit: type=1326 audit(2000000056.993:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86b5aba8 code=0x7ffc0000 [ 310.308629][ T4322] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 310.313313][ T4322] Bluetooth: hci0: Injecting HCI hardware error event [ 310.329496][ T4322] Bluetooth: hci0: hardware error 0x00 [ 311.560721][ T7777] netlink: 'syz.1.836': attribute type 10 has an invalid length. [ 313.847928][ T4317] Bluetooth: hci5: unexpected event for opcode 0x2016 [ 315.287718][ T7820] netlink: 156 bytes leftover after parsing attributes in process `syz.1.846'. [ 315.420644][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.422527][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.153798][ T4317] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 319.156521][ T4317] Bluetooth: hci5: Injecting HCI hardware error event [ 319.160724][ T4315] Bluetooth: hci5: hardware error 0x00 [ 319.724712][ T7863] netlink: 24 bytes leftover after parsing attributes in process `syz.5.858'. [ 319.727473][ T7863] bond0: invalid ARP target 0.0.0.0 specified for addition [ 319.729516][ T7863] bond0: option arp_ip_target: invalid value (0) [ 322.079000][ T7871] loop1: detected capacity change from 0 to 40427 [ 322.100518][ T7871] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 322.104792][ T7871] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 322.166136][ T7871] F2FS-fs (loop1): invalid crc value [ 322.793334][ T7871] F2FS-fs (loop1): Found nat_bits in checkpoint [ 323.044236][ T7871] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 323.046292][ T7871] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 323.719092][ T4322] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 323.873017][ T4315] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 324.598953][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.871'. [ 325.460125][ T7910] capability: warning: `syz.3.873' uses deprecated v2 capabilities in a way that may be insecure [ 326.925838][ T4315] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 327.100313][ T7914] loop5: detected capacity change from 0 to 32768 [ 328.220714][ T7942] loop3: detected capacity change from 0 to 4096 [ 328.913203][ T7951] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 328.916023][ T7951] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 329.043685][ T7951] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 330.229534][ T7958] trusted_key: encrypted_key: insufficient parameters specified [ 330.966793][ T4315] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 330.969599][ T4315] Bluetooth: hci4: Injecting HCI hardware error event [ 330.973764][ T4322] Bluetooth: hci4: hardware error 0x00 [ 331.338197][ T7976] netlink: 'syz.5.895': attribute type 21 has an invalid length. [ 331.340547][ T7976] IPv6: NLM_F_CREATE should be specified when creating new route [ 331.342896][ T7976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.344967][ T7976] IPv6: NLM_F_CREATE should be set when creating new route [ 331.346958][ T7976] IPv6: NLM_F_CREATE should be set when creating new route [ 331.348916][ T7976] IPv6: NLM_F_CREATE should be set when creating new route [ 333.395703][ T7992] loop5: detected capacity change from 0 to 4096 [ 335.543895][ T4322] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 336.551571][ T8000] loop1: detected capacity change from 0 to 40427 [ 336.819227][ T8038] loop3: detected capacity change from 0 to 4096 [ 336.876751][ T8046] Bluetooth: MGMT ver 1.22 [ 341.238345][ T8089] loop5: detected capacity change from 0 to 4096 [ 343.263958][ T8107] tipc: Invalid UDP bearer configuration [ 343.263992][ T8107] tipc: Enabling of bearer rejected, failed to enable media [ 344.054247][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'. [ 344.073559][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.943'. [ 344.437895][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 344.502185][ T8127] device veth3 entered promiscuous mode [ 344.507057][ T8127] bridge6: port 1(veth3) entered blocking state [ 344.509086][ T8127] bridge6: port 1(veth3) entered disabled state [ 348.287761][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.961'. [ 349.112404][ T8178] netlink: 596 bytes leftover after parsing attributes in process `syz.1.960'. [ 349.485581][ T8170] device veth3 entered promiscuous mode [ 349.494133][ T8170] bridge5: port 1(veth3) entered blocking state [ 349.504417][ T8170] bridge5: port 1(veth3) entered disabled state [ 350.086574][ T8184] netlink: 32 bytes leftover after parsing attributes in process `syz.5.965'. [ 350.308013][ T8192] fuse: Bad value for 'user_id' [ 352.486953][ T8211] tipc: Started in network mode [ 352.488412][ T8211] tipc: Node identity ac1414aa, cluster identity 4711 [ 352.498904][ T8211] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 352.518459][ T8211] tipc: Enabled bearer , priority 10 [ 352.633590][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 352.772141][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 352.912172][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.052111][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.192101][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.332078][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.472082][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.685976][ T4612] tipc: Node number set to 2886997162 [ 353.752063][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.022083][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 356.554200][ T8254] netlink: 'syz.3.988': attribute type 29 has an invalid length. [ 356.557175][ T8254] netlink: 'syz.3.988': attribute type 29 has an invalid length. [ 356.560967][ T8254] netlink: 'syz.3.988': attribute type 29 has an invalid length. [ 358.651064][ C0] net_ratelimit: 3 callbacks suppressed [ 358.651080][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 359.651728][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 360.488246][ T8300] trusted_key: encrypted_key: insufficient parameters specified [ 360.691669][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 361.731605][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 362.482100][ T8313] netlink: 'syz.5.1004': attribute type 29 has an invalid length. [ 362.484618][ T8313] netlink: 'syz.5.1004': attribute type 29 has an invalid length. [ 362.487923][ T8313] netlink: 'syz.5.1004': attribute type 29 has an invalid length. [ 362.771564][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 363.161643][ T8315] binder: BINDER_SET_CONTEXT_MGR already set [ 363.163897][ T8315] binder: 8310:8315 ioctl 4018620d 20000040 returned -16 [ 363.166545][ T8315] binder: 8310:8315 got transaction to invalid handle, 1 [ 363.168532][ T8315] binder: 8315:8310 cannot find target node [ 363.170127][ T8315] binder: 8310:8315 transaction call to 0:0 failed 91/29201/-22, size 4208-24 line 3054 [ 363.330613][ T5124] binder: undelivered TRANSACTION_ERROR: 29201 [ 363.811500][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 363.998732][ T8323] overlayfs: unrecognized mount option "/" or missing value [ 364.066756][ T8323] process 'syz.5.1007' launched '/dev/fd/5' with NULL argv: empty string added [ 364.851456][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 365.702778][ T8334] loop2: detected capacity change from 0 to 4096 [ 365.891369][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 366.354914][ T8348] netlink: 'syz.0.1016': attribute type 29 has an invalid length. [ 366.360938][ T8348] netlink: 'syz.0.1016': attribute type 29 has an invalid length. [ 366.520635][ T8348] netlink: 'syz.0.1016': attribute type 29 has an invalid length. [ 366.931357][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 367.727958][ T8354] binder: BINDER_SET_CONTEXT_MGR already set [ 367.729708][ T8354] binder: 8347:8354 ioctl 4018620d 20000040 returned -16 [ 367.735804][ T8354] binder: 8347:8354 got transaction to invalid handle, 1 [ 367.737804][ T8354] binder: 8354:8347 cannot find target node [ 367.739515][ T8354] binder: 8347:8354 transaction call to 0:0 failed 94/29201/-22, size 4208-24 line 3054 [ 367.971263][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 368.041831][ T4322] Bluetooth: hci2: command 0x0405 tx timeout [ 368.328304][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 369.011193][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 370.051149][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 370.672862][ T8375] loop5: detected capacity change from 0 to 4096 [ 371.092299][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.094487][ T8384] loop1: detected capacity change from 0 to 1024 [ 371.200561][ T8388] binder: BINDER_SET_CONTEXT_MGR already set [ 371.202489][ T8388] binder: 8379:8388 ioctl 4018620d 20000040 returned -16 [ 371.208824][ T8388] binder: 8379:8388 got transaction to invalid handle, 1 [ 371.210787][ T8388] binder: 8388:8379 cannot find target node [ 371.212610][ T8388] binder: 8379:8388 transaction call to 0:0 failed 97/29201/-22, size 4208-24 line 3054 [ 371.810776][ T4605] binder: undelivered TRANSACTION_ERROR: 29201 [ 372.131031][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 373.170961][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 374.210962][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 374.443479][ T8422] netlink: 'syz.2.1040': attribute type 29 has an invalid length. [ 374.449695][ T8422] netlink: 'syz.2.1040': attribute type 29 has an invalid length. [ 374.466455][ T8422] netlink: 'syz.2.1040': attribute type 29 has an invalid length. [ 375.250934][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 375.258655][ T8421] loop3: detected capacity change from 0 to 4096 [ 376.053346][ T8431] binder: 8425:8431 got transaction to invalid handle, 1 [ 376.055533][ T8431] binder: 8431:8425 cannot find target node [ 376.057256][ T8431] binder: 8425:8431 transaction call to 0:0 failed 101/29201/-22, size 4208-24 line 3054 [ 376.222793][ T4607] binder: undelivered TRANSACTION_ERROR: 29201 [ 376.290797][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 376.859462][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.861474][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.976059][ T8442] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1049'. [ 377.330748][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 378.370675][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 378.578133][ T8445] device veth5 entered promiscuous mode [ 378.947585][ T4607] kernel write not supported for file /dlm-control (pid: 4607 comm: kworker/0:12) [ 379.410688][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 379.681055][ T8467] netlink: 'syz.1.1053': attribute type 29 has an invalid length. [ 379.683510][ T8467] netlink: 'syz.1.1053': attribute type 29 has an invalid length. [ 379.780614][ T8467] netlink: 'syz.1.1053': attribute type 29 has an invalid length. [ 380.450584][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 380.977594][ T8478] binder: 8472:8478 got transaction to invalid handle, 1 [ 380.979674][ T8478] binder: 8478:8472 cannot find target node [ 380.981461][ T8478] binder: 8472:8478 transaction call to 0:0 failed 105/29201/-22, size 4208-24 line 3054 [ 381.490514][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 382.485016][ T5630] binder: undelivered TRANSACTION_ERROR: 29201 [ 382.530432][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 382.824116][ T8485] netlink: 'syz.1.1058': attribute type 29 has an invalid length. [ 382.829978][ T8485] netlink: 'syz.1.1058': attribute type 29 has an invalid length. [ 382.845929][ T8485] netlink: 'syz.1.1058': attribute type 29 has an invalid length. [ 383.570377][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 383.890844][ T8489] loop1: detected capacity change from 0 to 4096 [ 384.610313][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 385.389235][ T8505] loop1: detected capacity change from 0 to 4096 [ 385.650257][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 386.001640][ T8514] netlink: 'syz.0.1066': attribute type 29 has an invalid length. [ 386.007320][ T8514] netlink: 'syz.0.1066': attribute type 29 has an invalid length. [ 386.022102][ T8514] netlink: 'syz.0.1066': attribute type 29 has an invalid length. [ 386.690214][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 387.416178][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'. [ 387.608615][ T8524] netlink: 'syz.5.1069': attribute type 29 has an invalid length. [ 387.614729][ T8524] netlink: 'syz.5.1069': attribute type 29 has an invalid length. [ 387.631106][ T8524] netlink: 'syz.5.1069': attribute type 29 has an invalid length. [ 387.730172][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 388.331137][ T8527] device veth3 entered promiscuous mode [ 388.770102][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 388.859852][ T8539] ptrace attach of "./syz-executor exec"[8540] was attempted by "./syz-executor exec"[8539] [ 389.356740][ T8536] loop5: detected capacity change from 0 to 4096 [ 389.810019][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 390.580156][ T8557] netlink: 'syz.0.1078': attribute type 29 has an invalid length. [ 390.586798][ T8557] netlink: 'syz.0.1078': attribute type 29 has an invalid length. [ 390.605610][ T8557] netlink: 'syz.0.1078': attribute type 29 has an invalid length. [ 390.850056][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 391.174957][ T8553] loop3: detected capacity change from 0 to 4096 [ 391.889981][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 392.929881][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 393.715686][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'. [ 393.787641][ T8578] device veth5 entered promiscuous mode [ 393.796600][ T8578] bridge5: port 1(veth5) entered blocking state [ 393.802570][ T8578] bridge5: port 1(veth5) entered disabled state [ 393.970067][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 395.009737][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 396.049730][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 396.053025][ T8598] loop5: detected capacity change from 0 to 4096 [ 397.077647][ T8617] hfsplus: unable to find HFS+ superblock [ 397.089644][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 397.835468][ T4610] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 397.844353][ T4610] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 398.129589][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 398.393431][ T8633] loop1: detected capacity change from 0 to 4096 [ 399.169529][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 400.209464][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 400.992365][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 401.249392][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 401.476943][ T8664] loop2: detected capacity change from 0 to 4096 [ 402.289350][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 403.329269][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 404.369250][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 405.409144][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 406.449104][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 406.783365][ T8717] loop0: detected capacity change from 0 to 4096 [ 407.281251][ T8723] overlayfs: unrecognized mount option "/" or missing value [ 407.489073][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 408.528967][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 409.525829][ T8749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 409.568929][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 