last executing test programs: 11.330824929s ago: executing program 1 (id=321): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40}, 0x94) 10.932201633s ago: executing program 4 (id=323): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x7f, 0xffffffffffffffff}) 10.918856843s ago: executing program 4 (id=324): r0 = fsopen(0x0, 0x0) unshare(0x8040480) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) 10.792324106s ago: executing program 1 (id=325): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40000032, r0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014935d1071042c03e9ba0102cc3c0902120001000000000904"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x1) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7c00bc", 0x20, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x5}]}}}}}}}}, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000000, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) listen(0xffffffffffffffff, 0xfff) splice(r2, 0x0, r0, 0x0, 0x7ffff000, 0x1) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1) 10.0641979s ago: executing program 4 (id=329): r0 = epoll_create(0x7) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 9.93059909s ago: executing program 0 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet6(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) 8.962426205s ago: executing program 0 (id=333): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) syz_open_dev$vcsn(0x0, 0x200, 0x420400) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$media(0x0, 0x5, 0x101000) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) 8.905280253s ago: executing program 4 (id=335): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40}, 0x94) 8.693673707s ago: executing program 4 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) 6.428099882s ago: executing program 2 (id=338): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffff7, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) 5.677363157s ago: executing program 2 (id=339): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) 5.651619194s ago: executing program 1 (id=340): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x240040c4) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24040850) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) write$tun(r4, 0x0, 0x3db) accept4(r0, 0x0, 0x0, 0x80000) 5.409112505s ago: executing program 3 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.967637713s ago: executing program 2 (id=342): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x100000000, 0x28, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) add_key$user(&(0x7f0000000240), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000b80)="ffa1", 0x2, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @local}], 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x4) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r2 = socket(0x10, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440), 0x400) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac2(0x1, 0x95, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$RDMA_NLDEV_CMD_SET(r3, 0x0, 0x20008000) 4.244602699s ago: executing program 3 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet6(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) 3.640715152s ago: executing program 1 (id=344): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x9, 0x0, 0x0, 0x20000, 0x0, 0xfffffffd, 0x0, 0x1, 0x10001, 0x8, 0x3, 0x5, 0x1ff, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x10000000, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x6c230c0, 0x1, 0x0, 0x9, 0x3, 0x1, 0x0, 0x4, 0x80, 0x20, 0x6, 0x3a3, 0x0, 0x0, 0x0, 0x8, 0x3, 0xfffffffd, 0x0, 0xfffff714, 0x200, 0x7, 0x2, 0x7, 0x0, 0x239, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x800000], [0x11, 0xffff0003, 0x3, 0x0, 0xffffffff, 0x9, 0x88bf9219, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x218001, 0xfffffffe, 0x6, 0x100, 0x40, 0x10000, 0xec6a, 0xca86, 0x40000000, 0xffffffff, 0xfffffffc, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0xfffffffc, 0x4, 0x18c, 0x0, 0xffffffff, 0x4000802, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8f, 0x7], [0xf, 0x4, 0x0, 0x40000000, 0xffffffff, 0x3, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x401, 0x0, 0x2, 0x420, 0xc, 0x4, 0x0, 0x0, 0x1ff, 0x3, 0xfffffffc, 0x7, 0xfffffffc, 0x2af, 0x5, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x401, 0x401, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x3, 0x1, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x3ff, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x1, 0xd, 0xffffffdb], [0x3, 0x0, 0x4, 0xc58, 0x0, 0x401, 0x1000, 0x215, 0x4, 0x7ff, 0x100, 0x3, 0xa, 0xf862, 0x80, 0x0, 0x6, 0x0, 0x7d, 0x5, 0x7ffd, 0x9, 0x4, 0x72, 0x0, 0xfffffffe, 0x0, 0x8, 0x5d66, 0x1, 0x800000, 0x9, 0x3, 0x0, 0x0, 0x9, 0xbfb6, 0x4, 0x8, 0x5, 0x0, 0xfffffffd, 0x1, 0xffffffff, 0x100, 0x4006f, 0x5, 0x3, 0xfffffffd, 0x53591a27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x80000000, 0x5, 0x8]}, 0x45c) 3.61642044s ago: executing program 0 (id=345): r0 = epoll_create(0x7) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 3.467734321s ago: executing program 0 (id=346): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40}, 0x94) 3.464844116s ago: executing program 1 (id=347): linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000400)='./file0/file0\x00', 