last executing test programs: 6m16.668380242s ago: executing program 0 (id=361): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffd, 0x3, 0xffff0099, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c2}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000040)="99c9137c0740efb04eab19d42b20", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x19, r2, 0x1, 0xd4, 0x6, @random="0000ee773968"}, 0x14) close(r0) socket(0x10, 0x803, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 6m14.987397869s ago: executing program 0 (id=368): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x800) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730121000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 6m14.404501556s ago: executing program 0 (id=370): socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 6m13.732013001s ago: executing program 0 (id=373): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 6m10.474130054s ago: executing program 0 (id=383): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) 6m10.25790521s ago: executing program 0 (id=387): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x20, 0x1e, 0x21, 0x70bd2b, 0x0, {0x5}, [@typed={0x5, 0x12c, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) 6m2.370846434s ago: executing program 4 (id=417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0xfffffffffffffcf9, 0x0) 6m0.659644434s ago: executing program 4 (id=419): r0 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x15, 0x8, 0x2c, 0x6, 0x40000, 0x4, 0x40, 0x81, 0xffffff19}}) 6m0.496535956s ago: executing program 4 (id=421): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffff8}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 5m58.501044412s ago: executing program 4 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0xfffffffffffffcf9, 0x0) 5m56.679602109s ago: executing program 4 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200480d0}, 0x800) 5m56.300381808s ago: executing program 4 (id=438): sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)={0x420, 0x3f3, 0x1, 0x70bd27, 0x25dfdbfc, {0x10, 0x0, 0xd, [0x81, 0x9, 0xffffffff, 0x5c26, 0x0, 0x3dfd, 0x8, 0x1, 0x7, 0x4, 0x80, 0x1, 0x9, 0x0, 0xfff, 0x10001, 0x112, 0x8, 0x7, 0x4, 0x1000, 0x80, 0x5, 0x0, 0x5, 0x7fffffff, 0x0, 0x5, 0xa000, 0x5, 0x6, 0xc, 0x7, 0x16df, 0x8, 0x10, 0x7fffffff, 0x4, 0xffffffff, 0xa288, 0x6, 0x4, 0x33499b4d, 0x8a, 0x1, 0x9, 0x4, 0xfffffb47, 0x80000001, 0x4, 0x4, 0x8, 0x4, 0xffffffff, 0x1000, 0x7, 0x9, 0x10000, 0x8000, 0x68, 0x2, 0xa8, 0x0, 0xff], [0x3, 0x9, 0x6, 0x4876be1b, 0x54aa, 0xd9ad, 0x3, 0x65, 0x6, 0x100, 0x3, 0x7, 0x100, 0x400, 0x9, 0x0, 0xd, 0x7ff, 0x9, 0x9, 0x2, 0xc, 0xa0fc, 0x4, 0x9, 0x31b4, 0x5, 0x6, 0x4, 0x401, 0x6, 0x0, 0x4, 0x401, 0x204000, 0x1, 0xffffffff, 0x5, 0x5f11, 0x8, 0x7, 0x2, 0x8, 0x10001, 0x8, 0x3, 0xff, 0x1, 0x4, 0xbb8, 0x2, 0x9, 0x1, 0x8000, 0xfd, 0x13, 0x9, 0xfffffac5, 0x9, 0x2, 0x2d6, 0x3a, 0x3, 0x2246], [0x4, 0x2, 0x3, 0x4, 0x0, 0x8, 0x100, 0x329, 0x9, 0xa, 0x74d, 0x1ff, 0x7, 0x2, 0x5, 0x81, 0x8000, 0x8, 0x10, 0xffffffff, 0x9, 0x8d9d, 0x3b34c027, 0x1, 0x9b74, 0x80000001, 0x6f, 0x1, 0x1, 0x1, 0x1, 0x8, 0x1, 0x2, 0x7, 0x7, 0x7, 0x0, 0x5, 0xfe55, 0x4000000, 0xa000000, 0xf, 0x9, 0x8, 0x4, 0x761, 0x54, 0x10, 0x200, 0x8, 0x7f, 0x7, 0x80000000, 0xc, 0x4, 0x9, 0xc, 0x1000, 0x1, 0x9, 0x0, 0x20000, 0x5], [0x6, 0x4e9, 0x4, 0x65, 0x5, 0x200, 0x7, 0x800, 0x0, 0x6, 0x8, 0x6, 0x8, 0x5, 0x0, 0x4, 0x100, 0x0, 0x1000, 0x0, 0x1, 0xfffffffe, 0x13, 0x8, 0xc, 0x7, 0xf, 0x81, 0xf82, 0x1, 0xd5a, 0xa21, 0x8, 0xac2, 0x0, 0x80000, 0x4, 0xc, 0x6, 0x3, 0x10, 0x0, 0x4, 0x80000, 0x9, 0xff, 0x6, 0x17a, 0x7ff, 0x5e1, 0x6, 0x6, 0x101, 0x7fff, 0x65, 0xc, 0x7ff, 0x4, 0x6514, 0x1, 0xffffffff, 0x4, 0x6, 0x8]}}, 0x420}, 0x1, 0x0, 0x0, 0x80}, 0x4008800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xffbf) 5m55.04937726s ago: executing program 32 (id=387): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x20, 0x1e, 0x21, 0x70bd2b, 0x0, {0x5}, [@typed={0x5, 0x12c, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) 5m41.272986373s ago: executing program 33 (id=438): sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)={0x420, 0x3f3, 0x1, 0x70bd27, 0x25dfdbfc, {0x10, 0x0, 0xd, [0x81, 0x9, 0xffffffff, 0x5c26, 0x0, 0x3dfd, 0x8, 0x1, 0x7, 0x4, 0x80, 0x1, 0x9, 0x0, 0xfff, 0x10001, 0x112, 0x8, 0x7, 0x4, 0x1000, 0x80, 0x5, 0x0, 0x5, 0x7fffffff, 0x0, 0x5, 0xa000, 0x5, 0x6, 0xc, 0x7, 0x16df, 0x8, 0x10, 0x7fffffff, 0x4, 0xffffffff, 0xa288, 0x6, 0x4, 0x33499b4d, 0x8a, 0x1, 0x9, 0x4, 0xfffffb47, 0x80000001, 0x4, 0x4, 0x8, 0x4, 0xffffffff, 0x1000, 0x7, 0x9, 0x10000, 0x8000, 0x68, 0x2, 0xa8, 0x0, 0xff], [0x3, 0x9, 0x6, 0x4876be1b, 0x54aa, 0xd9ad, 0x3, 0x65, 0x6, 0x100, 0x3, 0x7, 0x100, 0x400, 0x9, 0x0, 0xd, 0x7ff, 0x9, 0x9, 0x2, 0xc, 0xa0fc, 0x4, 0x9, 0x31b4, 0x5, 0x6, 0x4, 0x401, 0x6, 0x0, 0x4, 0x401, 0x204000, 0x1, 0xffffffff, 0x5, 0x5f11, 0x8, 0x7, 0x2, 0x8, 0x10001, 0x8, 0x3, 0xff, 0x1, 0x4, 0xbb8, 0x2, 0x9, 0x1, 0x8000, 0xfd, 0x13, 0x9, 0xfffffac5, 0x9, 0x2, 0x2d6, 0x3a, 0x3, 0x2246], [0x4, 0x2, 0x3, 0x4, 0x0, 0x8, 0x100, 0x329, 0x9, 0xa, 0x74d, 0x1ff, 0x7, 0x2, 0x5, 0x81, 0x8000, 0x8, 0x10, 0xffffffff, 0x9, 0x8d9d, 0x3b34c027, 0x1, 0x9b74, 0x80000001, 0x6f, 0x1, 0x1, 0x1, 0x1, 0x8, 0x1, 0x2, 0x7, 0x7, 0x7, 0x0, 0x5, 0xfe55, 0x4000000, 0xa000000, 0xf, 0x9, 0x8, 0x4, 0x761, 0x54, 0x10, 0x200, 0x8, 0x7f, 0x7, 0x80000000, 0xc, 0x4, 0x9, 0xc, 0x1000, 0x1, 0x9, 0x0, 0x20000, 0x5], [0x6, 0x4e9, 0x4, 0x65, 0x5, 0x200, 0x7, 0x800, 0x0, 0x6, 0x8, 0x6, 0x8, 0x5, 0x0, 0x4, 0x100, 0x0, 0x1000, 0x0, 0x1, 0xfffffffe, 0x13, 0x8, 0xc, 0x7, 0xf, 0x81, 0xf82, 0x1, 0xd5a, 0xa21, 0x8, 0xac2, 0x0, 0x80000, 0x4, 0xc, 0x6, 0x3, 0x10, 0x0, 0x4, 0x80000, 0x9, 0xff, 0x6, 0x17a, 0x7ff, 0x5e1, 0x6, 0x6, 0x101, 0x7fff, 0x65, 0xc, 0x7ff, 0x4, 0x6514, 0x1, 0xffffffff, 0x4, 0x6, 0x8]}}, 0x420}, 0x1, 0x0, 0x0, 0x80}, 0x4008800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xffbf) 3m1.876372389s ago: executing program 3 (id=982): socket(0x2, 0x80805, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xd37c, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m56.223703485s ago: executing program 3 (id=993): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='mountaddr\x00', &(0x7f0000000680)='::\x05J\xa6\xaa\x90\xa8K\xc6\xa3\x13\x8d\xba\x88\x1b\xf63k.\x9c\x02E,K\x1aX\'\x86j^L>\xd7\xe7\xed\x16\xf1x\xd8*\bF\xdd\x1cS\xaa\xd8\x19\x86)Y\n\x06C\x10\xce\x9c\xcf\xd01,\xa8\xc7\x90\x87\x8a\x03u\xebg\x91\xc4\xf4\x1e\x83,\x81t\x80/\"\x81O\x9a\x06\xff\xa2\xa1\xb1,\xdbO\x95\xba-\x17\xa93\xdf4\x19\x1a\xd5 \xce\xce\x9bA\xe4\xb3\xbb(PV\xa7sz\xd3\xfa\xecZ\xe4HBc6\xc6\xcc\x8c7+GM\xb1\x18`J`\xa2\xa57@M@\xe8D\xb6R\"\x03\x11\xd7w\xf1\x98\xecP n\x0eD\xa5\xf9\xe54\xa9E\xd6\x87,\xc3\xb2.\xe3\xc9c&~\xbfPI\xda\xd9\xb1\x00\x1c`;\xc75\x0eRMv|', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000500)={0xa, @sliced={0x8, [0x4, 0xfffa, 0xd74a, 0x0, 0x0, 0xfffe, 0xfffc, 0x5, 0x8, 0x5, 0x854, 0x7, 0x4, 0xf139, 0x8, 0x1aa1, 0x9, 0x100, 0x81, 0x401, 0xff11, 0x2, 0x3, 0x8000, 0x8, 0x7, 0xc1a5, 0x9, 0x2, 0xb46, 0x1, 0x101, 0x8000, 0x100, 0xff, 0x5, 0x10, 0x0, 0x8000, 0x2d21, 0x96e1, 0x2, 0x5, 0x0, 0x8, 0x1, 0x5, 0x9], 0x3}}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@RTM_GETNSID={0x24, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NETNSA_PID={0x8}, @NETNSA_FD={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40008) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x70, 0x0, 0x7fff0000}]}) 2m52.684384956s ago: executing program 5 (id=1000): getrandom(&(0x7f0000000080)=""/228, 0xe4, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff}}, 0x10) 2m52.595777325s ago: executing program 3 (id=1001): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e21, 0x1, @local, 0x10000}}}, 0x90) 2m52.385023459s ago: executing program 5 (id=1003): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m52.282749529s ago: executing program 3 (id=1004): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x3, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m50.911988617s ago: executing program 3 (id=1009): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2m50.714998046s ago: executing program 3 (id=1010): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x4) 2m50.263579129s ago: executing program 5 (id=1011): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81902) ioctl$NS_GET_NSTYPE(r0, 0x8008b705, 0x0) 2m49.846467523s ago: executing program 5 (id=1014): socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x802, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x34000, 0x0) epoll_create1(0x0) 2m48.447074658s ago: executing program 5 (id=1015): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa41b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x1, 0xb2, 0x5, 0x2}, 0x9c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a0091"], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/111, 0x6f}], 0x1}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m47.155390202s ago: executing program 5 (id=1017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f001600060004fca8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4e", 0x8b}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) 2m40.92005701s ago: executing program 1 (id=1032): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404c004) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xacb, r1}, 0x38) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) unshare(0x22020600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$P9_RVERSION(r2, 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) 2m39.80894001s ago: executing program 1 (id=1033): gettid() mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000004c0)=0xffffffffffffffff, 0x7, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x22b84211, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) r5 = inotify_init1(0x80800) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000080)={0x20000008}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x3c, @empty, 0x4e24, 0x3, 'lblcr\x00', 0x8, 0x323b, 0x34}, {@empty, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x7}}, 0x44) close(0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3", 0xe) 2m38.608941902s ago: executing program 1 (id=1034): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/114, 0x72}], 0x1, 0x2, 0x0) 2m38.447183117s ago: executing program 1 (id=1035): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000280)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0106d4", 0x9c, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x7}, @mcast2, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "6b7ac7b7f905de84e308cbbf4039e6293aa6e9294d347b307b6961ce944c4baf", "f2f354edfd78ba9f80c19a10fce938140abd6edaa8d9bf9eb3d7b457dc647ea182b71472a380fa740be820a9593e9d2d", "aa82d14dfbacf4743b5fa80da8098972005133bf48ef9874486968c0", {"f376a80422fe8dee8db3ce3a69d2ed2b", "257731e5217b881efdb7ee2808027261"}}}}}}}}, 0x0) 2m38.398057211s ago: executing program 1 (id=1036): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x45, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x0, 0x400c1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m38.231700716s ago: executing program 1 (id=1037): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir .', 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_setup_queues(r2, 0x0, 0x0, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0xfffffffd, 0x3de}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0xfffffffe, 0x278}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdada, 0x1000, 0x3, 0x321}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x20, 0x3, 0x80000c4}}], 0x4, &(0x7f0000000e00)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xe81, 0x0, 0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socket$kcm(0xa, 0x5, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x1, 0x1) write(r0, &(0x7f0000000700)='bind', 0x4) 2m35.003609659s ago: executing program 34 (id=1010): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x4) 2m32.029171325s ago: executing program 35 (id=1017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f001600060004fca8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4e", 0x8b}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) 2m23.016299606s ago: executing program 36 (id=1037): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir .', 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_setup_queues(r2, 0x0, 0x0, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0xfffffffd, 0x3de}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0xfffffffe, 0x278}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdada, 0x1000, 0x3, 0x321}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x20, 0x3, 0x80000c4}}], 0x4, &(0x7f0000000e00)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xe81, 0x0, 0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socket$kcm(0xa, 0x5, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x1, 0x1) write(r0, &(0x7f0000000700)='bind', 0x4) 11.17276649s ago: executing program 2 (id=1547): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000700000003000000010000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32], 0x50) r0 = syz_io_uring_setup(0xf02, &(0x7f0000000140)={0x0, 0xab9b, 0x10000, 0x2, 0x4c}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0xfffffffffffffff6, r0, 0x24, {0x5, 0xffffffffc12b59bc}, 0x2}, 0x1) 10.922516894s ago: executing program 2 (id=1549): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$packet(0x11, 0x2, 0x300) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 10.920463311s ago: executing program 7 (id=1550): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$loop(0x0, 0x4, 0x12bb41) 10.675567714s ago: executing program 8 (id=1553): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000000)=';', 0x1}], 0x1}}], 0x1, 0x2400c890) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}], 0x1, 0x20022, 0x0) 10.470976395s ago: executing program 7 (id=1554): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffff8}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 10.422847799s ago: executing program 2 (id=1555): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, 0x0, 0x0) write(r1, &(0x7f0000000300)='A', 0x1) r2 = accept(r0, 0x0, 0x0) read(r2, &(0x7f0000000380), 0x1) close(r2) 10.178214866s ago: executing program 8 (id=1557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80800) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000000)='1', 0x1, 0x0) 8.501720663s ago: executing program 9 (id=1560): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000006000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000008"], 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 8.447905017s ago: executing program 8 (id=1561): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$key(0xf, 0x3, 0x2) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x5, @mcast1, 0xff}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 8.447569284s ago: executing program 2 (id=1562): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000020000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.949382153s ago: executing program 9 (id=1564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) pwritev2(r0, &(0x7f0000000480)=[{&(0x7f0000000dc0)="d4", 0x1}], 0x1, 0x6, 0x800, 0x38) 7.553227424s ago: executing program 7 (id=1565): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$packet(0x11, 0x2, 0x300) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 7.364915593s ago: executing program 8 (id=1566): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @loopback, 0x4}, 0x80, 0x0}, 0x40) 7.126522189s ago: executing program 9 (id=1567): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000000)=';', 0x1}], 0x1}}], 0x1, 0x2400c890) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}], 0x1, 0x20022, 0x0) 7.12463406s ago: executing program 6 (id=1568): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mount$9p_fd(0x0, 0x0, 0x0, 0x800006, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 6.737304533s ago: executing program 8 (id=1569): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049363, 0x0) 6.540063925s ago: executing program 9 (id=1570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000300000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x50) 6.275089353s ago: executing program 7 (id=1571): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/308], 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x40082) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, 0x0, &(0x7f0000000640), &(0x7f0000000140)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="adcd1a9a3fc36e961ed00fe41b0cd69504a93b22de4d307894d5d308bf40560fef910001d079e7ef7999ba45e9ea808d165ec4be287dfdee382206d045cb73b2d56e13ec1121aa907f18a7b813f0ce", 0x4f) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xc}], 0x1, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001a00010027bd7000ffdb", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) r3 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') write(0xffffffffffffffff, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhost\n', 0x24) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @empty}, &(0x7f0000000180)=0xc) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000008da47f560900", @ANYRES32, @ANYBLOB="ffffff7f00"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="020000000100000001"], 0x50) 6.225172004s ago: executing program 9 (id=1572): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f0000001240)={0xa, 0x4e1f, 0x4, @remote, 0x6}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001280)='.', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e23, 0x3813, @private1, 0xfffffffa}, 0x1c, &(0x7f00000008c0)=[{&(0x7f00000001c0)="fc", 0x1}], 0x1}}], 0x2, 0x20000801) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, [0x2, 0x1, 0x4, 0x200, 0x9, 0x5, 0x5, 0x7, 0x0, 0x7, 0x4, 0x7, 0x3, 0x7fff, 0x8]}, &(0x7f0000000300)=0x100) 5.792409983s ago: executing program 6 (id=1573): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe5, 0xe0, 0xfeff, 0x0}) 4.430104928s ago: executing program 2 (id=1574): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r0, 0x1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x8) 2.922643868s ago: executing program 8 (id=1575): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) mkdir(&(0x7f0000000080)='./file0\x00', 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) listen(r5, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6(0xa, 0x4, 0x8000000003c) 2.131669267s ago: executing program 7 (id=1576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.904019831s ago: executing program 9 (id=1577): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r3, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000d000000008000000100000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) 1.717973784s ago: executing program 7 (id=1578): sched_setscheduler(0x0, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x48634000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@cgroup, 0xffffffffffffffff, 0x2e, 0x2}, 0x20) prlimit64(0x0, 0x7, 0x0, 0x0) 1.648119803s ago: executing program 2 (id=1579): sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000040)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000001c0)={0x2, 0x3}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r1, 0x400455c8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.64615782s ago: executing program 6 (id=1580): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 989.104899ms ago: executing program 6 (id=1581): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$packet(0x11, 0x2, 0x300) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 365.960246ms ago: executing program 6 (id=1582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000300000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x50) 0s ago: executing program 6 (id=1583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}}, 0x0) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.2.498'. [ 215.262141][ T5996] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.784753][ T5996] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.013291][ T5592] Bluetooth: hci3: command tx timeout [ 217.794783][ T7446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.014893][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'. [ 230.597034][ T7515] random: crng reseeded on system resumption [ 232.205222][ T7514] netlink: 40 bytes leftover after parsing attributes in process `syz.1.513'. [ 233.103931][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 234.110923][ T7270] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.111125][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.111297][ T7270] bridge_slave_0: entered allmulticast mode [ 234.137470][ T7270] bridge_slave_0: entered promiscuous mode [ 234.162705][ T7270] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.162849][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.163015][ T7270] bridge_slave_1: entered allmulticast mode [ 234.191878][ T7270] bridge_slave_1: entered promiscuous mode [ 234.334135][ T7347] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.334258][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.334414][ T7347] bridge_slave_0: entered allmulticast mode [ 234.337459][ T7347] bridge_slave_0: entered promiscuous mode [ 234.522732][ T5996] bridge_slave_1: left allmulticast mode [ 234.522925][ T5996] bridge_slave_1: left promiscuous mode [ 234.569207][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.674420][ T7561] FAULT_INJECTION: forcing a failure. [ 234.674420][ T7561] name failslab, interval 1, probability 0, space 0, times 0 [ 234.674455][ T7561] CPU: 0 UID: 0 PID: 7561 Comm: syz.1.531 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 234.674478][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.674489][ T7561] Call Trace: [ 234.674497][ T7561] [ 234.674506][ T7561] dump_stack_lvl+0xe8/0x150 [ 234.674541][ T7561] should_fail_ex+0x46b/0x600 [ 234.674573][ T7561] should_failslab+0xa8/0x100 [ 234.674605][ T7561] __kmalloc_noprof+0xfb/0x790 [ 234.674632][ T7561] ? tomoyo_encode+0x2ad/0x570 [ 234.674657][ T7561] ? tomoyo_encode+0x2ad/0x570 [ 234.674690][ T7561] tomoyo_encode+0x2ad/0x570 [ 234.674725][ T7561] tomoyo_realpath_from_path+0x5fa/0x640 [ 234.674765][ T7561] ? tomoyo_path_number_perm+0x219/0x5f0 [ 234.674790][ T7561] tomoyo_path_number_perm+0x246/0x5f0 [ 234.674815][ T7561] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 234.674854][ T7561] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 234.674879][ T7561] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 234.674908][ T7561] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 234.674938][ T7561] ? reacquire_held_locks+0x117/0x1a0 [ 234.675000][ T7561] ? __pfx_current_check_access_path+0x10/0x10 [ 234.675024][ T7561] ? d_splice_alias_ops+0x11c/0x440 [ 234.675050][ T7561] ? d_splice_alias+0x12/0x30 [ 234.675077][ T7561] ? lookup_one_qstr_excl+0x1d4/0x360 [ 234.675107][ T7561] tomoyo_path_mkdir+0xb0/0xf0 [ 234.675127][ T7561] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 234.675152][ T7561] ? __pfx_filename_create+0x10/0x10 [ 234.675183][ T7561] security_path_mkdir+0x169/0x350 [ 234.675208][ T7561] filename_mkdirat+0x204/0x520 [ 234.675242][ T7561] ? __pfx_filename_mkdirat+0x10/0x10 [ 234.675273][ T7561] ? do_getname+0x151/0x250 [ 234.675306][ T7561] __se_sys_mkdirat+0x35/0x150 [ 234.675336][ T7561] do_syscall_64+0x166/0x520 [ 234.675363][ T7561] ? trace_irq_disable+0x3b/0x140 [ 234.675387][ T7561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.675407][ T7561] ? clear_bhb_loop+0x70/0xc0 [ 234.675432][ T7561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.675452][ T7561] RIP: 0033:0x7f7014e9e159 [ 234.675471][ T7561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.675487][ T7561] RSP: 002b:00007f70130f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 234.675508][ T7561] RAX: ffffffffffffffda RBX: 00007f7015125fa0 RCX: 00007f7014e9e159 [ 234.675523][ T7561] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 