last executing test programs: 16.873065301s ago: executing program 5 (id=6): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x6528, 0x97, 0x1, 0x4}, {0x28d, 0x6, 0x81, 0x1}]}) remap_file_pages(&(0x7f000053f000/0x1000)=nil, 0x3f, 0x0, 0x20, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000001c0)={0x2, @sdr={0x3234564e, 0x81}}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000980)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x401, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x28}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40042, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) sched_setscheduler(r3, 0x2, &(0x7f00000004c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000005c0), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000600)=0x80000006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r4, &(0x7f0000000640), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680), 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0x6, &(0x7f00000007c0)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x66}, @exit]}, &(0x7f0000000800)='GPL\x00', 0x4, 0xc3, &(0x7f0000000c80)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) newfstatat(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x800) syz_mount_image$vfat(&(0x7f0000000e40), &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYBLOB="0e756ae02c8b41209e0e3a0b59f9397944d77072f565944f5227713955b4b5bbb44d89f444a9a9f51b088506be4cd6372c721e6505e6954a4514c0f17ba2ef8a56dd23416184b1c3675e0fdd0e6f4e426adcb7f88cb62f2123bd58c827ab8c9c821dad2bf93eebc0a1d2fb541e8a3aceb362c808eb3e9ac4e7ed9c3c125e411d5ace0322d664dd43", @ANYRESDEC=r2, @ANYRESOCT], 0x4, 0x2cc, &(0x7f00000010c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000013c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) 16.806046651s ago: executing program 1 (id=14): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000380)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xa, 0x3de, 0x9}) 14.965772705s ago: executing program 1 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) connect$inet6(r3, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x7, r6, 0x1, 0x6, 0x6, @random="47a50fe8541a"}, 0x14) 11.814893314s ago: executing program 1 (id=18): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000600), 0x1, 0x73a, &(0x7f0000000bc0)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") syz_mount_image$fuse(0x0, &(0x7f0000001300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001400)='./bus\x00', 0x870499, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480), 0x804008, &(0x7f00000014c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 10.307974771s ago: executing program 3 (id=21): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000540)={0x15, 0x110, 0xfa00, {r4, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) 10.144052252s ago: executing program 4 (id=23): mknodat$md(0xffffffffffffff9c, &(0x7f00000004c0)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000500)='./md0\x00', 0x2, 0x0) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) lseek(0xffffffffffffffff, 0x101, 0x1) ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0) 9.061765811s ago: executing program 3 (id=24): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000640)="05", 0x1, 0x20000005, &(0x7f0000000680)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 8.978889748s ago: executing program 1 (id=25): prlimit64(0x0, 0xe, &(0x7f0000001400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001440)=0x8) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000014c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000015c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001600), 0x10106, 0x2, 0x0) setrlimit(0xd9584c7498e0b68c, &(0x7f0000000080)={0x8, 0x32}) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x401, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0x9c}}, 0x0) 8.640365773s ago: executing program 4 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) recvmmsg(r0, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}, 0x2bb3}, {{0x0, 0x0, 0x0}, 0x5f56}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000c40)=""/118, 0x76}, {&(0x7f0000000d00)=""/208, 0xd0}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/174, 0xae}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000e00)=""/206, 0xce}, {&(0x7f0000000bc0)=""/75, 0x4b}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000980)=""/180, 0xb4}], 0xc}}, {{0x0, 0x0, 0x0}, 0xa20}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}], 0x7, 0x40002000, 0x0) 6.825942851s ago: executing program 1 (id=30): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@private2, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffbff9, 0x0, 0x0, 0x2, 0x23, 0x3, 0x401}, {0x5, 0xb}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x640100fd}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xf9, 0x3, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x810) 6.560444929s ago: executing program 4 (id=31): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000600)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TCFLSH(r0, 0x800455c9, 0x4000000) 6.386134218s ago: executing program 0 (id=33): mmap$IORING_OFF_SQ_RING(0x0, 0x8001, 0x300000a, 0x5d032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000200081dc27bd7000fedbdf2501fa00007e0000001f000000080017004e224e24"], 0x24}}, 0x240448c8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x40008c0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001e", @ANYBLOB='\x00\x00\x00\x00'], 0x30}}, 0x0) close(r0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getresuid(&(0x7f0000000500), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000580)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000005c0)={0x28, 0x6, r3, 0x0, &(0x7f0000409000/0x2000)=nil, 0x2000, 0x5179}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000600)={0x28, 0x4, r3, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000640)={0x28, 0x5, r3, r3, 0xffff, 0x20000000000539, 0x3ffd}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000140)=0x7) mount$nfs(0x0, &(0x7f0000000180)='./mnt\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000002c0), 0x651, 0x0) ioprio_set$pid(0x1, r4, 0x4007) recvmmsg(r5, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000002d0001002dbd7000ffdb472504"], 0x14}], 0x1}, 0x4000000) 6.196572022s ago: executing program 2 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000a40)='proc\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='14', 0x2) setxattr$incfs_metadata(0x0, &(0x7f00000000c0), &(0x7f0000000100)="c180ed", 0x3, 0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000380)={r1, @in6={{0xa, 0x3, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}}}, &(0x7f0000000440)=0x49) 6.103476672s ago: executing program 1 (id=35): openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='tracefs\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x80002c1, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) socket$nl_route(0x10, 0x3, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000180081064a81f782da02b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a10016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b", 0x7a}], 0x1}, 0x48084) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') 5.793415058s ago: executing program 5 (id=36): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002480)=@ipv4_delrule={0x24, 0x21, 0x2, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @loopback}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000002580)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002700)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000002740)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000027c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000002840), 0x651, 0x0) recvmmsg(r3, &(0x7f0000002880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000028c0)=0x6) renameat2(0xffffffffffffff9c, &(0x7f0000002900)='./file0\x00', 0xffffffffffffffff, &(0x7f0000002940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002a40)={0x1, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203fdff00000000e500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e1"], &(0x7f0000003540)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000003580), 0x8, 0x10, &(0x7f00000035c0), 0x10}, 0x94) setresgid(0xee00, 0xee01, 0x0) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x300127) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r5, &(0x7f00000023c0)={0x18, 0x0, r6, {0x8000}}, 0x18) syz_emit_vhci(&(0x7f00000024c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x406}}}, 0x7) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) socket$netlink(0x10, 0x3, 0x0) 5.028973852s ago: executing program 0 (id=37): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000780)) 4.949900842s ago: executing program 3 (id=38): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r4) getsockname$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000680)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000006c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6}) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 4.628195378s ago: executing program 2 (id=39): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2d41, 0xd5) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./sec\x00', &(0x7f0000000680)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f000000a380)={0x2020}, 0x2020) 4.349115879s ago: executing program 0 (id=40): syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r0 = getpid() ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000a80)={0x0, 0x52424752, 0xf00, 0x870, 0x2, @discrete={0xb, 0x7}}) sched_setscheduler(r0, 0x2, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000840), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x6) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='cmdline\x00') capset(&(0x7f0000000bc0)={0x20071026}, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) preadv(r3, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/4115, 0x1013}], 0x1, 0x16, 0xfffffff9) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2.959735753s ago: executing program 4 (id=41): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000080)=0x400) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'veth0_vlan\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040), 0x40400, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statfs(&(0x7f0000000040)='./file0\x00', 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 2.958422833s ago: executing program 2 (id=53): r0 = dup(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020) 2.729843143s ago: executing program 3 (id=42): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001014d9ec29bd7000fcd9df250800030001000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010075c344e00086ca1472d0643e5dd3d973ef10e26483a132531b000a50000000090a01040000000000000000000000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc0c815da9088778da0283000980080001400000000108000840000033090e2148d9368efb987c701031776c484e6cebea8540bee2194f8c1c44bc0963dfbde3983d76e6508f55627cf692ffdb780a29bd98b7e64d1382ae10d4e7e11ab764dd5a010c7ae1fd49227f92afb5e45d32bc16d4fca16b3f26442f30689f4d17395348a1ca95b7957d086cd58abcf758910215d24239a783f54793d1e1200f9a851276e3789a00110d94fc9d575b7472c8502d39a604477d3a142e91910bb0cb352b9a8a066908f7c779d9e163d1bb3a94e1e10a4aa7fbd8e4d2b951321778194c2542106f7f66e42b24eb1a1e8ee28392fd36b2baa047fd704409d125e9356516d656cc67ea98aa628de0bf42b4ff11dc85899949bdb7313acc4f38f2b06183a43c70818bb81eb3e2180a262f8c6f1159eb3fcc3c62f38242d06ad0a1abc30098d00ab6fa51b6f435f5fbaacbae6b6f82d963e8aa8f91da4f90ef668d8d5c36ca5b3332c4588a10242957e499f09a3a175af35ddfd60acf6864d9903d2ce63a212c01593607183b01091fe66b9c9ccdd318c2d6a14f69359b6a906ec8162048f70ec54b5f878043f60a44e7087f62fffc4e914dc92cc0d7fd3b5b481a46fd020f808f873546d640233651f9c6595f9042aea453b0382c09420f59986a28e248ee4766e8fde0a77a2b0246225cb74063e91d75cd1ff9a75de02829c6a557478fa6093741efe361438d6a98838c931ee3c22236845d19a289688b02ec10da9f8b5f4a5823afa82b0685f45c1d5c10b5f17e16406f95f7a4478d31c00326d55d1b24e5e0f7977e18269171f140a045eccbdf949945799497229401c858df5bad39f8ed06675fb99a28d9e839c45e0c325c60f3bb397370a6568bd950e63c3b1690dea93f94c061ebe3728594357fbd1382c62980340a49fe1265f6b2e52c2e6a6ce6d240dee1aff5125ee2369017deeb5e9e6d5dbd0008c8734b124f3f69acf040a54c0213d70b21fac75c8b06718cd69e1100ada7320d4451f1fc2af81b31800d6bf3283a4c0d2256bde1cab74661b875df2d8da3fa37849d386e"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{&(0x7f0000000f40)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="9c", 0x1}], 0x1}}, {{&(0x7f0000001000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001040)=[{&(0x7f0000001080)}], 0x1}}, {{&(0x7f00000010c0)={0x2, 0x5e21, @private=0xa010102}, 0x10, &(0x7f0000001100)=[{&(0x7f0000001140)='\x00', 0x1}], 0x1, &(0x7f0000001180)=ANY=[@ANYRESOCT=r2], 0x80}}], 0x3, 0x48000) close(0x3) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$kcm(r2, &(0x7f0000001200)={&(0x7f0000001240)=@phonet, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001300)=""/71, 0x47}, {&(0x7f0000001380)=""/184, 0xb8}], 0x2, &(0x7f0000001440)=""/193, 0xc1}, 0xc4c70aa7164cdfdd) bind$bt_hci(r6, &(0x7f0000001540)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000001580)="0f0000000401666f6f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006261720000000000000000", 0x10a) sendmsg$nl_route(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newlink={0x48, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000001780)={0x0, @local, @private}, &(0x7f00000017c0)=0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001800)={@ifindex=r7, 0x3e, 0x1, 0x4, &(0x7f0000001840)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001880)=[0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000f1401"], 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x8) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r8], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @empty}, 0x10) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000800)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x9, 0x0, 0x2b}, @eth={@broadcast, @broadcast, @void, {@mpls_mc={0x8848, {[{0x9, 0x0, 0x1}, {0x6}, {0x2}, {0x3ff, 0x0, 0x1}, {0x81}], @ipv6=@icmpv6={0x9, 0x6, 'CSp', 0x290, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@hopopts={0x0, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0xd}, @generic={0x69, 0x3b, "dfce268143b0dc0776f5eb3b918e150ca6ce8375fc034fe1bea05ebf53d34afc2bc1adda11f71f9dd9a2165843bf84d6bbf5839bcdc702759cf0bd"}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x80, 0x10, "48fcd8b299a9ffc135234200b4e08865"}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim]}, @srh={0x21, 0x8, 0x4, 0x4, 0x5, 0x0, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x2e, 0x8, 0x4, 0x4, 0x0, 0xe0, 0x3, [@dev={0xfe, 0x80, '\x00', 0x1c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @rand_addr=' \x01\x00']}, @routing={0x3b, 0xc, 0x1, 0xfa, 0x0, [@rand_addr=' \x01\x00', @mcast1, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @loopback]}, @fragment={0x3a, 0x0, 0x6, 0x0, 0x0, 0x7, 0x66}, @routing={0x73, 0x2, 0x2, 0xc9, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x62, 0x4, 0x4, 0x2, 0x9, 0x50, 0x0, [@mcast1, @mcast2]}], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x0, "807937998e42b8f844914b9271286202fb50621dbf3b01edcb7cf0f2cde5e0c09d935db41107dfa0e535bd680cd2b0a9c70e38e9009e5597592816cf61f4627e7bfe58844e7cf2c7f932e68a1211608158136904b48ef1096b32cfda608d3103edb60c320561e28702225b668ffe3b8a3c71a2e688f34c44483cdf6728befe20e924808a48002e2f031f64cc286de875b668e550e5a0db97dba29b7ecfa209aec041c1e428c8671db08ff8208e6bf61214e5a6d32af013afca0313ae273e6675888e7a64646c5b74c9c7c0295451a4f7dfd556ebc250295caee989d241456a59"}}}}}}}}, 0x2e8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r0, &(0x7f0000000180)=' \x01\x00', 0x200000, &(0x7f0000000200)={@align=0x7, {0x200, 0x101, 0x34e2}}, 0x3, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x1}) 2.231839129s ago: executing program 5 (id=43): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x5, 0x4) 1.780313281s ago: executing program 0 (id=44): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000840)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.690421799s ago: executing program 2 (id=45): socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x18, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f0000000780), &(0x7f00000007c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r4, r2, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000840)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x1c, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x5, 0x1, [{0x5, 0x0, 0x0, @mcast1}]}}}}}}, 0x0) 1.328464264s ago: executing program 5 (id=46): openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='15', 0x2) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.168691778s ago: executing program 2 (id=47): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x78, 0xa02) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000580)={0x0, 0x595f, 0x40000, 0x0, 0x51}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000000740)=[{&(0x7f0000001640)=""/4096, 0x1000}, {0x0}], 0x2, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x7211, 0x6498, 0xc, 0x0, 0x0) 1.082800584s ago: executing program 4 (id=48): socket$nl_xfrm(0x10, 0x3, 0x6) socket$phonet(0x23, 0x2, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x392, &(0x7f0000000200)="$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") socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mtd(&(0x7f00000005c0), 0x0, 0x8000) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000780)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = gettid() tkill(r2, 0x21) 868.671794ms ago: executing program 5 (id=49): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 686.235075ms ago: executing program 0 (id=50): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000440)=0x3, 0x4) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x15e, &(0x7f0000000480)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [{0x4, 0x20, "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"}]}}}}}}, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875) 675.068507ms ago: executing program 2 (id=51): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000640)="05", 0x1, 0x20000005, &(0x7f0000000680)={0x11, 0x7, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 665.438091ms ago: executing program 3 (id=52): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket(0x2a, 0x2, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018010000756c6c2500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r2) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f00000005c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r6, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r6, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000008c0)={'wg2\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000900)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x4c, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xc, 