0x2c00) syz_io_uring_setup(0x387a, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x4}, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') unshare(0x60600) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x6, 0x1, 0x0, 0xb, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) memfd_secret(0x0) r2 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xaa9b, 0x13500, 0x0, 0xe2}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440), 0x1) 3.408199312s ago: executing program 3 (id=348): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x7f, 0xffffffffffffffff}) 3.340435328s ago: executing program 3 (id=349): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffff7, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) 3.238738772s ago: executing program 0 (id=350): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000001300)={0x2020}, 0x2020) 3.170455329s ago: executing program 3 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x44040) 2.073147751s ago: executing program 1 (id=352): socket$key(0xf, 0x3, 0x2) socket(0x40000000015, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 428.475836ms ago: executing program 0 (id=353): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000340)}, 0x3}, {{&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f00000047c0)=[{&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f0000000640)=""/251, 0xfb}, {0x0}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}], 0x6, &(0x7f0000004800)=""/163, 0xa3}, 0xfffffffe}, {{&(0x7f00000048c0)=@can, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004940)=""/228, 0xe4}, {&(0x7f0000004a40)=""/117, 0x75}, {&(0x7f0000004ac0)=""/141, 0x8d}, {&(0x7f0000004b80)=""/221, 0xdd}, {&(0x7f00000007c0)=""/40, 0x28}, {&(0x7f0000004cc0)=""/149, 0x95}], 0x6, &(0x7f0000004dc0)=""/61, 0x3d}, 0x5}], 0x3, 0x2000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x0, 0x1000002c, 0x8001, 0x9, 0x2e, 0x8001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) r3 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000040)={0x80000000, 0x0, &(0x7f00000002c0)}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x4e) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x3, 0x59565955, 0x0, 0x4, 0x10001, 0x8, 0x10, 0x0, 0x1, 0x0, 0x5}}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000001380), &(0x7f0000001400)=0x68) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 427.905542ms ago: executing program 2 (id=354): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 427.629441ms ago: executing program 3 (id=355): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x240040c4) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24040850) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) write$tun(r4, 0x0, 0x3db) accept4(r0, 0x0, 0x0, 0x80000) 427.310278ms ago: executing program 4 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0xd, 0x32, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r2, 0x12a, 0x14, 0x17, 0x0, 0x0) 191.397872ms ago: executing program 2 (id=357): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x9, 0x0, 0x0, 0x20000, 0x0, 0xfffffffd, 0x0, 0x1, 0x10001, 0x8, 0x3, 0x5, 0x1ff, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x10000000, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x6c230c0, 0x1, 0x0, 0x9, 0x3, 0x1, 0x0, 0x4, 0x80, 0x20, 0x6, 0x3a3, 0x0, 0x0, 0x0, 0x8, 0x3, 0xfffffffd, 0x0, 0xfffff714, 0x200, 0x7, 0x2, 0x7, 0x0, 0x239, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x800000], [0x11, 0xffff0003, 0x3, 0x0, 0xffffffff, 0x9, 0x88bf9219, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x218001, 0xfffffffe, 0x6, 0x100, 0x40, 0x10000, 0xec6a, 0xca86, 0x40000000, 0xffffffff, 0xfffffffc, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0xfffffffc, 0x4, 0x18c, 0x0, 0xffffffff, 0x4000802, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8f, 0x7], [0xf, 0x4, 0x0, 0x40000000, 0xffffffff, 0x3, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x401, 0x0, 0x2, 0x420, 0xc, 0x4, 0x0, 0x0, 0x1ff, 0x3, 0xfffffffc, 0x7, 0xfffffffc, 0x2af, 0x5, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x401, 0x401, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x3, 0x1, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x3ff, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x1, 0xd, 0xffffffdb], [0x3, 0x0, 0x4, 0xc58, 0x0, 0x401, 0x1000, 0x215, 0x4, 0x7ff, 0x100, 0x3, 0xa, 0xf862, 0x80, 0x0, 0x6, 0x0, 0x7d, 0x5, 0x7ffd, 0x9, 0x4, 0x72, 0x0, 0xfffffffe, 0x0, 0x8, 0x5d66, 0x1, 0x800000, 0x9, 0x3, 0x0, 0x0, 0x9, 0xbfb6, 0x4, 0x8, 0x5, 0x0, 0xfffffffd, 0x1, 0xffffffff, 0x100, 0x4006f, 0x5, 0x3, 0xfffffffd, 0x53591a27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x80000000, 0x5, 0x8]}, 0x45c) 0s ago: executing program 2 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet6(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.2' (ED25519) to the list of known hosts. [ 72.167648][ T5584] cgroup: Unknown subsys name 'net' [ 72.431202][ T5584] cgroup: Unknown subsys name 'cpuset' [ 72.495013][ T5584] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.172210][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.499709][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.509464][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.514069][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.530798][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.544961][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.547236][ T5607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.555753][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.576581][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.580380][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.585053][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.588199][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.611764][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.615756][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.618009][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.625031][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.629329][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.631199][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.636910][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.638584][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.645691][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.650943][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.651790][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.682040][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.708603][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.765288][ T4912] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.665670][ T4912] Bluetooth: hci3: command tx timeout [ 78.814546][ T4912] Bluetooth: hci2: command tx timeout [ 78.814649][ T4912] Bluetooth: hci1: command tx timeout [ 78.814719][ T4912] Bluetooth: hci0: command tx timeout [ 78.814785][ T4912] Bluetooth: hci4: command tx timeout [ 78.908977][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.909580][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.909848][ T5596] bridge_slave_0: entered allmulticast mode [ 78.911990][ T5596] bridge_slave_0: entered promiscuous mode [ 78.971127][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.971191][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.971278][ T5596] bridge_slave_1: entered allmulticast mode [ 78.974078][ T5596] bridge_slave_1: entered promiscuous mode [ 78.980456][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.980585][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.980716][ T5598] bridge_slave_0: entered allmulticast mode [ 78.983777][ T5598] bridge_slave_0: entered promiscuous mode [ 79.006020][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.006138][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.006267][ T5597] bridge_slave_0: entered allmulticast mode [ 79.008558][ T5597] bridge_slave_0: entered promiscuous mode [ 79.055379][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.055761][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.056157][ T5598] bridge_slave_1: entered allmulticast mode [ 79.057491][ T5598] bridge_slave_1: entered promiscuous mode [ 79.071916][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.072022][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.072163][ T5597] bridge_slave_1: entered allmulticast mode [ 79.079733][ T5597] bridge_slave_1: entered promiscuous mode [ 79.083213][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.083346][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.083798][ T5599] bridge_slave_0: entered allmulticast mode [ 79.087137][ T5599] bridge_slave_0: entered promiscuous mode [ 79.128316][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.128423][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.128553][ T5600] bridge_slave_0: entered allmulticast mode [ 79.130850][ T5600] bridge_slave_0: entered promiscuous mode [ 79.153866][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.154188][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.155927][ T5599] bridge_slave_1: entered allmulticast mode [ 79.158394][ T5599] bridge_slave_1: entered promiscuous mode [ 79.165767][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.186233][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.186353][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.186544][ T5600] bridge_slave_1: entered allmulticast mode [ 79.190054][ T5600] bridge_slave_1: entered promiscuous mode [ 79.233603][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.237496][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.259150][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.298949][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.318650][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.320935][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.580206][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.596994][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.599421][ T5596] team0: Port device team_slave_0 added [ 79.619551][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.647009][ T5596] team0: Port device team_slave_1 added [ 79.648487][ T5598] team0: Port device team_slave_0 added [ 79.665956][ T5597] team0: Port device team_slave_0 added [ 79.691049][ T5598] team0: Port device team_slave_1 added [ 79.706113][ T5597] team0: Port device team_slave_1 added [ 79.707722][ T5599] team0: Port device team_slave_0 added [ 79.737815][ T5600] team0: Port device team_slave_0 added [ 79.754049][ T5599] team0: Port device team_slave_1 added [ 79.755398][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.755410][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.755433][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.795043][ T5600] team0: Port device team_slave_1 added [ 