last executing test programs: 15.651000832s ago: executing program 2 (id=534): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000218500000083000000bf0900000000000055090100000000009500000000000000bf91000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 15.625731517s ago: executing program 3 (id=535): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1) 14.521599684s ago: executing program 3 (id=536): r0 = socket$nl_rdma(0x10, 0x3, 0x14) dup(r0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) preadv2(r1, &(0x7f00000015c0)=[{&(0x7f0000001640)=""/35, 0x23}], 0x1, 0x10000, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="0000000094060000000000000004000000000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 12.919738369s ago: executing program 2 (id=537): r0 = socket$nl_rdma(0x10, 0x3, 0x14) dup(r0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) preadv2(r2, &(0x7f00000015c0)=[{&(0x7f0000001640)=""/35, 0x23}], 0x1, 0x10000, 0x0, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@local, 0x200000, 0x2, 0x0, 0x1, 0x3, 0xfd6}, 0xfe5a) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000200)={0xf030000, 0x280, 0xa, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x80000003, '\x00', @ptr=0xc621}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffffff, 0x0, 0x40, 0x19) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0xc0, 0xf1) 12.659817641s ago: executing program 0 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6(0xa, 0x1000080002, 0x100000000000088) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x61) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 11.049528214s ago: executing program 0 (id=539): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x0, 0x8b93, 0x7, 0x5}, 'syz0\x00', 0x53}) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x16a2) 9.564011891s ago: executing program 3 (id=543): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x180) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.955954009s ago: executing program 0 (id=544): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x0, 0x8b93, 0x7, 0x5}, 'syz0\x00', 0x53}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=ANY=[@ANYBLOB="400000000214010028bd7000fcdbdf2508004400", @ANYRES32, @ANYBLOB="0800010002080070db9b160000000000080001000000000005f619a48959b9d4e600000000000000010000000800010000000000135e0c8a01c2c32c1d20f09bda155c090f7a4b787b51885f24d47cd63e93eef2a15c798e09a8375cf7f13de7e8aa79da8c20082cd907e056f52788d067c8c791c64f4e40c79f9e9bf0148cc38ec6"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x16a2) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 8.710345834s ago: executing program 3 (id=545): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000218500000083000000bf0900000000000055090100000000009500000000000000bf91000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 8.119319305s ago: executing program 0 (id=546): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x1, 0x84) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r3, &(0x7f0000000100)=""/107, 0x6b) write$nci(r3, &(0x7f0000000100)=ANY=[], 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x40, 0x10, 0x4b, 0x4, {{0x6, 0x4, 0x2, 0x10, 0x18, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @broadcast, {[@end]}}}}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b00050000000800171f4e214e22080001"], 0x5c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r5, &(0x7f0000000380)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x0, "ff0000bb719b98fb73e53a0000000600"}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0xd, 0xb, 0xf, 0x3, 0x16, "43db4c9554938a92b052134851317440023bd9"}) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000740)=0x1004af) socket$inet6(0xa, 0x3, 0xfa) 7.017539402s ago: executing program 3 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6(0xa, 0x1000080002, 0x100000000000088) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x61) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 6.335391036s ago: executing program 2 (id=550): bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)="8907040400", 0x5) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4c21, @empty}, 0x10) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x200, 0x9, 0x8602, 0x7, 0x0, 0x5, 0x2}, &(0x7f0000000280)=0x20) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x180) r6 = socket(0x1a, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, &(0x7f0000000100)) syz_open_dev$MSR(&(0x7f0000000000), 0x7, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES16=r5, @ANYRES8=r6, @ANYBLOB="05000000010000000300"/25, @ANYRESHEX=0x0, @ANYRES8=r1, @ANYRESDEC], 0x50) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="05"], 0x10) 5.421658418s ago: executing program 1 (id=551): openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.181584464s ago: executing program 1 (id=552): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x16a2) 4.992845179s ago: executing program 1 (id=553): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x180) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.663297889s ago: executing program 1 (id=554): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xfe7f0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x1003, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="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"], 0x14c}}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = getpgrp(0xffffffffffffffff) kcmp(r5, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) waitid(0x2, 0x0, &(0x7f0000000600), 0x2, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 4.505988099s ago: executing program 1 (id=555): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e21, 0x0, @mcast1, 0xa}, {0xa, 0x4e21, 0xdfde, @dev={0xfe, 0x80, '\x00', 0x37}}, 0xffffffffffffffff, {[0x5, 0x26171dcb, 0x6, 0xb, 0xdc0d, 0x94f5, 0x8, 0x5]}}, 0x5c) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1) 4.490726077s ago: executing program 0 (id=556): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 2.522277234s ago: executing program 3 (id=557): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x24, r4, 0x48334cf00147764d, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044880}, 0x20000000) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x43, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2.49968512s ago: executing program 1 (id=558): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f00000001c0)) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1}) close(r2) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r4 