234.675537][ T7561] RBP: 00007f7014f3506b R08: 0000000000000000 R09: 0000000000000000 [ 234.675550][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.675562][ T7561] R13: 00007f7015126038 R14: 00007f7015125fa0 R15: 00007ffea7a0c978 [ 234.675596][ T7561] [ 234.675619][ T7561] ERROR: Out of memory at tomoyo_realpath_from_path. [ 235.155989][ T5996] bridge_slave_0: left allmulticast mode [ 235.156024][ T5996] bridge_slave_0: left promiscuous mode [ 235.167563][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.005919][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.503800][ T7588] block nbd2: shutting down sockets [ 238.540466][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.645297][ T5996] bond0 (unregistering): Released all slaves [ 239.937737][ T7270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.940996][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.941127][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.941298][ T7347] bridge_slave_1: entered allmulticast mode [ 239.988788][ T7347] bridge_slave_1: entered promiscuous mode [ 240.042632][ T7270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.316336][ T7347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.324473][ T7270] team0: Port device team_slave_0 added [ 240.347442][ T7347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.355216][ T7270] team0: Port device team_slave_1 added [ 240.638187][ T7347] team0: Port device team_slave_0 added [ 240.639125][ T7270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.639139][ T7270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.639163][ T7270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.641517][ T7270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.641531][ T7270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.641553][ T7270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.662889][ T7347] team0: Port device team_slave_1 added [ 242.076422][ T7602] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.546'. [ 242.151593][ T7347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.151610][ T7347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.151635][ T7347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.667197][ T7642] block nbd1: shutting down sockets [ 243.858099][ T7347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.858158][ T7347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.858238][ T7347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.016179][ T5250] 8021q: adding VLAN 0 to HW filter on device eth1 [ 246.222063][ T7270] hsr_slave_0: entered promiscuous mode [ 246.327180][ T7270] hsr_slave_1: entered promiscuous mode [ 246.332810][ T7270] debugfs: 'hsr0' already exists in 'hsr' [ 246.332844][ T7270] Cannot create hsr debugfs directory [ 249.467013][ T7347] hsr_slave_0: entered promiscuous mode [ 249.468519][ T7347] hsr_slave_1: entered promiscuous mode [ 249.469576][ T7347] debugfs: 'hsr0' already exists in 'hsr' [ 249.469603][ T7347] Cannot create hsr debugfs directory [ 251.084465][ T5996] hsr_slave_0: left promiscuous mode [ 251.089715][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.089823][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.926205][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.926237][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.239094][ T5996] veth1_macvtap: left promiscuous mode [ 252.239396][ T5996] veth0_macvtap: left promiscuous mode [ 252.246274][ T5996] veth1_vlan: left promiscuous mode [ 252.246733][ T5996] veth0_vlan: left promiscuous mode [ 254.832902][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.854927][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.888968][ T5604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.890037][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.891557][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.755253][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.785475][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.869801][ T5996] team0 (unregistering): Port device team_slave_1 removed [ 256.564186][ T5996] team0 (unregistering): Port device team_slave_0 removed [ 256.973723][ T5592] Bluetooth: hci1: command tx timeout [ 257.217925][ T7786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.601'. [ 258.099335][ T5601] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 258.099374][ T5601] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 258.099401][ T5601] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 258.099426][ T5601] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 258.237378][ T5601] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [] on [ 258.797787][ T7817] fido_id[7817]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.054006][ T5592] Bluetooth: hci1: command tx timeout [ 259.847748][ T7837] capability: warning: `syz.1.611' uses 32-bit capabilities (legacy support in use) [ 260.429631][ T5250] 8021q: adding VLAN 0 to HW filter on device eth2 [ 261.133430][ T5592] Bluetooth: hci1: command tx timeout [ 261.882470][ T5996] bridge_slave_1: left allmulticast mode [ 261.882513][ T5996] bridge_slave_1: left promiscuous mode [ 261.882795][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.018215][ T7898] FAULT_INJECTION: forcing a failure. [ 262.018215][ T7898] name failslab, interval 1, probability 0, space 0, times 0 [ 262.018261][ T7898] CPU: 1 UID: 0 PID: 7898 Comm: syz.3.632 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 262.018278][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.018303][ T7898] Call Trace: [ 262.018309][ T7898] [ 262.018315][ T7898] dump_stack_lvl+0xe8/0x150 [ 262.018340][ T7898] should_fail_ex+0x46b/0x600 [ 262.018362][ T7898] should_failslab+0xa8/0x100 [ 262.018383][ T7898] ? do_getname+0x2e/0x250 [ 262.018402][ T7898] kmem_cache_alloc_noprof+0x9e/0x690 [ 262.018420][ T7898] ? do_getname+0x2e/0x250 [ 262.018436][ T7898] ? __pfx___se_sys_futex+0x10/0x10 [ 262.018452][ T7898] do_getname+0x2e/0x250 [ 262.018467][ T7898] ? __se_sys_mkdirat+0x18/0x150 [ 262.018483][ T7898] __se_sys_mkdirat+0x24/0x150 [ 262.018499][ T7898] do_syscall_64+0x166/0x520 [ 262.018516][ T7898] ? trace_irq_disable+0x3b/0x140 [ 262.018530][ T7898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.018548][ T7898] ? clear_bhb_loop+0x70/0xc0 [ 262.018563][ T7898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.018574][ T7898] RIP: 0033:0x7fd724b0e159 [ 262.018588][ T7898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.018599][ T7898] RSP: 002b:00007fd722d66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 262.018615][ T7898] RAX: ffffffffffffffda RBX: 00007fd724d95fa0 RCX: 00007fd724b0e159 [ 262.018623][ T7898] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 262.018631][ T7898] RBP: 00007fd724ba506b R08: 0000000000000000 R09: 0000000000000000 [ 262.018638][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.018645][ T7898] R13: 00007fd724d96038 R14: 00007fd724d95fa0 R15: 00007ffd8651c688 [ 262.018662][ T7898] [ 262.269735][ T5996] bridge_slave_0: left allmulticast mode [ 262.269804][ T5996] bridge_slave_0: left promiscuous mode [ 262.270270][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.527770][ T5592] Bluetooth: hci1: command tx timeout [ 263.544985][ T7909] MINIX-fs: unable to read superblock [ 263.884156][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.003968][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.088949][ T5996] bond0 (unregistering): Released all slaves [ 264.901540][ T5996] hsr_slave_0: left promiscuous mode [ 264.933326][ T5996] hsr_slave_1: left promiscuous mode [ 264.949026][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.974713][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.575795][ T5996] team0 (unregistering): Port device team_slave_1 removed [ 265.637574][ T5996] team0 (unregistering): Port device team_slave_0 removed [ 265.976079][ T7347] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 266.143580][ T7347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.163952][ T5250] 8021q: adding VLAN 0 to HW filter on device eth3 [ 266.225078][ T7347] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 266.416969][ T7347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 266.432271][ T7347] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 266.565327][ T7347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 266.588296][ T7347] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 266.699383][ T7969] FAULT_INJECTION: forcing a failure. [ 266.699383][ T7969] name failslab, interval 1, probability 0, space 0, times 0 [ 266.699422][ T7969] CPU: 1 UID: 0 PID: 7969 Comm: syz.3.652 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 266.699447][ T7969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.699460][ T7969] Call Trace: [ 266.699468][ T7969] [ 266.699478][ T7969] dump_stack_lvl+0xe8/0x150 [ 266.699514][ T7969] should_fail_ex+0x46b/0x600 [ 266.699550][ T7969] should_failslab+0xa8/0x100 [ 266.699583][ T7969] __kmalloc_node_noprof+0xfd/0x7b0 [ 266.699619][ T7969] ? crypto_create_tfm_node+0x81/0x3c0 [ 266.699651][ T7969] ? crypto_create_tfm_node+0x81/0x3c0 [ 266.699688][ T7969] crypto_create_tfm_node+0x81/0x3c0 [ 266.699722][ T7969] crypto_spawn_tfm2+0x5c/0x90 [ 266.699748][ T7969] rsassa_pkcs1_init_tfm+0x42/0x90 [ 266.699777][ T7969] crypto_create_tfm_node+0x143/0x3c0 [ 266.699811][ T7969] crypto_alloc_tfm_node+0x169/0x3e0 [ 266.699851][ T7969] public_key_verify_signature+0x242/0x9e0 [ 266.699896][ T7969] ? __pfx_public_key_verify_signature+0x10/0x10 [ 266.699942][ T7969] ? asymmetric_key_generate_id+0x60/0x170 [ 266.699969][ T7969] ? asymmetric_key_id_same+0x67/0xe0 [ 266.700004][ T7969] x509_check_for_self_signed+0x326/0x430 [ 266.700031][ T7969] x509_cert_parse+0x622/0x7a0 [ 266.700066][ T7969] x509_key_preparse+0x64/0x6d0 [ 266.700088][ T7969] ? __pfx_smack_key_permission+0x10/0x10 [ 266.700120][ T7969] asymmetric_key_preparse+0xb9/0x1b0 [ 266.700150][ T7969] __key_create_or_update+0x3a9/0xa80 [ 266.700190][ T7969] ? __pfx___key_create_or_update+0x10/0x10 [ 266.700225][ T7969] ? lookup_user_key+0xb68/0x1150 [ 266.700266][ T7969] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 266.700304][ T7969] key_create_or_update+0x42/0x60 [ 266.700338][ T7969] __se_sys_add_key+0x349/0x420 [ 266.700366][ T7969] ? __pfx___se_sys_add_key+0x10/0x10 [ 266.700399][ T7969] ? __x64_sys_add_key+0x20/0xc0 [ 266.700425][ T7969] do_syscall_64+0x166/0x520 [ 266.700454][ T7969] ? trace_irq_disable+0x3b/0x140 [ 266.700480][ T7969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.700501][ T7969] ? clear_bhb_loop+0x70/0xc0 [ 266.700526][ T7969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.700546][ T7969] RIP: 0033:0x7fd724b0e159 [ 266.700566][ T7969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.700583][ T7969] RSP: 002b:00007fd722d45028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 266.700605][ T7969] RAX: ffffffffffffffda RBX: 00007fd724d96090 RCX: 00007fd724b0e159 [ 266.700626][ T7969] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 266.700640][ T7969] RBP: 00007fd724ba506b R08: ffffffffffffffff R09: 0000000000000000 [ 266.700654][ T7969] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 266.700666][ T7969] R13: 00007fd724d96128 R14: 00007fd724d96090 R15: 00007ffd8651c688 [ 266.700700][ T7969] [ 267.031787][ T7347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 268.551517][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.611677][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.651663][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.673449][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.675817][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 269.182031][ T7743] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.186145][ T7743] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.186369][ T7743] bridge_slave_0: entered allmulticast mode [ 269.192309][ T7743] bridge_slave_0: entered promiscuous mode [ 269.272768][ T7743] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.272898][ T7743] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.273097][ T7743] bridge_slave_1: entered allmulticast mode [ 269.443418][ T8023] MINIX-fs: unable to read superblock [ 270.247873][ T7743] bridge_slave_1: entered promiscuous mode [ 270.481780][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 270.578270][ T7743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.702572][ T7743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.813403][ T5604] Bluetooth: hci5: command tx timeout [ 271.038967][ T7743] team0: Port device team_slave_0 added [ 271.392374][ T7743] team0: Port device team_slave_1 added [ 271.412658][ T5250] 8021q: adding VLAN 0 to HW filter on device eth4 [ 271.969005][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 272.903550][ T5604] Bluetooth: hci5: command tx timeout [ 273.150879][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 273.176629][ T7743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.176642][ T7743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.176656][ T7743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.232957][ T7743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.232970][ T7743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.232984][ T7743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.770751][ T8104] MINIX-fs: unable to read superblock [ 274.973588][ T5604] Bluetooth: hci5: command tx timeout [ 275.267839][ T8119] tipc: Enabling not permitted [ 275.267876][ T8119] tipc: Enabling of bearer rejected, failed to enable media [ 275.324383][ T7743] hsr_slave_0: entered promiscuous mode [ 275.327473][ T7743] hsr_slave_1: entered promiscuous mode [ 275.328383][ T7743] debugfs: 'hsr0' already exists in 'hsr' [ 275.328407][ T7743] Cannot create hsr debugfs directory [ 275.599719][ T8130] CacheFiles: Failed to register: -95 [ 277.053597][ T5604] Bluetooth: hci5: command tx timeout [ 277.573353][ T8127] warning: `syz.1.700' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 278.649334][ T8172] CacheFiles: Failed to register: -95 [ 282.562065][ T8194] MINIX-fs: unable to read superblock [ 284.194566][ T8215] CacheFiles: Failed to register: -95 [ 285.525628][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'. [ 285.831104][ T8240] MINIX-fs: unable to read superblock [ 286.684785][ T1475] bridge_slave_1: left allmulticast mode [ 286.684819][ T1475] bridge_slave_1: left promiscuous mode [ 286.685065][ T1475] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.002249][ T8256] CacheFiles: Failed to register: -95 [ 287.718485][ T1475] bridge_slave_0: left allmulticast mode [ 287.718663][ T1475] bridge_slave_0: left promiscuous mode [ 287.870341][ T1475] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.671176][ T1475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.697796][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.751'. [ 288.794053][ T1475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.854536][ T1475] bond0 (unregistering): Released all slaves [ 288.898186][ T5250] 8021q: adding VLAN 0 to HW filter on device eth5 [ 290.604875][ T1475] hsr_slave_0: left promiscuous mode [ 290.624465][ T1475] hsr_slave_1: left promiscuous mode [ 290.625213][ T1475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.649444][ T1475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.948140][ T1475] team0 (unregistering): Port device team_slave_1 removed [ 290.983867][ T1475] team0 (unregistering): Port device team_slave_0 removed [ 291.176543][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.176712][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.176850][ T7998] bridge_slave_0: entered allmulticast mode [ 291.179412][ T7998] bridge_slave_0: entered promiscuous mode [ 291.234606][ T8296] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.234771][ T8296] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 291.234938][ T8296] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 