79.834935][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.834946][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.834960][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.846969][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.846980][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.847002][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.850782][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.850793][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.850815][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.907173][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.907187][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.907212][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.909317][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.909329][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.909351][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.910574][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.910584][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.910605][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.931734][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.931746][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.931768][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.945365][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.945377][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.945398][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.950131][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.950143][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.950164][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.076553][ T5596] hsr_slave_0: entered promiscuous mode [ 80.077842][ T5596] hsr_slave_1: entered promiscuous mode [ 80.152557][ T5598] hsr_slave_0: entered promiscuous mode [ 80.154301][ T5598] hsr_slave_1: entered promiscuous mode [ 80.156055][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 80.156147][ T5598] Cannot create hsr debugfs directory [ 80.183741][ T5597] hsr_slave_0: entered promiscuous mode [ 80.185662][ T5597] hsr_slave_1: entered promiscuous mode [ 80.186504][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 80.186524][ T5597] Cannot create hsr debugfs directory [ 80.261244][ T5599] hsr_slave_0: entered promiscuous mode [ 80.262383][ T5599] hsr_slave_1: entered promiscuous mode [ 80.263540][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 80.263560][ T5599] Cannot create hsr debugfs directory [ 80.276007][ T5600] hsr_slave_0: entered promiscuous mode [ 80.277647][ T5600] hsr_slave_1: entered promiscuous mode [ 80.278585][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 80.278606][ T5600] Cannot create hsr debugfs directory [ 80.735914][ T59] Bluetooth: hci3: command tx timeout [ 80.894534][ T59] Bluetooth: hci4: command tx timeout [ 80.894559][ T59] Bluetooth: hci0: command tx timeout [ 80.894576][ T59] Bluetooth: hci1: command tx timeout [ 80.894591][ T59] Bluetooth: hci2: command tx timeout [ 81.539802][ T5596] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.608606][ T9] cfg80211: failed to load regulatory.db [ 81.629087][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.660155][ T5596] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.702720][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.718662][ T5596] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.760813][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.799860][ T5596] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.821205][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.923618][ T5598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.977392][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.981695][ T5598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.999241][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.004188][ T5598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.037484][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.059380][ T5598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.097929][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.217617][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.258343][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.261628][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.296835][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.299283][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.322217][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.350212][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.378018][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.496286][ T5599] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.518625][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.534185][ T5599] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.577493][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.602343][ T5599] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.637978][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.642013][ T5599] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.662939][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.729080][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.790256][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.814587][ T5609] Bluetooth: hci3: command tx timeout [ 