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000900)="d8bf69db0becdfeeb1c0c547e1fb6386b08c57fa3faf098e3fb752056f1355c1a96083a7d85d2751904e02e1e5f623fffc71dc0c26de94b9761ca31c2949ae6019d23b451d42be01268065f690a3787937cf5743f35be19dcea3c8ca413ad12cb53336fb936481b620c1e4db3b9e23a2fa3e55200e90241fa8c21e5f4350d6a7eba8d71ccc8c6bc34483ff5c66a1c200dfdd06c7964346a72190c80d756613fd3f447ee5ecbd254c107b88904b1fc7fb95350fd6712891feba7b0774a0b6fe8d", 0xc0}, {&(0x7f0000000580)="1eba162ae4d66b52c84118b56f98df27687325686ac6e56e5662ef82b4a7e8ecbbc43cc8e39f259668d30405866a6e6a18ffd87d8211a53ddec0ba0195ca760207dd2aa3f7ba5263248f4445763b32cd953b26704db7f77b26641f49fbf4aafb757f280db63b6a9d39ca6fa440ae3074c7c8355b41b805217a761abf7389cba28e10ac73d3339573f7804b75d0e0a2ecee4decf162f6aeefd5ab1d6ed1191263e6d8fc", 0xa3}, {&(0x7f0000000100)="2ed16bcb5f550dd798641dcaf6685880d986c568d565d067c837d26964f5eec0561499866d836d7c944762dfa163589f08fc8a8e", 0x34}, {&(0x7f0000000640)="d40a34cd8a98267a592166c6bb023bbba1fbc5a6e9a5d1a9b5a719e1d104c6ecf5f9b86baa83c8724898d6addce223138c62b5f0c9ece9dcfb93a8d54f70dddd741d74c59caae4067049550b", 0x4c}, {&(0x7f0000000740)="2d80c5edeb1fe3595e249e145cfccf4b926a380258201de40be61ede57f76bf59ba1759c85f0c8841e93849133261fe1b89e1c051f4748b982f2c892df7bdb273f8104", 0x43}, {&(0x7f0000000480)="0ac5cb5b410458f4eef9408ad1ccf5f5", 0x10}], 0x6) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xef, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) socket$nl_route(0x10, 0x3, 0x0) 1.842013419s ago: executing program 2 (id=559): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r5}) 1.593948223s ago: executing program 0 (id=560): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$loop(0x0, 0xb8a, 0x18b80) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000340)) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x16) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 1.5198931s ago: executing program 2 (id=561): r0 = socket$inet(0xa, 0x801, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x3, 0x0, [0x2dd9, 0x0, 0x40, 0x5, 0xfffffff7, 0xf, 0xa, 0x6, 0x8, 0x1a82, 0x5, 0x1, 0x5, 0xbe, 0x6, 0x100]}, {0xf, 0x0, [0x6, 0x631d, 0x6f0, 0x6, 0x401, 0x7fff, 0x7, 0x1000, 0x3d492b6a, 0x4, 0x5, 0xa8d, 0x1, 0x100, 0x5, 0x416]}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, {0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x4}, 0x1000}, 0xffffffffffffffff, 0x4}}, 0x48) connect$inet(r0, 0x0, 0x0) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x4}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 2 (id=562): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000218500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. [ 70.689118][ T5758] cgroup: Unknown subsys name 'net' [ 70.821702][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.740953][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.747697][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.540796][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.109999][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.119508][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.128617][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.131189][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.137102][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.145010][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.151446][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.159200][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.165040][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.172495][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.182777][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.195309][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.195353][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.210259][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.224223][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.234050][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.234892][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.246308][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.249280][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.256154][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.262615][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.270375][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.276633][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.283511][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.764752][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 74.803165][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 74.859181][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 74.879113][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 75.070024][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.078052][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.085694][ T5771] bridge_slave_0: entered allmulticast mode [ 75.093184][ T5771] bridge_slave_0: entered promiscuous mode [ 75.106679][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.114465][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.122167][ T5770] bridge_slave_0: entered allmulticast mode [ 75.129418][ T5770] bridge_slave_0: entered promiscuous mode [ 75.137350][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.144814][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.152593][ T5772] bridge_slave_0: entered allmulticast mode [ 75.162352][ T5772] bridge_slave_0: entered promiscuous mode [ 75.170880][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.178726][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.186439][ T5772] bridge_slave_1: entered allmulticast mode [ 75.193473][ T5772] bridge_slave_1: entered promiscuous mode [ 75.201327][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.209251][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.216960][ T5771] bridge_slave_1: entered allmulticast mode [ 75.224540][ T5771] bridge_slave_1: entered promiscuous mode [ 75.239092][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.246688][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.254392][ T5770] bridge_slave_1: entered allmulticast mode [ 75.261455][ T5770] bridge_slave_1: entered promiscuous mode [ 75.309696][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.317097][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.324765][ T5769] bridge_slave_0: entered allmulticast mode [ 75.331793][ T5769] bridge_slave_0: entered promiscuous mode [ 75.363427][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.383890][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.391252][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.401667][ T5769] bridge_slave_1: entered allmulticast mode [ 75.409614][ T5769] bridge_slave_1: entered promiscuous mode [ 