291.235027][ T8296] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 291.242309][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.242433][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.242529][ T7998] bridge_slave_1: entered allmulticast mode [ 291.245798][ T7998] bridge_slave_1: entered promiscuous mode [ 291.290931][ T7743] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 291.315922][ T8296] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 291.327066][ T7743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 291.349959][ T7743] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 291.356411][ T8296] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 291.356493][ T8296] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 291.381063][ T7743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 291.391221][ T7998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.394777][ T7743] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 291.411064][ T8296] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 291.434288][ T7743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 291.470025][ T7998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.525282][ T7743] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 291.737580][ T7743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 292.030196][ T7998] team0: Port device team_slave_0 added [ 292.050749][ T7998] team0: Port device team_slave_1 added [ 292.380083][ T8332] CacheFiles: Failed to register: -95 [ 293.293703][ T5592] Bluetooth: hci1: command 0x0c1a tx timeout [ 293.295869][ T5597] Bluetooth: hci2: command 0x0c1a tx timeout [ 293.295930][ T5599] Bluetooth: hci4: command 0x0c1a tx timeout [ 293.380487][ T5599] Bluetooth: hci5: command 0x0c1a tx timeout [ 293.533974][ T5604] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 294.554907][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.554925][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.554950][ T7998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.560656][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.560672][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.560698][ T7998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.566807][ T5250] 8021q: adding VLAN 0 to HW filter on device eth6 [ 294.961368][ T7998] hsr_slave_0: entered promiscuous mode [ 294.965206][ T7998] hsr_slave_1: entered promiscuous mode [ 294.968122][ T7998] debugfs: 'hsr0' already exists in 'hsr' [ 294.968146][ T7998] Cannot create hsr debugfs directory [ 295.457575][ T5604] Bluetooth: hci5: command 0x0c1a tx timeout [ 295.684484][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 296.017669][ T8364] MINIX-fs: unable to read superblock [ 296.822462][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.773'. [ 296.953876][ T7743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.533308][ T5604] Bluetooth: hci5: command 0x0c1a tx timeout [ 297.589823][ T7743] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.773592][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 298.544833][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.544919][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.606739][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.606839][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.310627][ T8420] netlink: 72 bytes leftover after parsing attributes in process `syz.1.779'. [ 305.725586][ T8497] netlink: 88 bytes leftover after parsing attributes in process `syz.3.797'. [ 305.786145][ T7743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.786539][ T7998] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 305.929897][ T7998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 305.950234][ T7998] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 306.070482][ T7998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.085077][ T7998] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 306.409035][ T8513] MINIX-fs: unable to read superblock [ 307.252609][ T7998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 307.284909][ T7998] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 307.385265][ T7998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 307.724133][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 308.037755][ T7998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.099147][ T7998] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.169484][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.189603][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.270580][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.270719][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.924043][ T7743] veth0_vlan: entered promiscuous mode [ 309.065453][ T7743] veth1_vlan: entered promiscuous mode [ 309.256356][ T7743] veth0_macvtap: entered promiscuous mode [ 309.299598][ T7743] veth1_macvtap: entered promiscuous mode [ 309.366416][ T7743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.406084][ T7743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.564865][ T1475] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.628239][ T985] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.628281][ T985] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.862857][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 310.236838][ T8579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.814'. [ 310.363850][ T6013] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.678578][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.678599][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.139712][ T8605] FAULT_INJECTION: forcing a failure. [ 311.139712][ T8605] name failslab, interval 1, probability 0, space 0, times 0 [ 311.139746][ T8605] CPU: 1 UID: 0 PID: 8605 Comm: syz.3.822 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 311.139767][ T8605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.139779][ T8605] Call Trace: [ 311.139787][ T8605] [ 311.139795][ T8605] dump_stack_lvl+0xe8/0x150 [ 311.139829][ T8605] should_fail_ex+0x46b/0x600 [ 311.139858][ T8605] should_failslab+0xa8/0x100 [ 311.139884][ T8605] ? security_inode_alloc+0x39/0x310 [ 311.139902][ T8605] kmem_cache_alloc_noprof+0x9e/0x690 [ 311.139925][ T8605] ? security_inode_alloc+0x39/0x310 [ 311.139956][ T8605] security_inode_alloc+0x39/0x310 [ 311.139975][ T8605] inode_init_always_gfp+0x983/0xd40 [ 311.140011][ T8605] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 311.140036][ T8605] alloc_inode+0x82/0x1b0 [ 311.140066][ T8605] new_inode+0x1f/0x170 [ 311.140085][ T8605] ? shmem_get_inode+0x29d/0xf80 [ 311.140115][ T8605] shmem_get_inode+0x3b1/0xf80 [ 311.140143][ T8605] ? vsnprintf+0xe42/0xef0 [ 311.140176][ T8605] ? __pfx_shmem_get_inode+0x10/0x10 [ 311.140203][ T8605] ? __vm_enough_memory+0x11a/0x380 [ 311.140228][ T8605] __shmem_file_setup+0x20b/0x370 [ 311.140255][ T8605] ? __pfx___shmem_file_setup+0x10/0x10 [ 311.140281][ T8605] newseg+0x4d3/0xc90 [ 311.140314][ T8605] ? __pfx_newseg+0x10/0x10 [ 311.140339][ T8605] ? rwbase_write_lock+0x550/0x720 [ 311.140368][ T8605] ipcget+0x1db/0xf30 [ 311.140397][ T8605] ? do_futex+0x3e7/0x4e0 [ 311.140422][ T8605] ? __pfx_do_futex+0x10/0x10 [ 311.140441][ T8605] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 311.140465][ T8605] ? __pfx_ipcget+0x10/0x10 [ 311.140497][ T8605] ? __se_sys_futex+0x3a8/0x450 [ 311.140521][ T8605] __x64_sys_shmget+0x140/0x190 [ 311.140551][ T8605] ? __pfx___x64_sys_shmget+0x10/0x10 [ 311.140590][ T8605] do_syscall_64+0x166/0x520 [ 311.140619][ T8605] ? trace_irq_disable+0x3b/0x140 [ 311.140643][ T8605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.140663][ T8605] ? clear_bhb_loop+0x70/0xc0 [ 311.140687][ T8605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.140707][ T8605] RIP: 0033:0x7fd724b0e159 [ 311.140727][ T8605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.140744][ T8605] RSP: 002b:00007fd722d66028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 311.140767][ T8605] RAX: ffffffffffffffda