82.817523][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.823149][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.867073][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.871033][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.890006][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.901035][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.905931][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.927215][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.964128][ T1458] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.964248][ T1458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.974584][ T5609] Bluetooth: hci4: command tx timeout [ 82.974610][ T5609] Bluetooth: hci2: command tx timeout [ 82.974636][ T5609] Bluetooth: hci1: command tx timeout [ 82.974654][ T5609] Bluetooth: hci0: command tx timeout [ 83.029748][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.067388][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.067463][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.135374][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.177215][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.177367][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.184302][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.221433][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.221521][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.302744][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.350841][ T1458] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.351035][ T1458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.380518][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.466332][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.466448][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.595533][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.634110][ T1458] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.634213][ T1458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.659030][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.694339][ T1458] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.697849][ T1458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.799674][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.883746][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.883954][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.962323][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.962522][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.490324][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.832814][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.851087][ T5596] veth0_vlan: entered promiscuous mode [ 84.895135][ T59] Bluetooth: hci3: command tx timeout [ 84.960929][ T5596] veth1_vlan: entered promiscuous mode [ 85.057140][ T4912] Bluetooth: hci2: command tx timeout [ 85.057165][ T4912] Bluetooth: hci4: command tx timeout [ 85.057520][ T5609] Bluetooth: hci1: command tx timeout [ 85.057571][ T59] Bluetooth: hci0: command tx timeout [ 85.076744][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.167836][ T5598] veth0_vlan: entered promiscuous mode [ 85.182360][ T5596] veth0_macvtap: entered promiscuous mode [ 85.211030][ T5596] veth1_macvtap: entered promiscuous mode [ 85.276806][ T5598] veth1_vlan: entered promiscuous mode [ 85.339979][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.399155][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.401587][ T5597] veth0_vlan: entered promiscuous mode [ 85.452529][ T1220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.467128][ T1220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.469009][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.473957][ T1220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.477333][ T5597] veth1_vlan: entered promiscuous mode [ 85.512847][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.512992][ T1220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.516585][ T5598] veth0_macvtap: entered promiscuous mode [ 85.603848][ T5598] veth1_macvtap: entered promiscuous mode [ 85.868690][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.932759][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.961732][ T5597] veth0_macvtap: entered promiscuous mode [ 86.002863][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.021128][ T5597] veth1_macvtap: entered promiscuous mode [ 86.035634][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.058800][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.072410][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.072431][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.088762][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.090885][ T5600] veth0_vlan: entered promiscuous mode [ 86.299239][ T5600] veth1_vlan: entered promiscuous mode [ 86.315910][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.319624][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.319639][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.448536][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.569955][ T158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.589952][ T158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.596955][ T158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.597252][ T5599] veth0_vlan: entered promiscuous mode [ 86.611200][ T158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.625013][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.625029][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.717885][ T5599] veth1_vlan: entered promiscuous mode [ 86.937242][ T5600] veth0_macvtap: entered promiscuous mode [ 87.023513][ T1220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.023531][ T1220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.386266][ T5600] veth1_macvtap: entered promiscuous mode [ 87.422397][ T3932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.422413][ T3932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.153923][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.227507][ T5599] veth0_macvtap: entered promiscuous mode [ 90.256852][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.256869][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.301048][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.398470][ T5599] veth1_macvtap: entered promiscuous mode [ 90.423812][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.453505][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.459320][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.627208][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.124615][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.468243][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.799933][ T3978] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.805206][ T3978] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.833213][ T3978] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.836465][ T3978] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.331781][ T3978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.331794][ T3978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.224976][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 104.975585][ T5852] bridge_slave_1: left allmulticast mode [ 104.975619][ T5852] bridge_slave_1: left promiscuous mode [ 104.976788][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.272042][ T5852] bridge_slave_0: left allmulticast mode [ 105.272073][ T5852] bridge_slave_0: left promiscuous mode [ 105.272374][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.270479][ T1458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.270503][ T1458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.579714][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.579732][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.767794][ T3978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.767813][ T3978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.922350][ T5873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.425010][ T5940] ALSA: mixer_oss: invalid OSS volume '' [ 116.786574][ T36] audit: type=1800 audit(1778457183.711:2): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.29" name="file0" dev="overlay" ino=78 res=0 errno=0 [ 119.184402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.204380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.214381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.224388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.234382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.304378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.324383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.334390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.344388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.354381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.765522][ T5979] Zero length message leads to an empty skb [ 123.532024][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 124.883944][ T6003] netlink: 'syz.0.46': attribute type 13 has an invalid length. [ 125.533450][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 126.551311][ T6022] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.50'. [ 126.800829][ T6024] syz.2.51 uses obsolete (PF_INET,SOCK_PACKET) [ 130.798733][ T6066] Bluetooth: MGMT ver 1.23 [ 130.799484][ T6066] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 132.800839][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.818112][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.332613][ T6263] tipc: Started in network mode [ 145.333340][ T6263] tipc: Node identity 4, cluster identity 4711 [ 145.333376][ T6263] tipc: Node number set to 4 [ 148.527485][ T5722] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 149.125451][ T5722] usb 3-1: device descriptor read/64, error -71 [ 149.615526][ T5722] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 150.734678][ T5722] usb 3-1: device descriptor read/64, error -71 [ 150.866061][ T5722] usb usb3-port1: attempt power cycle [ 152.450946][ T6313] netlink: 160 bytes leftover after parsing attributes in process `syz.0.119'. [ 156.357373][ T6379] team_slave_1: Caught tx_queue_len zero misconfig [ 160.236245][ T6451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.143136][ T6492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'. [ 166.103096][ T6503] nvme_fabrics: missing parameter 'transport=%s' [ 166.103106][ T6503] nvme_fabrics: missing parameter 'nqn=%s' [ 166.407433][ T6511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.167464][ T6567] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.172'. [ 175.249987][ T6599] blktrace: Concurrent blktraces are not allowed on loop0 [ 176.179052][ T6604] random: crng reseeded on system resumption [ 176.415539][ T6607] tipc: Started in network mode [ 176.415556][ T6607] tipc: Node identity 4, cluster identity 4711 [ 176.415566][ T6607] tipc: Node number set to 4 [ 180.065449][ T6652] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.193'. [ 184.009647][ T6697] netlink: 'syz.2.206': attribute type 2 has an invalid length. [ 