75.430202][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.451919][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.465708][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.478236][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.500746][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.531690][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.552840][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.577476][ T5770] team0: Port device team_slave_0 added [ 75.587572][ T5770] team0: Port device team_slave_1 added [ 75.615877][ T5772] team0: Port device team_slave_0 added [ 75.643624][ T5772] team0: Port device team_slave_1 added [ 75.653492][ T5771] team0: Port device team_slave_0 added [ 75.663419][ T5769] team0: Port device team_slave_0 added [ 75.700549][ T5771] team0: Port device team_slave_1 added [ 75.707806][ T5769] team0: Port device team_slave_1 added [ 75.725830][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.732910][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.762117][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.775756][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.782836][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.808983][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.859718][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.866939][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.894151][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.907692][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.917365][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.943958][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.968698][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.981594][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.007875][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.020592][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.027706][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.054231][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.078180][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.085338][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.112079][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.126163][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.133268][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.159485][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.197286][ T5770] hsr_slave_0: entered promiscuous mode [ 76.204933][ T5770] hsr_slave_1: entered promiscuous mode [ 76.295083][ T5783] Bluetooth: hci0: command tx timeout [ 76.310859][ T5772] hsr_slave_0: entered promiscuous mode [ 76.319832][ T5772] hsr_slave_1: entered promiscuous mode [ 76.326889][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.335630][ T5772] Cannot create hsr debugfs directory [ 76.346469][ T5769] hsr_slave_0: entered promiscuous mode [ 76.354755][ T5769] hsr_slave_1: entered promiscuous mode [ 76.361190][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.369237][ T5769] Cannot create hsr debugfs directory [ 76.374349][ T5783] Bluetooth: hci1: command tx timeout [ 76.374883][ T5778] Bluetooth: hci3: command tx timeout [ 76.380310][ T5783] Bluetooth: hci2: command tx timeout [ 76.488290][ T5771] hsr_slave_0: entered promiscuous mode [ 76.497196][ T5771] hsr_slave_1: entered promiscuous mode [ 76.503597][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.511373][ T5771] Cannot create hsr debugfs directory [ 76.844057][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.860260][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.871773][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.882660][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.959956][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.970054][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.981144][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.991214][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.076927][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.106927][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.123616][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.141267][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.248540][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.266971][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.279384][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.289412][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.326442][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.395003][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.439903][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.447441][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.474168][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.481474][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.509429][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.560347][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.583646][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.595749][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.623137][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.631185][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.657600][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.672331][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.679613][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.711292][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.731897][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.739145][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.753354][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.760533][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.775181][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.821568][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.828928][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.859377][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.866727][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.278788][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.376938][ T5783] Bluetooth: hci0: command tx timeout [ 78.451708][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.455060][ T5783] Bluetooth: hci2: command tx timeout [ 78.461373][ T5778] Bluetooth: hci3: command tx timeout [ 78.466357][ T5783] Bluetooth: hci1: command tx timeout [ 78.501416][ T5770] veth0_vlan: entered promiscuous mode [ 78.559988][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.578981][ T5770] veth1_vlan: entered promiscuous mode [ 78.616838][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.645426][ T5772] veth0_vlan: entered promiscuous mode [ 78.661870][ T5770] veth0_macvtap: entered promiscuous mode [ 78.683125][ T5770] veth1_macvtap: entered promiscuous mode [ 78.722280][ T5772] veth1_vlan: entered promiscuous mode [ 78.741369][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.771894][ T5771] veth0_vlan: entered promiscuous mode [ 78.783655][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.809091][ T5771] veth1_vlan: entered promiscuous mode [ 78.826652][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.837715][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.847465][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.858092][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.900855][ T5769] veth0_vlan: entered promiscuous mode [ 78.949307][ T5772] veth0_macvtap: entered promiscuous mode [ 78.963417][ T5769] veth1_vlan: entered promiscuous mode [ 78.994678][ T5772] veth1_macvtap: entered promiscuous mode [ 79.036717][ T5771] veth0_macvtap: entered promiscuous mode [ 79.077433][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.100245][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.100326][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.116242][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.135264][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.159942][ T5771] veth1_macvtap: entered promiscuous mode [ 79.199855][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.212383][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.228211][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.241435][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.257104][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.257950][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.267669][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.267750][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.267778][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.307123][ T5769] veth0_macvtap: entered promiscuous mode [ 79.330839][ T5769] veth1_macvtap: entered promiscuous mode [ 79.370256][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.382261][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.393416][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.405719][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.419171][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.469569][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.482781][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.495082][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.505696][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.516020][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.527864][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.539478][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.548420][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.560902][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.573227][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.584320][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.596035][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.631471][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.648399][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.662947][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.685522][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.702646][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.717608][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.731388][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.744918][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.753086][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.789347][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.840854][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.851963][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.863279][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.906001][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.924875][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.979401][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.033613][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.455333][ T5783] Bluetooth: hci0: command tx timeout [ 80.535110][ T5783] Bluetooth: hci3: command tx timeout [ 80.535115][ T5778] Bluetooth: hci2: command tx timeout [ 80.535162][ T5783] Bluetooth: hci1: command tx timeout [ 80.624840][ T3426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.633629][ T3426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.783380][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.810714][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.749594][ T3438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.758612][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.811978][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.826428][ T3438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.014884][ T3426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.074459][ T3426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.645964][ T5783] Bluetooth: hci0: command tx timeout [ 82.652434][ T5783] Bluetooth: hci1: command tx timeout [ 82.658592][ T5783] Bluetooth: hci2: command tx timeout [ 82.664857][ T5783] Bluetooth: hci3: command tx timeout [ 82.673733][ C1] sched: RT throttling activated [ 83.964096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 84.169961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 84.178735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.214033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.222601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.373918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 84.374327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.454174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.454381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.462399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.475934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.604054][ T5874] kernel profiling enabled (shift: 9) [ 87.249562][ T9] cfg80211: failed to load regulatory.db [ 87.668322][ T5881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11'. [ 87.757836][ T5882] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.767152][ T5882] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.776451][ T5882] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.785685][ T5882] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.982667][ T5882] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.991867][ T5882] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.000972][ T5882] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.010178][ T5882] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.439218][ T5883] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.448554][ T5883] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.457764][ T5883] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.466755][ T5883] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.645102][ T5883] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.654699][ T5883] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.664064][ T5883] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.673219][ T5883] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.964328][ T5902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17'. [ 92.171186][ T5914] syz.1.21[5914]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.300974][ T5901] orangefs_mount: mount request failed with -4 [ 94.162194][ T5926] input: syz0 as /devices/virtual/input/input5 [ 94.299252][ T5927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.25'. [ 97.865836][ T5952] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.952175][ T5947] sctp: failed to load transform for md5: -2 [ 106.134045][ T5995] sctp: failed to load transform for md5: -2 [ 112.067713][ T6049] loop7: detected capacity change from 0 to 1 [ 112.325785][ T6048] loop7: detected capacity change from 1 to 0 [ 115.590155][ T6072] input: syz0 as /devices/virtual/input/input6 [ 117.679622][ T6080] sctp: failed to load transform for md5: -2 [ 124.792474][ T6120] sctp: failed to load transform for md5: -2 [ 126.808334][ T6135] loop7: detected capacity change from 0 to 1 [ 127.619938][ T6135] loop7: detected capacity change from 1 to 0 [ 128.768132][ T6149] netlink: 80 bytes leftover after parsing attributes in process `syz.0.83'. [ 128.782754][ T6149] netlink: 80 bytes leftover after parsing attributes in process `syz.0.83'. [ 128.878458][ T6151] input: syz0 as /devices/virtual/input/input8 [ 128.990221][ T6152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.84'. [ 129.446399][ T6154] Zero length message leads to an empty skb [ 129.458221][ T6154] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.964248][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 131.256094][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.331571][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.367202][ T27] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 131.377871][ T6175] netlink: 80 bytes leftover after parsing attributes in process `syz.2.92'. [ 131.393760][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.421711][ T6175] netlink: 80 bytes leftover after parsing attributes in process `syz.2.92'. [ 131.445492][ T27] usb 4-1: config 0 descriptor?? [ 133.185120][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.191459][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.334168][ T6188] netlink: 32 bytes leftover after parsing attributes in process `syz.2.96'. [ 133.697221][ T27] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 133.832823][ T27] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 134.752256][ T5809] usb 4-1: USB disconnect, device number 2 [ 135.422693][ T6211] netlink: 80 bytes leftover after parsing attributes in process `syz.1.104'. [ 135.727802][ T6213] netlink: 80 bytes leftover after parsing attributes in process `syz.1.104'. [ 137.678376][ T6231] input: syz0 as /devices/virtual/input/input14 [ 139.869273][ T6246] netlink: 80 bytes leftover after parsing attributes in process `syz.2.116'. [ 139.882668][ T6246] netlink: 80 bytes leftover after parsing attributes in process `syz.2.116'. [ 141.415741][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz.3.119'. [ 142.252820][ T6260] orangefs_mount: mount request failed with -4 [ 142.493874][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 142.724416][ T6275] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 142.738563][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 142.852027][ T27] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 142.861882][ T27] usb 3-1: config 0 has no interface number 0 [ 142.869023][ T27] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 142.924041][ T27] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 142.983885][ T27] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 142.997607][ T27] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 143.007850][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.269290][ T27] usb 3-1: config 0 descriptor?? [ 143.279673][ T27] ldusb 3-1:0.55: Interrupt in endpoint not found [ 144.939308][ T5809] usb 3-1: USB disconnect, device number 2 [ 149.725899][ T6303] input: syz0 as /devices/virtual/input/input17 [ 149.959245][ T6306] netlink: 32 bytes leftover after parsing attributes in process `syz.3.133'. [ 158.220848][ T6347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.146'. [ 158.904668][ T6346] orangefs_mount: mount request failed with -4 [ 159.623916][ T6361] input: syz0 as /devices/virtual/input/input20 [ 163.238949][ T6390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.157'. [ 163.695437][ T6397] loop7: detected capacity change from 0 to 1 [ 164.453427][ T6389] orangefs_mount: mount request failed with -4 [ 164.629776][ T6397] loop7: detected capacity change from 1 to 0 [ 165.633132][ T6410] netlink: 80 bytes leftover after parsing attributes in process `syz.2.163'. [ 165.645102][ T6410] netlink: 80 bytes leftover after parsing attributes in process `syz.2.163'. [ 168.431962][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.168'. [ 168.770096][ T6433] loop7: detected capacity change from 0 to 1 [ 169.484975][ T6426] orangefs_mount: mount request failed with -4 [ 169.636365][ T6433] loop7: detected capacity change from 1 to 0 [ 170.953220][ T6443] netlink: 80 bytes leftover after parsing attributes in process `syz.3.173'. [ 171.070785][ T6443] netlink: 80 bytes leftover after parsing attributes in process `syz.3.173'. [ 176.727360][ T6475] loop7: detected capacity change from 0 to 1 [ 176.824942][ T6475] loop7: detected capacity change from 1 to 0 [ 178.197846][ T6489] netlink: 80 bytes leftover after parsing attributes in process `syz.0.183'. [ 178.333493][ T6489] netlink: 80 bytes leftover after parsing attributes in process `syz.0.183'. [ 180.512094][ T6507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.188'. [ 181.328748][ T6505] orangefs_mount: mount request failed with -4 [ 182.518967][ T6528] loop7: detected capacity change from 0 to 1 [ 182.862477][ T6528] loop7: detected capacity change from 1 to 0 [ 183.457800][ T6535] netlink: 80 bytes leftover after parsing attributes in process `syz.2.195'. [ 183.504828][ T6535] netlink: 80 bytes leftover after parsing attributes in process `syz.2.195'. [ 183.690036][ T6539] input: syz0 as /devices/virtual/input/input26 [ 184.892030][ T6549] bridge0: port 3(syz_tun) entered blocking state [ 184.900648][ T6549] bridge0: port 3(syz_tun) entered disabled state [ 184.913905][ T6549] syz_tun: entered allmulticast mode [ 184.946497][ T6549] syz_tun: entered promiscuous mode [ 184.955818][ T6549] bridge0: port 3(syz_tun) entered blocking state [ 184.962960][ T6549] bridge0: port 3(syz_tun) entered forwarding state [ 185.829993][ T6557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.201'. [ 186.605196][ T6556] orangefs_mount: mount request failed with -4 [ 187.506723][ T6569] mmap: syz.1.204 (6569) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 188.867126][ T6577] loop7: detected capacity change from 0 to 1 [ 189.816721][ T6577] loop7: detected capacity change from 1 to 0 [ 192.405803][ T6597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.211'. [ 193.904343][ T6596] orangefs_mount: mount request failed with -4 [ 194.704355][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.710864][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.808580][ T6618] loop7: detected capacity change from 0 to 1 [ 195.148518][ T6618] loop7: detected capacity change from 1 to 0 [ 196.917278][ T6635] input: syz0 as /devices/virtual/input/input28 [ 197.104178][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 197.104894][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 197.110372][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 197.116923][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 197.243773][ T6636] netlink: 32 bytes leftover after parsing attributes in process `syz.3.223'. [ 198.964510][ T6650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.225'. [ 199.033913][ T5809] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 199.304979][ T6647] orangefs_mount: mount request failed with -4 [ 199.320778][ T5809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.331769][ T5809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.101879][ T5809] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 200.111727][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.125034][ T5809] usb 1-1: config 0 descriptor?? [ 201.614223][ T6663] sctp: failed to load transform for md5: -4 [ 201.876073][ T5809] usbhid 1-1:0.0: can't add hid device: -71 [ 201.944113][ T5809] usbhid: probe of 1-1:0.0 failed with error -71 [ 201.965636][ T5809] usb 1-1: USB disconnect, device number 2 [ 204.177723][ T6678] input: syz0 as /devices/virtual/input/input29 [ 204.433683][ T6679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.234'. [ 206.004449][ T6691] loop7: detected capacity change from 0 to 1 [ 206.943440][ T6691] loop7: detected capacity change from 1 to 0 [ 208.893774][ T5811] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 209.217270][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.272435][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.324074][ T5811] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 209.469977][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.562538][ T5811] usb 4-1: config 0 descriptor?? [ 211.349803][ T5811] usbhid 4-1:0.0: can't add hid device: -71 [ 211.385047][ T5811] usbhid: probe of 4-1:0.0 failed with error -71 [ 211.459947][ T5811] usb 4-1: USB disconnect, device number 3 [ 212.300156][ T6731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.244'. [ 213.746812][ T5087] Bluetooth: hci0: unexpected event for opcode 0x0c38 [ 228.073903][ T6804] input: syz0 as /devices/virtual/input/input30 [ 233.139433][ T6841] team0: entered promiscuous mode [ 233.183757][ T6841] team_slave_0: entered promiscuous mode [ 233.203813][ T6841] team_slave_1: entered promiscuous mode [ 233.243809][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 233.426004][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.475692][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.498532][ T27] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 233.578777][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.674554][ T27] usb 4-1: config 0 descriptor?? [ 235.293473][ T27] hid-led 0003:27B8:01ED.0002: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 235.445123][ T27] hid-led 0003:27B8:01ED.0002: ThingM blink(1) initialized [ 235.820775][ T6859] block nbd2: shutting down sockets [ 237.558746][ T27] usb 4-1: USB disconnect, device number 4 [ 237.965392][ T6877] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.094741][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 240.167424][ T6883] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.176223][ T6883] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.185234][ T6883] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.455281][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 248.759812][ T6927] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.293' sets config #256 [ 252.692008][ T6941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.719090][ T6941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.837665][ T6942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.976300][ T6953] binder: 6950:6953 ioctl c0306201 2000000002c0 returned -14 [ 255.041784][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 255.155295][ T6959] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.164487][ T6959] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.173594][ T6959] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.183846][ T6959] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.191975][ T6961] comedi comedi3: pcmmio: I/O port conflict (0x8005,32) [ 255.304317][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 256.988119][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.995906][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.289284][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.323'. [ 269.605401][ T7043] input: syz0 as /devices/virtual/input/input34 [ 270.432933][ T7048] binder: BINDER_SET_CONTEXT_MGR already set [ 270.585070][ T7048] binder: 7047:7048 ioctl 4018620d 200000004a80 returned -16 [ 270.614452][ T7051] binder: 7047:7051 ioctl c0306201 2000000002c0 returned -14 [ 277.247294][ T7094] netlink: 32 bytes leftover after parsing attributes in process `syz.3.352'. [ 278.057651][ T7097] binder: 7096:7097 ioctl c0306201 2000000002c0 returned -14 [ 281.034789][ T7107] netlink: 32 bytes leftover after parsing attributes in process `syz.0.357'. [ 284.914761][ T7132] input: syz0 as /devices/virtual/input/input38 [ 287.886661][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.367'. [ 288.157617][ T7149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.369'. [ 288.464204][ T7143] orangefs_mount: mount request failed with -4 [ 304.108154][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.387'. [ 304.127975][ T7233] netlink: 