last executing test programs: 1m31.60500966s ago: executing program 3 (id=2606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[], 0xbc}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r2, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) write(r2, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/170, 0xaa) write(r3, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) write(r3, &(0x7f0000000c00)="002000011a2b3c4d00080000000200010100000005f5e10000400000000000", 0x1f) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x3c}, 0x8, 0x3000000000002}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1m30.832593605s ago: executing program 3 (id=2611): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xc4}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(r0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 1m29.640139823s ago: executing program 3 (id=2615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500070000001400040073"], 0x58}}, 0x0) 1m29.384785156s ago: executing program 3 (id=2618): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f0000000340)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r1 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff0007058102"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESDEC], 0x13c}, 0x1, 0x0, 0x0, 0xfae20099babe1796}, 0x80) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_clone(0x51029000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)="a1a0df52795bb4bfcf8c1319e625a84b013a058006cebb8c97503a09f38cdfa5b694aae85fd89a8363c21c5530439d778391fa49803b7194075b035636409231e9a90a7aba691128b2a2faba1110b64d2f7205002c1ad4a8efa9b5ed71474547ce28f7a046b1fb054b66621fa2b5bd3578") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0x4a, 0x0, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8", 0x0, 0x31, 0x6000000000000000, 0xb9, 0x0, &(0x7f0000000700)="74fa9e29f34cfb2a0699c765689b1a281fff1a8e13fa850ef03ab17b7c11d1bc6ec8b88829d290d41b8348525b7a2a652faa03171fb98e14b2bcebec7ad01a2313bc6cdc8752c888b18cb5b597a6248f2e5c740da08adff43495f6caf6b863f3bc94d471b7e3181a7383d294f1a842c52fed119dba11817ebe286654344cff71417f2def6801bd4c076b4528ef43ae91fcf75f1252b2e6818081db7a7771f26dcc36236d2a928367c7047c7ea68aa40c20c524839907239f78", &(0x7f0000000000), 0x2}, 0x50) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000001180)={0x2, 0x1, 0x13, 0xb, 0x1ca, &(0x7f0000000d80)="5475484583550415de8f53b5b5b58f024b14cc08ecc4628e2c627c6730cedad5093810db84ea2041648e29e0acfd80665766f5bedf6de2d65ebac591748c1a702438be9ecf618a8165e35168910d49cdda65443b1b3739f03788c0c7117ffa464fc51970bb2feaf94962b0ad80e4c60b85445561daa255b95a8c3b1238dc6bb092ff9e56a9757e854aab4a54fa4c87aab0168987f8a63e88563151381270df604b671e2d6de6e29502f788709db78f9cadbd359c498c81f4cd1b27a99283d130cca91d4b15105c2a623125281f7740fc052f3f7c643c79ae5224637820616f09eef1e7de3c7fc03b6a6805c23da25c3d1e8dd040d65c6d0614454c3220fe8a4452c2c203cb2579b47522c129385ed541d1b9211adf799f57e698336990db6b734a9f4873259168345464f2f2793042675df139fb00a34414f4f49f89279d6b4f912322d5d6c460255d020790dfae242f3e837f598b9fd6de99a20f00bff10813cdf57f4a21857f4cd243f12401bebfe1e2b444c13b50c24358511ec7d0ce9cba39d38cf4c6c43df8b1bc9cc579c94c9141b0213c163a4ddaf380e9a8cc7d1830e39f27164160cdd0f591bf653475ed9341fbdf65a7b6d7bfe2f5a10ef7943762cd56fc8dde100efe938d2bd75a6810ee083f24da4a926f8744e0786e26742c52d3f0fef7789fc9dcd5108f159c07cb469637a849c512ae93d0ae15795c38c4b07a32c790e94e246162003f97da62b06946bd603662868ab9052566fa962356cdf31295c10fe43867af0ad7eed774d4ebde4beb832671f8533d5051517b70813b73f15dc784f266a4812226542394aa6c1a4c693bb9bf3591665460b739516e79a587c802ae90b4b46eed58c4b64ef353289afe6b0e8413acaf4eaa22f2dc93c919f390c9ab5b9127d18132cbc55034f4212e926c61a89b9cb3764e1051943a71caff4ef19da1bcb3be44e97ab6154af29527da424e7b510458b559d0e52ebc3d595b6c9b9491af202293a321f2bd9fbca623b7d73033c9688ace9f63b4c518a2eda696ce4fc917b9328e3572bbae1fdd695d78f69eb628200e2748a1857c6716aeb4651530a7a7b18b581eb331ebd5726dafce111c6a42f27c89a9d21bab927c1263087546beb1edeb2b4d8572d6205bfc328efafe88928b8b1383f74f477dc2ddc52a2803e7ac63bc42128ff4d8aea0c843323423f1f97aeacd554753add8fc2edd4f35603274aab4287d99150f934032c6a2a87c4de89b4da156e89f21c23ef3700e24fd76b96811a14123533543f1ba53ef916cef70861b700b5968319fc51743046930c2cdf89eba072ebe76c379f44958da9074805656cd45a96cbe2917e81571fcc8cdc723484ad95a8fa4109ff29e1ca8eb57d50872405a74ef8f78d89033177d9b6e2c7a252694182d00575a530fe3ad099ca40a3a1c3701efd3de02"}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r2, 0x7fffffff, 0xfffffffffffffffd, 0x7fffffffffffffff}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r7, r7, 0x1c, 0x3, 0xfffffffffffffffb}) r8 = openat(r6, &(0x7f00000006c0)='.\x00', 0x8000, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', 0xfffffffffffffffe}) fremovexattr(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="757365722e001739c6742a56d3c235a870dfd30b9e72acd3b06a047e29ae9e7b28891d4b4d59d3e725f5c680416ee1ea93f2a41e0b15ffffce884152068d1c1f70798403d55423197c9251c4f1c8bdc2e77390e4bcae9c66313dc85f9a3f97e26206d53085ed5a9d2af6d9a1a1f186c53acfe524fc81db3c7f2983c2045b716dd9d7a51ea095eaddc7d9bae1c3863a1f4040aa291c37ea65b407f71c42598639cbf3e794437539fb154c3d657c4d7ebffe8919ddc60ecc9861b6dff19d10085dca988750136d22"]) r10 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205647, &(0x7f0000000200)={0xf000300, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @string=0x0}}) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x20, r0, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x2b8}, 0x2, 0x48000, 0x1, {0x2}}) syz_open_dev$char_usb(0xc, 0xb4, 0x7) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x63}}, './file0\x00'}) 1m24.178949523s ago: executing program 3 (id=2631): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m23.342573209s ago: executing program 3 (id=2639): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xc4}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 1m8.142654968s ago: executing program 32 (id=2639): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xc4}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 55.0999776s ago: executing program 4 (id=2706): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/37, 0x25}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) 53.877626969s ago: executing program 4 (id=2714): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0) 53.475554428s ago: executing program 0 (id=2716): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) 52.984889113s ago: executing program 0 (id=2718): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 52.655256802s ago: executing program 4 (id=2720): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x8b, 0x6}}, @qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 52.583136097s ago: executing program 0 (id=2721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xfc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_ife={0xe4, 0x1, 0x0, 0x0, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x201}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0) 52.355916021s ago: executing program 4 (id=2722): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8000}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 52.215121918s ago: executing program 0 (id=2723): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 49.847163895s ago: executing program 4 (id=2725): landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfd", 0x37}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9", 0x5f}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 48.111284778s ago: executing program 0 (id=2726): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0xa01}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 47.37441773s ago: executing program 0 (id=2729): r0 = socket(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000001000/0x3000)=nil, 0x3000, &(0x7f0000000100)='autofs\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) open$dir(0x0, 0x202400, 0x176) mkdir(&(0x7f0000000240)='./file1\x00', 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0xe4ffffffffffffff}}]}, 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x28) 45.430977935s ago: executing program 4 (id=2731): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x8b, 0x6}}, @qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 40.796126537s ago: executing program 1 (id=2733): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/37, 0x25}], 0x1}, 0x0) 30.702850982s ago: executing program 33 (id=2729): r0 = socket(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000001000/0x3000)=nil, 0x3000, &(0x7f0000000100)='autofs\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) open$dir(0x0, 0x202400, 0x176) mkdir(&(0x7f0000000240)='./file1\x00', 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0xe4ffffffffffffff}}]}, 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x28) 30.348515148s ago: executing program 34 (id=2731): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x8b, 0x6}}, @qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 30.247807739s ago: executing program 2 (id=2736): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 29.713983505s ago: executing program 1 (id=2737): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000078085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e23, @rand_addr=0x64010102}, {0x300, @local}, 0x8, {0x2, 0x4e24, @local}, 'veth0_vlan\x00'}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x10}, 0xa) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000002c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000100)={{0x11, @multicast1, 0x2713, 0x0, 'rr\x00'}, {@loopback=0x7f000002, 0x4e20}}, 0x44) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x7530, @loopback=0x7f000003}, 0x10) connect$inet(r6, &(0x7f0000000210)={0x2, 0x2710, @loopback}, 0xd) sendto$inet(r6, &(0x7f0000000220)='hello', 0x5, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r7, &(0x7f0000000300)="450000380000000040017cc07f0000027f000003030339a4000000004500001c0000000040117ccc7f0000037f00000275304e2000080000", 0x38, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3}) 29.224620187s ago: executing program 1 (id=2738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0xa01}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 28.090548403s ago: executing program 2 (id=2739): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0x9}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x20000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 27.97163786s ago: executing program 1 (id=2740): landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfd", 0x37}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9", 0x5f}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 26.811321278s ago: executing program 2 (id=2741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000fdffffff850000005400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.660832053s ago: executing program 1 (id=2742): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x94) 24.255999748s ago: executing program 2 (id=2743): landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfd", 0x37}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da344", 0x35}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 24.194043484s ago: executing program 1 (id=2744): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3}) truncate(&(0x7f00000000c0)='./file1\x00', 0x5) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 22.991137665s ago: executing program 2 (id=2745): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000078085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e23, @rand_addr=0x64010102}, {0x300, @local}, 0x8, {0x2, 0x4e24, @local}, 'veth0_vlan\x00'}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x10}, 0xa) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000002c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000100)={{0x11, @multicast1, 0x2713, 0x0, 'rr\x00'}, {@loopback=0x7f000002, 0x4e20}}, 0x44) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x7530, @loopback=0x7f000003}, 0x10) connect$inet(r6, &(0x7f0000000210)={0x2, 0x2710, @loopback}, 0xd) sendto$inet(r6, &(0x7f0000000220)='hello', 0x5, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r7, &(0x7f0000000300)="450000380000000040017cc07f0000027f000003030339a4000000004500001c0000000040117ccc7f0000037f00000275304e2000080000", 0x38, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3}) 21.959343677s ago: executing program 2 (id=2746): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250f000000080001", @ANYRESHEX=r1], 0xf4}, 0x1, 0x0, 0x0, 0x94cd6bcfe2ea64a9}, 0x40010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x50, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}]}, 0x50}}, 0x0) recvfrom(r0, &(0x7f0000001300)=""/4096, 0x1000, 0x0, &(0x7f0000002300)=@ethernet={0x6, @local}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000800)={&(0x7f0000000040), 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x32c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TX_RATES={0x2f0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x4}, {0x0, 0x9}, {0x2, 0x6}, {0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x4, 0x3}, {0x7, 0x4}, {0x1, 0x8}, {0x3, 0x3}, {0x3, 0x7}, {0x2, 0x9}, {0x5, 0x5}, {0x3}, {0x6, 0x9}, {0x4, 0x7}, {0x3, 0xa}, {0x4}, {0x3, 0x2}, {0x5, 0x3}, {0x3, 0x7}, {0x7, 0x2}, {}, {0x5, 0x7}, {0x6, 0x4}, {0x1, 0x3}, {0x0, 0x8}, {0x7, 0x3}, {0x3, 0xa}, {0x7, 0x9}, {0x3, 0x6}, {0x6}, {0x3, 0x3}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x17d2, 0x9a2, 0x2, 0xf031, 0x7ff, 0x81]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0xb, 0x78, 0x9, 0x6c, 0x0, 0x3, 0x2, 0x5, 0x2, 0x24, 0x4, 0x9, 0x1, 0xc, 0x2, 0xc, 0x12, 0x16, 0x3, 0x1, 0x4]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x9, 0x1b, 0x24, 0x9, 0x2, 0x3, 0x9, 0x24, 0x3, 0x24, 0x60, 0x3, 0x1, 0x4, 0x2, 0x1b, 0x72, 0x55]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x0, 0x1}, {0x6, 0x5}, {0x3, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x2}, {0x1}, {0x1, 0x6}, {0x3, 0x5}, {0x4, 0x2}, {0x7, 0x8}, {0x6, 0xa}, {0x0, 0x9}, {0x7, 0x9}, {0x4, 0x8}, {0x0, 0x5}, {0x4, 0x2}, {0x6, 0x9}, {0x2, 0x8}, {0x4, 0x8}, {0x1, 0x2}, {0x7, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x4, 0x8}, {0x4, 0x1}, {0x2, 0x5}]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0x8}, {0x7, 0x3}, {0x4, 0x2}, {0x0, 0x4}, {0x6, 0x5}, {0x4, 0xa}, {0x4, 0xa}, {0x3, 0x9}, {0x5, 0x7}, {0x5}, {0x3, 0x9}, {0x0, 0x2}, {0x2, 0x5}, {0x3}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x9}, {0x1, 0x8}, {0x5, 0x6}, {0x3, 0x9}, {0x4, 0x1}, {0x7, 0x1}, {0x2, 0x2}, {0x3, 0x5}, {0x1}, {0x1}, {0x2, 0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x5, 0x3}, {0x7, 0x3}, {0x4, 0x1}, {0x2, 0x8}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0xff, 0x3, 0x8, 0x8, 0x7, 0x2]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{}, {0x6, 0x2}, {0x6, 0x7}, {0x1}, {0x0, 0x2}, {0x2, 0x6}, {0x0, 0xa}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x5}, {}, {}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0x8}, {0x0, 0x7}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x1, 0x2}, {0x4, 0x1}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x3}, {}, {0x3, 0x3}, {0x2}, {0x0, 0x9}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0x5}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0x0, 0x36, 0x1e, 0x1b, 0x3, 0xb, 0x6c, 0x3]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x30, 0x60, 0x9, 0x12, 0x16, 0xb, 0x6, 0x24, 0xbf1d1f2f0ec7178, 0x30, 0x18, 0xc, 0x1b, 0x5, 0xc, 0x6, 0x18, 0x16, 0x36, 0x4, 0xb, 0x1b, 0x1, 0x3, 0x12, 0x9, 0x9, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x7, 0x101, 0x400, 0x7, 0x3, 0xb]}}]}, @NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7fff, 0x6, 0x5, 0x7, 0x3d4, 0x400, 0x6b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xa, 0x9, 0x4, 0xe, 0xe, 0x2, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x9, 0xac, 0x8000, 0x8, 0xfffa, 0xd]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0x1}, {0x0, 0x8}, {0x7}, {}, {0x3, 0x8}, {0x6, 0x7}, {0x0, 0x8}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x5}, {0x6, 0x1}, {0x0, 0x9}, {0x5, 0xc}, {0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x7, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x7, 0x7}, {0x2, 0x9}, {0x3, 0x5}, {0x7, 0x4}, {0x7, 0x7}, {0x3}, {0x6, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x4}, {0x0, 0xa}, {0x7}, {0x0, 0x6}, {0x7, 0x8}, {0x4, 0x2}, {0x1, 0x5}, {0x5}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0x3}, {0x1, 0x8}, {0x2, 0x4}, {0x4, 0x9}, {0x2}, {0x3, 0x6}, {0x4, 0x2}, {0x5, 0x7}, {0x7, 0x4}, {0x5, 0x5}, {0x0, 0x2}, {}, {0x4}, {0x1, 0x8}, {0x0, 0x4}, {0x7, 0x3}, {0x5, 0x7}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3bdd, 0x19, 0x8001, 0x5, 0x8, 0x81, 0x28, 0x3]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x4}, {0x0, 0x3}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x3}, {0x4, 0x4}, {0x5, 0x8}, {0x3, 0x6}, {0x6, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {}, {0x6, 0x1}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x1}, {}, {0x7, 0x4}, {0x3, 0x5}, {0x5, 0x3}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x1}, {0x3, 0x7}, {0x7}, {0x6, 0x7}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x6}, {0x1, 0x6}, {0x2, 0x5}, {0x3, 0x3}, {0x5, 0x2}, {0x7, 0x8}, {0x0, 0x6}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0xa}, {0x0, 0x9}, {0x5}, {0x5, 0x4}, {0x3, 0xa}, {}, {0x4, 0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x2, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x3, 0x6}, {0x4, 0x9}, {0x1, 0x5}, {0x3, 0x4}, {0x2, 0x8}, {0x3, 0x5}, {0x2, 0x7}, {0x4, 0xa}, {0x5, 0x7}, {0x3, 0x1}, {0x3, 0xd}, {0x0, 0x9}, {0x0, 0x1}, {0x4}, {0x0, 0x3}, {0x3, 0xa}, {0x1, 0x3}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x7}, {0x3, 0x6}, {0x2, 0xa}, {0x3, 0x1}, {0x4, 0x4}, {0x6, 0x1}, {0x6, 0xa}, {0x3, 0x5}, {0x1, 0x1}, {0x2, 0xa}, {0x6, 0x7}, {0x7, 0x8}, {0x3, 0x6}, {0x6}, {0x3, 0x6}, {0x2, 0x5}, {0x4}, {0x3, 0x7}, {0x3, 0x5}, {0x1, 0x5}, {}, {0x7, 0x9}, {0x7, 0x5}, {0x2, 0x6}, {0x5}, {0x5}, {0x7, 0x1b}, {0x3, 0x5}, {0x4, 0x1}, {0x4, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x3, 0x401, 0xd, 0x6, 0x7f, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa49, 0x8, 0xa, 0x4, 0x7fff, 0x2, 0x1, 0x870]}}]}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}]}, 0x32c}, 0x1, 0x0, 0x0, 0x80}, 0x4004800) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000980)={'tunl0\x00', &(0x7f00000008c0)={'sit0\x00', r7, 0x8000, 0x20, 0x1, 0x9, {{0x16, 0x4, 0x1, 0x37, 0x58, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0xb, 0xbe, [@multicast2, @empty]}, @timestamp_addr={0x44, 0x1c, 0x89, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @timestamp={0x44, 0xc, 0xab, 0x0, 0x6, [0xb, 0x3]}, @timestamp={0x44, 0x10, 0x92, 0x0, 0x8, [0x46b, 0x0, 0x40]}]}}}}}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x1, 0x6, 0x1, 0x2, 0xffff8001}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 2.011919615s ago: executing program 35 (id=2744): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3}) truncate(&(0x7f00000000c0)='./file1\x00', 0x5) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 0s ago: executing program 36 (id=2746): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250f000000080001", @ANYRESHEX=r1], 0xf4}, 0x1, 0x0, 0x0, 0x94cd6bcfe2ea64a9}, 0x40010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x50, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}]}, 0x50}}, 0x0) recvfrom(r0, &(0x7f0000001300)=""/4096, 0x1000, 0x0, &(0x7f0000002300)=@ethernet={0x6, @local}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000800)={&(0x7f0000000040), 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x32c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TX_RATES={0x2f0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x4}, {0x0, 0x9}, {0x2, 0x6}, {0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x4, 0x3}, {0x7, 0x4}, {0x1, 0x8}, {0x3, 0x3}, {0x3, 0x7}, {0x2, 0x9}, {0x5, 0x5}, {0x3}, {0x6, 0x9}, {0x4, 0x7}, {0x3, 0xa}, {0x4}, {0x3, 0x2}, {0x5, 0x3}, {0x3, 0x7}, {0x7, 0x2}, {}, {0x5, 0x7}, {0x6, 0x4}, {0x1, 0x3}, {0x0, 0x8}, {0x7, 0x3}, {0x3, 0xa}, {0x7, 0x9}, {0x3, 0x6}, {0x6}, {0x3, 0x3}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x17d2, 0x9a2, 0x2, 0xf031, 0x7ff, 0x81]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0xb, 0x78, 0x9, 0x6c, 0x0, 0x3, 0x2, 0x5, 0x2, 0x24, 0x4, 0x9, 0x1, 0xc, 0x2, 0xc, 0x12, 0x16, 0x3, 0x1, 0x4]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x9, 0x1b, 0x24, 0x9, 0x2, 0x3, 0x9, 0x24, 0x3, 0x24, 0x60, 0x3, 0x1, 0x4, 0x2, 0x1b, 0x72, 0x55]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x0, 0x1}, {0x6, 0x5}, {0x3, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x2}, {0x1}, {0x1, 0x6}, {0x3, 0x5}, {0x4, 0x2}, {0x7, 0x8}, {0x6, 0xa}, {0x0, 0x9}, {0x7, 0x9}, {0x4, 0x8}, {0x0, 0x5}, {0x4, 0x2}, {0x6, 0x9}, {0x2, 0x8}, {0x4, 0x8}, {0x1, 0x2}, {0x7, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x4, 0x8}, {0x4, 0x1}, {0x2, 0x5}]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0x8}, {0x7, 0x3}, {0x4, 0x2}, {0x0, 0x4}, {0x6, 0x5}, {0x4, 0xa}, {0x4, 0xa}, {0x3, 0x9}, {0x5, 0x7}, {0x5}, {0x3, 0x9}, {0x0, 0x2}, {0x2, 0x5}, {0x3}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x9}, {0x1, 0x8}, {0x5, 0x6}, {0x3, 0x9}, {0x4, 0x1}, {0x7, 0x1}, {0x2, 0x2}, {0x3, 0x5}, {0x1}, {0x1}, {0x2, 0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x5, 0x3}, {0x7, 0x3}, {0x4, 0x1}, {0x2, 0x8}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0xff, 0x3, 0x8, 0x8, 0x7, 0x2]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{}, {0x6, 0x2}, {0x6, 0x7}, {0x1}, {0x0, 0x2}, {0x2, 0x6}, {0x0, 0xa}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x5}, {}, {}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0x8}, {0x0, 0x7}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x1, 0x2}, {0x4, 0x1}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x3}, {}, {0x3, 0x3}, {0x2}, {0x0, 0x9}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0x5}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0x0, 0x36, 0x1e, 0x1b, 0x3, 0xb, 0x6c, 0x3]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x30, 0x60, 0x9, 0x12, 0x16, 0xb, 0x6, 0x24, 0xbf1d1f2f0ec7178, 0x30, 0x18, 0xc, 0x1b, 0x5, 0xc, 0x6, 0x18, 0x16, 0x36, 0x4, 0xb, 0x1b, 0x1, 0x3, 0x12, 0x9, 0x9, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x7, 0x101, 0x400, 0x7, 0x3, 0xb]}}]}, @NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7fff, 0x6, 0x5, 0x7, 0x3d4, 0x400, 0x6b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xa, 0x9, 0x4, 0xe, 0xe, 0x2, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x9, 0xac, 0x8000, 0x8, 0xfffa, 0xd]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0x1}, {0x0, 0x8}, {0x7}, {}, {0x3, 0x8}, {0x6, 0x7}, {0x0, 0x8}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x5}, {0x6, 0x1}, {0x0, 0x9}, {0x5, 0xc}, {0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x7, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x7, 0x7}, {0x2, 0x9}, {0x3, 0x5}, {0x7, 0x4}, {0x7, 0x7}, {0x3}, {0x6, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x4}, {0x0, 0xa}, {0x7}, {0x0, 0x6}, {0x7, 0x8}, {0x4, 0x2}, {0x1, 0x5}, {0x5}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0x3}, {0x1, 0x8}, {0x2, 0x4}, {0x4, 0x9}, {0x2}, {0x3, 0x6}, {0x4, 0x2}, {0x5, 0x7}, {0x7, 0x4}, {0x5, 0x5}, {0x0, 0x2}, {}, {0x4}, {0x1, 0x8}, {0x0, 0x4}, {0x7, 0x3}, {0x5, 0x7}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3bdd, 0x19, 0x8001, 0x5, 0x8, 0x81, 0x28, 0x3]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x4}, {0x0, 0x3}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x3}, {0x4, 0x4}, {0x5, 0x8}, {0x3, 0x6}, {0x6, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {}, {0x6, 0x1}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x1}, {}, {0x7, 0x4}, {0x3, 0x5}, {0x5, 0x3}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x1}, {0x3, 0x7}, {0x7}, {0x6, 0x7}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x6}, {0x1, 0x6}, {0x2, 0x5}, {0x3, 0x3}, {0x5, 0x2}, {0x7, 0x8}, {0x0, 0x6}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0xa}, {0x0, 0x9}, {0x5}, {0x5, 0x4}, {0x3, 0xa}, {}, {0x4, 0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x2, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x3, 0x6}, {0x4, 0x9}, {0x1, 0x5}, {0x3, 0x4}, {0x2, 0x8}, {0x3, 0x5}, {0x2, 0x7}, {0x4, 0xa}, {0x5, 0x7}, {0x3, 0x1}, {0x3, 0xd}, {0x0, 0x9}, {0x0, 0x1}, {0x4}, {0x0, 0x3}, {0x3, 0xa}, {0x1, 0x3}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x7}, {0x3, 0x6}, {0x2, 0xa}, {0x3, 0x1}, {0x4, 0x4}, {0x6, 0x1}, {0x6, 0xa}, {0x3, 0x5}, {0x1, 0x1}, {0x2, 0xa}, {0x6, 0x7}, {0x7, 0x8}, {0x3, 0x6}, {0x6}, {0x3, 0x6}, {0x2, 0x5}, {0x4}, {0x3, 0x7}, {0x3, 0x5}, {0x1, 0x5}, {}, {0x7, 0x9}, {0x7, 0x5}, {0x2, 0x6}, {0x5}, {0x5}, {0x7, 0x1b}, {0x3, 0x5}, {0x4, 0x1}, {0x4, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x3, 0x401, 0xd, 0x6, 0x7f, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa49, 0x8, 0xa, 0x4, 0x7fff, 0x2, 0x1, 0x870]}}]}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}]}, 0x32c}, 0x1, 0x0, 0x0, 0x80}, 0x4004800) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000980)={'tunl0\x00', &(0x7f00000008c0)={'sit0\x00', r7, 0x8000, 0x20, 0x1, 0x9, {{0x16, 0x4, 0x1, 0x37, 0x58, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0xb, 0xbe, [@multicast2, @empty]}, @timestamp_addr={0x44, 0x1c, 0x89, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @timestamp={0x44, 0xc, 0xab, 0x0, 0x6, [0xb, 0x3]}, @timestamp={0x44, 0x10, 0x92, 0x0, 0x8, [0x46b, 0x0, 0x40]}]}}}}}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x1, 0x6, 0x1, 0x2, 0xffff8001}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.110' (ED25519) to the list of known hosts. [ 77.671479][ T5566] cgroup: Unknown subsys name 'net' [ 77.919972][ T5566] cgroup: Unknown subsys name 'cpuset' [ 77.987376][ T5566] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.678665][ T5566] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.365827][ T5580] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.377607][ T5583] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.383970][ T5583] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.400807][ T5583] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.401485][ T5583] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.403500][ T5583] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.404261][ T5583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.405921][ T5583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.430267][ T5580] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.430881][ T5580] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.517534][ T5580] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.535285][ T5590] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.550691][ T5583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.552508][ T5590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.553293][ T5583] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.554068][ T5583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.554067][ T5590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.569142][ T5583] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.591134][ T5590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.611181][ T5583] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.687463][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.713683][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.714526][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.716308][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.738500][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.498251][ T60] Bluetooth: hci1: command tx timeout [ 85.498359][ T60] Bluetooth: hci0: command tx timeout [ 85.656674][ T5583] Bluetooth: hci3: command tx timeout [ 85.736771][ T5583] Bluetooth: hci2: command tx timeout [ 85.816509][ T5583] Bluetooth: hci4: command tx timeout [ 85.928384][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.928998][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.929113][ T5578] bridge_slave_0: entered allmulticast mode [ 85.930904][ T5578] bridge_slave_0: entered promiscuous mode [ 85.999072][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.999166][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.999297][ T5578] bridge_slave_1: entered allmulticast mode [ 86.001124][ T5578] bridge_slave_1: entered promiscuous mode [ 86.048069][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.048205][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.048642][ T5591] bridge_slave_0: entered allmulticast mode [ 86.051565][ T5591] bridge_slave_0: entered promiscuous mode [ 86.102213][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.102318][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.102417][ T5577] bridge_slave_0: entered allmulticast mode [ 86.104014][ T5577] bridge_slave_0: entered promiscuous mode [ 86.105391][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.105509][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.105646][ T5588] bridge_slave_0: entered allmulticast mode [ 86.114804][ T5588] bridge_slave_0: entered promiscuous mode [ 86.131106][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.131377][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.131848][ T5591] bridge_slave_1: entered allmulticast mode [ 86.143108][ T5591] bridge_slave_1: entered promiscuous mode [ 86.202835][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.202971][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.203120][ T5577] bridge_slave_1: entered allmulticast mode [ 86.204911][ T5577] bridge_slave_1: entered promiscuous mode [ 86.206128][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.206225][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.206365][ T5588] bridge_slave_1: entered allmulticast mode [ 86.216234][ T5588] bridge_slave_1: entered promiscuous mode [ 86.264285][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.264372][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.264470][ T5586] bridge_slave_0: entered allmulticast mode [ 86.266070][ T5586] bridge_slave_0: entered promiscuous mode [ 86.295125][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.348431][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.348526][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.348624][ T5586] bridge_slave_1: entered allmulticast mode [ 86.350222][ T5586] bridge_slave_1: entered promiscuous mode [ 86.354286][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.475674][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.498766][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.502577][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.532552][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.558194][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.560525][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.563578][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.597816][ T5578] team0: Port device team_slave_0 added [ 86.638862][ T1235] cfg80211: failed to load regulatory.db [ 86.657069][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.692749][ T5578] team0: Port device team_slave_1 added [ 86.765608][ T5591] team0: Port device team_slave_0 added [ 86.809600][ T5577] team0: Port device team_slave_0 added [ 86.813726][ T5588] team0: Port device team_slave_0 added [ 86.843379][ T5591] team0: Port device team_slave_1 added [ 86.868639][ T5577] team0: Port device team_slave_1 added [ 86.871438][ T5588] team0: Port device team_slave_1 added [ 86.874351][ T5586] team0: Port device team_slave_0 added [ 86.908387][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.908401][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.908427][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.976652][ T5586] team0: Port device team_slave_1 added [ 87.003922][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.003935][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.003960][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.081324][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.081334][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.081351][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.124792][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.124827][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.124891][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.149280][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.149313][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.149368][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.217365][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.217374][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.217392][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.220325][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.220335][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.220353][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.221419][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.221428][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.221445][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.222466][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.222475][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.222495][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.340635][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.340669][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.340729][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.576810][ T5583] Bluetooth: hci0: command tx timeout [ 87.576819][ T60] Bluetooth: hci1: command tx timeout [ 87.736601][ T5583] Bluetooth: hci3: command tx timeout [ 87.816610][ T5583] Bluetooth: hci2: command tx timeout [ 87.863948][ T5578] hsr_slave_0: entered promiscuous mode [ 87.865383][ T5578] hsr_slave_1: entered promiscuous mode [ 87.897133][ T5583] Bluetooth: hci4: command tx timeout [ 87.982256][ T5591] hsr_slave_0: entered promiscuous mode [ 87.983030][ T5591] hsr_slave_1: entered promiscuous mode [ 87.983647][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 87.983709][ T5591] Cannot create hsr debugfs directory [ 88.003241][ T5588] hsr_slave_0: entered promiscuous mode [ 88.006195][ T5588] hsr_slave_1: entered promiscuous mode [ 88.009908][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 88.009960][ T5588] Cannot create hsr debugfs directory [ 88.033090][ T5577] hsr_slave_0: entered promiscuous mode [ 88.033893][ T5577] hsr_slave_1: entered promiscuous mode [ 88.034508][ T5577] debugfs: 'hsr0' already exists in 'hsr' [ 88.034522][ T5577] Cannot create hsr debugfs directory [ 88.090432][ T5586] hsr_slave_0: entered promiscuous mode [ 88.091317][ T5586] hsr_slave_1: entered promiscuous mode [ 88.091871][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 88.091885][ T5586] Cannot create hsr debugfs directory [ 89.050745][ T5578] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.098145][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.102925][ T5578] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.141074][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.160866][ T5578] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.190371][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.221782][ T5578] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.250050][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.345951][ T5588] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.371300][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.384200][ T5588] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.411285][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.416055][ T5588] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.450455][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.473264][ T5588] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.511663][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.647158][ T5577] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.664231][ T5583] Bluetooth: hci0: command tx timeout [ 89.664238][ T60] Bluetooth: hci1: command tx timeout [ 89.680058][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.684197][ T5577] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.729154][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.750383][ T5577] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.780523][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.808255][ T5577] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.816593][ T5583] Bluetooth: hci3: command tx timeout [ 89.840062][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.896663][ T5583] Bluetooth: hci2: command tx timeout [ 89.979147][ T5583] Bluetooth: hci4: command tx timeout [ 89.981044][ T5591] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.020728][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.035957][ T5591] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.069907][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.102119][ T5591] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.140825][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.155172][ T5591] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.180455][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.224102][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.293771][ T5586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.320145][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.324410][ T5586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.369044][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.395812][ T5586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.429612][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.435443][ T5586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.470191][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.484592][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.535556][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.549595][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.549769][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.593032][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.593820][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.703760][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.773843][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.774067][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.817126][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.817201][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.825219][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.930725][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.993043][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.993231][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.015498][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.069172][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.069645][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.172348][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.220057][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.220204][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.242944][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.283229][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.283521][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.379410][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.440888][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.441066][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.495149][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.504579][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.736786][ T5583] Bluetooth: hci0: command tx timeout [ 91.736814][ T5583] Bluetooth: hci1: command tx timeout [ 91.896626][ T60] Bluetooth: hci3: command tx timeout [ 91.976799][ T60] Bluetooth: hci2: command tx timeout [ 92.053696][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.057544][ T60] Bluetooth: hci4: command tx timeout [ 92.292685][ T5578] veth0_vlan: entered promiscuous mode [ 92.353695][ T5578] veth1_vlan: entered promiscuous mode [ 92.378080][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.600709][ T5578] veth0_macvtap: entered promiscuous mode [ 92.653194][ T5578] veth1_macvtap: entered promiscuous mode [ 92.691766][ T5588] veth0_vlan: entered promiscuous mode [ 92.723465][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.775565][ T5588] veth1_vlan: entered promiscuous mode [ 92.811095][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.845490][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.946006][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.088785][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.125279][ T5588] veth0_macvtap: entered promiscuous mode [ 93.153369][ T5577] veth0_vlan: entered promiscuous mode [ 93.201140][ T5588] veth1_macvtap: entered promiscuous mode [ 93.313044][ T5577] veth1_vlan: entered promiscuous mode [ 93.529179][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.561811][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.576127][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.576149][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.695606][ T5577] veth0_macvtap: entered promiscuous mode [ 93.749980][ T5586] veth0_vlan: entered promiscuous mode [ 93.772514][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.772528][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.813713][ T5577] veth1_macvtap: entered promiscuous mode [ 93.900225][ T5586] veth1_vlan: entered promiscuous mode [ 94.056354][ T5591] veth0_vlan: entered promiscuous mode [ 94.168596][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.170436][ T985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.170454][ T985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.212994][ T5591] veth1_vlan: entered promiscuous mode [ 94.233875][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.330730][ T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.330749][ T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.402501][ T5586] veth0_macvtap: entered promiscuous mode [ 94.553566][ T5586] veth1_macvtap: entered promiscuous mode [ 94.914073][ T5591] veth0_macvtap: entered promiscuous mode [ 95.060204][ T5591] veth1_macvtap: entered promiscuous mode [ 95.084261][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.123998][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.191966][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.191981][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.214409][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.288438][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.448331][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.448344][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.815242][ T5780] netlink: 'syz.2.6': attribute type 1 has an invalid length. [ 96.163566][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.163584][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.415117][ T5782] veth1_to_hsr: entered promiscuous mode [ 96.426256][ T5782] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7'. [ 96.426331][ T5782] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 96.978928][ T5794] warning: `syz.3.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.304201][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.304219][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.393226][ T37] audit: type=1107 audit(1786108062.645:2): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 97.657540][ T5806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 97.773971][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.773989][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.928911][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.201844][ T5815] netlink: 'syz.1.15': attribute type 12 has an invalid length. [ 98.201864][ T5815] netlink: 'syz.1.15': attribute type 29 has an invalid length. [ 98.201878][ T5815] netlink: 148 bytes leftover after parsing attributes in process `syz.1.15'. [ 98.201908][ T5815] netlink: 'syz.1.15': attribute type 3 has an invalid length. [ 98.201921][ T5815] netlink: 'syz.1.15': attribute type 2 has an invalid length. [ 98.201933][ T5815] netlink: 35 bytes leftover after parsing attributes in process `syz.1.15'. [ 98.276879][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.276898][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.388314][ T997] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.389578][ T997] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.667334][ T997] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.667620][ T997] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.778866][ T1004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.089776][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.090574][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.090949][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.091378][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.091730][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.092153][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.197131][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.197688][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.198083][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.266984][ T997] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.287015][ T997] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.287319][ T997] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.287577][ T997] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.287991][ T997] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.742802][ T12] wlan1: Trigger new scan to find an IBSS to join [ 100.596698][ T5834] syz.2.19 (5834) used greatest stack depth: 19328 bytes left [ 102.420907][ T5769] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.769904][ T5769] usb 1-1: Dual-Role OTG device on HNP port [ 102.773455][ T5769] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 102.773482][ T5769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.871580][ T5892] 9pnet_fd: p9_fd_create_tcp (5892): problem binding to privport [ 104.227596][ T5769] gspca_main: spca501-2.14.0 probing 0000:0000 [ 104.249365][ T5769] gspca_spca501: reg write: error -32 [ 104.249397][ T5769] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 104.249476][ T5769] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 104.287047][ T5769] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.777145][ T997] wlan1: Trigger new scan to find an IBSS to join [ 104.897975][ T5906] tc_dump_action: action bad kind [ 105.214756][ T5913] ======================================================= [ 105.214756][ T5913] WARNING: The mand mount option has been deprecated and [ 105.214756][ T5913] and is ignored by this kernel. Remove the mand [ 105.214756][ T5913] option from the mount to silence this warning. [ 105.214756][ T5913] ======================================================= [ 106.479781][ T5915] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 106.479971][ T5915] overlayfs: overlapping lowerdir path [ 106.872703][ T13] wlan1: Creating new IBSS network, BSSID d6:2c:ee:73:13:52 [ 107.236601][ T5710] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 107.290607][ T5941] overlayfs: missing 'lowerdir' [ 107.420048][ T5710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 107.420085][ T5710] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 107.420105][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.428677][ T5710] usb 5-1: config 0 descriptor?? [ 107.992742][ T5952] syz.0.51 uses obsolete (PF_INET,SOCK_PACKET) [ 108.161113][ T5710] hid (null): unknown global tag 0xd [ 108.532513][ T5710] wacom 0003:056A:00D0.0001: unknown global tag 0xd [ 108.539626][ T5710] wacom 0003:056A:00D0.0001: item 0 1 1 13 parsing failed [ 108.540333][ T5710] wacom 0003:056A:00D0.0001: parse failed [ 108.540439][ T5710] wacom 0003:056A:00D0.0001: probe with driver wacom failed with error -22 [ 108.798534][ T5710] usb 5-1: USB disconnect, device number 2 [ 109.296207][ T5948] syz.3.50 (5948) used greatest stack depth: 18640 bytes left [ 109.690201][ T5977] overlayfs: missing 'lowerdir' [ 111.167548][ T6004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.72'. [ 111.905696][ T6025] overlayfs: missing 'lowerdir' [ 113.158875][ T6041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.89'. [ 114.288920][ T6055] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.466136][ T6097] overlayfs: missing 'lowerdir' [ 119.956572][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 120.627227][ T6132] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 121.913941][ T6150] overlayfs: missing 'lowerdir' [ 122.801003][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 123.896342][ T6168] Zero length message leads to an empty skb [ 124.379588][ T6187] overlayfs: missing 'lowerdir' [ 126.710116][ T6235] netlink: 104 bytes leftover after parsing attributes in process `syz.2.155'. [ 127.140797][ T6243] overlayfs: missing 'lowerdir' [ 128.128988][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.161'. [ 130.664346][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 132.479405][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 132.479433][ T6315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.187'. [ 132.536648][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'. [ 132.651201][ T6315] syz_tun: entered promiscuous mode [ 132.663172][ T6315] macvlan2: entered allmulticast mode [ 132.663191][ T6315] syz_tun: entered allmulticast mode [ 132.705244][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.705353][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.122247][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 134.836348][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 135.495932][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'. [ 135.822242][ T997] wlan1: Trigger new scan to find an IBSS to join [ 135.871411][ T6370] ip6gre1: entered promiscuous mode [ 135.871434][ T6370] ip6gre1: entered allmulticast mode [ 136.484090][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.219'. [ 136.790585][ T6390] netlink: 48 bytes leftover after parsing attributes in process `syz.2.211'. [ 136.914720][ T6410] netlink: 'syz.0.223': attribute type 12 has an invalid length. [ 136.914741][ T6410] netlink: 'syz.0.223': attribute type 29 has an invalid length. [ 136.914770][ T6410] netlink: 148 bytes leftover after parsing attributes in process `syz.0.223'. [ 136.914790][ T6410] netlink: 'syz.0.223': attribute type 3 has an invalid length. [ 136.914803][ T6410] netlink: 'syz.0.223': attribute type 2 has an invalid length. [ 136.914815][ T6410] netlink: 35 bytes leftover after parsing attributes in process `syz.0.223'. [ 138.138716][ T6435] __nla_validate_parse: 1 callbacks suppressed [ 138.138734][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 138.373932][ T6438] netlink: 48 bytes leftover after parsing attributes in process `syz.3.233'. [ 138.779462][ T6455] netlink: 'syz.3.239': attribute type 12 has an invalid length. [ 138.779478][ T6455] netlink: 'syz.3.239': attribute type 29 has an invalid length. [ 138.779490][ T6455] netlink: 148 bytes leftover after parsing attributes in process `syz.3.239'. [ 138.779505][ T6455] netlink: 'syz.3.239': attribute type 3 has an invalid length. [ 138.779515][ T6455] netlink: 'syz.3.239': attribute type 2 has an invalid length. [ 138.779525][ T6455] netlink: 35 bytes leftover after parsing attributes in process `syz.3.239'. [ 138.875200][ T6457] overlayfs: missing 'lowerdir' [ 140.165920][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 140.811642][ T6479] netlink: 48 bytes leftover after parsing attributes in process `syz.4.248'. [ 140.925127][ T92] wlan1: Trigger new scan to find an IBSS to join [ 141.052984][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'. [ 141.198972][ T6490] netlink: 'syz.0.251': attribute type 12 has an invalid length. [ 141.198995][ T6490] netlink: 'syz.0.251': attribute type 29 has an invalid length. [ 141.199011][ T6490] netlink: 148 bytes leftover after parsing attributes in process `syz.0.251'. [ 141.199034][ T6490] netlink: 35 bytes leftover after parsing attributes in process `syz.0.251'. [ 141.463518][ T6495] overlayfs: missing 'lowerdir' [ 142.480553][ T6508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.259'. [ 142.657316][ T56] wlan1: Creating new IBSS network, BSSID a6:b4:c3:27:fa:79 [ 142.850363][ T6523] validate_nla: 2 callbacks suppressed [ 142.850380][ T6523] netlink: 'syz.2.264': attribute type 12 has an invalid length. [ 142.850395][ T6523] netlink: 'syz.2.264': attribute type 29 has an invalid length. [ 142.850414][ T6523] netlink: 'syz.2.264': attribute type 3 has an invalid length. [ 142.850427][ T6523] netlink: 'syz.2.264': attribute type 2 has an invalid length. [ 143.138063][ T6519] ip6gre1: entered promiscuous mode [ 143.138089][ T6519] ip6gre1: entered allmulticast mode [ 143.255658][ T6538] overlayfs: missing 'lowerdir' [ 144.200291][ T6545] __nla_validate_parse: 3 callbacks suppressed [ 144.200304][ T6545] netlink: 28 bytes leftover after parsing attributes in process `syz.4.273'. [ 144.549765][ T6560] netlink: 'syz.1.278': attribute type 12 has an invalid length. [ 144.549784][ T6560] netlink: 'syz.1.278': attribute type 29 has an invalid length. [ 144.549796][ T6560] netlink: 148 bytes leftover after parsing attributes in process `syz.1.278'. [ 144.549813][ T6560] netlink: 'syz.1.278': attribute type 3 has an invalid length. [ 144.549826][ T6560] netlink: 'syz.1.278': attribute type 2 has an invalid length. [ 144.549837][ T6560] netlink: 35 bytes leftover after parsing attributes in process `syz.1.278'. [ 144.848875][ T6572] overlayfs: missing 'lowerdir' [ 145.346454][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 145.611382][ T6573] ip6gre1: entered promiscuous mode [ 145.611405][ T6573] ip6gre1: entered allmulticast mode [ 145.914116][ T6599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.294'. [ 146.191178][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 146.239933][ T6618] overlayfs: missing 'lowerdir' [ 146.390290][ T6620] overlayfs: missing 'lowerdir' [ 147.544616][ T6659] overlayfs: missing 'lowerdir' [ 147.669700][ T6663] overlayfs: missing 'lowerdir' [ 148.335165][ T6671] netlink: 36 bytes leftover after parsing attributes in process `syz.0.324'. [ 151.018677][ T6708] netlink: 36 bytes leftover after parsing attributes in process `syz.0.339'. [ 151.855118][ T6720] netlink: 72 bytes leftover after parsing attributes in process `syz.4.346'. [ 152.048761][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 152.386829][ T6742] overlayfs: missing 'lowerdir' [ 153.404259][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 153.682556][ T6772] netlink: 'syz.2.368': attribute type 12 has an invalid length. [ 153.682576][ T6772] netlink: 'syz.2.368': attribute type 29 has an invalid length. [ 153.682589][ T6772] netlink: 148 bytes leftover after parsing attributes in process `syz.2.368'. [ 153.682607][ T6772] netlink: 'syz.2.368': attribute type 3 has an invalid length. [ 153.682619][ T6772] netlink: 'syz.2.368': attribute type 2 has an invalid length. [ 153.682631][ T6772] netlink: 35 bytes leftover after parsing attributes in process `syz.2.368'. [ 153.888346][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 154.516950][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 154.840418][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 154.903137][ T6819] netlink: 'syz.2.385': attribute type 12 has an invalid length. [ 154.903150][ T6819] netlink: 'syz.2.385': attribute type 29 has an invalid length. [ 154.903159][ T6819] netlink: 148 bytes leftover after parsing attributes in process `syz.2.385'. [ 154.903171][ T6819] netlink: 'syz.2.385': attribute type 3 has an invalid length. [ 154.903179][ T6819] netlink: 'syz.2.385': attribute type 2 has an invalid length. [ 155.637678][ T6847] netlink: 'syz.0.398': attribute type 12 has an invalid length. [ 155.637698][ T6847] netlink: 'syz.0.398': attribute type 29 has an invalid length. [ 156.422018][ T6880] __nla_validate_parse: 4 callbacks suppressed [ 156.422033][ T6880] netlink: 284 bytes leftover after parsing attributes in process `syz.3.407'. [ 157.220589][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'. [ 158.135154][ T6945] overlayfs: missing 'lowerdir' [ 159.313008][ T6959] tipc: Failed to remove unknown binding: 66,0,0/0:3857588576/3857588577 [ 159.345989][ T6959] tipc: Failed to remove unknown binding: 66,0,0/0:3857588576/3857588577 [ 159.351010][ T6959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.444'. [ 161.195114][ T7013] netlink: 72 bytes leftover after parsing attributes in process `syz.4.465'. [ 161.432596][ T7017] validate_nla: 3 callbacks suppressed [ 161.432614][ T7017] netlink: 'syz.4.467': attribute type 12 