0xfff1}, {}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x13, 0x19}}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x4c}}, 0x4008000) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000b40)={@empty, @multicast1, 0x0}, &(0x7f0000000b80)=0xc) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c40)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c80)={0x1c8, r4, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000540)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x2, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a000005100000095000000000000006c19f2d89d9939341cc4eef1b9f2f30af44a8c8e8c65a9b0ef11920eea78ec8a3c3dd5b99170e7a6c28d472a7a0c937946fa1d56f487a830e545e9309da00f0201fc00"/117], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000300)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0xffffff04, 0x61e5cc96}, 0x22) 240.75223ms ago: executing program 4 (id=54): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2d41, 0xd5) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./sec\x00', &(0x7f0000000680)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f000000a380)={0x2020}, 0x2020) 204.322815ms ago: executing program 0 (id=55): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r4) getsockname$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000680)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000006c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6}) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 0s ago: executing program 3 (id=56): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000940)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000009c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x6) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x6000}, 0x18, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000200)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000300)={0x210a, r4}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) landlock_restrict_self(r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 64.906546][ T5291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.920849][ T5291] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. syzkaller login: [ 92.310552][ T9] cfg80211: failed to load regulatory.db [ 94.308214][ T5616] cgroup: Unknown subsys name 'net' [ 94.389171][ T5616] cgroup: Unknown subsys name 'cpuset' [ 94.398818][ T5616] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.044132][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.888698][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.891531][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.893574][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.895942][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.897011][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.897690][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.898813][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.899508][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.902878][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.918176][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.924363][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.932377][ T4947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.932986][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.978388][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.986392][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.030249][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.033017][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.033692][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.035612][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.045066][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.045779][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.048575][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.063069][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.084431][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.085942][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.090129][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 99.091118][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 99.100468][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.100733][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 99.101492][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.457865][ T5631] rdma_rxe: Failed to create IPv4 UDP tunnel [ 100.477786][ T5636] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.485754][ T5636] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.499771][ T5636] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.538193][ T5630] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 100.784835][ T5635] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 100.786196][ T5644] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 100.832417][ T5632] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 100.997762][ T5636] infiniband rxe0: set active [ 100.997794][ T5636] infiniband rxe0: added rxe_eth0 [ 100.999388][ T5634] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.025229][ T5633] Bluetooth: hci0: command tx timeout [ 101.025403][ T53] Bluetooth: hci1: command tx timeout [ 101.026107][ T5639] Bluetooth: hci2: command tx timeout [ 101.051818][ T5636] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 101.051906][ T5636] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 101.051984][ T5636] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 101.104308][ T5639] Bluetooth: hci4: command tx timeout [ 101.148835][ T5636] RDS/IB: rxe0: added [ 101.149187][ T5636] smc: adding ib device rxe0 with port count 1 [ 101.149294][ T5636] smc: ib device rxe0 port 1 has no pnetid [ 101.184815][ T5639] Bluetooth: hci3: command tx timeout [ 101.184930][ T5633] Bluetooth: hci5: command tx timeout [ 101.206693][ T5634] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.207263][ T5636] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.656177][ T5636] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.959724][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.960587][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.960752][ T5630] bridge_slave_0: entered allmulticast mode [ 101.962956][ T5630] bridge_slave_0: entered promiscuous mode [ 102.045832][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.045988][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.046132][ T5630] bridge_slave_1: entered allmulticast mode [ 102.047848][ T5630] bridge_slave_1: entered promiscuous mode [ 102.065031][ T5636] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.166808][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.166931][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.167083][ T5631] bridge_slave_0: entered allmulticast mode [ 102.170405][ T5631] bridge_slave_0: entered promiscuous mode [ 102.177464][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.179139][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.179295][ T5631] bridge_slave_1: entered allmulticast mode [ 102.182821][ T5631] bridge_slave_1: entered promiscuous mode [ 102.256625][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.360908][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.414620][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.457871][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.458075][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.458232][ T5644] bridge_slave_0: entered allmulticast mode [ 102.460109][ T5644] bridge_slave_0: entered promiscuous mode [ 102.464306][ T5636] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.473150][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.532860][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.533012][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.533169][ T5644] bridge_slave_1: entered allmulticast mode [ 102.536216][ T5644] bridge_slave_1: entered promiscuous mode [ 102.558962][ T5630] team0: Port device team_slave_0 added [ 102.628115][ T5630] team0: Port device team_slave_1 added [ 102.647089][ T5631] team0: Port device team_slave_0 added [ 102.650891][ T5631] team0: Port device team_slave_1 added [ 102.651102][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.651215][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.651639][ T5635] bridge_slave_0: entered allmulticast mode [ 102.653937][ T5635] bridge_slave_0: entered promiscuous mode [ 102.677623][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.722432][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.722632][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.723068][ T5635] bridge_slave_1: entered allmulticast mode [ 102.726464][ T5635] bridge_slave_1: entered promiscuous mode [ 102.741507][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.758970][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.758996][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.759041][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.765248][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.765269][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.765313][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.860779][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.860826][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.860871][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.912309][ T5644] team0: Port device team_slave_0 added [ 102.921765][ T5644] team0: Port device team_slave_1 added [ 102.942320][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.942342][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.942388][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.948419][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.035058][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.057302][ T5630] hsr_slave_0: entered promiscuous mode [ 103.059681][ T5630] hsr_slave_1: entered promiscuous mode [ 103.061362][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.061382][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.061422][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.062620][ T5636] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.064048][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.064068][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.064121][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.106255][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.106437][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.106603][ T5632] bridge_slave_0: entered allmulticast mode [ 103.110235][ T5633] Bluetooth: hci2: command tx timeout [ 103.110274][ T5633] Bluetooth: hci1: command tx timeout [ 103.114508][ T5633] Bluetooth: hci0: command tx timeout [ 103.115840][ T5632] bridge_slave_0: entered promiscuous mode [ 103.185169][ T5639] Bluetooth: hci4: command tx timeout [ 103.242722][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.242845][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.243287][ T5632] bridge_slave_1: entered allmulticast mode [ 103.247125][ T5632] bridge_slave_1: entered promiscuous mode [ 103.265966][ T5639] Bluetooth: hci3: command tx timeout [ 103.275133][ T5639] Bluetooth: hci5: command tx timeout [ 103.307576][ T5635] team0: Port device team_slave_0 added [ 103.367263][ T5631] hsr_slave_0: entered promiscuous mode [ 103.368502][ T5631] hsr_slave_1: entered promiscuous mode [ 103.369416][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 103.369441][ T5631] Cannot create hsr debugfs directory [ 103.375282][ T5635] team0: Port device team_slave_1 added [ 103.399172][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.491501][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.507770][ T5644] hsr_slave_0: entered promiscuous mode [ 103.508662][ T5644] hsr_slave_1: entered promiscuous mode [ 103.509286][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 103.509311][ T5644] Cannot create hsr debugfs directory [ 103.526959][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.526981][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.527024][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.529911][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.529932][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.529975][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.658022][ T5632] team0: Port device team_slave_0 added [ 103.704589][ T5632] team0: Port device team_slave_1 added [ 103.713899][ T5636] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.850612][ T5635] hsr_slave_0: entered promiscuous mode [ 103.851842][ T5635] hsr_slave_1: entered promiscuous mode [ 103.852767][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 103.852791][ T5635] Cannot create hsr debugfs directory [ 103.873995][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.874021][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.874064][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.880795][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.880817][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.880860][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.227279][ T5632] hsr_slave_0: entered promiscuous mode [ 104.228331][ T5632] hsr_slave_1: entered promiscuous mode [ 104.228990][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 104.229016][ T5632] Cannot create hsr debugfs directory [ 104.442951][ T5630] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.459407][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.460962][ T5630] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.468147][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.497762][ T5630] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.501415][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.551013][ T5630] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.556287][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.752515][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.773179][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.793997][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.805340][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.830130][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.842509][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.843795][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.873031][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.021128][ T5644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.028933][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.030218][ T5644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.037231][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.039743][ T5644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.055793][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.083783][ T5644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.092877][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.135375][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.135493][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.135691][ T5636] bridge_slave_0: entered allmulticast mode [ 105.137609][ T5636] bridge_slave_0: entered promiscuous mode [ 105.141065][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.141184][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.141625][ T5636] bridge_slave_1: entered allmulticast mode [ 105.143481][ T5636] bridge_slave_1: entered promiscuous mode [ 105.196125][ T5639] Bluetooth: hci0: command tx timeout [ 105.196174][ T5639] Bluetooth: hci1: command tx timeout [ 105.196209][ T5639] Bluetooth: hci2: command tx timeout [ 105.231184][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.251084][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.264709][ T5633] Bluetooth: hci4: command tx timeout [ 105.318230][ T5636] team0: Port device team_slave_0 added [ 105.321811][ T5636] team0: Port device team_slave_1 added [ 105.344706][ T5639] Bluetooth: hci3: command tx timeout [ 105.344855][ T5633] Bluetooth: hci5: command tx timeout [ 105.392476][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.392502][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.392543][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.422585][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.438793][ T5635] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.460100][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.463088][ T5635] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.480028][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.491408][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.491433][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.491477][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.496596][ T5635] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.507726][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.562266][ T5635] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.573819][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.642239][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.698278][ T5636] hsr_slave_0: entered promiscuous mode [ 105.699228][ T5636] hsr_slave_1: entered promiscuous mode [ 105.699894][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 105.699919][ T5636] Cannot create hsr debugfs directory [ 105.779637][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.780631][ T5632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.786454][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.787553][ T5632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.797291][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.848591][ T5632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.852708][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.857843][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.897071][ T5632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.900896][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.931046][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.931325][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.984926][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.985058][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.987693][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.987818][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.093092][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.093213][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.219453][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.322951][ T5636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.329145][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.330224][ T5636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.335166][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.358709][ T5636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.362455][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.369253][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.379958][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.395794][ T5636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.399606][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.421611][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.421726][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.511695][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.511830][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.540660][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.632891][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.633016][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.684127][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.701831][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.701953][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.859989][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.909351][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.909450][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.010032][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.010169][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.219209][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.266233][ T5633] Bluetooth: hci2: command tx timeout [ 107.266282][ T5633] Bluetooth: hci1: command tx timeout [ 107.266316][ T5633] Bluetooth: hci0: command tx timeout [ 107.345173][ T5639] Bluetooth: hci4: command tx timeout [ 107.410283][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.426377][ T5639] Bluetooth: hci5: command tx timeout [ 107.426420][ T5639] Bluetooth: hci3: command tx timeout [ 107.463645][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.463776][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.519842][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.519973][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.755786][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.830743][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.070983][ T5631] veth0_vlan: entered promiscuous mode [ 108.163221][ T5631] veth1_vlan: entered promiscuous mode [ 108.379384][ T5631] veth0_macvtap: entered promiscuous mode [ 108.423274][ T5631] veth1_macvtap: entered promiscuous mode [ 108.576875][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.629548][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.652915][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.745124][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.787564][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.906980][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.907627][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.263205][ T5644] veth0_vlan: entered promiscuous mode [ 109.280609][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.292349][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.292381][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.340623][ T5630] veth0_vlan: entered promiscuous mode [ 109.350440][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.406366][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.406402][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.410386][ T5644] veth1_vlan: entered promiscuous mode [ 109.434104][ T5630] veth1_vlan: entered promiscuous mode [ 109.739188][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.743817][ T5644] veth0_macvtap: entered promiscuous mode [ 109.760626][ T5630] veth0_macvtap: entered promiscuous mode [ 109.783421][ T5631] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.811554][ T5644] veth1_macvtap: entered promiscuous mode [ 109.834143][ T5632] veth0_vlan: entered promiscuous mode [ 109.864921][ T5630] veth1_macvtap: entered promiscuous mode [ 109.954786][ T5865] FAULT_INJECTION: forcing a failure. [ 109.954786][ T5865] name failslab, interval 1, probability 0, space 0, times 1 [ 109.954839][ T5865] CPU: 1 UID: 0 PID: 5865 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 109.954884][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 109.954909][ T5865] Call Trace: [ 109.954923][ T5865] [ 109.954938][ T5865] dump_stack_lvl+0x100/0x190 [ 109.955039][ T5865] should_fail_ex.cold+0x5/0xa [ 109.955135][ T5865] should_failslab+0xc2/0x120 [ 109.955222][ T5865] __kmalloc_noprof+0xfc/0x840 [ 109.955295][ T5865] ? tomoyo_encode2+0xfb/0x3c0 [ 109.955399][ T5865] tomoyo_encode2+0xfb/0x3c0 [ 109.955489][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.955575][ T5865] tomoyo_unix_entry+0x343/0x640 [ 109.955671][ T5865] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 109.955769][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.955874][ T5865] tomoyo_socket_bind_permission+0x307/0x350 [ 109.955967][ T5865] ? __pfx_tomoyo_socket_bind_permission+0x10/0x10 [ 109.956061][ T5865] ? __might_fault+0xc5/0x140 [ 109.956168][ T5865] ? __might_fault+0xc5/0x140 [ 109.956284][ T5865] security_socket_bind+0xd3/0x230 [ 109.956356][ T5865] __sys_bind+0x140/0x260 [ 109.956429][ T5865] ? __pfx___sys_bind+0x10/0x10 [ 109.956535][ T5865] __x64_sys_bind+0x72/0xb0 [ 109.956603][ T5865] ? lockdep_hardirqs_on+0x7d/0x110 [ 109.956685][ T5865] do_syscall_64+0x123/0x790 [ 109.956768][ T5865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.956830][ T5865] RIP: 0033:0x7fba4139f559 [ 109.956872][ T5865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.956934][ T5865] RSP: 002b:00007fba4234e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 109.956991][ T5865] RAX: ffffffffffffffda RBX: 00007fba41625fa0 RCX: 00007fba4139f559 [ 109.957029][ T5865] RDX: 000000000000006e RSI: 0000200000000300 RDI: 0000000000000004 [ 109.957065][ T5865] RBP: 00007fba41436b50 R08: 0000000000000000 R09: 0000000000000000 [ 109.957102][ T5865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.957142][ T5865] R13: 00007fba41626038 R14: 00007fba41625fa0 R15: 00007fffca6c2988 [ 109.957210][ T5865] [ 109.959951][ T5632] veth1_vlan: entered promiscuous mode [ 109.988089][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.144007][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.166822][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.243633][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.342879][ T5636] veth0_vlan: entered promiscuous mode [ 110.355251][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.355325][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.355384][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.355442][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.362804][ T5632] veth0_macvtap: entered promiscuous mode [ 111.384537][ T155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.384628][ T155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.384687][ T155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.384758][ T155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.778894][ T5635] veth0_vlan: entered promiscuous mode [ 112.792695][ T5635] veth1_vlan: entered promiscuous mode [ 112.908789][ T5635] veth0_macvtap: entered promiscuous mode [ 112.924854][ T5635] veth1_macvtap: entered promiscuous mode [ 112.953819][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.968345][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.094321][ T151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.145759][ T5632] veth1_macvtap: entered promiscuous mode [ 113.175556][ T151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.175637][ T151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.175700][ T151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.273640][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.273675][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.355936][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.355972][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.523295][ T5636] veth1_vlan: entered promiscuous mode [ 113.538936][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 113.824251][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.824288][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.827373][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.974709][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.353770][ T85] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.365388][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.365417][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.530816][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.388715][ T85] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.477420][ T991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.478488][ T5636] veth0_macvtap: entered promiscuous mode [ 115.501735][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.501763][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.632806][ T5636] veth1_macvtap: entered promiscuous mode [ 115.719699][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.719727][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.914964][ T5893] syzkaller0: entered promiscuous mode [ 115.915005][ T5893] syzkaller0: entered allmulticast mode [ 115.929210][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.929240][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.941391][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.053245][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.611774][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.611809][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.657765][ T151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.661013][ T151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.661448][ T151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.662499][ T151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.010775][ T5912] loop2: detected capacity change from 0 to 512 [ 117.021793][ T5912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.040913][ T5912] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 117.072928][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.072955][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.098958][ T5912] EXT4-fs (loop2): 1 truncate cleaned up [ 117.117462][ T5912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.197875][ T5920] mmap: syz.5.6 (5920) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.206263][ T5919] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 117.299225][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.299256][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.538775][ T5932] loop5: detected capacity change from 0 to 128 [ 118.541247][ T5932] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.557208][ T5932] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.899934][ T5644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.311386][ T5962] FAULT_INJECTION: forcing a failure. [ 122.311386][ T5962] name failslab, interval 1, probability 0, space 0, times 0 [ 122.311433][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 122.311476][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 122.311499][ T5962] Call Trace: [ 122.311511][ T5962] [ 122.311525][ T5962] dump_stack_lvl+0x100/0x190 [ 122.311598][ T5962] should_fail_ex.cold+0x5/0xa [ 122.311664][ T5962] should_failslab+0xc2/0x120 [ 122.311740][ T5962] kmem_cache_alloc_noprof+0x92/0x6a0 [ 122.311801][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.311864][ T5962] ? sk_prot_alloc+0x60/0x2a0 [ 122.311918][ T5962] sk_prot_alloc+0x60/0x2a0 [ 122.311966][ T5962] sk_clone+0x7b/0x1700 [ 122.312041][ T5962] sctp_clone_sock+0x34/0x1970 [ 122.312099][ T5962] ? security_socket_post_create+0x85/0x270 [ 122.312168][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.312226][ T5962] ? sock_create_lite+0x48/0x120 [ 122.312310][ T5962] sctp_getsockopt_peeloff_common.constprop.0+0x237/0x640 [ 122.312383][ T5962] ? __pfx_sctp_getsockopt_peeloff_common.constprop.0+0x10/0x10 [ 122.312471][ T5962] sctp_getsockopt+0x2fb2/0x7160 [ 122.312540][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.312598][ T5962] ? aa_inet_opt_perm+0x307/0x8e0 [ 122.312698][ T5962] ? __pfx_sctp_getsockopt+0x10/0x10 [ 122.312762][ T5962] ? futex_unqueue+0x29/0x2c0 [ 122.312815][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.312884][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.312943][ T5962] ? futex_unqueue+0x13d/0x2c0 [ 122.312996][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.313055][ T5962] ? lock_acquire+0x1d1/0x380 [ 122.313120][ T5962] ? __might_fault+0xc5/0x140 [ 122.313206][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.313263][ T5962] ? find_held_lock+0x2b/0x80 [ 122.313309][ T5962] ? __might_fault+0xc5/0x140 [ 122.313383][ T5962] ? __might_fault+0xc5/0x140 [ 122.313466][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.313540][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.313596][ T5962] ? _copy_from_user+0x59/0xd0 [ 122.313668][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.313725][ T5962] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 122.313779][ T5962] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 122.313831][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.313894][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.313953][ T5962] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 122.314038][ T5962] do_sock_getsockopt+0x415/0x570 [ 122.314114][ T5962] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 122.314217][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.314281][ T5962] ? __fget_files+0x34/0x3d0 [ 122.314366][ T5962] ? find_held_lock+0x2b/0x80 [ 122.314428][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.314485][ T5962] ? __fget_files+0x21f/0x3d0 [ 122.314574][ T5962] __sys_getsockopt+0x148/0x260 [ 122.314642][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.314714][ T5962] ? __x64_sys_getsockopt+0xbd/0x160 [ 122.314788][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.314847][ T5962] __x64_sys_getsockopt+0xbd/0x160 [ 122.314916][ T5962] ? do_syscall_64+0xae/0x790 [ 122.314982][ T5962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.315040][ T5962] ? lockdep_hardirqs_on+0x7d/0x110 [ 122.315103][ T5962] do_syscall_64+0x123/0x790 [ 122.315175][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.315226][ T5962] RIP: 0033:0x7f521739f559 [ 122.315261][ T5962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.315310][ T5962] RSP: 002b:00007f52181e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 122.315358][ T5962] RAX: ffffffffffffffda RBX: 00007f5217625fa0 RCX: 00007f521739f559 [ 122.315390][ T5962] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 122.315422][ T5962] RBP: 00007f5217436b50 R08: 0000200000000440 R09: 0000000000000000 [ 122.315454][ T5962] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 122.315486][ T5962] R13: 00007f5217626038 R14: 00007f5217625fa0 R15: 00007ffed8cbd7b8 [ 122.315548][ T5962] [ 123.106807][ T5959] loop1: detected capacity change from 0 to 2048 [ 123.233933][ T5959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.234091][ T5959] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.601609][ T5959] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 123.613828][ T5959] overlayfs: failed to verify upper root origin [ 123.693073][ T5977] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 124.729726][ T5982] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.729916][ T5982] block device autoloading is deprecated and will be removed. [ 124.815176][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.841709][ T5985] syzkaller0: entered promiscuous mode [ 124.841745][ T5985] syzkaller0: entered allmulticast mode [ 125.380918][ T5994] loop0: detected capacity change from 0 to 8 [ 127.557183][ T5947] Bluetooth: hci6: Frame reassembly failed (-84) [ 127.908365][ T62] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.923871][ T6012] FAULT_INJECTION: forcing a failure. [ 127.923871][ T6012] name failslab, interval 1, probability 0, space 0, times 0 [ 127.923918][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: syz.2.34 Not tainted syzkaller #0 PREEMPT(full) [ 127.923962][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 127.923984][ T6012] Call Trace: [ 127.923997][ T6012] [ 127.924012][ T6012] dump_stack_lvl+0x100/0x190 [ 127.924109][ T6012] should_fail_ex.cold+0x5/0xa [ 127.924203][ T6012] should_failslab+0xc2/0x120 [ 127.924290][ T6012] kmem_cache_alloc_noprof+0x92/0x6a0 [ 127.924358][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.924428][ T6012] ? sk_prot_alloc+0x60/0x2a0 [ 127.924489][ T6012] sk_prot_alloc+0x60/0x2a0 [ 127.924542][ T6012] sk_clone+0x7b/0x1700 [ 127.924630][ T6012] sctp_clone_sock+0x34/0x1970 [ 127.924699][ T6012] ? security_socket_post_create+0x85/0x270 [ 127.924771][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.924838][ T6012] ? sock_create_lite+0x48/0x120 [ 127.924938][ T6012] sctp_getsockopt_peeloff_common.constprop.0+0x237/0x640 [ 127.925026][ T6012] ? __pfx_sctp_getsockopt_peeloff_common.constprop.0+0x10/0x10 [ 127.925123][ T6012] sctp_getsockopt+0x2fb2/0x7160 [ 127.925202][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.925263][ T6012] ? aa_inet_opt_perm+0x307/0x8e0 [ 127.925367][ T6012] ? __pfx_sctp_getsockopt+0x10/0x10 [ 127.925436][ T6012] ? futex_unqueue+0x29/0x2c0 [ 127.925492][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.925568][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.925630][ T6012] ? futex_unqueue+0x13d/0x2c0 [ 127.925689][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.925755][ T6012] ? lock_acquire+0x1d1/0x380 [ 127.925827][ T6012] ? __might_fault+0xc5/0x140 [ 127.925921][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.925990][ T6012] ? find_held_lock+0x2b/0x80 [ 127.926045][ T6012] ? __might_fault+0xc5/0x140 [ 127.926145][ T6012] ? __might_fault+0xc5/0x140 [ 127.926232][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.926316][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.926390][ T6012] ? _copy_from_user+0x59/0xd0 [ 127.926479][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.926550][ T6012] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 127.926610][ T6012] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 127.926668][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.926737][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.926810][ T6012] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 127.926912][ T6012] do_sock_getsockopt+0x415/0x570 [ 127.927000][ T6012] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 127.927087][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.927157][ T6012] ? __fget_files+0x34/0x3d0 [ 127.927250][ T6012] ? find_held_lock+0x2b/0x80 [ 127.927323][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.927392][ T6012] ? __fget_files+0x21f/0x3d0 [ 127.927503][ T6012] __sys_getsockopt+0x148/0x260 [ 127.927582][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.927669][ T6012] ? __x64_sys_getsockopt+0xbd/0x160 [ 127.927752][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.927819][ T6012] __x64_sys_getsockopt+0xbd/0x160 [ 127.927896][ T6012] ? do_syscall_64+0xae/0x790 [ 127.927971][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.928037][ T6012] ? lockdep_hardirqs_on+0x7d/0x110 [ 127.928109][ T6012] do_syscall_64+0x123/0x790 [ 127.928195][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.928251][ T6012] RIP: 0033:0x7fbdbf99f559 [ 127.928293][ T6012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.928350][ T6012] RSP: 002b:00007fbdc090d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 127.928399][ T6012] RAX: ffffffffffffffda RBX: 00007fbdbfc25fa0 RCX: 00007fbdbf99f559 [ 127.928441][ T6012] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 127.928476][ T6012] RBP: 00007fbdbfa36b50 R08: 0000200000000440 R09: 0000000000000000 [ 127.928513][ T6012] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 127.928552][ T6012] R13: 00007fbdbfc26038 R14: 00007fbdbfc25fa0 R15: 00007ffe366c71b8 [ 127.928619][ T6012] [ 128.942282][ T6024] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 128.953237][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.38'. [ 128.953305][ T6024] syz_tun: entered promiscuous mode [ 128.953342][ T6024] syz_tun: entered allmulticast mode [ 129.726284][ T5633] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 130.407007][ T6031] loop0: detected capacity change from 0 to 512 [ 130.686042][ T6031] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 130.768755][ T6031] EXT4-fs (loop0): 1 truncate cleaned up [ 130.790716][ T6031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.260129][ T6042] capability: warning: `syz.0.40' uses deprecated v2 capabilities in a way that may be insecure [ 131.261798][ T6042] GUP no longer grows the stack in syz.0.40 (6042): 200000004000-20000000a000 (200000002000) [ 131.261876][ T6042] CPU: 0 UID: 0 PID: 6042 Comm: syz.0.40 Not tainted syzkaller #0 PREEMPT(full) [ 131.261925][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 131.261949][ T6042] Call Trace: [ 131.261962][ T6042] [ 131.261978][ T6042] dump_stack_lvl+0x100/0x190 [ 131.262053][ T6042] gup_vma_lookup.cold+0x83/0x96 [ 131.262123][ T6042] __get_user_pages+0x252/0x2c20 [ 131.262181][ T6042] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.262232][ T6042] ? irqentry_exit+0x202/0xab0 [ 131.262298][ T6042] ? __pfx___get_user_pages+0x10/0x10 [ 131.262354][ T6042] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.262416][ T6042] get_user_pages_remote+0x3d2/0xb10 [ 131.262471][ T6042] ? mas_prev_setup.constprop.0+0x980/0x9e0 [ 131.262547][ T6042] ? __pfx_get_user_pages_remote+0x10/0x10 [ 131.262609][ T6042] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.262666][ T6042] __access_remote_vm+0x3bb/0x890 [ 131.262730][ T6042] ? __pfx___access_remote_vm+0x10/0x10 [ 131.262781][ T6042] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 131.262832][ T6042] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 131.262898][ T6042] proc_pid_cmdline_read+0x552/0x9a0 [ 131.262961][ T6042] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 131.263021][ T6042] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.263081][ T6042] ? rw_verify_area+0xce/0x6d0 [ 131.263151][ T6042] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 131.263206][ T6042] vfs_readv+0x5d8/0x8d0 [ 131.263279][ T6042] ? __pfx_vfs_readv+0x10/0x10 [ 131.263338][ T6042] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.263396][ T6042] ? rcu_is_watching+0x13/0xc0 [ 131.263453][ T6042] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 131.263525][ T6042] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.263596][ T6042] ? lockdep_hardirqs_on+0x7d/0x110 [ 131.263672][ T6042] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 131.263785][ T6042] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.263852][ T6042] ? __fget_files+0x21f/0x3d0 [ 131.263957][ T6042] ? do_preadv+0x125/0x2e0 [ 131.264017][ T6042] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.264080][ T6042] do_preadv+0x125/0x2e0 [ 131.264154][ T6042] ? __pfx_do_preadv+0x10/0x10 [ 131.264229][ T6042] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.264308][ T6042] do_syscall_64+0x123/0x790 [ 131.264384][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.264439][ T6042] RIP: 0033:0x7fd97cd9f559 [ 131.264478][ T6042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.264535][ T6042] RSP: 002b:00007fd97dc3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 131.264584][ T6042] RAX: ffffffffffffffda RBX: 00007fd97d026180 RCX: 00007fd97cd9f559 [ 131.264619][ T6042] RDX: 0000000000000001 RSI: 0000200000000c40 RDI: 0000000000000006 [ 131.264652][ T6042] RBP: 00007fd97ce36b50 R08: 00000000fffffff9 R09: 0000000000000000 [ 131.264685][ T6042] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 131.264717][ T6042] R13: 00007fd97d026218 R14: 00007fd97d026180 R15: 00007ffe56ac1cf8 [ 131.264781][ T6042] [ 131.932380][ T5632] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.932954][ T6048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.42'. [ 132.049950][ T6046] Bluetooth: MGMT ver 1.23 [ 132.171856][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 132.179762][ T6048] netlink: 64 bytes leftover after parsing attributes in process `syz.3.42'. [ 132.491698][ T6057] syzkaller0: entered promiscuous mode [ 132.491743][ T6057] syzkaller0: entered allmulticast mode [ 132.527287][ T6057] tipc: Started in network mode [ 132.527333][ T6057] tipc: Node identity 1e6476cc278a, cluster identity 4711 [ 132.551069][ T6057] tipc: Enabled bearer , priority 0 [ 132.572973][ T6055] tipc: Resetting bearer [ 132.793682][ T6055] tipc: Disabling bearer [ 132.985750][ T6067] loop4: detected capacity change from 0 to 512 [ 133.268680][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.268829][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.349869][ T5633] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 133.350082][ T5633] Bluetooth: hci0: Injecting HCI hardware error event [ 133.726179][ T6082] netlink: 'syz.0.55': attribute type 1 has an invalid length. [ 133.757874][ T6082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.55'. [ 133.757922][ T6082] veth1_to_bridge: entered promiscuous mode [ 133.757957][ T6082] veth1_to_bridge: entered allmulticast mode [ 134.075612][ T5639] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 134.078118][ T5639] Bluetooth: hci0: hardware error 0x00 [ 134.144279][ C1] ------------[ cut here ]------------ [ 134.144298][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 134.144350][ C1] WARNING: kernel/workqueue.c:2436 at __queue_work+0xe18/0x16f0, CPU#1: kworker/u9:5/5639 [ 134.166398][ C1] Modules linked in: [ 134.170309][ C1] CPU: 1 UID: 0 PID: 5639 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 134.179803][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 134.189908][ C1] Workqueue: hci0 hci_error_reset [ 134.195034][ C1] RIP: 0010:__queue_work+0xe1c/0x16f0 [ 134.200537][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 c5 08 00 00 48 8d 3d e8 65 9b 10 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 134.220187][ C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010046 [ 134.226303][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100512e94e [ 134.234310][ C1] RDX: ffff88803666e178 RSI: ffffffff8adcb500 RDI: ffffffff926dbe60 [ 134.242326][ C1] RBP: ffff888028974a58 R08: 0000000000000000 R09: 0000000000000100 [ 134.250355][ C1] R10: ffffffff926ad65f R11: 0000000000000001 R12: ffff88803666e000 [ 134.258377][ C1] R13: 0000000000000000 R14: 1ffff9200014118e R15: ffffffff81d26160 [ 134.266388][ C1] FS: 0000000000000000(0000) GS:ffff88812257a000(0000) knlGS:0000000000000000 [ 134.275364][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.282033][ C1] CR2: 000020000006b030 CR3: 000000003fca9000 CR4: 0000000000350ef0 [ 134.290083][ C1] Call Trace: [ 134.293381][ C1] [ 134.296248][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.301925][ C1] ? lock_acquire+0x1d1/0x380 [ 134.306646][ C1] ? call_timer_fn+0x11d/0x5f0 [ 134.311473][ C1] ? __pfx___queue_work+0x10/0x10 [ 134.316540][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 134.322216][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.327911][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 134.333761][ C1] call_timer_fn+0x198/0x5f0 [ 134.338419][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 134.343578][ C1] ? lock_acquire+0x1d1/0x380 [ 134.348305][ C1] ? __run_timers+0x560/0xb00 [ 134.353040][ C1] ? __run_timers+0x560/0xb00 [ 134.357765][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.363480][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 134.369336][ C1] __run_timers+0x570/0xb00 [ 134.373915][ C1] ? __pfx___run_timers+0x10/0x10 [ 134.378994][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.384672][ C1] ? lock_acquire+0x1d1/0x380 [ 134.389400][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.395172][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 134.400242][ C1] run_timer_base+0x114/0x190 [ 134.405061][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 134.410317][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.415991][ C1] run_timer_softirq+0x1a/0x50 [ 134.420807][ C1] handle_softirqs+0x216/0xa20 [ 134.425601][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 134.430905][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.436599][ C1] ? _raw_spin_unlock+0x28/0x50 [ 134.441472][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.447123][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 134.452794][ C1] __irq_exit_rcu+0x178/0x220 [ 134.457487][ C1] irq_exit_rcu+0x9/0x30 [ 134.461747][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 134.467412][ C1] [ 134.470516][ C1] [ 