409.712071][ T8752] loop5: detected capacity change from 0 to 4096 [ 410.608948][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 411.648893][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 411.818669][ T8767] overlayfs: unrecognized mount option "/" or missing value [ 412.689026][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 413.395063][ T8773] loop0: detected capacity change from 0 to 40427 [ 413.458916][ T8773] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 413.461076][ T8773] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 413.485670][ T8773] F2FS-fs (loop0): invalid crc value [ 413.531570][ T8773] F2FS-fs (loop0): Found nat_bits in checkpoint [ 413.656638][ T8773] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 413.664513][ T8773] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 413.728699][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 414.384773][ T8799] sctp: failed to load transform for md5: -2 [ 414.768661][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 415.808582][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 415.889037][ T8811] loop1: detected capacity change from 0 to 4096 [ 416.245431][ T8819] netlink: 'syz.2.1161': attribute type 29 has an invalid length. [ 416.252696][ T8819] netlink: 'syz.2.1161': attribute type 29 has an invalid length. [ 416.276910][ T8819] netlink: 'syz.2.1161': attribute type 29 has an invalid length. [ 416.848570][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 417.888463][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 418.928397][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 419.567392][ T8846] fuse: Unknown parameter '0x000000000000000900000000000000000000' [ 419.968359][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 420.173027][ T8846] UBIFS error (pid: 8846): cannot open "/dev/loop5", error -22 [ 421.008337][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 422.048246][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 422.186706][ T8872] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.941365][ T8878] input: syz1 as /devices/virtual/input/input3 [ 423.000796][ T8855] loop2: detected capacity change from 0 to 40427 [ 423.034437][ T8855] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 423.036664][ T8855] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 423.057945][ T8855] F2FS-fs (loop2): invalid crc value [ 423.088172][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 423.862198][ T8855] F2FS-fs (loop2): Found nat_bits in checkpoint [ 424.128133][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 424.947237][ T8899] fuse: Unknown parameter '0x000000000000000900000000000000000000' [ 424.993819][ T8899] UBIFS error (pid: 8899): cannot open "/dev/loop2", error -22 [ 425.168061][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 426.207979][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 427.247943][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 427.839549][ T8932] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1200'. [ 428.287866][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 429.327833][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 430.400941][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 431.547912][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 432.877897][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 433.140846][ T8984] sctp: failed to load transform for md5: -2 [ 435.065955][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 435.095652][ T9015] serio: Serial port ptm0 [ 436.776082][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 437.216969][ T9037] netlink: 'syz.1.1228': attribute type 29 has an invalid length. [ 437.219528][ T9037] netlink: 'syz.1.1228': attribute type 29 has an invalid length. [ 437.222882][ T9037] netlink: 'syz.1.1228': attribute type 29 has an invalid length. [ 438.586703][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 438.630098][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.631916][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.748789][ T9032] loop0: detected capacity change from 0 to 4096 [ 440.303458][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 441.577933][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 441.814850][ T9064] device veth5 entered promiscuous mode [ 441.918074][ T9079] netlink: 'syz.0.1241': attribute type 29 has an invalid length. [ 441.924130][ T9079] netlink: 'syz.0.1241': attribute type 29 has an invalid length. [ 441.940347][ T9079] netlink: 'syz.0.1241': attribute type 29 has an invalid length. [ 443.575136][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 445.238689][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 445.444861][ T9102] ptrace attach of "./syz-executor exec"[9106] was attempted by "./syz-executor exec"[9102] [ 446.819477][ T9123] netlink: 'syz.5.1254': attribute type 8 has an invalid length. [ 447.502147][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 447.941974][ T9125] device veth7 entered promiscuous mode [ 448.559962][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.323336][ T9143] ptrace attach of "./syz-executor exec"[9146] was attempted by "./syz-executor exec"[9143] [ 450.186956][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 450.338000][ T9148] loop1: detected capacity change from 0 to 4096 [ 451.326778][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 451.569374][ T9135] loop2: detected capacity change from 0 to 40427 [ 451.587392][ T9135] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 451.589621][ T9135] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 451.885478][ T9164] serio: Serial port ptm0 [ 452.409792][ T9135] F2FS-fs (loop2): invalid crc value [ 452.411376][ T9135] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 452.467339][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 452.679128][ T9170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1269'. [ 453.526689][ T9170] device veth7 entered promiscuous mode [ 453.536841][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 454.686732][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 455.401980][ T9192] tmpfs: Unknown parameter 'usrquota' [ 455.782042][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 457.239046][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 457.627547][ T9207] loop3: detected capacity change from 0 to 4096 [ 458.436525][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 458.570553][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1282'. [ 458.725765][ T9215] device veth5 entered promiscuous mode [ 458.851599][ T9220] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1285'. [ 459.194438][ T9208] loop0: detected capacity change from 0 to 40427 [ 460.313252][ T9208] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 460.315713][ T9208] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 460.526047][ T9208] F2FS-fs (loop0): invalid crc value [ 460.618499][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 460.620976][ T9208] F2FS-fs (loop0): Found nat_bits in checkpoint [ 461.082687][ T9244] ptrace attach of "./syz-executor exec"[9245] was attempted by "./syz-executor exec"[9244] [ 461.651392][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 463.139528][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 463.146691][ T9261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1297'. [ 463.589804][ T9267] loop5: detected capacity change from 0 to 4096 [ 464.698724][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 465.727199][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 466.565027][ T9291] sctp: failed to load transform for md5: -2 [ 466.653471][ T9302] fuse: Bad value for 'fd' [ 466.734737][ T9304] 9pnet_fd: Insufficient options for proto=fd [ 466.771019][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 466.946395][ T9306] serio: Serial port ptm0 [ 467.160967][ T9309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1310'. [ 467.827596][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 468.314615][ T9262] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 468.316350][ T9262] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 468.319212][ T9262] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 468.908618][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.435029][ T9347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1321'. [ 469.545799][ T9337] sctp: failed to load transform for md5: -2 [ 469.551497][ T9343] ptrace attach of "./syz-executor exec"[9345] was attempted by "./syz-executor exec"[9343] [ 469.722281][ T9353] serio: Serial port ptm0 [ 470.330370][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.598849][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 472.624092][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 472.665880][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 473.765525][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 474.848993][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.083786][ T9364] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 475.085595][ T9364] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 475.087959][ T9364] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 477.051531][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 477.180685][ T4315] Bluetooth: hci2: command 0x0c1a tx timeout [ 478.197168][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 479.360834][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 479.633307][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 480.716954][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 481.355371][ T9447] serio: Serial port ptm0 [ 481.815168][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 482.962806][ T9461] sctp: failed to load transform for md5: -2 [ 483.061832][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 483.453659][ T9428] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 483.456995][ T9428] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 483.458744][ T9428] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 484.275093][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 485.419983][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 485.498331][ T4315] Bluetooth: hci2: command 0x0c1a tx timeout [ 486.288746][ T9512] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1369'. [ 486.452993][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 487.528152][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 487.567960][ T4322] Bluetooth: hci2: command 0x0406 tx timeout [ 488.631249][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 489.761279][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.092856][ T9541] device veth7 entered promiscuous mode [ 490.778665][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 491.002293][ T9548] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1381'. [ 491.320614][ T9529] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 491.322405][ T9529] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 491.324131][ T9529] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 492.198981][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 492.707102][ T4607] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 493.150716][ T4607] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.153745][ T4607] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 493.156658][ T4607] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 493.159163][ T4607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.184431][ T4607] usb 1-1: config 0 descriptor?? [ 493.216291][ T4607] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 493.218404][ T4607] dvb-usb: bulk message failed: -22 (3/0) [ 493.238121][ T4607] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 493.247712][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 493.273968][ T4607] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 493.276585][ T4607] usb 1-1: media controller created [ 493.280115][ T4607] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 493.310126][ T4607] dvb-usb: bulk message failed: -22 (6/0) [ 493.311978][ T4607] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 493.346591][ T4607] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input4 [ 493.356995][ T4607] dvb-usb: schedule remote query interval to 150 msecs. [ 493.358889][ T4607] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 493.470016][ T9563] dvb-usb: bulk message failed: -22 (33/0) [ 493.497984][ T4315] Bluetooth: hci2: command 0x0c1a tx timeout [ 493.536897][ T4610] dvb-usb: bulk message failed: -22 (1/0) [ 493.538714][ T4610] dvb-usb: error while querying for an remote control event. [ 493.709444][ T4610] dvb-usb: bulk message failed: -22 (1/0) [ 493.711077][ T4610] dvb-usb: error while querying for an remote control event. [ 493.882738][ T4610] dvb-usb: bulk message failed: -22 (1/0) [ 493.885549][ T4610] dvb-usb: error while querying for an remote control event. [ 494.163075][ T4613] dvb-usb: bulk message failed: -22 (1/0) [ 494.171590][ T4613] dvb-usb: error while querying for an remote control event. [ 494.288193][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 494.340401][ T4613] dvb-usb: bulk message failed: -22 (1/0) [ 494.342142][ T4613] dvb-usb: error while querying for an remote control event. [ 494.524499][ T4613] dvb-usb: bulk message failed: -22 (1/0) [ 494.526217][ T4613] dvb-usb: error while querying for an remote control event. [ 494.646709][ T9584] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1392'. [ 494.692964][ T4610] dvb-usb: bulk message failed: -22 (1/0) [ 494.695867][ T4610] dvb-usb: error while querying for an remote control event. [ 494.860975][ T4610] dvb-usb: bulk message failed: -22 (1/0) [ 494.865800][ T4610] dvb-usb: error while querying for an remote control event. [ 494.989532][ T4610] usb 1-1: USB disconnect, device number 20 [ 495.777991][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 495.814187][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 496.848746][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 496.884377][ T9609] qnx4: no qnx4 filesystem (no root dir). [ 497.885737][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 498.474154][ T4610] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 498.579036][ T9592] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 498.580770][ T9592] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 498.582509][ T9592] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 498.737961][ T9629] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1404'. [ 498.933226][ T9632] device veth7 entered promiscuous mode [ 498.943979][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 499.732140][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.740044][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.993894][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 500.204302][ T9642] overlayfs: unrecognized mount option "/" or missing value [ 500.619259][ T4315] Bluetooth: hci2: command 0x0c1a tx timeout [ 501.005343][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 502.128730][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 502.837777][ T4322] Bluetooth: hci2: command 0x0406 tx timeout [ 503.168517][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 504.499146][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 505.069486][ T9675] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1416'. [ 505.288689][ T9677] loop5: detected capacity change from 0 to 4096 [ 505.564268][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 