189.671096][ T6747] netlink: 'syz.0.220': attribute type 2 has an invalid length. [ 194.198982][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.199046][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.688720][ T6811] netlink: 160 bytes leftover after parsing attributes in process `syz.2.236'. [ 199.348029][ T6839] netlink: 'syz.3.241': attribute type 2 has an invalid length. [ 202.192722][ T5607] Bluetooth: hci4: command 0x0406 tx timeout [ 202.192759][ T5607] Bluetooth: hci3: command 0x0406 tx timeout [ 202.192870][ T5607] Bluetooth: hci1: command 0x0406 tx timeout [ 202.192906][ T5607] Bluetooth: hci2: command 0x0406 tx timeout [ 202.192928][ T5607] Bluetooth: hci0: command 0x0406 tx timeout [ 204.381241][ T6877] netlink: 'syz.4.255': attribute type 2 has an invalid length. [ 206.009494][ T6887] netlink: 68 bytes leftover after parsing attributes in process `syz.2.257'. [ 207.737875][ T6897] netlink: 160 bytes leftover after parsing attributes in process `syz.4.259'. [ 212.490707][ T6945] netlink: 'syz.1.269': attribute type 2 has an invalid length. [ 217.777260][ T6984] netlink: 160 bytes leftover after parsing attributes in process `syz.4.278'. [ 220.540551][ T7016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.458739][ T7022] netlink: 'syz.1.285': attribute type 2 has an invalid length. [ 224.106610][ T5736] IPVS: starting estimator thread 0... [ 224.274495][ T7059] IPVS: using max 9 ests per chain, 21600 per kthread [ 226.891992][ T7082] netlink: 'syz.4.302': attribute type 2 has an invalid length. [ 228.501450][ T7100] input: syz1 as /devices/virtual/input/input7 [ 229.940353][ T7121] fuse: Bad value for 'fd' [ 231.059440][ T7131] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 232.374468][ T5735] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 232.674989][ T5735] usb 2-1: Using ep0 maxpacket: 16 [ 232.678213][ T5735] usb 2-1: too many configurations: 60, using maximum allowed: 8 [ 232.785454][ T5735] usb 2-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 232.785481][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 232.785499][ T5735] usb 2-1: Product: syz [ 232.785511][ T5735] usb 2-1: Manufacturer: syz [ 232.785523][ T5735] usb 2-1: SerialNumber: syz [ 232.944839][ T5735] usb 2-1: config 0 descriptor?? [ 233.753481][ T5735] pwc: Philips SPC 880NC USB webcam detected. [ 233.760686][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 233.823782][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 233.881637][ T5735] pwc: Warning: more than 1 configuration available. [ 233.892791][ T5735] pwc: Failed to set LED on/off time (-71) [ 233.893210][ T5735] pwc: send_video_command error -71 [ 233.893221][ T5735] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 233.893456][ T5735] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 233.947582][ T5735] usb 2-1: USB disconnect, device number 2 [ 236.116122][ T7185] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.333'. [ 242.795187][ C0] [ 242.795197][ C0] ====================================================== [ 242.795204][ C0] WARNING: possible circular locking dependency detected [ 242.795227][ C0] syzkaller #0 Tainted: G L [ 242.795238][ C0] ------------------------------------------------------ [ 242.795245][ C0] syz.3.355/7255 is trying to acquire lock: [ 242.795255][ C0] ffff8880306e82a0 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 242.795320][ C0] [ 242.795320][ C0] but task is already holding lock: [ 242.795326][ C0] ffff88805aab7460 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 242.795366][ C0] [ 242.795366][ C0] which lock already depends on the new lock. [ 242.795366][ C0] [ 242.795373][ C0] [ 242.795373][ C0] the existing dependency chain (in reverse order) is: [ 242.795379][ C0] [ 242.795379][ C0] -> #1 (slock-AF_PHONET){+...}-{3:3}: [ 242.795405][ C0] rt_spin_lock+0x83/0x400 [ 242.795422][ C0] __sk_receive_skb+0x1f1/0x9e0 [ 242.795438][ C0] phonet_rcv+0x781/0xc40 [ 242.795453][ C0] process_backlog+0x5e1/0xc60 [ 242.795470][ C0] __napi_poll+0xab/0x550 [ 242.795493][ C0] net_rx_action+0x696/0xe00 [ 242.795508][ C0] handle_softirqs+0x1de/0x6d0 [ 242.795527][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 242.795544][ C0] netif_rx+0xb9/0xf0 [ 242.795562][ C0] pn_send+0x62a/0x8e0 [ 242.795576][ C0] pn_skb_send+0x218/0x510 [ 242.795591][ C0] pipe_snd_status+0x1f1/0x320 [ 242.795607][ C0] pipe_do_rcv+0xf15/0x16a0 [ 242.795623][ C0] __sk_receive_skb+0x962/0x9e0 [ 242.795639][ C0] pep_do_rcv+0x685/0xaa0 [ 242.795655][ C0] __release_sock+0x2a9/0x3d0 [ 242.795676][ C0] release_sock+0x1be/0x290 [ 242.795693][ C0] pep_sock_accept+0xd47/0x11e0 [ 242.795709][ C0] pn_socket_accept+0xc1/0x310 [ 242.795731][ C0] do_accept+0x52b/0x760 [ 242.795747][ C0] __sys_accept4+0x139/0x230 [ 242.795763][ C0] __x64_sys_accept4+0x9a/0xb0 [ 242.795784][ C0] do_syscall_64+0x15f/0xf80 [ 242.795804][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.795822][ C0] [ 242.795822][ C0] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 242.795858][ C0] __lock_acquire+0x15a5/0x2cf0 [ 242.795879][ C0] lock_acquire+0x106/0x350 [ 242.795899][ C0] rt_spin_lock_nested+0x81/0x3f0 [ 242.795915][ C0] __sk_receive_skb+0x1bf/0x9e0 [ 242.795931][ C0] pep_do_rcv+0x685/0xaa0 [ 242.795947][ C0] __sk_receive_skb+0x962/0x9e0 [ 242.795962][ C0] phonet_rcv+0x781/0xc40 [ 242.795977][ C0] process_backlog+0x5e1/0xc60 [ 242.795992][ C0] __napi_poll+0xab/0x550 [ 242.796014][ C0] net_rx_action+0x696/0xe00 [ 242.796028][ C0] handle_softirqs+0x1de/0x6d0 [ 242.796045][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 242.796063][ C0] netif_rx+0xb9/0xf0 [ 242.796080][ C0] pn_send+0x62a/0x8e0 [ 242.796094][ C0] pn_skb_send+0x218/0x510 [ 242.796109][ C0] pep_sock_close+0x2c1/0x5b0 [ 242.796125][ C0] pn_socket_release+0x9b/0xc0 [ 242.796146][ C0] sock_close+0xc3/0x240 [ 242.796167][ C0] __fput+0x461/0xa70 [ 242.796188][ C0] task_work_run+0x1d9/0x270 [ 242.796209][ C0] exit_to_user_mode_loop+0xf3/0x4d0 [ 242.796227][ C0] do_syscall_64+0x33e/0xf80 [ 242.796245][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.796260][ C0] [ 242.796260][ C0] other info that might help us debug this: [ 242.796260][ C0] [ 242.796266][ C0] Possible unsafe locking scenario: [ 242.796266][ C0] [ 242.796271][ C0] CPU0 CPU1 [ 242.796277][ C0] ---- ---- [ 242.796282][ C0] lock(slock-AF_PHONET); [ 242.796295][ C0] lock(slock-AF_PHONET/1); [ 242.796314][ C0] lock(slock-AF_PHONET); [ 242.796328][ C0] lock(slock-AF_PHONET/1); [ 242.796343][ C0] [ 242.796343][ C0] *** DEADLOCK *** [ 242.796343][ C0] [ 242.796354][ C0] 7 locks held by syz.3.355/7255: [ 242.796365][ C0] #0: ffff88806146bf78 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 242.796419][ C0] #1: ffff88805aab6c58 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0 [ 242.796462][ C0] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 242.796503][ C0] #3: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 242.796543][ C0] #4: ffff88805aab7460 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 242.796585][ C0] #5: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 242.796625][ C0] #6: ffff88805aab7518 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40 [ 242.796666][ C0] [ 242.796666][ C0] stack backtrace: [ 242.796690][ C0] CPU: 0 UID: 0 PID: 7255 Comm: syz.3.355 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 242.796717][ C0] Tainted: [L]=SOFTLOCKUP [ 242.796724][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.796741][ C0] Call Trace: [ 242.796750][ C0] [ 242.796761][ C0] dump_stack_lvl+0xe8/0x150 [ 242.796783][ C0] print_circular_bug+0x2e1/0x300 [ 242.796801][ C0] check_noncircular+0x12e/0x150 [ 242.796845][ C0] __lock_acquire+0x15a5/0x2cf0 [ 242.796871][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 242.796894][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 242.796911][ C0] lock_acquire+0x106/0x350 [ 242.796932][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 242.796950][ C0] ? sk_filter_trim_cap+0x8f1/0xce0 [ 242.796976][ C0] rt_spin_lock_nested+0x81/0x3f0 [ 242.796993][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 242.797010][ C0] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 242.797032][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 242.797053][ C0] ? __pfx_rt_spin_lock_nested+0x10/0x10 [ 242.797072][ C0] ? rt_spin_lock+0x1e0/0x400 [ 242.797089][ C0] __sk_receive_skb+0x1bf/0x9e0 [ 242.797112][ C0] pep_do_rcv+0x685/0xaa0 [ 242.797132][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 242.797154][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 242.797173][ C0] ? phonet_rcv+0x781/0xc40 [ 242.797189][ C0] __sk_receive_skb+0x962/0x9e0 [ 242.797216][ C0] phonet_rcv+0x781/0xc40 [ 242.797231][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 242.797258][ C0] ? __pfx_phonet_rcv+0x10/0x10 [ 242.797276][ C0] ? process_backlog+0x271/0xc60 [ 242.797292][ C0] ? process_backlog+0x271/0xc60 [ 242.797308][ C0] ? __pfx_phonet_rcv+0x10/0x10 [ 242.797323][ C0] process_backlog+0x5e1/0xc60 [ 242.797348][ C0] __napi_poll+0xab/0x550 [ 242.797373][ C0] net_rx_action+0x696/0xe00 [ 242.797398][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 242.797414][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 242.797439][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 242.797466][ C0] ? enqueue_to_backlog+0x340/0xcb0 [ 242.797495][ C0] handle_softirqs+0x1de/0x6d0 [ 242.797518][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 242.797538][ C0] netif_rx+0xb9/0xf0 [ 242.797558][ C0] pn_send+0x62a/0x8e0 [ 242.797577][ C0] pn_skb_send+0x218/0x510 [ 242.797593][ C0] pep_sock_close+0x2c1/0x5b0 [ 242.797613][ C0] pn_socket_release+0x9b/0xc0 [ 242.797635][ C0] sock_close+0xc3/0x240 [ 242.797660][ C0] ? __pfx_sock_close+0x10/0x10 [ 242.797683][ C0] __fput+0x461/0xa70 [ 242.797712][ C0] task_work_run+0x1d9/0x270 [ 242.797737][ C0] ? __pfx_task_work_run+0x10/0x10 [ 242.797765][ C0] exit_to_user_mode_loop+0xf3/0x4d0 [ 242.797786][ C0] ? rcu_is_watching+0x15/0xb0 [ 242.797811][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.797836][ C0] do_syscall_64+0x33e/0xf80 [ 242.797856][ C0] ? trace_irq_disable+0x3b/0x140 [ 242.797877][ C0] ? clear_bhb_loop+0x40/0x90 [ 242.797897][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.797915][ C0] RIP: 0033:0x7f1f1370cdd9 [ 242.797937][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.797952][ C0] RSP: 002b:00007ffe8d4ac7e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 242.797972][ C0] RAX: 0000000000000000 RBX: 00007f1f13987da0 RCX: 00007f1f1370cdd9 [ 242.797984][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 242.797996][ C0] RBP: 00007f1f13987da0 R08: 00007f1f13986128 R09: 0000000000000000 [ 242.798008][ C0] R10: 00000000003fe8d0 R11: 0000000000000246 R12: 000000000003b604 [ 242.798019][ C0] R13: 00007f1f1398618c R14: 000000000003b36d R15: 00007ffe8d4ac8f0 [ 242.798038][ C0]