32 bytes leftover after parsing attributes in process `syz.1.397'. [ 304.160767][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.397'. [ 304.170339][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.397'. [ 305.093364][ T7230] orangefs_mount: mount request failed with -4 [ 309.393157][ T7278] input: syz0 as /devices/virtual/input/input40 [ 318.155281][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.161660][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.736805][ T7317] team0: left promiscuous mode [ 318.741726][ T7317] team_slave_0: left promiscuous mode [ 318.747322][ T7317] team_slave_1: left promiscuous mode [ 331.328952][ T7387] loop7: detected capacity change from 0 to 1 [ 332.223976][ T7387] loop7: detected capacity change from 1 to 0 [ 335.927827][ T7408] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 349.744798][ T7467] loop7: detected capacity change from 0 to 1 [ 350.493914][ T7467] loop7: detected capacity change from 1 to 0 [ 358.843871][ T7513] loop7: detected capacity change from 0 to 1 [ 359.788746][ T7513] loop7: detected capacity change from 1 to 0 [ 367.915149][ T7551] loop7: detected capacity change from 0 to 1 [ 368.286306][ T7551] loop7: detected capacity change from 1 to 0 [ 380.174263][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.180709][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.339964][ T7625] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 384.936983][ T7645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.525'. [ 384.958456][ T7645] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.968007][ T7645] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.977215][ T7645] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.986488][ T7645] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.002034][ T7645] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.011221][ T7645] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.021020][ T7645] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.031102][ T7645] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.541594][ T7650] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.550499][ T7650] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.560153][ T7650] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.569278][ T7650] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.674370][ T7650] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.683286][ T7650] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.692413][ T7650] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.701575][ T7650] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.884055][ T7704] input: syz0 as /devices/virtual/input/input50 [ 396.029715][ T7705] netlink: 32 bytes leftover after parsing attributes in process `syz.0.544'. [ 398.431208][ T7715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.546'. [ 399.242339][ T7712] orangefs_mount: mount request failed with -4 [ 404.782639][ T7754] ================================================================== [ 404.791019][ T7754] BUG: KFENCE: use-after-free read in dvb_device_open+0xca/0x370 [ 404.791019][ T7754] [ 404.801220][ T7754] Use-after-free read at 0xffff88823bc86018 (in kfence-#66): [ 404.808625][ T7754] dvb_device_open+0xca/0x370 [ 404.813386][ T7754] chrdev_open+0x5cc/0x6a0 [ 404.817931][ T7754] do_dentry_open+0x8c6/0x1500 [ 404.822746][ T7754] path_openat+0x27f1/0x3230 [ 404.827384][ T7754] do_filp_open+0x1f5/0x430 [ 404.831945][ T7754] do_sys_openat2+0x134/0x1d0 [ 404.836689][ T7754] __x64_sys_openat+0x139/0x160 [ 404.841718][ T7754] do_syscall_64+0x55/0xa0 [ 404.846174][ T7754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.852104][ T7754] [ 404.854453][ T7754] kfence-#66: 0xffff88823bc86000-0xffff88823bc8603f, size=64, cache=kmalloc-64 [ 404.854453][ T7754] [ 404.865584][ T7754] allocated by task 7724 on cpu 0 at 399.937422s: [ 404.872229][ T7754] hash_netport4_add+0x1d13/0x26e0 [ 404.877557][ T7754] hash_netport4_uadt+0xba3/0xf30 [ 404.882698][ T7754] call_ad+0x38d/0xb40 [ 404.886991][ T7754] ip_set_ad+0x81a/0x9c0 [ 404.891275][ T7754] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 404.896440][ T7754] netlink_rcv_skb+0x241/0x4d0 [ 404.901254][ T7754] nfnetlink_rcv+0x2c9/0x24a0 [ 404.905974][ T7754] netlink_unicast+0x751/0x8d0 [ 404.910773][ T7754] netlink_sendmsg+0x8d0/0xbf0 [ 404.915572][ T7754] ____sys_sendmsg+0x5ba/0x960 [ 404.920366][ T7754] ___sys_sendmsg+0x2a6/0x360 [ 404.925069][ T7754] __se_sys_sendmsg+0x1c2/0x2b0 [ 404.929945][ T7754] do_syscall_64+0x55/0xa0 [ 404.934484][ T7754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.940854][ T7754] [ 404.943284][ T7754] freed by task 7724 on cpu 1 at 400.241111s: [ 404.949653][ T7754] hash_netport4_resize+0x1895/0x1b40 [ 404.955057][ T7754] call_ad+0x454/0xb40 [ 404.959158][ T7754] ip_set_ad+0x81a/0x9c0 [ 404.963423][ T7754] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 404.968481][ T7754] netlink_rcv_skb+0x241/0x4d0 [ 404.973361][ T7754] nfnetlink_rcv+0x2c9/0x24a0 [ 404.978074][ T7754] netlink_unicast+0x751/0x8d0 [ 404.982966][ T7754] netlink_sendmsg+0x8d0/0xbf0 [ 404.987771][ T7754] ____sys_sendmsg+0x5ba/0x960 [ 404.992578][ T7754] ___sys_sendmsg+0x2a6/0x360 [ 404.997556][ T7754] __se_sys_sendmsg+0x1c2/0x2b0 [ 405.002479][ T7754] do_syscall_64+0x55/0xa0 [ 405.007122][ T7754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.013138][ T7754] [ 405.015489][ T7754] CPU: 1 PID: 7754 Comm: syz.0.560 Not tainted syzkaller #0 [ 405.022899][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.033179][ T7754] RIP: 0010:dvb_device_open+0xca/0x370 [ 405.038857][ T7754] Code: 8b 3f 4d 85 ff 0f 84 83 01 00 00 4c 89 64 24 08 4d 8d 67 18 4c 89 e5 48 c1 ed 03 80 7c 1d 00 00 74 08 4c 89 e7 e8 06 3f dd fa <4d> 8b 2c 24 4d 85 ed 0f 84 5e 01 00 00 4c 89 e8 48 c1 e8 03 80 3c [ 405.058862][ T7754] RSP: 0018:ffffc900033577f0 EFLAGS: 00010246 [ 405.065154][ T7754] RAX: 1ffffffff2ec5de7 RBX: dffffc0000000000 RCX: 0000000000000000 [ 405.073239][ T7754] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 00000000ffffffff [ 405.081337][ T7754] RBP: 1ffff11047790c03 R08: ffffffff8deff2ef R09: 1ffffffff1bdfe5d [ 405.089349][ T7754] R10: dffffc0000000000 R11: fffffbfff1bdfe5e R12: ffff88823bc86018 [ 405.097456][ T7754] R13: 1ffff9200066af0c R14: ffff88802698f3e0 R15: ffff88823bc86000 [ 405.105564][ T7754] FS: 00007f3b9a1bf6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 405.114535][ T7754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.121154][ T7754] CR2: ffff88823bc86018 CR3: 000000001df18000 CR4: 00000000003506e0 [ 405.129267][ T7754] Call Trace: [ 405.132583][ T7754] [ 405.135551][ T7754] ? do_raw_spin_unlock+0x121/0x230 [ 