506.840778][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 507.888237][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 508.943383][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 509.278988][ T9725] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 509.316057][ T9669] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 509.317881][ T9669] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 509.320745][ T9669] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 509.855260][ T9732] netlink: 'syz.3.1432': attribute type 29 has an invalid length. [ 509.861329][ T9732] netlink: 'syz.3.1432': attribute type 29 has an invalid length. [ 509.877420][ T9732] netlink: 'syz.3.1432': attribute type 29 has an invalid length. [ 510.544305][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 511.574122][ T4315] Bluetooth: hci2: command 0x0c1a tx timeout [ 511.762435][ T9741] loop3: detected capacity change from 0 to 4096 [ 511.801687][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 512.844985][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 513.907624][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 513.931523][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 514.928542][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 515.331001][ T9771] netlink: 'syz.3.1445': attribute type 29 has an invalid length. [ 515.337219][ T9771] netlink: 'syz.3.1445': attribute type 29 has an invalid length. [ 515.353073][ T9771] netlink: 'syz.3.1445': attribute type 29 has an invalid length. [ 515.971553][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 516.726250][ T9758] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 516.728014][ T9758] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 516.733073][ T9758] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 517.004626][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 518.043620][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 518.772982][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 519.122826][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.184040][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1453'. [ 519.197178][ T9801] loop1: detected capacity change from 0 to 4096 [ 520.721086][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 520.854713][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 521.167825][ T9817] netlink: 'syz.1.1456': attribute type 29 has an invalid length. [ 521.173988][ T9817] netlink: 'syz.1.1456': attribute type 29 has an invalid length. [ 521.190573][ T9817] netlink: 'syz.1.1456': attribute type 29 has an invalid length. [ 521.824521][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 523.161203][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 523.636660][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1464'. [ 523.689125][ T9838] device veth9 entered promiscuous mode [ 523.708155][ T9838] bridge8: port 1(veth9) entered blocking state [ 523.718739][ T9838] bridge8: port 1(veth9) entered disabled state [ 524.220955][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 525.089707][ T9848] loop5: detected capacity change from 0 to 4096 [ 525.547889][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 526.612559][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 526.725933][ T9863] netlink: 'syz.2.1470': attribute type 29 has an invalid length. [ 526.732522][ T9863] netlink: 'syz.2.1470': attribute type 29 has an invalid length. [ 526.747483][ T9863] netlink: 'syz.2.1470': attribute type 29 has an invalid length. [ 527.666344][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 528.238884][ T9824] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 528.240716][ T9824] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 528.242432][ T9824] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 528.682292][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.212158][ T9895] serio: Serial port ptm0 [ 531.644797][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 531.697582][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 532.153297][ T9907] overlayfs: unrecognized mount option "/" or missing value [ 532.765351][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 533.304745][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1481'. [ 533.423194][ T9916] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1482'. [ 533.726513][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 533.802215][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 534.962577][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 535.033522][ T9934] sctp: failed to load transform for md5: -2 [ 536.186620][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 537.457751][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 538.546144][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 539.571704][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 540.603189][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 541.651673][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 543.148916][ T9999] sctp: failed to load transform for md5: -2 [ 543.152639][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 544.259912][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 545.119825][T10025] loop1: detected capacity change from 0 to 4096 [ 545.814022][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 545.994690][T10033] siw: device registration error -23 [ 546.725551][T10001] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 546.727288][T10001] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 546.729863][T10001] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 546.871286][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 546.954829][T10047] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1516'. [ 547.905164][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 548.797319][T10060] sctp: failed to load transform for md5: -2 [ 548.891514][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 548.921141][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 549.977991][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 550.934528][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 551.011010][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 551.681843][T10081] loop2: detected capacity change from 0 to 4096 [ 552.545317][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 553.572705][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 553.915807][T10099] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1529'. [ 554.641024][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 555.638020][T10111] sctp: failed to load transform for md5: -2 [ 555.730918][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 555.954743][T10095] siw: device registration error -23 [ 556.187295][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1537'. [ 556.276143][T10131] device veth11 entered promiscuous mode [ 556.283639][T10131] bridge9: port 1(veth11) entered blocking state [ 556.285597][T10131] bridge9: port 1(veth11) entered disabled state [ 556.897799][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 557.111989][T10138] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1541'. [ 557.966889][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 558.997928][T10156] loop3: detected capacity change from 0 to 4096 [ 559.446298][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 560.530201][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 561.252524][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.258571][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.394944][T10171] sctp: failed to load transform for md5: -2 [ 561.562871][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 562.608331][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 562.809857][T10191] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1552'. [ 563.077677][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1554'. [ 563.202585][T10197] device veth5 entered promiscuous mode [ 563.667290][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 564.743328][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 565.338160][T10218] binder: 10215:10218 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 565.686271][T10224] binder: 10215:10224 got transaction to invalid handle, 1 [ 565.688638][T10224] binder: 10224:10215 cannot find target node [ 565.690549][T10224] binder: 10215:10224 transaction call to 0:0 failed 108/29201/-22, size 4208-24 line 3054 [ 566.222118][ T5522] binder: undelivered TRANSACTION_ERROR: 29201 [ 566.323939][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 566.447968][T10220] sctp: failed to load transform for md5: -2 [ 566.710927][T10238] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1564'. [ 566.757963][T10229] loop0: detected capacity change from 0 to 4096 [ 567.520306][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 568.603283][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 569.005847][T10255] overlayfs: unrecognized mount option "/" or missing value [ 569.661159][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 570.352359][T10268] binder: 10267:10268 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 570.686285][T10270] binder: 10267:10270 got transaction to invalid handle, 1 [ 570.688351][T10270] binder: 10270:10267 cannot find target node [ 570.690138][T10270] binder: 10267:10270 transaction call to 0:0 failed 111/29201/-22, size 4208-24 line 3054 [ 570.784734][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 571.235905][ T4603] binder: undelivered TRANSACTION_ERROR: 29201 [ 571.727743][T10282] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1575'. [ 571.831104][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 572.356563][T10285] sctp: failed to load transform for md5: -2 [ 572.543378][T10280] loop2: detected capacity change from 0 to 4096 [ 572.849311][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 573.029063][T10300] loop3: detected capacity change from 0 to 4096 [ 574.419823][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 576.245660][T10309] netlink: 'syz.2.1580': attribute type 29 has an invalid length. [ 576.248175][T10309] netlink: 'syz.2.1580': attribute type 29 has an invalid length. [ 576.251964][T10309] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1580'. [ 576.270499][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 577.422544][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 577.854366][T10324] binder: 10323:10324 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 578.444684][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 578.955800][T10332] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1586'. [ 580.073055][T10341] sctp: failed to load transform for md5: -2 [ 580.139501][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 580.288217][T10350] overlayfs: unrecognized mount option "/" or missing value [ 581.819435][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 582.122834][T10366] netlink: 'syz.2.1592': attribute type 29 has an invalid length. [ 582.129502][T10366] netlink: 'syz.2.1592': attribute type 29 has an invalid length. [ 582.148863][T10366] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1592'. [ 582.842559][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 582.858154][T10365] loop3: detected capacity change from 0 to 4096 [ 583.005147][T10372] binder: 10368:10372 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 583.599175][T10375] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1597'. [ 583.943074][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 585.609215][T10392] sctp: failed to load transform for md5: -2 [ 585.758411][T10397] overlayfs: unrecognized mount option "/" or missing value [ 586.303423][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 587.902654][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 588.919112][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 589.654878][T10430] loop5: detected capacity change from 0 to 4096 [ 589.960246][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 590.999807][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 592.044976][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 592.788979][T10462] device veth7 entered promiscuous mode [ 593.118732][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 593.220556][T10470] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1620'. [ 594.311741][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 594.984934][T10481] loop2: detected capacity change from 0 to 4096 [ 595.398706][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 596.454062][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 596.922236][T10501] device veth9 entered promiscuous mode [ 596.998046][T10506] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1631'. [ 598.621093][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 599.648792][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 600.681189][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 601.030299][T10535] loop2: detected capacity change from 0 to 4096 [ 601.363289][T10519] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 601.365033][T10519] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 601.366754][T10519] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 601.769266][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 602.247455][T10547] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1642'. [ 602.587528][T10549] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1643'. [ 602.843632][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 602.920371][T10551] device veth9 entered promiscuous mode [ 604.005705][ T4315] Bluetooth: hci2: command 0x0c1a tx timeout [ 604.438390][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 605.273710][T10581] loop3: detected capacity change from 0 to 4096 [ 605.480401][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 605.821219][T10568] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 605.823022][T10568] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 605.824780][T10568] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 606.672933][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 607.376205][T10601] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1658'. [ 607.817918][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 608.005936][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 608.245918][T10609] device veth11 entered promiscuous mode [ 608.837842][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 609.927952][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 610.684833][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 611.536846][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 613.317588][T10643] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1669'. [ 613.930317][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 614.059751][T10645] overlayfs: unrecognized mount option "/" or missing value [ 614.633230][T10650] device veth13 entered promiscuous mode [ 615.453687][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 616.543568][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 616.882551][T10625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 616.884405][T10625] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 616.886877][T10625] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 617.595919][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 618.960985][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 618.981436][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 619.919957][T10694] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1683'. [ 