has an invalid length. [ 161.432628][ T7017] netlink: 'syz.4.467': attribute type 29 has an invalid length. [ 161.432641][ T7017] netlink: 148 bytes leftover after parsing attributes in process `syz.4.467'. [ 161.432660][ T7017] netlink: 'syz.4.467': attribute type 3 has an invalid length. [ 161.432672][ T7017] netlink: 'syz.4.467': attribute type 2 has an invalid length. [ 161.432684][ T7017] netlink: 35 bytes leftover after parsing attributes in process `syz.4.467'. [ 162.124983][ T7038] netlink: 72 bytes leftover after parsing attributes in process `syz.2.477'. [ 162.640823][ T7053] overlayfs: missing 'lowerdir' [ 164.180268][ T7075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.492'. [ 164.180294][ T7075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.492'. [ 165.378140][ T7099] overlayfs: missing 'lowerdir' [ 167.682437][ T7134] ip6gre1: entered promiscuous mode [ 167.682461][ T7134] ip6gre1: entered allmulticast mode [ 167.778640][ T7153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.522'. [ 168.305807][ T7171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.531'. [ 168.311068][ T7169] overlayfs: missing 'lowerdir' [ 169.441057][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.535'. [ 170.412758][ T5311] IPVS: starting estimator thread 0... [ 170.496736][ T7209] IPVS: using max 8 ests per chain, 19200 per kthread [ 171.094495][ T7227] tipc: Failed to remove unknown binding: 66,0,0/0:3316246669/3316246670 [ 171.112577][ T7227] tipc: Failed to remove unknown binding: 66,0,0/0:3316246669/3316246670 [ 172.297560][ T5583] Bluetooth: hci4: command 0x0405 tx timeout [ 172.799748][ T1004] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 175.654237][ T7333] netlink: 'syz.3.602': attribute type 3 has an invalid length. [ 183.643961][ T7452] tipc: Failed to remove unknown binding: 66,0,0/0:4207558078/4207558079 [ 183.644716][ T7452] tipc: Failed to remove unknown binding: 66,0,0/0:4207558078/4207558079 [ 183.648306][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.650'. [ 184.201492][ T7445] Can't find ip_set type hash:ip,mar [ 185.062788][ T7490] netlink: 'syz.4.665': attribute type 1 has an invalid length. [ 185.442497][ T7490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.687705][ T7492] bond1: (slave dummy0): making interface the new active one [ 185.734069][ T7492] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 185.734551][ T7498] : renamed from dummy0 (while UP) [ 186.446704][ T7535] netlink: 'syz.1.684': attribute type 12 has an invalid length. [ 186.446724][ T7535] netlink: 'syz.1.684': attribute type 29 has an invalid length. [ 186.446737][ T7535] netlink: 148 bytes leftover after parsing attributes in process `syz.1.684'. [ 186.446755][ T7535] netlink: 'syz.1.684': attribute type 3 has an invalid length. [ 186.446766][ T7535] netlink: 'syz.1.684': attribute type 2 has an invalid length. [ 186.446778][ T7535] netlink: 35 bytes leftover after parsing attributes in process `syz.1.684'. [ 187.229155][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 189.179752][ T7597] netlink: 48 bytes leftover after parsing attributes in process `syz.3.710'. [ 190.524581][ T7619] netlink: 48 bytes leftover after parsing attributes in process `syz.2.721'. [ 191.089744][ T7645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.730'. [ 192.993258][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.746'. [ 194.018924][ T7712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'. [ 194.149697][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.149760][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.358628][ T5703] IPVS: starting estimator thread 0... [ 194.446539][ T7726] IPVS: using max 9 ests per chain, 21600 per kthread [ 198.671016][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 198.945983][ T7816] team0: Port device team_slave_0 removed [ 199.063678][ T7823] syzkaller1: entered promiscuous mode [ 199.063702][ T7823] syzkaller1: entered allmulticast mode [ 201.050236][ T7930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.860'. [ 201.861616][ T7967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.878'. [ 202.304799][ T5712] IPVS: starting estimator thread 0... [ 202.396545][ T7984] IPVS: using max 9 ests per chain, 21600 per kthread [ 202.510558][ T7994] netlink: 56 bytes leftover after parsing attributes in process `syz.4.890'. [ 202.616650][ T7999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.892'. [ 203.329296][ T8033] netlink: 56 bytes leftover after parsing attributes in process `syz.0.910'. [ 203.522468][ T8043] openvswitch: netlink: Message has 8 unknown bytes. [ 203.843992][ T5769] IPVS: starting estimator thread 0... [ 203.926595][ T8061] IPVS: using max 8 ests per chain, 19200 per kthread [ 203.983669][ T985] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 205.432434][ T5769] IPVS: starting estimator thread 0... [ 205.516597][ T8136] IPVS: using max 11 ests per chain, 26400 per kthread [ 206.457136][ T5580] Bluetooth: hci4: command 0x0405 tx timeout [ 206.457167][ T5580] Bluetooth: hci2: command 0x0406 tx timeout [ 206.484393][ T5580] Bluetooth: hci1: command 0x0406 tx timeout [ 206.534716][ T5580] Bluetooth: hci0: command 0x0406 tx timeout [ 206.534744][ T5580] Bluetooth: hci3: command 0x0406 tx timeout [ 209.212772][ T8226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.998'. [ 210.059821][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 211.620924][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'. [ 211.869195][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805a543400: rx timeout, send abort [ 212.207232][ T8262] team0: Port device team_slave_0 removed [ 212.369786][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888031e8f000: rx timeout, send abort [ 212.370976][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805a543400: abort rx timeout. Force session deactivation [ 212.531547][ T8293] overlayfs: overlapping lowerdir path [ 212.869992][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888031e8f000: abort rx timeout. Force session deactivation [ 214.168380][ T8294] overlayfs: missing 'lowerdir' [ 215.875125][ T8322] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1037'. [ 217.481428][ T8330] overlayfs: overlapping lowerdir path [ 217.569376][ T8332] overlayfs: missing 'lowerdir' [ 218.287110][ T60] Bluetooth: hci4: command 0x0405 tx timeout [ 221.254542][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1062'. [ 223.714561][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1074'. [ 223.895023][ T8426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1077'. [ 224.512494][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 225.984765][ T8473] netlink: 'syz.0.1099': attribute type 12 has an invalid length. [ 225.984787][ T8473] netlink: 'syz.0.1099': attribute type 29 has an invalid length. [ 225.984815][ T8473] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1099'. [ 225.984836][ T8473] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1099'. [ 226.154942][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 227.122003][ T8497] netlink: 'syz.1.1111': attribute type 12 has an invalid length. [ 227.122039][ T8497] netlink: 'syz.1.1111': attribute type 29 has an invalid length. [ 227.122054][ T8497] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1111'. [ 227.122161][ T8497] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1111'. [ 227.309772][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1113'. [ 227.348075][ T8506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.438773][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 228.028190][ T8532] netlink: 'syz.4.1123': attribute type 12 has an invalid length. [ 228.028211][ T8532] netlink: 'syz.4.1123': attribute type 29 has an invalid length. [ 228.028224][ T8532] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1123'. [ 228.028241][ T8532] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1123'. [ 228.719388][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1129'. [ 228.741445][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1130'. [ 229.149356][ T8567] netlink: 'syz.3.1134': attribute type 12 has an invalid length. [ 229.149376][ T8567] netlink: 'syz.3.1134': attribute type 29 has an invalid length. [ 229.149390][ T8567] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1134'. [ 229.149408][ T8567] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1134'. [ 231.347029][ T8664] netlink: 'syz.2.1172': attribute type 39 has an invalid length. [ 231.785978][ T8679] Bluetooth: MGMT ver 1.23 [ 232.422885][ T8706] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1186'. [ 233.439917][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 234.367357][ T8750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1200'. [ 234.367402][ T8750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1200'. [ 235.045807][ T92] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 235.816597][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 238.342568][ T8804] overlayfs: missing 'lowerdir' [ 239.486170][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.497043][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.523889][ T8846] overlayfs: missing 'lowerdir' [ 241.864734][ T8853] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1236'. [ 243.014985][ T8889] overlayfs: missing 'lowerdir' [ 244.288041][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1252'. [ 244.288077][ T8895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.887678][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1264'. [ 244.887712][ T8917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.130016][ T8928] netlink: 'syz.3.1269': attribute type 39 has an invalid length. [ 245.565615][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1278'. [ 245.565651][ T8950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.887698][ T8965] netlink: 'syz.3.1282': attribute type 12 has an invalid length. [ 245.887719][ T8965] netlink: 'syz.3.1282': attribute type 29 has an invalid length. [ 245.887732][ T8965] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1282'. [ 245.887750][ T8965] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1282'. [ 246.181825][ T8977] netlink: 'syz.2.1288': attribute type 39 has an invalid length. [ 246.382438][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1292'. [ 246.382474][ T8985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.550369][ T8992] netlink: 'syz.1.1296': attribute type 12 has an invalid length. [ 246.550389][ T8992] netlink: 'syz.1.1296': attribute type 29 has an invalid length. [ 246.550402][ T8992] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1296'. [ 246.550419][ T8992] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1296'. [ 246.824248][ T9006] netlink: 'syz.4.1303': attribute type 39 has an invalid length. [ 247.203161][ T9024] netlink: 'syz.0.1310': attribute type 12 has an invalid length. [ 247.203181][ T9024] netlink: 'syz.0.1310': attribute type 29 has an invalid length. [ 247.203194][ T9024] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1310'. [ 247.203211][ T9024] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1310'. [ 247.651993][ T9045] netlink: 'syz.0.1321': attribute type 39 has an invalid length. [ 247.692580][ T9047] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1319'. [ 247.841210][ T9055] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1326'. [ 247.841233][ T9055] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1326'. [ 248.325940][ T9077] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1336'. [ 250.015220][ T9113] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1352'. [ 250.749862][ T9133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1359'. [ 250.749900][ T9133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.358944][ T9148] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1367'. [ 251.561517][ T9159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1370'. [ 251.561551][ T9159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.659246][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'. [ 252.742952][ T9210] overlay: Unknown parameter '/' [ 253.804397][ T9212] overlayfs: missing 'lowerdir' [ 254.660052][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 254.770207][ T9246] overlay: Unknown parameter '/' [ 254.832173][ T9247] overlayfs: missing 'lowerdir' [ 255.639223][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.639287][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.957129][ T9260] tipc: Failed to remove unknown binding: 66,0,0/0:2247238987/2247238988 [ 255.982566][ T9260] tipc: Failed to remove unknown binding: 66,0,0/0:2247238987/2247238988 [ 255.988626][ T9260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1415'. [ 256.241854][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 256.460839][ T9282] overlay: Unknown parameter '/' [ 256.525335][ T9284] overlayfs: missing 'lowerdir' [ 257.517826][ T9296] tipc: Failed to remove unknown binding: 66,0,0/0:4250570338/4250570339 [ 257.518201][ T9296] tipc: Failed to remove unknown binding: 66,0,0/0:4250570338/4250570339 [ 257.521690][ T9296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1428'. [ 259.242751][ T9331] tipc: Failed to remove unknown binding: 66,0,0/0:1603714643/1603714644 [ 259.256605][ T9331] tipc: Failed to remove unknown binding: 66,0,0/0:1603714643/1603714644 [ 259.274647][ T9331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1443'. [ 259.298285][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1445'. [ 259.487242][ T9344] validate_nla: 5 callbacks suppressed [ 259.487260][ T9344] netlink: 'syz.2.1447': attribute type 1 has an invalid length. [ 259.914149][ T9354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1451'. [ 260.642479][ T9344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.927945][ T9350] bond1: (slave veth3): Enslaving as an active interface with a down link [ 260.965874][ T9372] tipc: Failed to remove unknown binding: 66,0,0/0:4034490680/4034490681 [ 260.966135][ T9372] tipc: Failed to remove unknown binding: 66,0,0/0:4034490680/4034490681 [ 261.047310][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1459'. [ 262.923296][ T9413] tipc: Failed to remove unknown binding: 66,0,0/0:3450537685/3450537686 [ 262.923575][ T9413] tipc: Failed to remove unknown binding: 66,0,0/0:3450537685/3450537686 [ 264.729793][ T9456] tipc: Failed to remove unknown binding: 66,0,0/0:2357812297/2357812298 [ 264.730092][ T9456] tipc: Failed to remove unknown binding: 66,0,0/0:2357812297/2357812298 [ 264.872940][ T9448] syzkaller0: entered promiscuous mode [ 264.872957][ T9448] syzkaller0: entered allmulticast mode [ 266.413369][ T9485] tipc: Failed to remove unknown binding: 66,0,0/0:3727020284/3727020285 [ 266.413719][ T9485] tipc: Failed to remove unknown binding: 66,0,0/0:3727020284/3727020285 [ 266.414850][ T9485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1501'. [ 267.573500][ T5896] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 277.643982][ T9517] netlink: 'syz.4.1509': attribute type 12 has an invalid length. [ 277.644005][ T9517] netlink: 'syz.4.1509': attribute type 29 has an invalid length. [ 277.644019][ T9517] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1509'. [ 277.644038][ T9517] netlink: 'syz.4.1509': attribute type 3 has an invalid length. [ 277.644051][ T9517] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1509'. [ 277.863061][ T9521] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1511'. [ 279.103508][ T9543] overlayfs: missing 'lowerdir' [ 280.079689][ T9549] tipc: Failed to remove unknown binding: 66,0,0/0:1643009132/1643009133 [ 280.080132][ T9545] tipc: Failed to remove unknown binding: 66,0,0/0:1643009132/1643009133 [ 280.085954][ T9545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1521'. [ 280.237240][ T9553] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1523'. [ 280.237258][ T9553] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 280.286138][ T9551] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1522'. [ 280.404012][ T9561] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1526'. [ 280.755673][ T9578] netlink: 'syz.3.1533': attribute type 12 has an invalid length. [ 280.755693][ T9578] netlink: 'syz.3.1533': attribute type 29 has an invalid length. [ 280.755705][ T9578] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1533'. [ 280.755722][ T9578] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1533'. [ 280.845341][ T9583] tipc: Failed to remove unknown binding: 66,0,0/0:651167197/651167198 [ 280.853544][ T9583] tipc: Failed to remove unknown binding: 66,0,0/0:651167197/651167198 [ 280.863119][ T9583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1535'. [ 281.652445][ T9613] tipc: Failed to remove unknown binding: 66,0,0/0:3816510083/3816510084 [ 281.951259][ T9626] netlink: 'syz.1.1555': attribute type 4 has an invalid length. [ 282.394953][ T9643] netlink: 'syz.1.1562': attribute type 1 has an invalid length. [ 282.548721][ T9649] tipc: Failed to remove unknown binding: 66,0,0/0:286951192/286951193 [ 282.582726][ T9645] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 282.892365][ T9643] veth3: entered promiscuous mode [ 282.895928][ T9643] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 282.919335][ T5896] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 282.944922][ T9645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.010821][ T9657] __nla_validate_parse: 5 callbacks suppressed [ 283.010836][ T9657] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1567'. [ 283.089690][ T5896] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 283.521064][ T9683] tipc: Failed to remove unknown binding: 66,0,0/0:146229639/146229640 [ 283.546152][ T9683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1576'. [ 283.784808][ T9696] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1581'. [ 284.473527][ T9715] netlink: 'syz.1.1590': attribute type 12 has an invalid length. [ 284.534042][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1591'. [ 285.025008][ T9722] netlink: 'syz.1.1593': attribute type 12 has an invalid length. [ 285.025028][ T9722] netlink: 'syz.1.1593': attribute type 29 has an invalid length. [ 285.025040][ T9722] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1593'. [ 285.025056][ T9722] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1593'. [ 285.686709][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'. [ 285.686736][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'. [ 285.686752][ T9759] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1608'. [ 285.816249][ T9761] netlink: 'syz.2.1609': attribute type 12 has an invalid length. [ 285.816269][ T9761] netlink: 'syz.2.1609': attribute type 29 has an invalid length. [ 285.816282][ T9761] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1609'. [ 286.448000][ T9795] netlink: 'syz.4.1625': attribute type 12 has an invalid length. [ 286.448019][ T9795] netlink: 'syz.4.1625': attribute type 29 has an invalid length. [ 286.667244][ T9809] tipc: Failed to remove unknown binding: 66,0,0/0:1938572803/1938572805 [ 286.667278][ T9809] tipc: Failed to remove unknown binding: 66,0,0/0:1938572803/1938572804 [ 287.384748][ T9829] netlink: 'syz.1.1636': attribute type 12 has an invalid length. [ 287.384768][ T9829] netlink: 'syz.1.1636': attribute type 29 has an invalid length. [ 287.916013][ T9845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.201082][ T9858] netlink: 'syz.0.1647': attribute type 12 has an invalid length. [ 288.201106][ T9858] __nla_validate_parse: 8 callbacks suppressed [ 288.201119][ T9858] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1647'. [ 288.201139][ T9858] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1647'. [ 289.276124][ T9892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1664'. [ 289.299757][ T9892] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1664'. [ 291.188354][ T9983] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1698'. [ 291.441628][ T9988] validate_nla: 2 callbacks suppressed [ 291.441645][ T9988] netlink: 'syz.3.1700': attribute type 1 has an invalid length. [ 291.727526][ T9992] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 291.885705][T10005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1706'. [ 291.927290][ T9996] veth3: entered promiscuous mode [ 291.935909][ T9996] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 292.791788][T10015] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1709'. [ 292.977033][T10032] tipc: Failed to remove unknown binding: 66,0,0/0:1380411328/1380411329 [ 292.977977][T10032] tipc: Failed to remove unknown binding: 66,0,0/0:1380411328/1380411329 [ 292.980402][T10032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1715'. [ 293.229729][T10042] netlink: 'syz.3.1718': attribute type 1 has an invalid length. [ 293.366435][T10049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1718'. [ 293.435221][T10049] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.543889][T10090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.708682][T10094] tipc: Failed to remove unknown binding: 66,0,0/0:1876957450/1876957452 [ 294.708716][T10094] tipc: Failed to remove unknown binding: 66,0,0/0:1876957450/1876957451 [ 294.710422][T10094] tipc: Failed to remove unknown binding: 66,0,0/0:1876957450/1876957452 [ 294.710454][T10094] tipc: Failed to remove unknown binding: 66,0,0/0:1876957450/1876957451 [ 295.088678][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1747'. [ 295.476253][T10115] syzkaller0: entered promiscuous mode [ 295.476281][T10115] syzkaller0: entered allmulticast mode [ 295.565453][T10126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.002445][T10138] netlink: 'syz.1.1758': attribute type 1 has an invalid length. [ 296.120286][T10142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1758'. [ 296.265151][T10149] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1762'. [ 296.357212][T10142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.386544][ T60] Bluetooth: hci4: command 0x0405 tx timeout [ 296.992430][T10176] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1773'. [ 297.082902][T10178] netlink: 'syz.2.1774': attribute type 1 has an invalid length. [ 298.800779][ T985] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 306.753567][T10178] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 306.824656][T10182] netlink: 'syz.4.1775': attribute type 1 has an invalid length. [ 307.045569][T10196] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1775'. [ 307.098283][T10185] bond2: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 307.218679][T10192] veth3: entered promiscuous mode [ 307.589505][T10196] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.603645][ T67] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 307.754930][T10209] ip6gre1: entered promiscuous mode [ 307.754953][T10209] ip6gre1: entered allmulticast mode [ 307.761376][ T997] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 307.985572][T10234] netlink: 'syz.2.1793': attribute type 1 has an invalid length. [ 308.367268][T10254] netlink: 'syz.0.1802': attribute type 1 has an invalid length. [ 308.563497][T10263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1802'. [ 309.249615][T10260] veth3: entered promiscuous mode [ 309.394130][T10263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.728452][T10298] netlink: 'syz.4.1819': attribute type 1 has an invalid length. [ 309.942215][T10309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1823'. [ 309.942960][T10309] netlink: 'syz.3.1823': attribute type 9 has an invalid length. [ 309.942976][T10309] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1823'. [ 310.242010][T10320] netlink: 'syz.3.1827': attribute type 1 has an invalid length. [ 310.312890][T10324] tipc: Failed to remove unknown binding: 66,0,0/0:3397652080/3397652082 [ 310.312933][T10324] tipc: Failed to remove unknown binding: 66,0,0/0:3397652080/3397652081 [ 310.313419][T10324] tipc: Failed to remove unknown binding: 66,0,0/0:3397652080/3397652082 [ 310.313450][T10324] tipc: Failed to remove unknown binding: 66,0,0/0:3397652080/3397652081 [ 310.410656][T10320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1827'. [ 310.508702][T10325] veth5: entered promiscuous mode [ 310.657896][T10320] 8021q: adding VLAN 0 to HW filter on device bond3 [ 310.805037][T10344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1834'. [ 310.805860][T10344] netlink: 'syz.4.1834': attribute type 9 has an invalid length. [ 310.805874][T10344] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1834'. [ 310.973565][T10350] netlink: 'syz.3.1835': attribute type 1 has an invalid length. [ 311.308590][T10369] tipc: Failed to remove unknown binding: 66,0,0/0:967410869/967410871 [ 311.308624][T10369] tipc: Failed to remove unknown binding: 66,0,0/0:967410869/967410870 [ 311.308821][T10369] tipc: Failed to remove unknown binding: 66,0,0/0:967410869/967410871 [ 311.308849][T10369] tipc: Failed to remove unknown binding: 66,0,0/0:967410869/967410870 [ 311.815842][T10390] netlink: 'syz.3.1851': attribute type 1 has an invalid length. [ 312.697312][T10436] netlink: 'syz.0.1870': attribute type 1 has an invalid length. [ 312.925721][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1869'. [ 313.685931][T10482] netlink: 'syz.0.1887': attribute type 9 has an invalid length. [ 313.685952][T10482] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1887'. [ 314.342768][T10516] netlink: 'syz.4.1900': attribute type 9 has an invalid length. [ 314.342787][T10516] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1900'. [ 314.792566][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 314.792673][T10537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1910'. [ 314.885106][T10541] netlink: 'syz.1.1912': attribute type 9 has an invalid length. [ 314.885123][T10541] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1912'. [ 315.115821][T10554] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1918'. [ 315.452772][T10571] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1923'. [ 315.823218][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1925'. [ 315.836079][T10576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1925'. [ 317.021485][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.021548][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.213063][T10604] netlink: 'syz.4.1938': attribute type 1 has an invalid length. [ 317.299188][T10604] 8021q: adding VLAN 0 to HW filter on device bond4 [ 318.585662][T10617] __nla_validate_parse: 3 callbacks suppressed [ 318.585681][T10617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1941'. [ 318.845952][T10625] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 318.896533][T10621] gtp0: entered promiscuous mode [ 318.896555][T10621] gtp0: entered allmulticast mode [ 318.942136][T10621] team0: Device gtp0 is of different type [ 319.032462][T10626] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1944'. [ 320.011241][T10653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1956'. [ 320.295654][T10658] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 321.059897][T10673] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1965'. [ 321.622246][T10686] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 321.733282][T10690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1971'. [ 321.749269][T10690] netlink: 'syz.3.1971': attribute type 9 has an invalid length. [ 321.749286][T10690] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1971'. [ 322.286348][ C0] sched: DL replenish lagged too much [ 322.455569][T10706] overlayfs: overlapping lowerdir path [ 322.507453][T10707] overlayfs: missing 'lowerdir' [ 323.963592][T10721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.062330][T10725] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1985'. [ 324.064673][T10725] netlink: 'syz.4.1985': attribute type 9 has an invalid length. [ 324.064690][T10725] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1985'. [ 324.420918][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1988'. [ 324.420950][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1988'. [ 324.759661][T10746] overlayfs: failed to clone lowerpath [ 324.819864][T10747] overlayfs: missing 'lowerdir' [ 326.058848][T10763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1999'. [ 326.061254][T10763] netlink: 'syz.1.1999': attribute type 9 has an invalid length. [ 326.061271][T10763] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1999'. [ 327.269157][T10780] tipc: Failed to remove unknown binding: 66,0,0/0:1062101406/1062101408 [ 327.269189][T10780] tipc: Failed to remove unknown binding: 66,0,0/0:1062101406/1062101407 [ 327.270351][T10780] tipc: Failed to remove unknown binding: 66,0,0/0:1062101406/1062101408 [ 327.270375][T10780] tipc: Failed to remove unknown binding: 66,0,0/0:1062101406/1062101407 [ 327.802298][T10791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2010'. [ 327.805238][T10791] netlink: 'syz.1.2010': attribute type 9 has an invalid length. [ 327.805255][T10791] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2010'. [ 328.250024][T10802] overlayfs: failed to clone lowerpath [ 328.305082][T10803] overlayfs: missing 'lowerdir' [ 329.308152][T10813] tipc: Failed to remove unknown binding: 66,0,0/0:3260251587/3260251588 [ 329.310036][T10813] tipc: Failed to remove unknown binding: 66,0,0/0:3260251587/3260251588 [ 329.618894][T10823] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2020'. [ 329.728247][ T5893] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 330.374146][T10839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2024'. [ 330.428584][T10842] netlink: 'syz.3.2024': attribute type 9 has an invalid length. [ 330.428602][T10842] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2024'. [ 330.699235][T10851] overlayfs: failed to clone lowerpath [ 330.754603][T10852] overlayfs: missing 'lowerdir' [ 331.843110][T10859] netlink: 'syz.4.2031': attribute type 1 has an invalid length. [ 331.862166][T10860] tipc: Failed to remove unknown binding: 66,0,0/0:675247174/675247175 [ 331.862697][T10860] tipc: Failed to remove unknown binding: 66,0,0/0:675247174/675247175 [ 334.602058][T10859] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 336.141073][T10894] overlayfs: failed to clone lowerpath [ 336.189539][T10895] overlayfs: missing 'lowerdir' [ 337.013600][T10900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2044'. [ 337.884109][T10925] tipc: Failed to remove unknown binding: 66,0,0/0:544403135/544403136 [ 337.885351][T10925] tipc: Failed to remove unknown binding: 66,0,0/0:544403135/544403136 [ 338.447030][T10934] netlink: 'syz.1.2056': attribute type 1 has an invalid length. [ 339.477699][T10955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2065'. [ 339.744865][T10957] bridge0: port 3(batadv1) entered blocking state [ 339.744990][T10957] bridge0: port 3(batadv1) entered disabled state [ 339.763010][T10957] batadv1: entered allmulticast mode [ 339.806006][T10957] batadv1: entered promiscuous mode [ 340.210779][ T41] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 340.210800][ T41] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 340.365476][T10968] netlink: 'syz.1.2070': attribute type 1 has an invalid length. [ 340.948090][T10983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2078'. [ 342.072244][T11011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2092'. [ 342.328797][T11016] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 343.472280][T11049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2106'. [ 343.812808][T11056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2108'. [ 344.295706][T11066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2112'. [ 345.611187][T11099] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2127'. [ 345.624295][T11099] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 346.819643][T11134] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2143'. [ 346.819665][T11134] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 347.714685][T11157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2154'. [ 351.096410][ T60] Bluetooth: hci4: command 0x0405 tx timeout [ 351.511910][T11237] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2186'. [ 351.513023][T11236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2185'. [ 351.863812][T11241] netlink: 'syz.0.2188': attribute type 29 has an invalid length. [ 351.863832][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2188'. [ 351.863856][T11241] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 353.436833][T11268] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2200'. [ 353.793266][T11274] netlink: 'syz.0.2203': attribute type 29 has an invalid length. [ 353.793286][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2203'. [ 353.793308][T11274] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 354.804357][T11299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2214'. [ 355.180469][T11305] netlink: 'syz.2.2218': attribute type 29 has an invalid length. [ 355.180488][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 355.180511][T11305] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 355.740583][T11322] overlayfs: missing 'lowerdir' [ 357.560107][T11344] netlink: 'syz.2.2234': attribute type 29 has an invalid length. [ 357.560128][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2234'. [ 357.560150][T11344] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 358.065022][T11356] overlayfs: missing 'lowerdir' [ 359.914378][T11381] netlink: 'syz.3.2248': attribute type 29 has an invalid length. [ 359.914397][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2248'. [ 359.914420][T11381] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 361.048018][T11410] netlink: 'syz.1.2262': attribute type 29 has an invalid length. [ 361.048037][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2262'. [ 361.048063][T11410] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 361.076966][ T41] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 361.338678][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2264'. [ 361.676928][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2267'. [ 362.139808][T11434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2272'. [ 362.324829][T11442] netlink: 'syz.0.2275': attribute type 29 has an invalid length. [ 362.324871][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2275'. [ 362.365559][T11444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2274'. [ 362.389096][T11442] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 363.020409][T11449] IPVS: persistence engine module ip_vs_pe_ not found [ 363.186798][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 363.613034][T11471] netlink: 'syz.0.2288': attribute type 29 has an invalid length. [ 363.613053][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 363.858328][T11471] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 364.101047][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2291'. [ 365.033199][T11506] netlink: 'syz.3.2304': attribute type 29 has an invalid length. [ 365.033219][T11506] __nla_validate_parse: 2 callbacks suppressed [ 365.033230][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2304'. [ 365.033252][T11506] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 366.404343][T11539] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2318'. [ 366.420429][T11541] netlink: 'syz.4.2319': attribute type 29 has an invalid length. [ 366.420446][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2319'. [ 366.420467][T11541] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 366.495891][T11544] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2321'. [ 366.495911][T11544] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 367.522216][T11572] netlink: 'syz.3.2335': attribute type 29 has an invalid length. [ 367.522237][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 367.522259][T11572] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 368.331116][T11587] netlink: 'syz.2.2340': attribute type 11 has an invalid length. [ 368.901489][T11599] netlink: 'syz.0.2346': attribute type 29 has an invalid length. [ 368.901509][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2346'. [ 369.120912][T11576] bridge_slave_0: left allmulticast mode [ 369.120941][T11576] bridge_slave_0: left promiscuous mode [ 369.239204][T11576] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.722131][T11576] bridge_slave_1: left allmulticast mode [ 369.722160][T11576] bridge_slave_1: left promiscuous mode [ 369.722601][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.887304][T11576] bond0: (slave bond_slave_0): Releasing backup interface [ 369.967827][T11576] bond0: (slave bond_slave_1): Releasing backup interface [ 369.976604][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 369.976784][ T5590] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 370.074864][T11576] team0: Port device team_slave_1 removed [ 370.083856][T11576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.083879][T11576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.125989][T11576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.126010][T11576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.151869][T11576] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 370.191359][T11599] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 372.334966][T11659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2372'. [ 373.564566][T11693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2387'. [ 373.814270][T11695] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 373.932585][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2391'. [ 374.599125][T11718] overlay: Unknown parameter '/' [ 374.670881][T11719] overlayfs: missing 'lowerdir' [ 374.937236][ T5590] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 374.939079][ T5590] Bluetooth: hci0: command 0x0406 tx timeout [ 376.208130][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2405'. [ 376.717084][T11758] overlay: Unknown parameter '/' [ 376.779301][T11760] overlayfs: missing 'lowerdir' [ 378.459196][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.459260][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.000065][T11799] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2429'. [ 379.000087][T11799] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 379.577912][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2423'. [ 380.210407][T11826] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2441'. [ 380.210429][T11826] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 380.917046][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2450'. [ 380.917070][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2450'. [ 381.321889][T11857] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2455'. [ 381.321911][T11857] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 382.979343][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2474'. [ 382.979366][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2474'. [ 383.491238][ T37] audit: type=1326 audit(1786108348.745:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11904 comm="syz.4.2478" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f406e0d9 code=0x7ffc0000 [ 383.491288][ T37] audit: type=1326 audit(1786108348.745:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11904 comm="syz.4.2478" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f31f406e0d9 code=0x7ffc0000 [ 383.491329][ T37] audit: type=1326 audit(1786108348.745:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11904 comm="syz.4.2478" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f406e0d9 code=0x7ffc0000 [ 383.636438][ T37] audit: type=1326 audit(1786108348.745:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11904 comm="syz.4.2478" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f31f406e0d9 code=0x7ffc0000 [ 383.636487][ T37] audit: type=1326 audit(1786108348.865:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11904 comm="syz.4.2478" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f406e0d9 code=0x7ffc0000 [ 383.636531][ T37] audit: type=1326 audit(1786108348.865:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11904 comm="syz.4.2478" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f406e0d9 code=0x7ffc0000 [ 383.636572][ T37] audit: type=1326 audit(1786108348.875:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11904 comm="syz.4.2478" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31f406e0d9 code=0x7ffc0000 [ 383.636613][ T37] audit: type=1326 audit(1786108348.875:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11904 comm="syz.4.2478" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f406e0d9 code=0x7ffc0000 [ 383.636653][ T37] audit: type=1326 audit(1786108348.875:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11904 comm="syz.4.2478" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f406e0d9 code=0x7ffc0000 [ 383.636695][ T37] audit: type=1326 audit(1786108348.875:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11904 comm="syz.4.2478" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f31f406e0d9 code=0x7ffc0000 [ 385.097388][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2494'. [ 385.097413][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2494'. [ 385.923402][T11957] netlink: 'syz.3.2501': attribute type 11 has an invalid length. [ 385.964630][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2502'. [ 386.110191][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2502'. [ 386.198515][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2503'. [ 386.467609][T11958] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 386.643976][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2502'. [ 387.005788][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2509'. [ 387.668160][T11960] hsr_slave_1 (unregistering): left promiscuous mode [ 387.760605][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2516'. [ 388.554929][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2525'. [ 389.903316][T12044] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2539'. [ 390.880077][T12056] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2546'. [ 391.443842][T12066] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2550'. [ 391.692698][T12070] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 391.988898][ T5893] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 392.102376][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2557'. [ 392.591151][T12093] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.2560'. [ 392.808206][ T5711] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 393.034800][ T5711] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.034867][ T5711] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.034889][ T5711] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 393.094813][ T5711] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 393.094843][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.094865][ T5711] usb 4-1: Product: syz [ 393.094880][ T5711] usb 4-1: Manufacturer: syz [ 393.094895][ T5711] usb 4-1: SerialNumber: syz [ 393.563103][T12111] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2569'. [ 393.637050][ T5711] snd-usb-caiaq 4-1:1.0: invalid EPs [ 393.637084][ T5711] usb 4-1: unable to init card! (ret=-22) [ 393.678506][ T5711] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 394.078924][ T37] kauditd_printk_skb: 43 callbacks suppressed [ 394.078942][ T37] audit: type=1326 audit(1786108359.335:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12087 comm="syz.3.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 394.080651][ T37] audit: type=1326 audit(1786108359.335:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12087 comm="syz.3.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 394.080967][ T37] audit: type=1326 audit(1786108359.335:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12087 comm="syz.3.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 394.081333][ T37] audit: type=1326 audit(1786108359.335:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12087 comm="syz.3.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 394.082316][ T37] audit: type=1326 audit(1786108359.335:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12087 comm="syz.3.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 394.082736][ T37] audit: type=1326 audit(1786108359.335:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12087 comm="syz.3.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 394.083854][ T37] audit: type=1326 audit(1786108359.335:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12087 comm="syz.3.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 394.277534][ T37] audit: type=1326 audit(1786108359.335:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12087 comm="syz.3.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 394.277583][ T37] audit: type=1326 audit(1786108359.535:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12087 comm="syz.3.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 394.278886][ T37] audit: type=1326 audit(1786108359.535:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12087 comm="syz.3.2561" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 395.673911][T12147] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2582'. [ 395.994683][ T5711] usb 4-1: USB disconnect, device number 2 [ 399.696575][T12179] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 399.740459][ T60] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 402.080946][T12225] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 402.343638][T12238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2616'. [ 402.716406][ T915] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 402.951763][ T915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.951904][ T915] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.951927][ T915] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 403.020022][ T915] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 403.020053][ T915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.020074][ T915] usb 4-1: Product: syz [ 403.020089][ T915] usb 4-1: Manufacturer: syz [ 403.020104][ T915] usb 4-1: SerialNumber: syz [ 403.345828][ T915] snd-usb-caiaq 4-1:1.0: invalid EPs [ 403.345849][ T915] usb 4-1: unable to init card! (ret=-22) [ 403.367247][ T915] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 403.650250][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 403.650267][ T37] audit: type=1326 audit(1786108368.895:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12241 comm="syz.3.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 403.650310][ T37] audit: type=1326 audit(1786108368.905:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12241 comm="syz.3.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 403.650434][ T37] audit: type=1326 audit(1786108368.905:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12241 comm="syz.3.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 403.654504][ T37] audit: type=1326 audit(1786108368.905:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12241 comm="syz.3.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 403.654552][ T37] audit: type=1326 audit(1786108368.905:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12241 comm="syz.3.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 403.795664][ T37] audit: type=1326 audit(1786108369.025:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12241 comm="syz.3.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 403.795715][ T37] audit: type=1326 audit(1786108369.025:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12241 comm="syz.3.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 403.795769][ T37] audit: type=1326 audit(1786108369.025:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12241 comm="syz.3.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 403.795811][ T37] audit: type=1326 audit(1786108369.025:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12241 comm="syz.3.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 403.905907][ T37] audit: type=1326 audit(1786108369.145:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12241 comm="syz.3.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7ff356dee0d9 code=0x7ffc0000 [ 407.402234][T12272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2629'. [ 407.461692][ T5711] usb 4-1: USB disconnect, device number 3 [ 422.511179][T12309] tipc: Failed to remove unknown binding: 66,0,0/0:3897721765/3897721766 [ 422.512447][T12309] tipc: Failed to remove unknown binding: 66,0,0/0:3897721765/3897721766 [ 422.543422][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2643'. [ 422.910022][ T5800] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 423.266236][T12326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2651'. [ 423.687602][T12335] netlink: 'syz.1.2655': attribute type 12 has an invalid length. [ 423.687623][T12335] netlink: 'syz.1.2655': attribute type 29 has an invalid length. [ 423.687636][T12335] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2655'. [ 423.793478][T12339] tipc: Failed to remove unknown binding: 66,0,0/0:4275412283/4275412284 [ 423.793811][T12339] tipc: Failed to remove unknown binding: 66,0,0/0:4275412283/4275412284 [ 423.795237][T12339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2657'. [ 423.902988][T12337] netlink: 'syz.2.2656': attribute type 11 has an invalid length. [ 424.373304][ T5590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 424.674532][ T5590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 424.686673][ T5590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 425.473401][ T5590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 425.474259][ T5590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 426.001108][T12361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2663'. [ 426.117013][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2664'. [ 426.264569][T12364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2665'. [ 426.264597][T12364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2665'. [ 426.699810][ T5590] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 427.331491][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 427.331508][ T37] audit: type=1326 audit(1786108392.585:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.1.2670" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33332fe0d9 code=0x7ffc0000 [ 427.333100][ T37] audit: type=1326 audit(1786108392.585:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.1.2670" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f33332fe0d9 code=0x7ffc0000 [ 427.333145][ T37] audit: type=1326 audit(1786108392.585:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.1.2670" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33332fe0d9 code=0x7ffc0000 [ 427.333972][ T37] audit: type=1326 audit(1786108392.585:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.1.2670" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f33332fe0d9 code=0x7ffc0000 [ 427.336442][ T37] audit: type=1326 audit(1786108392.585:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.1.2670" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33332fe0d9 code=0x7ffc0000 [ 427.340496][ T37] audit: type=1326 audit(1786108392.595:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.1.2670" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33332fe0d9 code=0x7ffc0000 [ 427.340543][ T37] audit: type=1326 audit(1786108392.595:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.1.2670" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33332fe0d9 code=0x7ffc0000 [ 427.340585][ T37] audit: type=1326 audit(1786108392.595:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.1.2670" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f33332fe0d9 code=0x7ffc0000 [ 427.577767][ T5590] Bluetooth: hci5: command tx timeout [ 427.871852][ T37] audit: type=1326 audit(1786108393.125:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.1.2670" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33332fe0d9 code=0x7ffc0000 [ 427.871905][ T37] audit: type=1326 audit(1786108393.125:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.1.2670" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33332fe0d9 code=0x7ffc0000 [ 428.339987][T12392] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2675'. [ 429.771646][ T5590] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 429.771707][ T5590] Bluetooth: hci5: command tx timeout [ 430.456278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 430.476286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 430.486282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 430.496276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 430.506278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 430.516279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 431.819630][ T60] Bluetooth: hci5: command tx timeout [ 431.991171][T12431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2686'. [ 432.926502][ T60] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 433.898799][ T60] Bluetooth: hci5: command tx timeout [ 435.921100][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2702'. [ 436.663376][T12343] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.677138][T12343] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.677348][T12343] bridge_slave_0: entered allmulticast mode [ 436.712762][T12343] bridge_slave_0: entered promiscuous mode [ 436.784594][T12343] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.784704][T12343] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.784876][T12343] bridge_slave_1: entered allmulticast mode [ 436.842104][T12343] bridge_slave_1: entered promiscuous mode [ 437.304079][T12343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.355955][T12343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.717963][T12343] team0: Port device team_slave_0 added [ 437.760451][T12343] team0: Port device team_slave_1 added [ 438.091387][T12343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.091403][T12343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.091430][T12343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.202505][T12343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.202521][T12343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.202548][T12343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.443288][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2716'. [ 439.143570][T12343] hsr_slave_0: entered promiscuous mode [ 439.158743][T12343] hsr_slave_1: entered promiscuous mode [ 439.164628][T12343] debugfs: 'hsr0' already exists in 'hsr' [ 439.191618][T12343] Cannot create hsr debugfs directory [ 439.900571][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.900634][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.849644][T12551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2726'. [ 445.366274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 461.090272][T12571] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 462.612397][T12592] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2738'. [ 462.775074][ T5590] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 462.835105][ T5590] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 462.848514][ T5590] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 462.870267][ T5590] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 462.873392][ T5590] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 463.054459][ T5590] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 463.105092][ T5590] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 463.115169][ T5590] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 463.118723][ T5590] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 463.119723][ T5590] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 464.388094][T12613] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2740'. [ 464.936486][ T60] Bluetooth: hci6: command tx timeout [ 465.257779][ T60] Bluetooth: hci7: command tx timeout [ 467.291845][ T60] Bluetooth: hci6: command tx timeout [ 467.336363][ T60] Bluetooth: hci7: command tx timeout [ 467.831951][T12343] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 468.999450][T12343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.340823][ T5590] Bluetooth: hci6: command tx timeout [ 469.416505][ T5590] Bluetooth: hci7: command tx timeout [ 469.891532][ T5586] syz_tun (unregistering): left allmulticast mode [ 470.165528][T12343] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 470.249026][T12343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.886679][ T5590] Bluetooth: hci6: command tx timeout [ 472.071589][ T5590] Bluetooth: hci7: command 0x0419 tx timeout [ 474.526484][ T5585] Bluetooth: hci7: command 0x0419 tx timeout [ 493.702004][T12576] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 503.327829][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.327895][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.868691][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 505.918402][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 505.920309][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 505.921401][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 505.922313][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 506.254130][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 506.290297][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 506.292355][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 506.294627][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 506.295468][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 506.753322][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 506.794156][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 506.803604][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 506.805811][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 506.824067][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 521.857507][ T60] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 521.911189][ T60] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 521.914658][ T60] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 521.937014][ T60] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 521.937709][ T60] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 522.069022][ T60] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 522.110134][ T60] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 522.146459][ T60] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 522.149699][ T60] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 522.150522][ T60] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 550.701879][ T60] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 550.738940][ T60] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 550.743404][ T60] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 550.758925][ T60] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 550.772660][ T60] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 552.568251][ T60] Bluetooth: hci2: command tx timeout [ 552.568742][ T60] Bluetooth: hci3: command tx timeout [ 552.568951][ T60] Bluetooth: hci4: command tx timeout [ 552.569387][ T60] Bluetooth: hci9: command tx timeout [ 552.569599][ T60] Bluetooth: hci8: command tx timeout [ 558.635751][T12690] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 559.618286][T12690] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 559.622386][T12690] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 559.623662][T12690] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 559.624422][T12690] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 560.620386][ T5585] Bluetooth: hci5: command 0x0406 tx timeout [ 560.622296][ T5585] Bluetooth: hci8: command tx timeout [ 560.622318][ T5585] Bluetooth: hci9: command tx timeout [ 560.622333][ T5585] Bluetooth: hci4: command tx timeout [ 560.622349][ T5585] Bluetooth: hci3: command tx timeout [ 560.622364][ T5585] Bluetooth: hci2: command tx timeout [ 560.622947][ T5585] Bluetooth: hci10: command tx timeout [ 563.596700][ T5583] Bluetooth: hci10: command tx timeout [ 563.596737][ T5583] Bluetooth: hci2: command tx timeout [ 563.596760][ T5583] Bluetooth: hci3: command tx timeout [ 563.596780][ T5583] Bluetooth: hci4: command tx timeout [ 563.596801][ T5583] Bluetooth: hci9: command tx timeout [ 563.596820][ T5583] Bluetooth: hci8: command tx timeout [ 563.597216][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.597277][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.601366][T12694] Bluetooth: hci9: command tx timeout [ 566.601402][T12694] Bluetooth: hci4: command tx timeout [ 566.601425][T12694] Bluetooth: hci3: command tx timeout [ 566.601446][T12694] Bluetooth: hci2: command tx timeout [ 566.601468][T12694] Bluetooth: hci10: command tx timeout [ 566.601586][T12690] Bluetooth: hci8: command tx timeout [ 569.609096][T12690] Bluetooth: hci11: command tx timeout [ 570.633626][ T5585] Bluetooth: hci10: command tx timeout [ 570.654390][ T5585] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 571.629667][ T5585] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 571.630916][ T5585] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 571.632246][ T5585] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 571.633201][ T5585] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 572.624210][ T5585] Bluetooth: hci11: command tx timeout [ 575.630498][ T5585] Bluetooth: hci11: command tx timeout [ 577.291634][ T5585] Bluetooth: hci12: command tx timeout [ 578.660482][ T5590] Bluetooth: hci11: command tx timeout [ 581.673792][ T5585] Bluetooth: hci12: command tx timeout [ 584.676945][ T5590] Bluetooth: hci12: command tx timeout [ 587.085493][ T5590] Bluetooth: hci6: command 0x0406 tx timeout [ 588.964795][T12694] Bluetooth: hci12: command tx timeout [ 596.697030][ T5585] Bluetooth: hci7: command 0x0419 tx timeout [ 612.199102][ T5585] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 612.251961][ T5585] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 612.253621][ T5585] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 612.256050][ T5585] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 612.278577][ T5585] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 612.785559][ T5583] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 612.842338][T12718] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 612.871854][T12718] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 612.875336][T12718] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 612.885193][T12718] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 612.893313][T12718] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 612.897523][T12718] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 612.906379][T12718] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 612.925080][T12718] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 612.925892][T12718] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 614.800188][T12726] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 614.838536][T12726] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 614.841312][T12726] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 614.842704][T12726] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 614.844496][T12726] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 624.350491][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.350575][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.457838][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 634.996639][ T5583] Bluetooth: hci2: command 0x0406 tx timeout [ 634.997941][ T5583] Bluetooth: hci13: command tx timeout [ 635.087903][T12718] Bluetooth: hci14: command tx timeout [ 635.622958][T12694] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 635.660328][T12694] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 635.662313][T12694] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 635.690824][T12694] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 635.691682][T12694] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 637.026311][T12690] Bluetooth: hci15: command tx timeout [ 637.026856][ T5585] Bluetooth: hci13: command tx timeout [ 643.516302][ T5585] Bluetooth: hci16: command tx timeout [ 643.516772][ T5585] Bluetooth: hci3: command tx timeout [ 643.516802][ T5585] Bluetooth: hci14: command tx timeout [ 643.516898][ T5585] Bluetooth: hci4: command tx timeout [ 643.516918][ T5585] Bluetooth: hci13: command tx timeout [ 643.516939][ T5585] Bluetooth: hci15: command tx timeout [ 643.521378][ T38] INFO: task kworker/u8:2:41 blocked for more than 155 seconds. [ 643.521401][ T38] Not tainted syzkaller #0 [ 643.521411][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 643.521421][ T38] task:kworker/u8:2 state:D stack:22080 pid:41 tgid:41 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 643.521486][ T38] Workqueue: events_unbound linkwatch_event [ 643.521597][ T38] Call Trace: [ 643.521604][ T38] [ 643.521616][ T38] __schedule+0x16dc/0x5500 [ 643.521718][ T38] ? __pfx___schedule+0x10/0x10 [ 643.521758][ T38] rt_mutex_schedule+0x76/0xf0 [ 643.521810][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 643.521847][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 643.521871][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 643.521894][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 643.521935][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 643.521986][ T38] ? linkwatch_event+0xe/0x60 [ 643.522009][ T38] mutex_lock_nested+0x168/0x1d0 [ 643.522030][ T38] ? linkwatch_event+0xe/0x60 [ 643.522055][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 643.522102][ T38] linkwatch_event+0xe/0x60 [ 643.522126][ T38] process_scheduled_works+0xa8e/0x14e0 [ 643.522175][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 643.522204][ T38] ? assign_work+0x3cf/0x5d0 [ 643.522231][ T38] worker_thread+0xa47/0xfb0 [ 643.522285][ T38] kthread+0x388/0x470 [ 643.522333][ T38] ? __pfx_worker_thread+0x10/0x10 [ 643.522354][ T38] ? __pfx_kthread+0x10/0x10 [ 643.522383][ T38] ret_from_fork+0x514/0xb70 [ 643.522453][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 643.522482][ T38] ? __switch_to+0xc89/0x1420 [ 643.522530][ T38] ? __pfx_kthread+0x10/0x10 [ 643.522559][ T38] ret_from_fork_asm+0x1a/0x30 [ 643.522605][ T38] [ 643.522751][ T38] INFO: task kworker/1:6:5769 blocked for more than 155 seconds. [ 643.522765][ T38] Not tainted syzkaller #0 [ 643.522775][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 643.522784][ T38] task:kworker/1:6 state:D stack:21392 pid:5769 tgid:5769 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 643.522839][ T38] Workqueue: events netdev_work_proc [ 643.522906][ T38] Call Trace: [ 643.522912][ T38] [ 643.522924][ T38] __schedule+0x16dc/0x5500 [ 643.522976][ T38] ? __pfx___schedule+0x10/0x10 [ 643.523015][ T38] rt_mutex_schedule+0x76/0xf0 [ 643.523035][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 643.523071][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 643.523095][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 643.523118][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 643.523159][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 643.523191][ T38] ? netdev_work_proc+0x72/0x7f0 [ 643.523214][ T38] mutex_lock_nested+0x168/0x1d0 [ 643.523235][ T38] ? netdev_work_proc+0x72/0x7f0 [ 643.523261][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 643.523288][ T38] netdev_work_proc+0x72/0x7f0 [ 643.523314][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 643.523337][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 643.523360][ T38] ? __pfx_netdev_work_proc+0x10/0x10 [ 643.523388][ T38] ? rcu_is_watching+0x15/0xb0 [ 643.523456][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 643.523478][ T38] process_scheduled_works+0xa8e/0x14e0 [ 643.523527][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 643.523556][ T38] ? assign_work+0x3cf/0x5d0 [ 643.523583][ T38] worker_thread+0xa47/0xfb0 [ 643.523619][ T38] ? __kthread_parkme+0x71/0x1f0 [ 643.523653][ T38] kthread+0x388/0x470 [ 643.523681][ T38] ? __pfx_worker_thread+0x10/0x10 [ 643.523702][ T38] ? __pfx_kthread+0x10/0x10 [ 643.523731][ T38] ret_from_fork+0x514/0xb70 [ 643.523763][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 643.523792][ T38] ? __switch_to+0xc89/0x1420 [ 643.523819][ T38] ? __pfx_kthread+0x10/0x10 [ 643.523849][ T38] ret_from_fork_asm+0x1a/0x30 [ 643.523894][ T38] [ 643.523913][ T38] INFO: task kworker/u8:16:12300 blocked for more than 155 seconds. [ 643.523927][ T38] Not tainted syzkaller #0 [ 643.523936][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 643.523945][ T38] task:kworker/u8:16 state:D stack:22600 pid:12300 tgid:12300 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 643.524000][ T38] Workqueue: ipv6_addrconf addrconf_dad_work [ 643.524046][ T38] Call Trace: [ 643.524052][ T38] [ 643.524063][ T38] __schedule+0x16dc/0x5500 [ 643.524114][ T38] ? __pfx___schedule+0x10/0x10 [ 643.524153][ T38] rt_mutex_schedule+0x76/0xf0 [ 643.524173][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 643.524209][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 643.524233][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 643.524256][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 643.524303][ T38] ? addrconf_dad_work+0x123/0x16e0 [ 643.524329][ T38] ? addrconf_dad_work+0x123/0x16e0 [ 643.524357][ T38] ? addrconf_dad_work+0x123/0x16e0 [ 643.524377][ T38] mutex_lock_nested+0x168/0x1d0 [ 643.524404][ T38] addrconf_dad_work+0x123/0x16e0 [ 643.524427][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 643.524496][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 643.524527][ T38] ? __pfx_addrconf_dad_work+0x10/0x10 [ 643.524550][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 643.524578][ T38] ? rcu_is_watching+0x15/0xb0 [ 643.524603][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 643.524624][ T38] process_scheduled_works+0xa8e/0x14e0 [ 643.524673][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 643.524701][ T38] ? assign_work+0x3cf/0x5d0 [ 643.524727][ T38] worker_thread+0xa47/0xfb0 [ 643.524763][ T38] ? __kthread_parkme+0x71/0x1f0 [ 643.524798][ T38] kthread+0x388/0x470 [ 643.524826][ T38] ? __pfx_worker_thread+0x10/0x10 [ 643.524847][ T38] ? __pfx_kthread+0x10/0x10 [ 643.524876][ T38] ret_from_fork+0x514/0xb70 [ 643.524907][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 643.524936][ T38] ? __switch_to+0xc89/0x1420 [ 643.524963][ T38] ? __pfx_kthread+0x10/0x10 [ 643.524992][ T38] ret_from_fork_asm+0x1a/0x30 [ 643.525038][ T38] [ 643.525045][ T38] INFO: task syz-executor:12343 blocked for more than 155 seconds. [ 643.525059][ T38] Not tainted syzkaller #0 [ 643.525069][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 643.525077][ T38] task:syz-executor state:D stack:22064 pid:12343 tgid:12343 ppid:1 task_flags:0x400140 flags:0x00080002 [ 643.525130][ T38] Call Trace: [ 643.525136][ T38] [ 643.525148][ T38] __schedule+0x16dc/0x5500 [ 643.525175][ T38] ? __pfx_clockevents_program_event+0x10/0x10 [ 643.525233][ T38] ? __pfx___schedule+0x10/0x10 [ 643.525259][ T38] ? irqentry_exit+0x218/0x8f0 [ 643.525309][ T38] ? trace_irq_disable+0x3b/0x140 [ 643.525361][ T38] ? __pfx___schedule+0x10/0x10 [ 643.525387][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 643.525411][ T38] ? preempt_schedule_common+0x82/0xd0 [ 643.525437][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 643.525463][ T38] rt_mutex_schedule+0x76/0xf0 [ 643.525482][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 643.525518][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 643.525542][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 643.525565][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 643.525607][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 643.525638][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 643.525656][ T38] mutex_lock_nested+0x168/0x1d0 [ 643.525677][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 643.525700][ T38] rtnl_newlink+0x8a3/0x1bd0 [ 643.525718][ T38] ? ktime_get+0x1f5/0x220 [ 643.525797][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 643.525827][ T38] ? __lock_acquire+0x683/0x2ce0 [ 643.525858][ T38] ? unwind_next_frame+0x8f/0x2550 [ 643.525897][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 643.525972][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 643.526023][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 643.526049][ T38] ? __lock_acquire+0x683/0x2ce0 [ 643.526071][ T38] ? kernel_text_address+0xa5/0xe0 [ 643.526103][ T38] ? __kernel_text_address+0xd/0x30 [ 643.526132][ T38] ? unwind_get_return_address+0x4d/0x90 [ 643.532012][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 643.532048][ T38] ? arch_stack_walk+0xfb/0x150 [ 643.532114][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 643.532136][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 643.532167][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 643.532186][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 643.532205][ T38] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 643.532289][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 643.532308][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 643.532330][ T38] ? __lock_acquire+0x683/0x2ce0 [ 643.532361][ T38] netlink_rcv_skb+0x226/0x4a0 [ 643.532468][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 643.532490][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 643.532527][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 643.532550][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 643.532579][ T38] netlink_unicast+0x7f5/0x990 [ 643.532612][ T38] netlink_sendmsg+0x813/0xb40 [ 643.532645][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.532672][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 643.532732][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.532755][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 643.532831][ T38] __sys_sendto+0x41e/0x5d0 [ 643.532858][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 643.532877][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 643.532916][ T38] ? fput_close_sync+0x11f/0x240 [ 643.532955][ T38] ? kmem_cache_free+0x526/0x6c0 [ 643.532986][ T38] ? rcu_is_watching+0x15/0xb0 [ 643.533016][ T38] __x64_sys_sendto+0xde/0x100 [ 643.533037][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.533060][ T38] do_syscall_64+0x174/0x580 [ 643.533086][ T38] ? trace_irq_disable+0x3b/0x140 [ 643.533116][ T38] ? clear_bhb_loop+0x70/0xc0 [ 643.533141][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.533162][ T38] RIP: 0033:0x7faac327e90e [ 643.533184][ T38] RSP: 002b:00007ffd4987fbc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 643.533204][ T38] RAX: ffffffffffffffda RBX: 000055558ddee500 RCX: 00007faac327e90e [ 643.533218][ T38] RDX: 0000000000000030 RSI: 00007faac4073610 RDI: 0000000000000006 [ 643.533230][ T38] RBP: 0000000000000001 R08: 00007ffd4987fc44 R09: 000000000000000c [ 643.533242][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 643.533254][ T38] R13: 0000000000000000 R14: 00007faac4073610 R15: 0000000000000000 [ 643.533288][ T38] [ 643.533301][ T38] INFO: task kworker/u8:19:12573 blocked for more than 155 seconds. [ 643.533315][ T38] Not tainted syzkaller #0 [ 643.533325][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 643.533334][ T38] task:kworker/u8:19 state:D stack:24744 pid:12573 tgid:12573 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 643.533392][ T38] Workqueue: netns cleanup_net [ 643.533453][ T38] Call Trace: [ 643.533460][ T38] [ 643.533471][ T38] __schedule+0x16dc/0x5500 [ 643.533499][ T38] ? __bfs+0x153/0x290 [ 643.533540][ T38] ? __pfx___schedule+0x10/0x10 [ 643.533580][ T38] rt_mutex_schedule+0x76/0xf0 [ 643.533600][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 643.533636][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 643.533661][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 643.533684][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 643.533716][ T38] ? nsim_destroy+0x173/0x800 [ 643.533796][ T38] ? nsim_destroy+0x173/0x800 [ 643.533830][ T38] ? nsim_destroy+0x173/0x800 [ 643.533856][ T38] mutex_lock_nested+0x168/0x1d0 [ 643.533876][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 643.533909][ T38] nsim_destroy+0x173/0x800 [ 643.533944][ T38] __nsim_dev_port_del+0x14e/0x200 [ 643.533969][ T38] nsim_dev_reload_destroy+0x288/0x490 [ 643.533991][ T38] ? xa_get_mark+0x67/0x7a0 [ 643.534013][ T38] nsim_dev_reload_down+0x8a/0xc0 [ 643.534037][ T38] devlink_reload+0x1c5/0x890 [ 643.534085][ T38] ? __pfx_devlink_reload+0x10/0x10 [ 643.534117][ T38] devlink_pernet_pre_exit+0x1ff/0x420 [ 643.534149][ T38] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 643.534180][ T38] ? iput+0xb84/0xf00 [ 643.534228][ T38] ops_undo_list+0x17d/0x8d0 [ 643.534255][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 643.534284][ T38] ? idr_destroy+0x22a/0x2a0 [ 643.534352][ T38] cleanup_net+0x575/0x810 [ 643.534376][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 643.534401][ T38] ? rcu_is_watching+0x15/0xb0 [ 643.534427][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 643.534450][ T38] process_scheduled_works+0xa8e/0x14e0 [ 643.534500][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 643.534529][ T38] ? assign_work+0x3cf/0x5d0 [ 643.534555][ T38] worker_thread+0xa47/0xfb0 [ 643.534592][ T38] ? __kthread_parkme+0x71/0x1f0 [ 643.534627][ T38] kthread+0x388/0x470 [ 643.534655][ T38] ? __pfx_worker_thread+0x10/0x10 [ 643.534677][ T38] ? __pfx_kthread+0x10/0x10 [ 643.534712][ T38] ret_from_fork+0x514/0xb70 [ 643.534745][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 643.534774][ T38] ? __switch_to+0xc89/0x1420 [ 643.534801][ T38] ? __pfx_kthread+0x10/0x10 [ 643.534831][ T38] ret_from_fork_asm+0x1a/0x30 [ 643.534877][ T38] [ 643.534886][ T38] INFO: task syz-executor:12594 blocked for more than 155 seconds. [ 643.534900][ T38] Not tainted syzkaller #0 [ 643.534910][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 643.534920][ T38] task:syz-executor state:D stack:25800 pid:12594 tgid:12594 ppid:1 task_flags:0x400140 flags:0x00080002 [ 643.534978][ T38] Call Trace: [ 643.534984][ T38] [ 643.534996][ T38] __schedule+0x16dc/0x5500 [ 643.535031][ T38] ? kernel_text_address+0xa5/0xe0 [ 643.535062][ T38] ? __kernel_text_address+0xd/0x30 [ 643.535111][ T38] ? __pfx___schedule+0x10/0x10 [ 643.535151][ T38] rt_mutex_schedule+0x76/0xf0 [ 643.535171][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 643.535207][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 643.535231][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 643.535254][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 643.535293][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 643.535317][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 643.535342][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 643.535360][ T38] mutex_lock_nested+0x168/0x1d0 [ 643.535387][ T38] rtnl_newlink+0x8a3/0x1bd0 [ 643.535418][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 643.535439][ T38] ? __lock_acquire+0x683/0x2ce0 [ 643.535466][ T38] ? __lock_acquire+0x683/0x2ce0 [ 643.535491][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 643.535518][ T38] ? unwind_next_frame+0x8f/0x2550 [ 643.535546][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 643.535578][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 643.535605][ T38] ? __lock_acquire+0x683/0x2ce0 [ 643.535628][ T38] ? kernel_text_address+0xa5/0xe0 [ 643.535659][ T38] ? __kernel_text_address+0xd/0x30 [ 643.535689][ T38] ? unwind_get_return_address+0x4d/0x90 [ 643.535710][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 643.535739][ T38] ? arch_stack_walk+0xfb/0x150 [ 643.535769][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 643.535790][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 643.535822][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 643.535840][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 643.535859][ T38] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 643.535893][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 643.535912][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 643.535934][ T38] ? __lock_acquire+0x683/0x2ce0 [ 643.535965][ T38] netlink_rcv_skb+0x226/0x4a0 [ 643.535990][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 643.536012][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 643.536048][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 643.536071][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 643.536100][ T38] netlink_unicast+0x7f5/0x990 [ 643.536132][ T38] netlink_sendmsg+0x813/0xb40 [ 643.536874][T12299] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 643.539930][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.539961][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 643.539996][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.540019][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 643.540052][ T38] __sys_sendto+0x41e/0x5d0 [ 643.540078][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 643.540097][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 643.540142][ T38] ? fput_close_sync+0x11f/0x240 [ 643.540161][ T38] ? kmem_cache_free+0x526/0x6c0 [ 643.540191][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 643.540219][ T38] __x64_sys_sendto+0xde/0x100 [ 643.540241][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.540263][ T38] do_syscall_64+0x174/0x580 [ 643.540297][ T38] ? trace_irq_disable+0x3b/0x140 [ 643.540327][ T38] ? clear_bhb_loop+0x70/0xc0 [ 643.540352][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.540373][ T38] RIP: 0033:0x7fd9587be90e [ 643.540391][ T38] RSP: 002b:00007ffce4ac9e78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 643.540411][ T38] RAX: ffffffffffffffda RBX: 000055555e9c9500 RCX: 00007fd9587be90e [ 643.540425][ T38] RDX: 000000000000002c RSI: 00007fd9595b4670 RDI: 0000000000000003 [ 643.540438][ T38] RBP: 0000000000000001 R08: 00007ffce4ac9ef4 R09: 000000000000000c [ 643.540451][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 643.540463][ T38] R13: 0000000000000000 R14: 00007fd9595b4670 R15: 0000000000000000 [ 643.540493][ T38] [ 643.540524][ T38] [ 643.540524][ T38] Showing all locks held in the system: [ 643.540534][ T38] 2 locks held by kworker/0:1/10: [ 643.540546][ T38] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.540597][ T38] #1: ffffc900000f7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.540647][ T38] 4 locks held by ktimers/0/16: [ 643.540659][ T38] 4 locks held by ktimers/1/29: [ 643.540671][ T38] 1 lock held by khungtaskd/38: [ 643.540682][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 643.540729][ T38] 3 locks held by kworker/u8:2/41: [ 643.540740][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.540790][ T38] #1: ffffc90000b27c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.540837][ T38] #2: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 643.540890][ T38] 5 locks held by kworker/u9:0/60: [ 643.540901][ T38] #0: ffff88805f046938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.540949][ T38] #1: ffffc9000126fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.540999][ T38] #2: ffff888063bc4f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 643.541083][ T38] #3: ffff888063bc40b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 643.541149][ T38] #4: ffffffff8f730fd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 643.541276][ T38] 2 locks held by getty/5335: [ 643.541287][ T38] #0: ffff88803617d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 643.541377][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 643.541433][ T38] 4 locks held by syz-executor/5577: [ 643.541444][ T38] #0: ffff88802c574f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 643.541496][ T38] #1: ffff88802c5740b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 [ 643.541553][ T38] #2: ffffffff8f730fd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 [ 643.541602][ T38] #3: ffff888033167b70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520 [ 643.541674][ T38] 5 locks held by kworker/u9:5/5590: [ 643.541686][ T38] #0: ffff88803ee91938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.541734][ T38] #1: ffffc90004d17c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.541783][ T38] #2: ffff888039a8cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 643.541833][ T38] #3: ffff888039a8c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 643.541878][ T38] #4: ffffffff8f730fd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 643.541940][ T38] 3 locks held by kworker/1:4/5711: [ 643.541950][ T38] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.541997][ T38] #1: ffffc90005147c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.542044][ T38] #2: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 643.542142][ T38] 3 locks held by kworker/1:6/5769: [ 643.542152][ T38] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.542200][ T38] #1: ffffc90005337c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.542247][ T38] #2: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x72/0x7f0 [ 643.542306][ T38] 1 lock held by syz.3.2639/12296: [ 643.542317][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 643.542393][ T38] 6 locks held by kworker/u8:14/12299: [ 643.542405][ T38] 3 locks held by kworker/u8:16/12300: [ 643.542416][ T38] #0: ffff88802c0e7938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.542465][ T38] #1: ffffc9001bf4fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.542516][ T38] #2: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 643.542563][ T38] 1 lock held by syz-executor/12343: [ 643.542575][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 643.542619][ T38] 3 locks held by kworker/1:8/12353: [ 643.542631][ T38] 6 locks held by kworker/u8:19/12573: [ 643.542642][ T38] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.542690][ T38] #1: ffffc9000e4efc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.542738][ T38] #2: ffffffff8f59d680 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 643.542783][ T38] #3: ffff88805d845160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 643.542838][ T38] #4: ffff8880248f8310 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 643.542897][ T38] #5: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 643.542950][ T38] 5 locks held by kworker/u8:20/12574: [ 643.542962][ T38] 1 lock held by syz-executor/12594: [ 643.542973][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 643.543017][ T38] 1 lock held by syz-executor/12596: [ 643.543028][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 643.543074][ T38] 1 lock held by syz-executor/12652: [ 643.543085][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 643.543162][ T38] 1 lock held by syz-executor/12663: [ 643.543174][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 643.543255][ T38] 1 lock held by syz-executor/12667: [ 643.543266][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 643.543335][ T38] 1 lock held by syz-executor/12675: [ 643.543346][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 643.543403][ T38] 1 lock held by syz-executor/12676: [ 643.543414][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 643.543471][ T38] 1 lock held by syz-executor/12684: [ 643.543482][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 643.543538][ T38] 1 lock held by syz-executor/12689: [ 643.543549][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 643.543606][ T38] 4 locks held by kworker/u9:2/12694: [ 643.543617][ T38] #0: ffff888060289138 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.543668][ T38] #1: ffffc900100ffc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.543718][ T38] #2: ffff88805dfbc0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 643.543790][ T38] #3: ffffffff8f730fd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 643.543843][ T38] 1 lock held by syz-executor/12696: [ 643.543854][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 643.543911][ T38] 1 lock held by syz-executor/12709: [ 643.543922][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 643.543977][ T38] 1 lock held by syz-executor/12713: [ 643.543993][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 643.544050][ T38] 1 lock held by syz-executor/12714: [ 643.544061][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 643.544117][ T38] 1 lock held by syz-executor/12725: [ 643.544128][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 643.544184][ T38] 5 locks held by kworker/u9:8/12726: [ 643.544196][ T38] #0: ffff888061cc0138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.544243][ T38] #1: ffffc9000ddefc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 643.544298][ T38] #2: ffff88803a9f0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 643.544349][ T38] #3: ffff88803a9f00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 643.544395][ T38] #4: ffffffff8f730fd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 643.544452][ T38] 1 lock held by dhcpcd/12734: [ 643.544463][ T38] #0: ffff888035162358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 643.544531][ T38] 1 lock held by dhcpcd/12735: [ 643.544542][ T38] #0: ffff888039594358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 643.544587][ T38] 1 lock held by dhcpcd/12736: [ 643.544598][ T38] #0: ffff888037f76358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 643.544644][ T38] 1 lock held by syz-executor/12738: [ 643.544655][ T38] #0: ffffffff8f5ac238 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 643.544712][ T38] [ 643.544716][ T38] ============================================= [ 643.544716][ T38] [ 643.544726][ T38] NMI backtrace for cpu 0 [ 643.544746][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 643.544771][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 643.544783][ T38] Call Trace: [ 643.544791][ T38] [ 643.544798][ T38] dump_stack_lvl+0xe8/0x150 [ 643.544826][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 643.544850][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 643.544928][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 643.544954][ T38] sys_info+0x135/0x170 [ 643.544973][ T38] watchdog+0xfd7/0x1030 [ 643.545030][ T38] ? watchdog+0x1c7/0x1030 [ 643.545065][ T38] kthread+0x388/0x470 [ 643.545092][ T38] ? __pfx_watchdog+0x10/0x10 [ 643.545118][ T38] ? __pfx_kthread+0x10/0x10 [ 643.545147][ T38] ret_from_fork+0x514/0xb70 [ 643.545178][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 643.545206][ T38] ? __switch_to+0xc89/0x1420 [ 643.545232][ T38] ? __pfx_kthread+0x10/0x10 [ 643.545260][ T38] ret_from_fork_asm+0x1a/0x30 [ 643.545310][ T38] [ 643.545322][ T38] Sending NMI from CPU 0 to CPUs 1: [ 643.545351][ C1] NMI backtrace for cpu 1 [ 643.545363][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 643.545381][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 643.545390][ C1] RIP: 0010:mark_lock+0x3c/0x190 [ 643.545408][ C1] Code: 00 03 00 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 04 ad 03 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 d0 54 46 93 eb 42 83 3d 0b 3d [ 643.545422][ C1] RSP: 0018:ffffc90000a3f940 EFLAGS: 00000007 [ 643.545435][ C1] RAX: 00000000000000ee RBX: 0000000000000003 RCX: 0000000000000003 [ 643.545445][ C1] RDX: 0000000000000003 RSI: ffff88801d2f4a08 RDI: ffff88801d2f3e00 [ 643.545456][ C1] RBP: 0000000000000008 R08: ffffffff8faf4937 R09: 1ffffffff1f5e926 [ 643.545468][ C1] R10: dffffc0000000000 R11: fffffbfff1f5e927 R12: ffff88801d2f4a08 [ 643.545479][ C1] R13: 1ffff92000147f40 R14: ffff88801d2f4a08 R15: 0000000000000000 [ 643.545491][ C1] FS: 0000000000000000(0000) GS:ffff888125d46000(0000) knlGS:0000000000000000 [ 643.545504][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 643.545515][ C1] CR2: 00007fe11a2b46c1 CR3: 0000000036a18000 CR4: 00000000003526f0 [ 643.545529][ C1] Call Trace: [ 643.545535][ C1] [ 643.545542][ C1] lockdep_hardirqs_on_prepare+0x111/0x270 [ 643.545645][ C1] trace_hardirqs_on+0x28/0x40 [ 643.545668][ C1] _raw_spin_unlock_irqrestore+0x30/0x80 [ 643.545690][ C1] rt_mutex_slowunlock+0x4ee/0xa20 [ 643.545709][ C1] ? reacquire_held_locks+0x104/0x190 [ 643.545726][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 643.545746][ C1] ? advance_sched+0x9a3/0xc90 [ 643.545810][ C1] rt_spin_unlock+0x10d/0x200 [ 643.545828][ C1] advance_sched+0x9a3/0xc90 [ 643.545853][ C1] ? __pfx_advance_sched+0x10/0x10 [ 643.545873][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 643.545902][ C1] hrtimer_run_softirq+0x18f/0x260 [ 643.545924][ C1] handle_softirqs+0x1d9/0x6c0 [ 643.545967][ C1] run_ktimerd+0x69/0x100 [ 643.545986][ C1] smpboot_thread_fn+0x57c/0xa80 [ 643.546039][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 643.546061][ C1] kthread+0x388/0x470 [ 643.546082][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 643.546100][ C1] ? __pfx_kthread+0x10/0x10 [ 643.546122][ C1] ret_from_fork+0x514/0xb70 [ 643.546148][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 643.546173][ C1] ? __switch_to+0xc89/0x1420 [ 643.546192][ C1] ? __pfx_kthread+0x10/0x10 [ 643.546213][ C1] ret_from_fork_asm+0x1a/0x30 [ 643.546243][ C1] [ 643.560199][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 643.560216][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 643.560238][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 643.560249][ T38] Call Trace: [ 643.560257][ T38] [ 643.560265][ T38] vpanic+0x56c/0xa60 [ 643.560306][ T38] ? __pfx___schedule+0x10/0x10 [ 643.560331][ T38] ? __pfx_vpanic+0x10/0x10 [ 643.560370][ T38] panic+0xc5/0xd0 [ 643.560398][ T38] ? __pfx_panic+0x10/0x10 [ 643.560425][ T38] ? preempt_schedule_common+0x82/0xd0 [ 643.560451][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 643.560474][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 643.560500][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 643.560527][ T38] watchdog+0x1030/0x1030 [ 643.560564][ T38] ? watchdog+0x1c7/0x1030 [ 643.560599][ T38] kthread+0x388/0x470 [ 643.560626][ T38] ? __pfx_watchdog+0x10/0x10 [ 643.560653][ T38] ? __pfx_kthread+0x10/0x10 [ 643.560682][ T38] ret_from_fork+0x514/0xb70 [ 643.560713][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 643.560741][ T38] ? __switch_to+0xc89/0x1420 [ 643.560768][ T38] ? __pfx_kthread+0x10/0x10 [ 643.560795][ T38] ret_from_fork_asm+0x1a/0x30 [ 643.560840][ T38] [ 643.561431][ T38] Kernel Offset: disabled