405.140864][ T7754] chrdev_open+0x5cc/0x6a0 [ 405.145323][ T7754] ? cd_forget+0x160/0x160 [ 405.149783][ T7754] ? fsnotify_perm+0x3ed/0x5e0 [ 405.154589][ T7754] ? cd_forget+0x160/0x160 [ 405.159072][ T7754] do_dentry_open+0x8c6/0x1500 [ 405.163893][ T7754] path_openat+0x27f1/0x3230 [ 405.168606][ T7754] ? verify_lock_unused+0x140/0x140 [ 405.173855][ T7754] ? do_filp_open+0x430/0x430 [ 405.178575][ T7754] ? lockdep_hardirqs_on+0x98/0x150 [ 405.183824][ T7754] ? __virt_addr_valid+0x18c/0x540 [ 405.189145][ T7754] do_filp_open+0x1f5/0x430 [ 405.193685][ T7754] ? vfs_tmpfile+0x490/0x490 [ 405.198403][ T7754] ? _raw_spin_unlock+0x28/0x40 [ 405.203460][ T7754] ? alloc_fd+0x58f/0x630 [ 405.207866][ T7754] do_sys_openat2+0x134/0x1d0 [ 405.212578][ T7754] ? do_sys_open+0xe0/0xe0 [ 405.217036][ T7754] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 405.223061][ T7754] ? lock_chain_count+0x20/0x20 [ 405.227945][ T7754] __x64_sys_openat+0x139/0x160 [ 405.232862][ T7754] do_syscall_64+0x55/0xa0 [ 405.237327][ T7754] ? clear_bhb_loop+0x40/0x90 [ 405.242124][ T7754] ? clear_bhb_loop+0x40/0x90 [ 405.246837][ T7754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.252825][ T7754] RIP: 0033:0x7f3b9935cfce [ 405.257269][ T7754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 405.277003][ T7754] RSP: 002b:00007f3b9a1beb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 405.285460][ T7754] RAX: ffffffffffffffda RBX: 00007f3b9a1bf6c0 RCX: 00007f3b9935cfce [ 405.293545][ T7754] RDX: 0000000000000e82 RSI: 00007f3b9a1bec00 RDI: ffffffffffffff9c [ 405.301567][ T7754] RBP: 00007f3b9a1bec00 R08: 0000000000000000 R09: 0000000000000000 [ 405.309653][ T7754] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 405.317673][ T7754] R13: 00007f3b99616128 R14: 00007f3b99616090 R15: 00007ffdb3036158 [ 405.325759][ T7754] [ 405.328799][ T7754] ================================================================== [ 405.336894][ T7754] Kernel panic - not syncing: KFENCE: panic_on_warn set ... [ 405.344785][ T7754] CPU: 1 PID: 7754 Comm: syz.0.560 Not tainted syzkaller #0 [ 405.352109][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.362197][ T7754] Call Trace: [ 405.365514][ T7754] [ 405.368655][ T7754] dump_stack_lvl+0x18c/0x250 [ 405.373482][ T7754] ? show_regs_print_info+0x20/0x20 [ 405.378747][ T7754] ? load_image+0x400/0x400 [ 405.383310][ T7754] panic+0x2dc/0x730 [ 405.387352][ T7754] ? bpf_jit_dump+0xd0/0xd0 [ 405.392016][ T7754] check_panic_on_warn+0x84/0xa0 [ 405.397094][ T7754] kfence_report_error+0x77b/0xa50 [ 405.402281][ T7754] ? kfence_print_stack+0x2c0/0x2c0 [ 405.407643][ T7754] ? dvb_device_open+0xca/0x370 [ 405.412890][ T7754] ? chrdev_open+0x5cc/0x6a0 [ 405.417776][ T7754] ? do_dentry_open+0x8c6/0x1500 [ 405.422835][ T7754] ? path_openat+0x27f1/0x3230 [ 405.427642][ T7754] ? do_filp_open+0x1f5/0x430 [ 405.432437][ T7754] ? do_sys_openat2+0x134/0x1d0 [ 405.437426][ T7754] ? __x64_sys_openat+0x139/0x160 [ 405.442515][ T7754] ? do_syscall_64+0x55/0xa0 [ 405.447261][ T7754] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.453443][ T7754] ? _raw_spin_lock+0x40/0x40 [ 405.458189][ T7754] kfence_handle_page_fault+0x52c/0x700 [ 405.463802][ T7754] ? trim_init_extable+0x6f0/0x6f0 [ 405.469089][ T7754] ? rcu_guarded_free+0x50/0x50 [ 405.474004][ T7754] ? search_bpf_extables+0x36b/0x3c0 [ 405.479348][ T7754] ? search_bpf_extables+0x26/0x3c0 [ 405.484613][ T7754] page_fault_oops+0x1a3/0x930 [ 405.489425][ T7754] ? __mutex_trylock_common+0x159/0x260 [ 405.495014][ T7754] ? ex_get_fixup_type+0x70/0x70 [ 405.499999][ T7754] ? kernelmode_fixup_or_oops+0xf0/0xf0 [ 405.505680][ T7754] ? is_prefetch+0x451/0x690 [ 405.510409][ T7754] ? page_fault_oops+0x930/0x930 [ 405.515393][ T7754] ? __bad_area_nosemaphore+0xaa/0x690 [ 405.520993][ T7754] exc_page_fault+0xac/0x100 [ 405.525622][ T7754] ? mutex_lock_nested+0x20/0x20 [ 405.530700][ T7754] asm_exc_page_fault+0x26/0x30 [ 405.535591][ T7754] RIP: 0010:dvb_device_open+0xca/0x370 [ 405.541180][ T7754] Code: 8b 3f 4d 85 ff 0f 84 83 01 00 00 4c 89 64 24 08 4d 8d 67 18 4c 89 e5 48 c1 ed 03 80 7c 1d 00 00 74 08 4c 89 e7 e8 06 3f dd fa <4d> 8b 2c 24 4d 85 ed 0f 84 5e 01 00 00 4c 89 e8 48 c1 e8 03 80 3c [ 405.561130][ T7754] RSP: 0018:ffffc900033577f0 EFLAGS: 00010246 [ 405.567244][ T7754] RAX: 1ffffffff2ec5de7 RBX: dffffc0000000000 RCX: 0000000000000000 [ 405.575337][ T7754] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 00000000ffffffff [ 405.583340][ T7754] RBP: 1ffff11047790c03 R08: ffffffff8deff2ef R09: 1ffffffff1bdfe5d [ 405.591443][ T7754] R10: dffffc0000000000 R11: fffffbfff1bdfe5e R12: ffff88823bc86018 [ 405.599745][ T7754] R13: 1ffff9200066af0c R14: ffff88802698f3e0 R15: ffff88823bc86000 [ 405.607878][ T7754] ? do_raw_spin_unlock+0x121/0x230 [ 405.613152][ T7754] chrdev_open+0x5cc/0x6a0 [ 405.617615][ T7754] ? cd_forget+0x160/0x160 [ 405.622605][ T7754] ? fsnotify_perm+0x3ed/0x5e0 [ 405.627430][ T7754] ? cd_forget+0x160/0x160 [ 405.631992][ T7754] do_dentry_open+0x8c6/0x1500 [ 405.636922][ T7754] path_openat+0x27f1/0x3230 [ 405.641594][ T7754] ? verify_lock_unused+0x140/0x140 [ 405.646942][ T7754] ? do_filp_open+0x430/0x430 [ 405.651675][ T7754] ? lockdep_hardirqs_on+0x98/0x150 [ 405.656944][ T7754] ? __virt_addr_valid+0x18c/0x540 [ 405.662113][ T7754] do_filp_open+0x1f5/0x430 [ 405.666761][ T7754] ? vfs_tmpfile+0x490/0x490 [ 405.671521][ T7754] ? _raw_spin_unlock+0x28/0x40 [ 405.676426][ T7754] ? alloc_fd+0x58f/0x630 [ 405.680920][ T7754] do_sys_openat2+0x134/0x1d0 [ 405.685651][ T7754] ? do_sys_open+0xe0/0xe0 [ 405.690121][ T7754] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 405.696609][ T7754] ? lock_chain_count+0x20/0x20 [ 405.701786][ T7754] __x64_sys_openat+0x139/0x160 [ 405.706840][ T7754] do_syscall_64+0x55/0xa0 [ 405.711464][ T7754] ? clear_bhb_loop+0x40/0x90 [ 405.716273][ T7754] ? clear_bhb_loop+0x40/0x90 [ 405.720957][ T7754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.727078][ T7754] RIP: 0033:0x7f3b9935cfce [ 405.731513][ T7754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 405.751332][ T7754] RSP: 002b:00007f3b9a1beb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 405.760021][ T7754] RAX: ffffffffffffffda RBX: 00007f3b9a1bf6c0 RCX: 00007f3b9935cfce [ 405.768016][ T7754] RDX: 0000000000000e82 RSI: 00007f3b9a1bec00 RDI: ffffffffffffff9c [ 405.776117][ T7754] RBP: 00007f3b9a1bec00 R08: 0000000000000000 R09: 0000000000000000 [ 405.784092][ T7754] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 405.792163][ T7754] R13: 00007f3b99616128 R14: 00007f3b99616090 R15: 00007ffdb3036158 [ 405.800355][ T7754] [ 405.803953][ T7754] Kernel Offset: disabled [ 405.808906][ T7754] Rebooting in 86400 seconds..