620.165796][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 622.295488][T10707] overlayfs: unrecognized mount option "/" or missing value [ 622.728971][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.730689][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.867234][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 622.877026][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 624.100726][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 624.457942][T10728] device veth13 entered promiscuous mode [ 625.158048][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 626.200334][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 626.432938][T10713] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 626.434661][T10713] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 626.436299][T10713] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 627.437171][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 628.385137][T10765] overlayfs: unrecognized mount option "/" or missing value [ 629.104280][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 629.129176][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 630.120874][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 631.167437][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 631.174830][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 632.200000][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 633.476712][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 634.872181][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 635.808619][T10826] device veth7 entered promiscuous mode [ 635.878932][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 636.919587][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 637.360451][T10799] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 637.362293][T10799] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 637.364899][T10799] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 637.959912][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 639.482093][ T4315] Bluetooth: hci2: command 0x0c1a tx timeout [ 639.536328][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 640.776388][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 641.190649][T10865] loop1: detected capacity change from 0 to 4096 [ 641.560703][ T4322] Bluetooth: hci2: command 0x0406 tx timeout [ 642.659093][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 643.765207][T10880] binder: 10877:10880 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 643.899663][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 644.946388][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 645.850605][T10898] overlayfs: unrecognized mount option "/" or missing value [ 646.306607][T10897] device veth11 entered promiscuous mode [ 646.409184][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 647.120554][T10868] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 647.122747][T10868] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 647.126370][T10868] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 647.519940][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 647.822716][T10914] loop5: detected capacity change from 0 to 4096 [ 648.601002][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 649.565050][ T4315] Bluetooth: hci2: command 0x0c1a tx timeout [ 649.635858][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 649.724987][T10926] binder: 10925:10926 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 650.683680][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 651.493994][T10929] loop1: detected capacity change from 0 to 4096 [ 651.655874][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 651.731781][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 654.287848][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 655.063253][T10951] overlayfs: unrecognized mount option "/" or missing value [ 655.370129][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 656.439684][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 656.768417][T10964] loop2: detected capacity change from 0 to 4096 [ 657.287139][T10970] binder: 10969:10970 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 657.366008][T10946] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 657.367786][T10946] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 657.369600][T10946] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 657.482296][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 659.080414][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 659.273112][T10986] device veth13 entered promiscuous mode [ 659.490237][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 660.119949][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 661.155635][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 661.641276][ T4322] Bluetooth: hci2: command 0x0406 tx timeout [ 662.379458][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 663.593378][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 663.795702][T11023] binder: 11020:11023 ioctl 4018620d 0 returned -22 [ 663.810772][T11023] binder: 11020:11023 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 663.966873][T11025] loop2: detected capacity change from 0 to 4096 [ 664.116222][T11029] binder: 11020:11029 got transaction to invalid handle, 1 [ 664.118399][T11029] binder: 11029:11020 cannot find target node [ 664.120179][T11029] binder: 11020:11029 transaction call to 0:0 failed 119/29201/-22, size 4208-24 line 3054 [ 664.635533][ T5522] binder: undelivered TRANSACTION_ERROR: 29201 [ 664.674866][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 665.734686][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 666.820504][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 667.112448][T11017] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 667.114288][T11017] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 667.116081][T11017] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 668.075134][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 668.246082][T11047] device veth7 entered promiscuous mode [ 668.629295][T11049] loop1: detected capacity change from 0 to 4096 [ 669.159133][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 669.186206][ T4315] Bluetooth: hci2: command 0x0c1a tx timeout [ 670.198527][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 672.347203][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 672.527569][T11070] binder: 11068:11070 ioctl 4018620d 0 returned -22 [ 672.538681][T11070] binder: 11068:11070 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 672.570127][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 672.891782][T11073] binder: 11068:11073 got transaction to invalid handle, 1 [ 672.893977][T11073] binder: 11073:11068 cannot find target node [ 672.895901][T11073] binder: 11068:11073 transaction call to 0:0 failed 122/29201/-22, size 4208-24 line 3054 [ 673.408707][ T4613] binder: undelivered TRANSACTION_ERROR: 29201 [ 673.416077][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 674.391182][T11076] loop5: detected capacity change from 0 to 4096 [ 674.453895][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 675.487063][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 676.647182][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 676.994514][T11079] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 676.996231][T11079] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 676.997974][T11079] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 677.255105][T11107] loop3: detected capacity change from 0 to 4096 [ 678.243172][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 678.380203][T11118] binder: 11116:11118 ioctl 4018620d 0 returned -22 [ 678.383388][T11118] binder: 11116:11118 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 678.702600][T11120] binder: 11116:11120 got transaction to invalid handle, 1 [ 678.704706][T11120] binder: 11120:11116 cannot find target node [ 678.706460][T11120] binder: 11116:11120 transaction call to 0:0 failed 125/29201/-22, size 4208-24 line 3054 [ 679.131755][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 679.242734][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 679.343963][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 680.367262][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 680.606943][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1800'. [ 681.163926][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 681.773607][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 682.835764][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 683.880140][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 684.128387][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.130208][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.942892][T11158] binder: BINDER_SET_CONTEXT_MGR already set [ 684.944843][T11158] binder: 11153:11158 ioctl 4018620d 20000040 returned -16 [ 684.947371][T11158] binder: 11153:11158 got transaction to invalid handle, 1 [ 684.949388][T11158] binder: 11158:11153 cannot find target node [ 684.951051][T11158] binder: 11153:11158 transaction call to 0:0 failed 127/29201/-22, size 4208-24 line 3054 [ 685.116387][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 685.448515][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 686.490173][T11171] loop5: detected capacity change from 0 to 4096 [ 686.518637][T11174] loop0: detected capacity change from 0 to 4096 [ 686.528369][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 687.203961][T11179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1814'. [ 687.268669][T11149] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 687.270411][T11149] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 687.272820][T11149] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 687.575409][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 690.002692][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 690.085628][ T4315] Bluetooth: hci2: command 0x0c1a tx timeout [ 691.094239][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 691.813117][T11218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1825'. [ 692.150631][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 692.158826][ T4322] Bluetooth: hci2: command 0x0406 tx timeout [ 692.978357][T11227] loop0: detected capacity change from 0 to 4096 [ 693.163684][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 694.577837][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 695.468196][T11246] binder: BINDER_SET_CONTEXT_MGR already set [ 695.470048][T11246] binder: 11242:11246 ioctl 4018620d 20000040 returned -16 [ 695.472696][T11246] binder: 11242:11246 got transaction to invalid handle, 1 [ 695.474837][T11246] binder: 11246:11242 cannot find target node [ 695.476616][T11246] binder: 11242:11246 transaction call to 0:0 failed 129/29201/-22, size 4208-24 line 3054 [ 695.981966][ T5522] binder: undelivered TRANSACTION_ERROR: 29201 [ 696.292282][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 698.085921][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 698.852876][T11272] loop1: detected capacity change from 0 to 4096 [ 699.711264][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 700.899697][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 700.991110][T11291] binder: 11290:11291 ioctl c0306201 0 returned -14 [ 701.408766][T11295] binder: 11290:11295 got transaction to invalid handle, 1 [ 701.410860][T11295] binder: 11295:11290 cannot find target node [ 701.412422][T11295] binder: 11290:11295 transaction call to 0:0 failed 133/29201/-22, size 4208-24 line 3054 [ 702.084721][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 702.487457][T10768] binder: undelivered TRANSACTION_ERROR: 29201 [ 703.155922][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 703.336487][ T4565] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 703.731609][T11309] serio: Serial port ptm0 [ 704.335896][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 704.867356][T11318] netlink: 'syz.5.1853': attribute type 29 has an invalid length. [ 705.462457][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 706.908872][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 707.454785][T11308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1851'. [ 707.457512][T11318] netlink: 'syz.5.1853': attribute type 29 has an invalid length. [ 707.612311][T11334] binder: 11332:11334 ioctl c0306201 0 returned -14 [ 707.907227][T11338] binder: 11332:11338 got transaction to invalid handle, 1 [ 707.909393][T11338] binder: 11338:11332 cannot find target node [ 707.911084][T11338] binder: 11332:11338 transaction call to 0:0 failed 137/29201/-22, size 4208-24 line 3054 [ 711.371877][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 711.412045][ T4613] binder: undelivered TRANSACTION_ERROR: 29201 [ 711.716946][T11352] tmpfs: Unknown parameter 'usrquota' [ 712.433131][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 712.982871][T11360] serio: Serial port ptm0 [ 713.493512][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 713.765686][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 713.768586][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 713.784386][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 713.787441][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 713.790674][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 713.793092][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 713.882273][T11367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1864'. [ 714.512998][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 715.552670][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 715.905335][T11328] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 715.907142][T11328] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 715.911155][T11328] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 716.053953][ T4315] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 716.064255][T11376] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 716.067767][T11376] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 716.070728][T11376] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 716.073251][T11376] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 716.075458][T11376] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 716.601907][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 717.268045][ T51] block nbd1: Attempted send on invalid socket [ 717.270227][ T51] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 717.284457][T11397] qnx6: unable to read the first superblock [ 717.286702][ T51] block nbd1: Attempted send on invalid socket [ 717.288414][ T51] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 717.291943][T11397] qnx6: unable to read the first superblock [ 717.293638][T11397] qnx6: unable to read the first superblock [ 717.646602][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 717.849369][T11401] serio: Serial port ptm0 [ 718.100043][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 718.167062][ T4322] Bluetooth: hci1: command 0x0409 tx timeout [ 718.673229][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 719.978764][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 720.789939][T11376] Bluetooth: hci2: command 0x0406 tx timeout [ 720.791742][T11376] Bluetooth: hci1: command 0x041b tx timeout [ 720.995784][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 721.036309][T11368] lo speed is unknown, defaulting to 1000 [ 721.038530][T11368] lo speed is unknown, defaulting to 1000 [ 722.118795][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 722.326759][T11439] xt_hashlimit: size too large, truncated to 1048576 [ 722.838451][ T4322] Bluetooth: hci1: command 0x040f tx timeout [ 723.152264][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 724.191534][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 724.571748][T11460] serio: Serial port ptm0 [ 724.963093][ T4322] Bluetooth: hci1: command 0x0419 tx timeout [ 725.207544][ T5248] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.235713][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 726.277232][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 727.725729][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 728.543207][T11419] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 728.545081][T11419] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 728.549412][T11419] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 728.551436][T11419] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 728.553049][T11419] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 728.556903][T11419] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 728.771123][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 728.879397][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1893'. [ 728.882140][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'. [ 728.886546][T11368] chnl_net:caif_netlink_parms(): no params data found [ 729.336532][T11501] serio: Serial port ptm0 [ 730.081678][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 730.108313][T11368] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.122109][T11368] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.146884][T11368] device bridge_slave_0 entered promiscuous mode [ 730.153644][T11368] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.193352][T11368] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.208623][T11368] device bridge_slave_1 entered promiscuous mode [ 730.818638][T11376] Bluetooth: hci1: command 0x0c1a tx timeout [ 730.820469][T11376] Bluetooth: hci2: command 0x0c1a tx timeout [ 730.908951][T11368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.943084][T11368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.162325][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 731.196458][T11368] team0: Port device team_slave_0 added [ 731.200169][T11368] team0: Port device team_slave_1 added [ 731.463780][T11368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.466130][T11368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.871298][T11368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.269951][T11525] trusted_key: encrypted_key: insufficient parameters specified [ 732.278079][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 732.370625][T11526] fuse: Bad value for 'fd' [ 732.540408][T11368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.549057][T11368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.581944][T11368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.720664][T11368] device hsr_slave_0 entered promiscuous mode [ 732.726774][T11368] device hsr_slave_1 entered promiscuous mode [ 732.736608][T11368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 732.738827][T11368] Cannot create hsr debugfs directory [ 732.835071][ T4322] Bluetooth: hci2: command 0x0406 tx timeout [ 732.836791][ T4322] Bluetooth: hci1: command 0x0406 tx timeout [ 732.978300][ T5248] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.205776][T11368] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 733.238360][T11368] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 733.263876][T11368] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 733.273940][T11368] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 733.311912][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 733.482170][T11368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.511823][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 733.514416][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 733.522400][T11368] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.553132][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 733.556045][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 733.571586][ T266] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.574761][ T266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.615518][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 733.618204][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 733.621506][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 733.642839][ T266] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.644830][ T266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.647221][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 733.650260][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 733.653278][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 733.657828][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 733.682076][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 733.685195][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 733.713904][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 733.721388][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 733.724127][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 733.744506][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 733.758861][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 733.781547][T11368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 734.285580][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 734.288053][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 734.301444][T11368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.350945][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 734.446189][T11522] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 734.448026][T11522] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 734.449636][T11522] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 734.451745][T11522] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 734.453346][T11522] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 734.454993][T11522] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 735.587395][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 737.221509][T11559] serio: Serial port ptm0 [ 738.081321][ T4322] Bluetooth: hci1: command 0x0c1a tx timeout [ 738.083060][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 738.190070][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 739.050468][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 739.076853][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 739.178270][ T4322] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 739.668325][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 739.759723][ T4322] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 739.780524][ T4315] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 739.785046][ T4315] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 739.787752][ T4315] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 739.790194][ T4315] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 740.523284][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 740.525054][ T4315] Bluetooth: hci1: command 0x0406 tx timeout [ 740.529023][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 740.532671][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 740.537462][T11368] device veth0_vlan entered promiscuous mode [ 740.550167][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 740.559588][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 740.564061][T11368] device veth1_vlan entered promiscuous mode [ 740.641252][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 740.644264][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 740.657668][T11368] device veth0_macvtap entered promiscuous mode [ 740.670651][T11368] device veth1_macvtap entered promiscuous mode [ 740.677299][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 740.811393][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.814355][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.817011][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.840304][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.849294][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.861215][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.880522][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.883424][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.541512][T11368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.547315][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 741.554928][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 741.560829][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 741.580727][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 741.590928][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.593852][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.596471][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.607973][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.620265][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.628532][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.650006][T11368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.660102][T11368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.665680][T11368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.712043][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 741.721683][ T5248] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.773518][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 741.777449][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 741.782394][T11368] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.784904][T11368] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.787765][T11368] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.790129][T11368] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.891339][T11376] Bluetooth: hci4: command 0x0409 tx timeout [ 742.035291][T11581] lo speed is unknown, defaulting to 1000 [ 742.065368][T11581] lo speed is unknown, defaulting to 1000 [ 742.889788][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 743.739006][T11589] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 743.740771][T11589] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 743.742458][T11589] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 743.744595][T11589] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 743.746337][T11589] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 743.748044][T11589] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 743.750042][T11589] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 743.751749][T11589] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 743.754535][T11589] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 743.967783][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 744.862134][ T4491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.864475][ T4491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.869134][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 744.976449][ T4423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.978893][ T4423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.984723][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 745.000195][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 745.058060][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 745.058073][ T27] audit: type=1326 audit(2000000493.107:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.1.1921" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75aba8 code=0x0 [ 745.137982][T11581] chnl_net:caif_netlink_parms(): no params data found [ 745.167651][T11622] binder: 11618:11622 ioctl c0306201 20000000 returned -14 [ 745.482555][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 745.484416][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 745.488524][T11581] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.507227][T11581] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.515431][T11581] device bridge_slave_0 entered promiscuous mode [ 745.519378][T11581] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.528258][T11581] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.542455][T11581] device bridge_slave_1 entered promiscuous mode [ 745.593006][T11581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.597811][T11581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.702593][T11609] overlayfs: unrecognized mount option "/" or missing value [ 745.741906][T11581] team0: Port device team_slave_0 added [ 745.759336][T11581] team0: Port device team_slave_1 added [ 745.794267][ T4315] Bluetooth: hci4: command 0x040f tx timeout [ 745.796164][ T4315] Bluetooth: hci1: command 0x0c1a tx timeout [ 745.797887][ T4315] Bluetooth: hci2: command 0x0c1a tx timeout [ 746.038602][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 746.165837][T11581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.168962][T11581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.202374][T11581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.222738][T11581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.225781][T11581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.272417][T11581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.048687][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 748.110853][T11376] Bluetooth: hci2: command 0x0406 tx timeout [ 748.112740][T11376] Bluetooth: hci1: command 0x0406 tx timeout [ 748.114382][T11376] Bluetooth: hci4: command 0x0419 tx timeout [ 749.070521][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 749.149715][T11654] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1930'. [ 750.109884][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 750.206064][T11581] device hsr_slave_0 entered promiscuous mode [ 750.208965][T11581] device hsr_slave_1 entered promiscuous mode [ 750.211601][T11581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 750.213769][T11581] Cannot create hsr debugfs directory [ 750.544457][T11581] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 750.563674][T11581] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 750.567576][T11581] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 750.605462][T11581] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 750.769037][ T4315] Bluetooth: hci4: command 0x0c1a tx timeout [ 751.245181][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 751.890967][T11667] binder: tried to use weak ref as strong ref [ 751.892590][T11667] binder: 11664:11667 Acquire 1 refcount change on invalid ref 0 ret -22 [ 751.933814][T11667] binder: 11664:11667 got transaction to invalid handle, 1 [ 751.935792][T11667] binder: 11667:11664 cannot find target node [ 751.937418][T11667] binder: 11664:11667 transaction call to 0:0 failed 142/29201/-22, size 4208-24 line 3054 [ 752.057260][T10064] binder: undelivered TRANSACTION_ERROR: 29201 [ 752.159995][ T5248] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.396983][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 752.546385][T11581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.569517][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 752.572331][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 752.590473][T11581] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.608283][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 752.611385][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 752.613920][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.615917][ T4423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.716420][T11581] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 752.719358][T11581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 752.772872][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 752.775751][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 752.780868][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 752.799723][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.801772][ T4423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.804168][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 752.837990][T11677] overlayfs: unrecognized mount option "/" or missing value [ 752.841906][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 752.851645][T11376] Bluetooth: hci4: command 0x0406 tx timeout [ 752.861993][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 752.876276][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 752.895767][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 752.905837][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 752.908863][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 752.917735][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 752.933657][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 752.945499][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 752.948389][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 752.960929][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 753.125623][T11643] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 753.127501][T11643] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 753.130656][T11643] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 753.132598][T11643] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 753.134291][T11643] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 753.135845][T11643] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 753.137949][T11643] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 753.139787][T11643] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 753.142753][T11643] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 753.203459][T11663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.206158][T11663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.494852][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 754.543771][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 755.257752][T11376] Bluetooth: hci4: command 0x0c1a tx timeout [ 755.259370][T11376] Bluetooth: hci1: command 0x0c1a tx timeout [ 755.261087][T11376] Bluetooth: hci2: command 0x0c1a tx timeout [ 756.162011][T11709] binder: tried to use weak ref as strong ref [ 756.163790][T11709] binder: 11704:11709 Acquire 1 refcount change on invalid ref 0 ret -22 [ 756.166765][T11709] binder: 11704:11709 got transaction to invalid handle, 1 [ 756.168731][T11709] binder: 11709:11704 cannot find target node [ 756.170458][T11709] binder: 11704:11709 transaction call to 0:0 failed 145/29201/-22, size 4208-24 line 3054 [ 756.336809][ T4607] binder: undelivered TRANSACTION_ERROR: 29201 [ 756.343838][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 757.397322][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 757.415894][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 757.417624][ T4315] Bluetooth: hci1: command 0x0406 tx timeout [ 757.419391][ T4315] Bluetooth: hci4: command 0x0406 tx timeout [ 758.129179][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 758.131642][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 758.173704][T11692] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 758.176468][T11692] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 758.281833][T11581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.429762][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 758.525220][ T5248] tipc: Disabling bearer [ 758.529120][ T5248] tipc: Left network mode [ 758.751689][T11731] overlayfs: unrecognized mount option "/" or missing value [ 759.293148][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 759.297221][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 759.317912][T11581] device veth0_vlan entered promiscuous mode [ 759.338968][T11581] device veth1_vlan entered promiscuous mode [ 759.467865][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 759.470719][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 759.473500][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 759.476137][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 759.479131][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 759.485141][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 760.342973][T11581] device veth0_macvtap entered promiscuous mode [ 760.363049][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 760.366022][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 760.368893][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 760.414906][T11581] device veth1_macvtap entered promiscuous mode [ 760.653514][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.656379][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.659031][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.688639][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.696635][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.699824][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.702636][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.790286][T11765] binder: 11753:11765 tried to acquire reference to desc 0, got 1 instead [ 760.800581][T11765] binder: 11753:11765 got transaction with fd, 0, but target does not allow fds [ 760.803293][T11765] binder: 11765:11753 translate fd array failed [ 760.805340][T11765] binder: 11753:11765 transaction call to 11753:0 failed 150/29201/-1, size 4208-24 line 3495 [ 761.304622][T11436] binder: undelivered TRANSACTION_ERROR: 29201 [ 761.384937][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.387888][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.395872][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.456705][T11581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.492875][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 761.495892][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 761.512840][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.515733][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.518434][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.554987][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.557690][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.570429][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.594799][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.597704][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.611417][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.614571][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.631991][T11581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.648113][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 761.651122][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 761.660553][T11581] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.663137][T11581] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.665521][T11581] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.728749][T11581] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.295723][T11786] overlayfs: unrecognized mount option "/" or missing value [ 763.757174][T11714] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 763.758958][T11714] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 763.760699][T11714] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 763.762749][T11714] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 763.764587][T11714] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 763.766277][T11714] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 763.768201][T11714] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 763.770048][T11714] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 763.771791][T11714] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 765.798183][T11376] Bluetooth: hci4: command 0x0c1a tx timeout [ 765.799909][ T4315] Bluetooth: hci1: command 0x0c1a tx timeout [ 765.801714][ T4315] Bluetooth: hci2: command 0x0c1a tx timeout [ 766.143942][ T4491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.146412][ T4491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.212101][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 766.332932][ T4491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.335373][ T4491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.349162][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 767.885220][T11831] Bluetooth: hci1: command 0x0406 tx timeout [ 767.947777][ T4322] Bluetooth: hci4: command 0x0406 tx timeout [ 767.947803][T11831] Bluetooth: hci2: command 0x0406 tx timeout [ 768.730855][T11849] overlayfs: unrecognized mount option "/" or missing value [ 771.215466][T11923] binder: 11915:11923 tried to acquire reference to desc 0, got 1 instead [ 771.218517][T11923] binder: 11915:11923 got transaction with fd, 0, but target does not allow fds [ 771.221239][T11923] binder: 11923:11915 translate fd array failed [ 771.223016][T11923] binder: 11915:11923 transaction call to 11915:0 failed 155/29201/-1, size 4208-24 line 3495 [ 771.647700][ T5522] binder: undelivered TRANSACTION_ERROR: 29201 [ 773.459457][T11853] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 773.461300][T11853] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 773.463011][T11853] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 773.465032][T11853] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 773.466770][T11853] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 773.468514][T11853] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 773.470521][T11853] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 773.472154][T11853] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 773.474667][T11853] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 774.540762][T11981] binder: 11969:11981 tried to acquire reference to desc 0, got 1 instead [ 774.547711][T11981] binder: 11969:11981 got transaction with fd, 0, but target does not allow fds [ 774.550362][T11981] binder: 11981:11969 translate fd array failed [ 774.552523][T11981] binder: 11969:11981 transaction call to 11969:0 failed 160/29201/-1, size 4208-24 line 3495 [ 775.108120][ T4613] binder: undelivered TRANSACTION_ERROR: 29201 [ 775.560116][ T4322] Bluetooth: hci1: command 0x0c1a tx timeout [ 775.561860][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 775.593064][ T4322] Bluetooth: hci4: command 0x0c1a tx timeout [ 777.537904][T12034] binder: 12024:12034 tried to acquire reference to desc 0, got 1 instead [ 777.545021][T12034] binder: 12024:12034 got transaction with fd, 0, but target does not allow fds [ 777.547650][T12034] binder: 12034:12024 translate fd array failed [ 777.550002][T12034] binder: 12024:12034 transaction call to 12024:0 failed 165/29201/-1, size 4208-24 line 3495 [ 777.721239][ T4613] binder: undelivered TRANSACTION_ERROR: 29201 [ 777.797128][ T4322] Bluetooth: hci1: command 0x0406 tx timeout [ 778.083203][ T4322] Bluetooth: hci4: command 0x0406 tx timeout [ 778.084919][ T4322] Bluetooth: hci2: command 0x0406 tx timeout [ 778.595674][T12056] device pim6reg1 entered promiscuous mode [ 780.721688][T12088] binder: 12080:12088 tried to acquire reference to desc 0, got 1 instead [ 780.729019][T12088] binder: 12080:12088 got transaction with fd, 0, but target does not allow fds [ 780.731590][T12088] binder: 12088:12080 translate fd array failed [ 780.733747][T12088] binder: 12080:12088 transaction call to 12080:0 failed 170/29201/-1, size 4208-24 line 3495 [ 781.246648][T10768] binder: undelivered TRANSACTION_ERROR: 29201 [ 787.533730][T12090] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 787.536419][T12090] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 787.538220][T12090] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 787.540297][T12090] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 787.541885][T12090] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 787.543596][T12090] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 787.545471][T12090] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 787.547061][T12090] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 787.548709][T12090] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 788.071966][T12195] binder: 12188:12195 tried to acquire reference to desc 0, got 1 instead [ 788.076170][T12195] binder: 12188:12195 got transaction with fd, 0, but target does not allow fds [ 788.078828][T12195] binder: 12195:12188 translate fd array failed [ 788.080610][T12195] binder: 12188:12195 transaction call to 12188:0 failed 175/29201/-1, size 4208-24 line 3495 [ 789.057631][T11716] binder: undelivered TRANSACTION_ERROR: 29201 [ 789.636400][ T4322] Bluetooth: hci4: command 0x0c1a tx timeout [ 789.638215][ T4322] Bluetooth: hci1: command 0x0c1a tx timeout [ 789.639915][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 791.724085][T11831] Bluetooth: hci2: command 0x0406 tx timeout [ 791.725811][T11831] Bluetooth: hci1: command 0x0406 tx timeout [ 791.727543][T11831] Bluetooth: hci4: command 0x0406 tx timeout [ 793.280440][T12268] binder: 12262:12268 tried to acquire reference to desc 0, got 1 instead [ 793.287195][T12268] binder: 12262:12268 got transaction with fd, 0, but target does not allow fds [ 793.289855][T12268] binder: 12268:12262 translate fd array failed [ 793.291930][T12268] binder: 12262:12268 transaction call to 12262:0 failed 180/29201/-1, size 4208-24 line 3495 [ 793.841069][ T4613] binder: undelivered TRANSACTION_ERROR: 29201 [ 794.656397][T12281] loop6: detected capacity change from 0 to 4096 [ 794.784216][T12234] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 794.785981][T12234] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 794.787762][T12234] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 794.789709][T12234] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 794.791307][T12234] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 794.792966][T12234] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 794.794924][T12234] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 794.796587][T12234] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 794.798250][T12234] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 796.920519][T12311] binder: 12306:12311 tried to acquire reference to desc 0, got 1 instead [ 796.927579][T12311] binder: 12306:12311 got transaction with fd, 0, but target does not allow fds [ 796.930092][T12311] binder: 12311:12306 translate fd array failed [ 796.932264][T12311] binder: 12306:12311 transaction call to 12306:0 failed 185/29201/-1, size 4208-24 line 3495 [ 797.472456][T10064] binder: undelivered TRANSACTION_ERROR: 29201 [ 797.552336][T11831] Bluetooth: hci4: command 0x0c1a tx timeout [ 797.554118][T11831] Bluetooth: hci1: command 0x0c1a tx timeout [ 797.555793][T11831] Bluetooth: hci2: command 0x0c1a tx timeout [ 799.693078][ T4322] Bluetooth: hci2: command 0x0406 tx timeout [ 799.694860][ T4322] Bluetooth: hci1: command 0x0406 tx timeout [ 799.696533][ T4322] Bluetooth: hci4: command 0x0406 tx timeout [ 800.802814][T12354] binder: 12347:12354 tried to acquire reference to desc 0, got 1 instead [ 800.809507][T12354] binder: 12347:12354 got transaction with fd, 0, but target does not allow fds [ 800.812158][T12354] binder: 12354:12347 translate fd array failed [ 800.814198][T12354] binder: 12347:12354 transaction call to 12347:0 failed 190/29201/-1, size 4208-24 line 