134.473453][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 134.479451][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 134.485891][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 06 47 f9 f5 48 89 df e8 8e 9d f9 f5 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 66 e8 f5 65 48 83 3d 84 82 ca 09 00 74 16 5b [ 134.505522][ C1] RSP: 0018:ffffc900038c77a0 EFLAGS: 00000246 [ 134.511607][ C1] RAX: 0000000000000006 RBX: ffffc900038c79e0 RCX: 0000000000000040 [ 134.519582][ C1] RDX: 0000000000000001 RSI: ffffffff8e626cb9 RDI: ffffffff8c835a80 [ 134.527558][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000 [ 134.535536][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900038c7818 [ 134.543514][ C1] R13: 1ffff92000718f0b R14: dffffc0000000000 R15: 0000000000000002 [ 134.551516][ C1] flush_workqueue_prep_pwqs+0xbd6/0x1110 [ 134.557311][ C1] ? __pfx_flush_workqueue_prep_pwqs+0x10/0x10 [ 134.563519][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.569188][ C1] __flush_workqueue+0x523/0x1200 [ 134.574314][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.579968][ C1] ? __mutex_lock+0x267/0x1c10 [ 134.584760][ C1] ? drain_workqueue+0x29/0x3c0 [ 134.589624][ C1] ? drain_workqueue+0xd1/0x3c0 [ 134.594487][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.600158][ C1] ? __pfx___flush_workqueue+0x10/0x10 [ 134.605627][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.611296][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.616946][ C1] ? enable_work+0x24c/0x320 [ 134.621564][ C1] drain_workqueue+0x175/0x3c0 [ 134.626345][ C1] hci_dev_close_sync+0x36f/0x1210 [ 134.631487][ C1] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 134.637049][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.642696][ C1] ? lock_acquire+0x1d1/0x380 [ 134.647407][ C1] hci_dev_do_close+0x2e/0xb0 [ 134.652117][ C1] hci_error_reset+0xc7/0x380 [ 134.656824][ C1] process_one_work+0xac7/0x1b10 [ 134.661791][ C1] ? __pfx_process_one_work+0x10/0x10 [ 134.667174][ C1] ? lock_acquire+0x1d1/0x380 [ 134.671886][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.677544][ C1] worker_thread+0x5ef/0xe50 [ 134.682159][ C1] ? __pfx_worker_thread+0x10/0x10 [ 134.687289][ C1] ? kthread+0x13a/0x450 [ 134.691569][ C1] ? __pfx_worker_thread+0x10/0x10 [ 134.696706][ C1] kthread+0x373/0x450 [ 134.700807][ C1] ? __pfx_kthread+0x10/0x10 [ 134.705431][ C1] ret_from_fork+0x730/0xd60 [ 134.710080][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 134.715221][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.720879][ C1] ? __switch_to+0x800/0x10e0 [ 134.725590][ C1] ? __switch_to_asm+0x39/0x70 [ 134.730380][ C1] ? __pfx_kthread+0x10/0x10 [ 134.735008][ C1] ret_from_fork_asm+0x1a/0x30 [ 134.739812][ C1] [ 134.742832][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 134.750113][ C1] CPU: 1 UID: 0 PID: 5639 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 134.759586][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 134.769749][ C1] Workqueue: hci0 hci_error_reset [ 134.774823][ C1] Call Trace: [ 134.778185][ C1] [ 134.781028][ C1] dump_stack_lvl+0x100/0x190 [ 134.785748][ C1] vpanic+0x2dc/0x6f8 [ 134.789836][ C1] panic+0xd1/0xe0 [ 134.793576][ C1] ? __pfx_panic+0x10/0x10 [ 134.798034][ C1] check_panic_on_warn.cold+0x19/0x34 [ 134.803425][ C1] ? __queue_work+0xe18/0x16f0 [ 134.808199][ C1] __warn.cold+0x191/0x321 [ 134.812633][ C1] __report_bug+0x30f/0x440 [ 134.817171][ C1] ? __queue_work+0xe18/0x16f0 [ 134.821952][ C1] ? __pfx___report_bug+0x10/0x10 [ 134.827001][ C1] ? drain_workqueue+0x175/0x3c0 [ 134.831946][ C1] ? hci_dev_close_sync+0x36f/0x1210 [ 134.837248][ C1] ? hci_dev_do_close+0x2e/0xb0 [ 134.842131][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 134.847501][ C1] report_bug_entry+0xe2/0x290 [ 134.852299][ C1] ? __queue_work+0xe1c/0x16f0 [ 134.857074][ C1] handle_bug+0x1cd/0x2a0 [ 134.861444][ C1] exc_invalid_op+0x17/0x50 [ 134.865975][ C1] asm_exc_invalid_op+0x1a/0x20 [ 134.870841][ C1] RIP: 0010:__queue_work+0xe1c/0x16f0 [ 134.876227][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 c5 08 00 00 48 8d 3d e8 65 9b 10 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 134.895857][ C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010046 [ 134.901960][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100512e94e [ 134.909953][ C1] RDX: ffff88803666e178 RSI: ffffffff8adcb500 RDI: ffffffff926dbe60 [ 134.917947][ C1] RBP: ffff888028974a58 R08: 0000000000000000 R09: 0000000000000100 [ 134.925934][ C1] R10: ffffffff926ad65f R11: 0000000000000001 R12: ffff88803666e000 [ 134.933922][ C1] R13: 0000000000000000 R14: 1ffff9200014118e R15: ffffffff81d26160 [ 134.941942][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 134.947805][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 134.953138][ C1] ? __queue_work+0xdea/0x16f0 [ 134.957934][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.963595][ C1] ? lock_acquire+0x1d1/0x380 [ 134.968302][ C1] ? call_timer_fn+0x11d/0x5f0 [ 134.973109][ C1] ? __pfx___queue_work+0x10/0x10 [ 134.978162][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 134.983814][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.989478][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 134.995302][ C1] call_timer_fn+0x198/0x5f0 [ 134.999933][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 135.005082][ C1] ? lock_acquire+0x1d1/0x380 [ 135.009809][ C1] ? __run_timers+0x560/0xb00 [ 135.014572][ C1] ? __run_timers+0x560/0xb00 [ 135.019288][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.024959][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 135.030789][ C1] __run_timers+0x570/0xb00 [ 135.035340][ C1] ? __pfx___run_timers+0x10/0x10 [ 135.040402][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.046061][ C1] ? lock_acquire+0x1d1/0x380 [ 135.050781][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.056445][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 135.061498][ C1] run_timer_base+0x114/0x190 [ 135.066213][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 135.071440][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.077102][ C1] run_timer_softirq+0x1a/0x50 [ 135.081907][ C1] handle_softirqs+0x216/0xa20 [ 135.086709][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 135.092017][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.097674][ C1] ? _raw_spin_unlock+0x28/0x50 [ 135.102547][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.108206][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 135.113887][ C1] __irq_exit_rcu+0x178/0x220 [ 135.118600][ C1] irq_exit_rcu+0x9/0x30 [ 135.122872][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 135.128548][ C1] [ 135.131486][ C1] [ 135.134425][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 135.140440][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 135.146893][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 06 47 f9 f5 48 89 df e8 8e 9d f9 f5 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 66 e8 f5 65 48 83 3d 84 82 ca 09 00 74 16 5b [ 135.166531][ C1] RSP: 0018:ffffc900038c77a0 EFLAGS: 00000246 [ 135.172629][ C1] RAX: 0000000000000006 RBX: ffffc900038c79e0 RCX: 0000000000000040 [ 135.180663][ C1] RDX: 0000000000000001 RSI: ffffffff8e626cb9 RDI: ffffffff8c835a80 [ 135.188741][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000 [ 135.196787][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900038c7818 [ 135.204781][ C1] R13: 1ffff92000718f0b R14: dffffc0000000000 R15: 0000000000000002 [ 135.212804][ C1] flush_workqueue_prep_pwqs+0xbd6/0x1110 [ 135.218613][ C1] ? __pfx_flush_workqueue_prep_pwqs+0x10/0x10 [ 135.224833][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.230517][ C1] __flush_workqueue+0x523/0x1200 [ 135.235567][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.241232][ C1] ? __mutex_lock+0x267/0x1c10 [ 135.246037][ C1] ? drain_workqueue+0x29/0x3c0 [ 135.250910][ C1] ? drain_workqueue+0xd1/0x3c0 [ 135.255776][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.261457][ C1] ? __pfx___flush_workqueue+0x10/0x10 [ 135.266944][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.272624][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.278289][ C1] ? enable_work+0x24c/0x320 [ 135.282917][ C1] drain_workqueue+0x175/0x3c0 [ 135.287709][ C1] hci_dev_close_sync+0x36f/0x1210 [ 135.292858][ C1] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 135.298428][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.304091][ C1] ? lock_acquire+0x1d1/0x380 [ 135.308815][ C1] hci_dev_do_close+0x2e/0xb0 [ 135.313529][ C1] hci_error_reset+0xc7/0x380 [ 135.318302][ C1] process_one_work+0xac7/0x1b10 [ 135.323288][ C1] ? __pfx_process_one_work+0x10/0x10 [ 135.328683][ C1] ? lock_acquire+0x1d1/0x380 [ 135.333418][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.339112][ C1] worker_thread+0x5ef/0xe50 [ 135.343739][ C1] ? __pfx_worker_thread+0x10/0x10 [ 135.348868][ C1] ? kthread+0x13a/0x450 [ 135.353158][ C1] ? __pfx_worker_thread+0x10/0x10 [ 135.358283][ C1] kthread+0x373/0x450 [ 135.362421][ C1] ? __pfx_kthread+0x10/0x10 [ 135.367110][ C1] ret_from_fork+0x730/0xd60 [ 135.371735][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 135.376875][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.382572][ C1] ? __switch_to+0x800/0x10e0 [ 135.387291][ C1] ? __switch_to_asm+0x39/0x70 [ 135.392081][ C1] ? __pfx_kthread+0x10/0x10 [ 135.396721][ C1] ret_from_fork_asm+0x1a/0x30 [ 135.401525][ C1] [ 135.404640][ C1] Kernel Offset: disabled [ 135.408958][ C1] Rebooting in 86400 seconds..