3495 [ 801.378587][ T5522] binder: undelivered TRANSACTION_ERROR: 29201 [ 801.707048][T11831] Bluetooth: hci4: command 0x0405 tx timeout [ 801.960817][T12369] lo speed is unknown, defaulting to 1000 [ 801.963032][T12369] lo speed is unknown, defaulting to 1000 [ 803.308619][T12407] binder: 12397:12407 tried to acquire reference to desc 0, got 1 instead [ 803.316384][T12407] binder: 12397:12407 got transaction with fd, 0, but target does not allow fds [ 803.319110][T12407] binder: 12407:12397 translate fd array failed [ 803.321382][T12407] binder: 12397:12407 transaction call to 12397:0 failed 195/29201/-1, size 4208-24 line 3495 [ 803.837136][T10064] binder: undelivered TRANSACTION_ERROR: 29201 [ 804.571149][T12427] lo speed is unknown, defaulting to 1000 [ 804.573346][T12427] lo speed is unknown, defaulting to 1000 [ 806.121396][T12328] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 806.123335][T12328] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 806.125041][T12328] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 806.127072][T12328] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 806.128757][T12328] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 806.130416][T12328] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 806.132396][T12328] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 806.134020][T12328] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 806.136987][T12328] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 806.509675][T12468] lo speed is unknown, defaulting to 1000 [ 806.520731][T12468] lo speed is unknown, defaulting to 1000 [ 806.970482][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 806.972246][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.193249][T11831] Bluetooth: hci4: command 0x0c1a tx timeout [ 808.194941][T11831] Bluetooth: hci1: command 0x0c1a tx timeout [ 808.207314][T11376] Bluetooth: hci2: command 0x0c1a tx timeout [ 810.270809][T11831] Bluetooth: hci4: command 0x0406 tx timeout [ 810.289351][T11376] Bluetooth: hci1: command 0x0406 tx timeout [ 810.291104][T11376] Bluetooth: hci2: command 0x0406 tx timeout [ 824.281055][T11376] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 824.317538][T11376] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 824.328458][T11376] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 824.374064][T11376] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 824.387782][T11376] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 824.395691][T11376] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 824.733980][T11831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 824.753137][T11831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 824.761004][T11831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 824.804112][T11831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 824.835726][T11831] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 824.848621][T11831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 825.869313][T11376] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 825.879996][T11376] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 825.888766][T11376] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 825.908161][T11376] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 825.918519][T11376] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 825.926389][T11376] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 826.440975][T11376] Bluetooth: hci5: command 0x0409 tx timeout [ 826.994594][T11376] Bluetooth: hci6: command 0x0409 tx timeout [ 828.034909][T11831] Bluetooth: hci7: command 0x0409 tx timeout [ 828.515033][T11831] Bluetooth: hci5: command 0x041b tx timeout [ 828.777026][T11831] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 828.786650][T11831] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 828.794255][T11831] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 828.821746][T11831] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 828.839860][T11831] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 828.848322][T11831] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 829.080601][T11831] Bluetooth: hci6: command 0x041b tx timeout [ 830.111827][T11376] Bluetooth: hci7: command 0x041b tx timeout [ 830.586918][T11376] Bluetooth: hci5: command 0x040f tx timeout [ 830.909666][T11831] Bluetooth: hci8: command 0x0409 tx timeout [ 831.155911][T11376] Bluetooth: hci6: command 0x040f tx timeout [ 832.186599][T11831] Bluetooth: hci7: command 0x040f tx timeout [ 832.674032][T11376] Bluetooth: hci5: command 0x0419 tx timeout [ 832.783991][T11376] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 832.799661][T11376] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 832.814644][T11376] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 832.851000][T11376] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 832.876577][T11376] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 832.889485][T11376] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 832.991268][T11376] Bluetooth: hci8: command 0x041b tx timeout [ 833.233104][T11831] Bluetooth: hci6: command 0x0419 tx timeout [ 834.273360][T11376] Bluetooth: hci7: command 0x0419 tx timeout [ 834.990580][T11831] Bluetooth: hci9: command 0x0409 tx timeout [ 835.071042][T11831] Bluetooth: hci8: command 0x040f tx timeout [ 837.082600][T11831] Bluetooth: hci9: command 0x041b tx timeout [ 837.158956][T11831] Bluetooth: hci8: command 0x0419 tx timeout [ 839.155420][T11831] Bluetooth: hci9: command 0x040f tx timeout [ 839.716645][T11831] Bluetooth: hci1: command 0x0406 tx timeout [ 841.231625][T11376] Bluetooth: hci9: command 0x0419 tx timeout [ 865.310107][T11831] Bluetooth: hci4: command 0x0406 tx timeout [ 868.363663][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 868.365533][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 892.135038][T11376] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 892.140427][T11376] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 892.143467][T11376] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 892.147487][T11376] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 892.149933][T11376] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 892.152927][T11376] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 892.642975][T11831] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 892.650405][T11831] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 892.678825][T11831] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 892.719035][T11831] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 892.759448][T11831] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 892.783676][T11831] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 892.806917][ T4322] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 892.839870][ T4322] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 892.852985][ T4322] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 892.901492][ T4322] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 892.944605][ T4322] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 892.952083][ T4322] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 893.558072][T11831] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 893.563182][T11831] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 893.566097][T11831] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 893.588689][ T4315] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 893.598724][ T4315] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 893.601311][ T4315] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 893.604348][ T4315] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 893.606678][ T4315] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 893.609002][ T4315] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 893.634793][ T4315] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 893.638140][ T4315] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 893.640535][ T4315] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 894.192406][T12633] Bluetooth: hci10: command 0x0409 tx timeout [ 894.825068][T11831] Bluetooth: hci11: command 0x0409 tx timeout [ 895.069407][T12633] Bluetooth: hci12: command 0x0409 tx timeout [ 895.638316][T12633] Bluetooth: hci13: command 0x0409 tx timeout [ 895.713985][T11831] Bluetooth: hci14: command 0x0409 tx timeout [ 896.273138][T11831] Bluetooth: hci10: command 0x041b tx timeout [ 896.910488][T11831] Bluetooth: hci11: command 0x041b tx timeout [ 897.169777][T11831] Bluetooth: hci12: command 0x041b tx timeout [ 897.710681][T12633] Bluetooth: hci13: command 0x041b tx timeout [ 897.785015][T12633] Bluetooth: hci14: command 0x041b tx timeout [ 898.350049][T11831] Bluetooth: hci10: command 0x040f tx timeout [ 898.990114][T12633] Bluetooth: hci11: command 0x040f tx timeout [ 899.230609][T11831] Bluetooth: hci12: command 0x040f tx timeout [ 899.788592][T12633] Bluetooth: hci13: command 0x040f tx timeout [ 899.880470][T11831] Bluetooth: hci14: command 0x040f tx timeout [ 900.428456][T12633] Bluetooth: hci10: command 0x0419 tx timeout [ 901.064641][T11831] Bluetooth: hci11: command 0x0419 tx timeout [ 901.307698][T12633] Bluetooth: hci12: command 0x0419 tx timeout [ 901.868895][T11831] Bluetooth: hci13: command 0x0419 tx timeout [ 901.945070][T12633] Bluetooth: hci14: command 0x0419 tx timeout [ 929.785159][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 929.786962][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 947.231107][T12633] Bluetooth: hci6: command 0x0406 tx timeout [ 947.232985][T12633] Bluetooth: hci5: command 0x0406 tx timeout [ 952.364061][T11831] Bluetooth: hci8: command 0x0406 tx timeout [ 952.365811][T11831] Bluetooth: hci7: command 0x0406 tx timeout [ 953.477942][T11376] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 953.483217][T11376] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 953.487206][T11376] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 953.549114][T11376] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 953.562276][T11376] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 953.590629][T11376] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 953.598402][T11376] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 953.619841][T11376] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 953.668518][ T4315] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 953.692205][ T4315] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 953.700030][ T4315] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 953.702353][ T4315] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 953.829591][T11831] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 953.834936][T11831] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 953.837884][T11831] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 953.843427][T11831] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 953.845894][T11831] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 953.848051][T11831] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 953.996457][T11831] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 954.007117][T11831] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 954.010314][T11831] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 954.024156][T11831] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 954.037935][T11831] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 954.045915][T11831] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 954.142123][ T4315] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 954.155243][ T4315] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 954.172873][ T4315] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 954.202919][ T4315] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 954.206152][ T4315] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 954.208715][ T4315] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 955.706755][T12633] Bluetooth: hci15: command 0x0409 tx timeout [ 955.786879][T12633] Bluetooth: hci16: command 0x0409 tx timeout [ 955.866986][T11831] Bluetooth: hci17: command 0x0409 tx timeout [ 956.107014][T11831] Bluetooth: hci18: command 0x0409 tx timeout [ 956.267827][T11831] Bluetooth: hci19: command 0x0409 tx timeout [ 957.459319][T11831] Bluetooth: hci9: command 0x0406 tx timeout [ 957.793448][T12633] Bluetooth: hci15: command 0x041b tx timeout [ 957.864368][T11831] Bluetooth: hci16: command 0x041b tx timeout [ 957.947975][T12633] Bluetooth: hci17: command 0x041b tx timeout [ 958.186724][T11831] Bluetooth: hci18: command 0x041b tx timeout [ 958.341966][T12633] Bluetooth: hci19: command 0x041b tx timeout [ 959.870548][T11831] Bluetooth: hci15: command 0x040f tx timeout [ 959.942663][T12633] Bluetooth: hci16: command 0x040f tx timeout [ 960.025256][T11831] Bluetooth: hci17: command 0x040f tx timeout [ 960.265082][T11831] Bluetooth: hci18: command 0x040f tx timeout [ 960.428296][T12633] Bluetooth: hci19: command 0x040f tx timeout [ 961.944408][T11831] Bluetooth: hci15: command 0x0419 tx timeout [ 962.034749][T12633] Bluetooth: hci16: command 0x0419 tx timeout [ 962.107635][T11831] Bluetooth: hci17: command 0x0419 tx timeout [ 962.346689][T12633] Bluetooth: hci18: command 0x0419 tx timeout [ 962.518734][T11831] Bluetooth: hci19: command 0x0419 tx timeout [ 963.715331][ T28] INFO: task dhcpcd:3977 blocked for more than 143 seconds. [ 963.717402][ T28] Not tainted 6.1.143-syzkaller #0 [ 963.725943][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 963.747286][ T28] task:dhcpcd state:D stack:0 pid:3977 ppid:3976 flags:0x00000004 [ 963.750037][ T28] Call trace: [ 963.750946][ T28] __switch_to+0x2f4/0x568 [ 963.752228][ T28] __schedule+0xdd4/0x1b2c [ 963.753490][ T28] schedule+0xc4/0x170 [ 963.754599][ T28] schedule_preempt_disabled+0x18/0x2c [ 963.756115][ T28] __mutex_lock_common+0xad4/0x1f38 [ 963.757532][ T28] mutex_lock_nested+0x38/0x44 [ 963.807810][ T28] rtnetlink_rcv_msg+0x6ec/0xce4 [ 963.809269][ T28] netlink_rcv_skb+0x208/0x3c4 [ 963.810618][ T28] rtnetlink_rcv+0x28/0x38 [ 963.811863][ T28] netlink_unicast+0x600/0x818 [ 963.813136][ T28] netlink_sendmsg+0x6e8/0x9b0 [ 963.814460][ T28] ____sys_sendmsg+0x5b8/0x918 [ 963.815803][ T28] __sys_sendmsg+0x25c/0x320 [ 963.817084][ T28] __arm64_sys_sendmsg+0x80/0x94 [ 963.855453][ T28] invoke_syscall+0x98/0x2bc [ 963.856863][ T28] el0_svc_common+0x138/0x258 [ 963.858174][ T28] do_el0_svc+0x58/0x13c [ 963.859311][ T28] el0_svc+0x58/0x138 [ 963.860480][ T28] el0t_64_sync_handler+0x84/0xf0 [ 963.861825][ T28] el0t_64_sync+0x18c/0x190 [ 963.885978][ T28] INFO: task kworker/0:11:4605 blocked for more than 143 seconds. [ 963.902736][ T28] Not tainted 6.1.143-syzkaller #0 [ 963.904331][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 963.906652][ T28] task:kworker/0:11 state:D stack:0 pid:4605 ppid:2 flags:0x00000008 [ 963.943599][ T28] Workqueue: ipv6_addrconf addrconf_verify_work [ 963.945345][ T28] Call trace: [ 963.946209][ T28] __switch_to+0x2f4/0x568 [ 963.947447][ T28] __schedule+0xdd4/0x1b2c [ 963.961525][ T28] schedule+0xc4/0x170 [ 963.962753][ T28] schedule_preempt_disabled+0x18/0x2c [ 963.964235][ T28] __mutex_lock_common+0xad4/0x1f38 [ 963.965658][ T28] mutex_lock_nested+0x38/0x44 [ 963.966943][ T28] rtnl_lock+0x20/0x2c [ 963.981960][ T28] addrconf_verify_work+0x20/0x3c [ 963.983591][ T28] process_one_work+0x7f4/0x13a8 [ 963.984961][ T28] worker_thread+0x8c8/0xfbc [ 963.986198][ T28] kthread+0x250/0x2d8 [ 963.987275][ T28] ret_from_fork+0x10/0x20 [ 964.037890][ T28] INFO: task kworker/0:13:4610 blocked for more than 143 seconds. [ 964.040128][ T28] Not tainted 6.1.143-syzkaller #0 [ 964.041710][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 964.044128][ T28] task:kworker/0:13 state:D stack:0 pid:4610 ppid:2 flags:0x00000008 [ 964.046512][ T28] Workqueue: events switchdev_deferred_process_work [ 964.072895][ T28] Call trace: [ 964.073843][ T28] __switch_to+0x2f4/0x568 [ 964.075057][ T28] __schedule+0xdd4/0x1b2c [ 964.076274][ T28] schedule+0xc4/0x170 [ 964.077316][ T28] schedule_preempt_disabled+0x18/0x2c [ 964.078838][ T28] __mutex_lock_common+0xad4/0x1f38 [ 964.080252][ T28] mutex_lock_nested+0x38/0x44 [ 964.081619][ T28] rtnl_lock+0x20/0x2c [ 964.082723][ T28] switchdev_deferred_process_work+0x14/0x28 [ 964.084362][ T28] process_one_work+0x7f4/0x13a8 [ 964.085731][ T28] worker_thread+0x8c8/0xfbc [ 964.086963][ T28] kthread+0x250/0x2d8 [ 964.121658][ T28] ret_from_fork+0x10/0x20 [ 964.122932][ T28] INFO: task kworker/u4:18:5248 blocked for more than 143 seconds. [ 964.125144][ T28] Not tainted 6.1.143-syzkaller #0 [ 964.126663][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 964.156107][ T28] task:kworker/u4:18 state:D stack:0 pid:5248 ppid:2 flags:0x00000008 [ 964.158827][ T28] Workqueue: netns cleanup_net [ 964.160178][ T28] Call trace: [ 964.161095][ T28] __switch_to+0x2f4/0x568 [ 964.162329][ T28] __schedule+0xdd4/0x1b2c [ 964.163553][ T28] schedule+0xc4/0x170 [ 964.164649][ T28] schedule_preempt_disabled+0x18/0x2c [ 964.166134][ T28] __mutex_lock_common+0xad4/0x1f38 [ 964.167461][ T28] mutex_lock_nested+0x38/0x44 [ 964.198860][ T28] rtnl_lock+0x20/0x2c [ 964.200102][ T28] ip_tunnel_delete_nets+0xc0/0x320 [ 964.201561][ T28] ipgre_tap_exit_batch_net+0x30/0x40 [ 964.203062][ T28] cleanup_net+0x644/0xa74 [ 964.204286][ T28] process_one_work+0x7f4/0x13a8 [ 964.205640][ T28] worker_thread+0x8c8/0xfbc [ 964.206859][ T28] kthread+0x250/0x2d8 [ 964.219984][ T28] ret_from_fork+0x10/0x20 [ 964.221413][ T28] INFO: task syz.0.2150:12535 blocked for more than 143 seconds. [ 964.223471][ T28] Not tainted 6.1.143-syzkaller #0 [ 964.225022][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 964.227240][ T28] task:syz.0.2150 state:D stack:0 pid:12535 ppid:4313 flags:0x00000001 [ 964.261065][ T28] Call trace: [ 964.262055][ T28] __switch_to+0x2f4/0x568 [ 964.263264][ T28] __schedule+0xdd4/0x1b2c [ 964.264478][ T28] schedule+0xc4/0x170 [ 964.265585][ T28] schedule_preempt_disabled+0x18/0x2c [ 964.267019][ T28] __mutex_lock_common+0xad4/0x1f38 [ 964.295768][ T28] mutex_lock_nested+0x38/0x44 [ 964.297113][ T28] rtnl_lock+0x20/0x2c [ 964.298250][ T28] cgrp_css_online+0x88/0x2c8 [ 964.299472][ T28] online_css+0xc8/0x2b4 [ 964.300592][ T28] cgroup_apply_control_enable+0x720/0x9f8 [ 964.302151][ T28] cgroup_mkdir+0x988/0xcd8 [ 964.303392][ T28] kernfs_iop_mkdir+0x114/0x160 [ 964.304730][ T28] vfs_mkdir+0x314/0x4d4 [ 964.305888][ T28] do_mkdirat+0x1b4/0x3e0 [ 964.307027][ T28] __arm64_sys_mkdirat+0x90/0xa8 [ 964.328585][ T28] invoke_syscall+0x98/0x2bc [ 964.329924][ T28] el0_svc_common+0x138/0x258 [ 964.331196][ T28] do_el0_svc+0x58/0x13c [ 964.332423][ T28] el0_svc+0x58/0x138 [ 964.333457][ T28] el0t_64_sync_handler+0x84/0xf0 [ 964.334833][ T28] el0t_64_sync+0x18c/0x190 [ 964.351202][ T28] INFO: task syz.3.2154:12545 blocked for more than 144 seconds. [ 964.353405][ T28] Not tainted 6.1.143-syzkaller #0 [ 964.354880][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 964.357240][ T28] task:syz.3.2154 state:D stack:0 pid:12545 ppid:4311 flags:0x00000001 [ 964.391025][ T28] Call trace: [ 964.391970][ T28] __switch_to+0x2f4/0x568 [ 964.393207][ T28] __schedule+0xdd4/0x1b2c [ 964.394410][ T28] schedule+0xc4/0x170 [ 964.395517][ T28] schedule_preempt_disabled+0x18/0x2c [ 964.396975][ T28] __mutex_lock_common+0xad4/0x1f38 [ 964.410743][ T28] mutex_lock_nested+0x38/0x44 [ 964.412118][ T28] rtnl_lock+0x20/0x2c [ 964.413199][ T28] __tun_chr_ioctl+0x410/0x1d68 [ 964.414593][ T28] tun_chr_ioctl+0x38/0x4c [ 964.415854][ T28] __arm64_sys_ioctl+0x14c/0x1c8 [ 964.417153][ T28] invoke_syscall+0x98/0x2bc [ 964.443018][ T28] el0_svc_common+0x138/0x258 [ 964.444348][ T28] do_el0_svc+0x58/0x13c [ 964.445516][ T28] el0_svc+0x58/0x138 [ 964.446642][ T28] el0t_64_sync_handler+0x84/0xf0 [ 964.448107][ T28] el0t_64_sync+0x18c/0x190 [ 964.449440][ T28] INFO: task syz.3.2154:12546 blocked for more than 144 seconds. [ 964.451525][ T28] Not tainted 6.1.143-syzkaller #0 [ 964.452991][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 964.455303][ T28] task:syz.3.2154 state:D stack:0 pid:12546 ppid:4311 flags:0x00000001 [ 964.481278][ T28] Call trace: [ 964.482261][ T28] __switch_to+0x2f4/0x568 [ 964.483475][ T28] __schedule+0xdd4/0x1b2c [ 964.484736][ T28] schedule+0xc4/0x170 [ 964.485855][ T28] schedule_preempt_disabled+0x18/0x2c [ 964.487305][ T28] __mutex_lock_common+0xad4/0x1f38 [ 964.513019][ T28] mutex_lock_nested+0x38/0x44 [ 964.514390][ T28] rtnl_lock+0x20/0x2c [ 964.515548][ T28] __tun_chr_ioctl+0x410/0x1d68 [ 964.516821][ T28] tun_chr_ioctl+0x38/0x4c [ 964.518064][ T28] __arm64_sys_ioctl+0x14c/0x1c8 [ 964.519395][ T28] invoke_syscall+0x98/0x2bc [ 964.520656][ T28] el0_svc_common+0x138/0x258 [ 964.521939][ T28] do_el0_svc+0x58/0x13c [ 964.523147][ T28] el0_svc+0x58/0x138 [ 964.524267][ T28] el0t_64_sync_handler+0x84/0xf0 [ 964.525686][ T28] el0t_64_sync+0x18c/0x190 [ 964.526959][ T28] INFO: task syz.3.2154:12547 blocked for more than 144 seconds. [ 964.562357][ T28] Not tainted 6.1.143-syzkaller #0 [ 964.564087][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 964.566434][ T28] task:syz.3.2154 state:D stack:0 pid:12547 ppid:4311 flags:0x00000001 [ 964.598631][ T28] Call trace: [ 964.599648][ T28] __switch_to+0x2f4/0x568 [ 964.600802][ T28] __schedule+0xdd4/0x1b2c [ 964.601967][ T28] schedule+0xc4/0x170 [ 964.603039][ T28] schedule_preempt_disabled+0x18/0x2c [ 964.604560][ T28] __mutex_lock_common+0xad4/0x1f38 [ 964.606013][ T28] mutex_lock_nested+0x38/0x44 [ 964.607226][ T28] rtnl_lock+0x20/0x2c [ 964.619213][ T28] __tun_chr_ioctl+0x410/0x1d68 [ 964.620676][ T28] tun_chr_ioctl+0x38/0x4c [ 964.621814][ T28] __arm64_sys_ioctl+0x14c/0x1c8 [ 964.623146][ T28] invoke_syscall+0x98/0x2bc [ 964.624436][ T28] el0_svc_common+0x138/0x258 [ 964.625732][ T28] do_el0_svc+0x58/0x13c [ 964.626928][ T28] el0_svc+0x58/0x138 [ 964.639366][ T28] el0t_64_sync_handler+0x84/0xf0 [ 964.640757][ T28] el0t_64_sync+0x18c/0x190 [ 964.642014][ T28] INFO: task syz.3.2154:12548 blocked for more than 144 seconds. [ 964.644161][ T28] Not tainted 6.1.143-syzkaller #0 [ 964.645728][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 964.647969][ T28] task:syz.3.2154 state:D stack:0 pid:12548 ppid:4311 flags:0x00000001 [ 964.650411][ T28] Call trace: [ 964.651290][ T28] __switch_to+0x2f4/0x568 [ 964.652464][ T28] __schedule+0xdd4/0x1b2c [ 964.653685][ T28] schedule+0xc4/0x170 [ 964.654851][ T28] schedule_preempt_disabled+0x18/0x2c [ 964.656300][ T28] __mutex_lock_common+0xad4/0x1f38 [ 964.680555][ T28] mutex_lock_nested+0x38/0x44 [ 964.681953][ T28] rtnl_lock+0x20/0x2c [ 964.683049][ T28] __tun_chr_ioctl+0x410/0x1d68 [ 964.684495][ T28] tun_chr_ioctl+0x38/0x4c [ 964.685701][ T28] __arm64_sys_ioctl+0x14c/0x1c8 [ 964.686990][ T28] invoke_syscall+0x98/0x2bc [ 964.688285][ T28] el0_svc_common+0x138/0x258 [ 964.689528][ T28] do_el0_svc+0x58/0x13c [ 964.690642][ T28] el0_svc+0x58/0x138 [ 964.691705][ T28] el0t_64_sync_handler+0x84/0xf0 [ 964.693024][ T28] el0t_64_sync+0x18c/0x190 [ 964.694226][ T28] INFO: task syz.1.2162:12567 blocked for more than 144 seconds. [ 964.696267][ T28] Not tainted 6.1.143-syzkaller #0 [ 964.719487][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 964.721907][ T28] task:syz.1.2162 state:D stack:0 pid:12567 ppid:4305 flags:0x00000001 [ 964.724416][ T28] Call trace: [ 964.725277][ T28] __switch_to+0x2f4/0x568 [ 964.726441][ T28] __schedule+0xdd4/0x1b2c [ 964.727618][ T28] schedule+0xc4/0x170 [ 964.728794][ T28] schedule_preempt_disabled+0x18/0x2c [ 964.730241][ T28] __mutex_lock_common+0xad4/0x1f38 [ 964.731619][ T28] mutex_lock_nested+0x38/0x44 [ 964.732895][ T28] rtnl_lock+0x20/0x2c [ 964.733949][ T28] dev_ioctl+0x4b4/0xc8c [ 964.735115][ T28] sock_do_ioctl+0x18c/0x240 [ 964.736341][ T28] sock_ioctl+0x5c4/0x840 [ 964.737434][ T28] __arm64_sys_ioctl+0x14c/0x1c8 [ 964.768329][ T28] invoke_syscall+0x98/0x2bc [ 964.769703][ T28] el0_svc_common+0x138/0x258 [ 964.770986][ T28] do_el0_svc+0x58/0x13c [ 964.772138][ T28] el0_svc+0x58/0x138 [ 964.773288][ T28] el0t_64_sync_handler+0x84/0xf0 [ 964.774655][ T28] el0t_64_sync+0x18c/0x190 [ 964.776684][ T28] [ 964.776684][ T28] Showing all locks held in the system: [ 964.778917][ T28] 1 lock held by rcu_tasks_kthre/12: [ 964.780316][ T28] #0: ffff800015287770 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 [ 964.783247][ T28] 1 lock held by rcu_tasks_trace/13: [ 964.784639][ T28] #0: ffff800015287f90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 [ 964.806242][ T28] 2 locks held by ksoftirqd/0/15: [ 964.807692][ T28] 1 lock held by khungtaskd/28: [ 964.811669][ T28] #0: ffff800015286e00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 964.814274][ T28] 3 locks held by kworker/u4:2/39: [ 964.815620][ T28] #0: ffff00019f6e2198 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2b8/0x1b2c [ 964.842112][ T28] #1: ffff80001cd77c20 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 964.845634][ T28] #2: ffff0000ce285758 (key#16){+...}-{2:2}, at: batadv_nc_purge_paths+0xd0/0x37c [ 964.849593][ T28] 1 lock held by dhcpcd/3977: [ 964.850938][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 964.853438][ T28] 2 locks held by getty/4080: [ 964.854717][ T28] #0: ffff0000d68da098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 964.857312][ T28] #1: ffff80001ce732f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2ec/0xf9c [ 964.869902][ T28] 3 locks held by kworker/1:3/4352: [ 964.871343][ T28] #0: ffff0000d62be938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 964.874310][ T28] #1: ffff800020ad7c20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 964.888561][ T28] #2: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 964.890928][ T28] 3 locks held by kworker/u4:7/4435: [ 964.892385][ T28] #0: ffff0000c002a138 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 964.895609][ T28] #1: ffff800020ee7c20 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 964.909179][ T28] #2: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 964.911692][ T28] 3 locks held by kworker/0:11/4605: [ 964.913162][ T28] #0: ffff0000d62be938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 964.916170][ T28] #1: ffff800021557c20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 964.940166][ T28] #2: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 964.942648][ T28] 3 locks held by kworker/0:13/4610: [ 964.944088][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 964.946901][ T28] #1: ffff800021637c20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 964.957906][ T28] #2: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 964.960320][ T28] 4 locks held by kworker/u4:18/5248: [ 964.961806][ T28] #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 964.964697][ T28] #1: ffff800020f27c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 964.967508][ T28] #2: ffff8000177127d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x12c/0xa74 [ 964.989449][ T28] #3: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 964.992174][ T28] 1 lock held by syz.7.2139/12499: [ 964.993610][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 964.996004][ T28] 4 locks held by syz.0.2150/12535: [ 964.997373][ T28] #0: ffff0000d52f4460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 965.021389][ T28] #1: ffff0000f59164c0 (&type->i_mutex_dir_key#7/1){+.+.}-{3:3}, at: filename_create+0x1ac/0x39c [ 965.024399][ T28] #2: ffff8000152aee08 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_kn_lock_live+0xf8/0x258 [ 965.027033][ T28] #3: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 965.030988][ T28] 1 lock held by syz.3.2154/12545: [ 965.032490][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 965.034929][ T28] 1 lock held by syz.3.2154/12546: [ 965.036297][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 965.044055][ T28] 1 lock held by syz.3.2154/12547: [ 965.045565][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 965.065626][ T28] 1 lock held by syz.3.2154/12548: [ 965.067190][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 965.071141][ T28] 1 lock held by syz.1.2162/12567: [ 965.072597][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 965.074914][ T28] 2 locks held by syz.6.2169/12584: [ 965.076293][ T28] #0: ffff8000177127d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x298/0x588 [ 965.088538][ T28] #1: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 965.090975][ T28] 1 lock held by syz-executor/12586: [ 965.092402][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 965.095030][ T28] 1 lock held by syz-executor/12592: [ 965.096520][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 965.109003][ T28] 1 lock held by syz-executor/12598: [ 965.110533][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 965.113179][ T28] 1 lock held by syz-executor/12603: [ 965.114586][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 965.117226][ T28] 1 lock held by syz-executor/12606: [ 965.140245][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 965.142930][ T28] 1 lock held by syz-executor/12614: [ 965.144330][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 965.146849][ T28] 1 lock held by syz-executor/12621: [ 965.149800][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 965.152426][ T28] 1 lock held by syz-executor/12623: [ 965.153817][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 965.156332][ T28] 1 lock held by syz-executor/12629: [ 965.178561][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 965.181199][ T28] 1 lock held by syz-executor/12631: [ 965.182546][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 965.185022][ T28] 1 lock held by syz-executor/12640: [ 965.186454][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 965.191865][ T28] 1 lock held by syz-executor/12644: [ 965.193246][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 965.195735][ T28] 1 lock held by syz-executor/12649: [ 965.197068][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 965.209430][ T28] 1 lock held by syz-executor/12653: [ 965.210878][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 965.213482][ T28] 1 lock held by syz-executor/12657: [ 965.214950][ T28] #0: ffff80001771ee48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 965.217561][ T28] [ 965.242046][ T28] ============================================= [ 965.242046][ T28] [ 965.244513][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 965.246419][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.143-syzkaller #0 [ 965.248583][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 965.251393][ T28] Call trace: [ 965.252304][ T28] dump_backtrace+0x1c8/0x1f4 [ 965.253654][ T28] show_stack+0x2c/0x3c [ 965.254775][ T28] __dump_stack+0x30/0x40 [ 965.256016][ T28] dump_stack_lvl+0xf8/0x160 [ 965.257341][ T28] dump_stack+0x1c/0x5c [ 965.258527][ T28] panic+0x2e0/0x79c [ 965.259616][ T28] hung_task_panic+0x0/0x2c [ 965.260815][ T28] kthread+0x250/0x2d8 [ 965.262018][ T28] ret_from_fork+0x10/0x20 [ 965.263276][ T28] SMP: stopping secondary CPUs [ 965.264583][ T28] Kernel Offset: disabled [ 965.265762][ T28] CPU features: 0x080000,02070084,26017203 [ 965.267457][ T28] Memory Limit: none [ 965.985261][ T28] Rebooting in 86400 seconds..