RBX: 00007fd724d95fa0 RCX: 00007fd724b0e159 [ 311.140782][ T8605] RDX: 0000000000000040 RSI: 0000000000001000 RDI: 0000000000000000 [ 311.140792][ T8605] RBP: 00007fd724ba506b R08: 0000000000000000 R09: 0000000000000000 [ 311.140804][ T8605] R10: 0000200000ffc000 R11: 0000000000000246 R12: 0000000000000000 [ 311.140816][ T8605] R13: 00007fd724d96038 R14: 00007fd724d95fa0 R15: 00007ffd8651c688 [ 311.140847][ T8605] [ 311.514432][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.514452][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.518945][ T8604] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 311.518970][ T8604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 311.519432][ T8604] vhci_hcd vhci_hcd.0: Device attached [ 311.573290][ T8611] vhci_hcd: connection closed [ 311.687332][ T56] vhci_hcd vhci_hcd.1: stop threads [ 311.688160][ T56] vhci_hcd vhci_hcd.1: release socket [ 311.745385][ T56] vhci_hcd vhci_hcd.1: disconnect device [ 311.933516][ T7998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.902556][ T8634] netlink: 40 bytes leftover after parsing attributes in process `syz.5.443'. [ 313.621190][ T7998] veth0_vlan: entered promiscuous mode [ 313.648036][ T7998] veth1_vlan: entered promiscuous mode [ 314.119912][ T7998] veth0_macvtap: entered promiscuous mode [ 314.149834][ T7998] veth1_macvtap: entered promiscuous mode [ 314.326636][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.425284][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.340436][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.340505][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.506082][ T3038] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.596412][ T8697] FAULT_INJECTION: forcing a failure. [ 317.596412][ T8697] name failslab, interval 1, probability 0, space 0, times 0 [ 317.596450][ T8697] CPU: 0 UID: 0 PID: 8697 Comm: syz.1.840 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 317.596474][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.596485][ T8697] Call Trace: [ 317.596493][ T8697] [ 317.596503][ T8697] dump_stack_lvl+0xe8/0x150 [ 317.596538][ T8697] should_fail_ex+0x46b/0x600 [ 317.596571][ T8697] should_failslab+0xa8/0x100 [ 317.596604][ T8697] __kmalloc_noprof+0xfb/0x790 [ 317.596631][ T8697] ? mpi_powm+0x1173/0x2480 [ 317.596657][ T8697] ? mpi_powm+0x1173/0x2480 [ 317.596690][ T8697] mpi_powm+0x1173/0x2480 [ 317.596739][ T8697] ? __pfx_mpi_powm+0x10/0x10 [ 317.596768][ T8697] ? lockdep_hardirqs_on+0x7b/0x110 [ 317.596803][ T8697] ? kfree+0x1c5/0x6d0 [ 317.596824][ T8697] ? rsa_enc+0x2e0/0x480 [ 317.596853][ T8697] rsa_enc+0x338/0x480 [ 317.596882][ T8697] ? __pfx_rsa_enc+0x10/0x10 [ 317.596903][ T8697] ? __virt_addr_valid+0x137/0x390 [ 317.596929][ T8697] ? __virt_addr_valid+0x2e8/0x390 [ 317.596957][ T8697] ? sg_init_one+0xf5/0x1c0 [ 317.596981][ T8697] rsassa_pkcs1_verify+0x52b/0xbb0 [ 317.597022][ T8697] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 317.597074][ T8697] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 317.597107][ T8697] ? rsassa_pkcs1_set_pub_key+0x13d/0x1a0 [ 317.597139][ T8697] public_key_verify_signature+0x79b/0x9e0 [ 317.597184][ T8697] ? __pfx_public_key_verify_signature+0x10/0x10 [ 317.597231][ T8697] ? asymmetric_key_generate_id+0x60/0x170 [ 317.597257][ T8697] ? asymmetric_key_id_same+0x67/0xe0 [ 317.597292][ T8697] x509_check_for_self_signed+0x326/0x430 [ 317.597318][ T8697] x509_cert_parse+0x622/0x7a0 [ 317.597352][ T8697] x509_key_preparse+0x64/0x6d0 [ 317.597374][ T8697] ? __pfx_smack_key_permission+0x10/0x10 [ 317.597406][ T8697] asymmetric_key_preparse+0xb9/0x1b0 [ 317.597436][ T8697] __key_create_or_update+0x3a9/0xa80 [ 317.597476][ T8697] ? __pfx___key_create_or_update+0x10/0x10 [ 317.597510][ T8697] ? lookup_user_key+0xb68/0x1150 [ 317.597549][ T8697] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 317.597576][ T8697] ? __pfx_keyring_search_iterator+0x10/0x10 [ 317.597600][ T8697] key_create_or_update+0x42/0x60 [ 317.597631][ T8697] __se_sys_add_key+0x349/0x420 [ 317.597657][ T8697] ? __pfx___se_sys_add_key+0x10/0x10 [ 317.597690][ T8697] ? __x64_sys_add_key+0x20/0xc0 [ 317.597715][ T8697] do_syscall_64+0x166/0x520 [ 317.597744][ T8697] ? trace_irq_disable+0x3b/0x140 [ 317.597769][ T8697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.597789][ T8697] ? clear_bhb_loop+0x70/0xc0 [ 317.597814][ T8697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.597834][ T8697] RIP: 0033:0x7f7014e9e159 [ 317.597854][ T8697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.597870][ T8697] RSP: 002b:00007f70130f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 317.597891][ T8697] RAX: ffffffffffffffda RBX: 00007f7015125fa0 RCX: 00007f7014e9e159 [ 317.597906][ T8697] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 317.597919][ T8697] RBP: 00007f7014f3506b R08: 0000000024397bae R09: 0000000000000000 [ 317.597932][ T8697] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 317.597944][ T8697] R13: 00007f7015126038 R14: 00007f7015125fa0 R15: 00007ffea7a0c978 [ 317.597978][ T8697] [ 318.703979][ T3038] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.857887][ T3038] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.209554][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 320.256949][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 320.282619][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 320.297558][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 320.298655][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.187550][ T215] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.811652][ T8746] 9p: Bad value for 'rfdno' [ 322.225641][ T8748] block nbd1: shutting down sockets [ 322.532767][ T5604] Bluetooth: hci2: command tx timeout [ 324.665228][ T5604] Bluetooth: hci2: command tx timeout [ 324.872869][ T3151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.872891][ T3151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.875954][ T215] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.117052][ T1475] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.244930][ T68] IPVS: starting estimator thread 0... [ 326.360975][ T8784] IPVS: using max 9 ests per chain, 21600 per kthread [ 326.455277][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.455301][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.586036][ T8778] Set syz1 is full, maxelem 6117 reached [ 326.748028][ T5604] Bluetooth: hci2: command tx timeout [ 327.165163][ T8789] WARNING! power/level is deprecated; use power/control instead [ 327.281252][ T215] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.510798][ T8795] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 327.706336][ T8802] 9p: Bad value for 'rfdno' [ 328.010737][ T8805] block nbd1: shutting down sockets [ 328.813633][ T5604] Bluetooth: hci2: command tx timeout [ 331.217914][ T215] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.644641][ T5599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.672312][ T5599] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.694140][ T5599] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.696724][ T5599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.697527][ T5599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 331.998661][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 332.276769][ T8827] FAULT_INJECTION: forcing a failure. [ 332.276769][ T8827] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 332.276807][ T8827] CPU: 1 UID: 0 PID: 8827 Comm: syz.3.873 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 332.276831][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.276843][ T8827] Call Trace: [ 332.276851][ T8827] [ 332.276860][ T8827] dump_stack_lvl+0xe8/0x150 [ 332.276896][ T8827] should_fail_ex+0x46b/0x600 [ 332.276926][ T8827] strncpy_from_user+0x36/0x2c0 [ 332.276955][ T8827] bpf_prog_load+0xdef/0x1c20 [ 332.276996][ T8827] ? __pfx_bpf_prog_load+0x10/0x10 [ 332.277050][ T8827] __sys_bpf+0xd0d/0xd90 [ 332.277083][ T8827] ? __pfx___sys_bpf+0x10/0x10 [ 332.277114][ T8827] ? do_futex+0x3e7/0x4e0 [ 332.277162][ T8827] ? rcu_is_watching+0x16/0xb0 [ 332.277197][ T8827] __x64_sys_bpf+0xba/0xd0 [ 332.277225][ T8827] do_syscall_64+0x166/0x520 [ 332.277254][ T8827] ? trace_irq_disable+0x3b/0x140 [ 332.277279][ T8827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.277300][ T8827] ? clear_bhb_loop+0x70/0xc0 [ 332.277325][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.277344][ T8827] RIP: 0033:0x7fd724b0e159 [ 332.277364][ T8827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.277380][ T8827] RSP: 002b:00007fd722d66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 332.277402][ T8827] RAX: ffffffffffffffda RBX: 00007fd724d95fa0 RCX: 00007fd724b0e159 [ 332.277420][ T8827] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 332.277433][ T8827] RBP: 00007fd724ba506b R08: 0000000000000000 R09: 0000000000000000 [ 332.277446][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.277458][ T8827] R13: 00007fd724d96038 R14: 00007fd724d95fa0 R15: 00007ffd8651c688 [ 332.277490][ T8827] [ 332.737480][ T8839] random: crng reseeded on system resumption [ 333.949292][ T5599] Bluetooth: hci3: command tx timeout [ 335.253578][ T8860] block nbd5: shutting down sockets [ 336.014207][ T5604] Bluetooth: hci3: command tx timeout [ 336.939760][ T8869] netlink: 'syz.3.888': attribute type 4 has an invalid length. [ 337.943605][ T215] bridge_slave_1: left allmulticast mode [ 337.943639][ T215] bridge_slave_1: left promiscuous mode [ 337.943879][ T215] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.104033][ T5599] Bluetooth: hci3: command tx timeout [ 338.126974][ T215] bridge_slave_0: left allmulticast mode [ 338.127013][ T215] bridge_slave_0: left promiscuous mode [ 338.127278][ T215] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.614205][ T8918] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 338.747240][ T8923] block nbd1: shutting down sockets [ 339.516070][ T215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.564027][ T215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.588382][ T215] bond0 (unregistering): Released all slaves [ 339.598932][ T215] bond1 (unregistering): Released all slaves [ 339.610105][ T215] bond2 (unregistering): Released all slaves [ 339.723997][ T5250] 8021q: adding VLAN 0 to HW filter on device eth5 [ 340.177769][ T5604] Bluetooth: hci3: command tx timeout [ 341.263537][ T8725] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.263638][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.263817][ T8725] bridge_slave_0: entered allmulticast mode [ 341.272274][ T8725] bridge_slave_0: entered promiscuous mode [ 341.341651][ T8725] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.341864][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.342135][ T8725] bridge_slave_1: entered allmulticast mode [ 341.389845][ T8725] bridge_slave_1: entered promiscuous mode [ 342.675180][ T8978] block nbd5: shutting down sockets [ 344.879119][ T8981] netlink: 'syz.3.920': attribute type 4 has an invalid length. [ 344.930095][ T8725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.047013][ T8725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.764910][ T215] hsr_slave_0: left promiscuous mode [ 346.804399][ T215] hsr_slave_1: left promiscuous mode [ 346.805786][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.805813][ T215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.913396][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.913427][ T215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.176511][ T215] veth1_macvtap: left promiscuous mode [ 347.176615][ T215] veth0_macvtap: left promiscuous mode [ 347.200009][ T215] veth1_vlan: left promiscuous mode [ 347.200182][ T215] veth0_vlan: left promiscuous mode [ 348.465615][ T9033] MINIX-fs: unable to read superblock [ 349.399746][ T9037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.933'. [ 349.876580][ T9047] block nbd5: shutting down sockets [ 350.309548][ T215] team0 (unregistering): Port device team_slave_1 removed [ 350.370252][ T215] team0 (unregistering): Port device team_slave_0 removed [ 350.606167][ T8725] team0: Port device team_slave_0 added [ 350.791088][ T5250] 8021q: adding VLAN 0 to HW filter on device eth6 [ 350.802563][ T8725] team0: Port device team_slave_1 added [ 351.107759][ T8725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.107774][ T8725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.107788][ T8725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.203264][ T8725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.203287][ T8725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.203311][ T8725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.825059][ T8725] hsr_slave_0: entered promiscuous mode [ 351.829867][ T8725] hsr_slave_1: entered promiscuous mode [ 351.832331][ T8725] debugfs: 'hsr0' already exists in 'hsr' [ 351.832359][ T8725] Cannot create hsr debugfs directory [ 352.490820][ T9075] MINIX-fs: unable to read superblock [ 353.066687][ T8816] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.066816][ T8816] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.067027][ T8816] bridge_slave_0: entered allmulticast mode [ 353.119230][ T8816] bridge_slave_0: entered promiscuous mode [ 353.453928][ T8816] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.454080][ T8816] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.454283][ T8816] bridge_slave_1: entered allmulticast mode [ 353.551942][ T8816] bridge_slave_1: entered promiscuous mode [ 354.019586][ T8816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.168316][ T8816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.992755][ T9096] block nbd1: shutting down sockets [ 355.426710][ T5250] 8021q: adding VLAN 0 to HW filter on device eth7 [ 355.484446][ T8816] team0: Port device team_slave_0 added [ 355.519375][ T8816] team0: Port device team_slave_1 added [ 356.030307][ T8816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.030321][ T8816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.030335][ T8816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.129197][ T8816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.129210][ T8816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.129225][ T8816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.248724][ T9136] netlink: 36 bytes leftover after parsing attributes in process `syz.5.961'. [ 358.954826][ T215] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.081188][ T9146] block nbd3: shutting down sockets [ 362.969194][ T215] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.452363][ T8816] hsr_slave_0: entered promiscuous mode [ 363.462552][ T8816] hsr_slave_1: entered promiscuous mode [ 363.484043][ T8816] debugfs: 'hsr0' already exists in 'hsr' [ 363.484074][ T8816] Cannot create hsr debugfs directory [ 365.320351][ T9202] MINIX-fs: unable to read superblock [ 366.688752][ T9208] block nbd1: shutting down sockets [ 368.614210][ T215] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.060068][ T215] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.075891][ T9260] block nbd3: shutting down sockets [ 378.256127][ T215] bridge_slave_1: left allmulticast mode [ 378.256165][ T215] bridge_slave_1: left promiscuous mode [ 378.305858][ T215] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.476203][ T215] bridge_slave_0: left allmulticast mode [ 378.476238][ T215] bridge_slave_0: left promiscuous mode [ 378.476495][ T215] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.578656][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.578715][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.836944][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.882295][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.924483][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.926616][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.928420][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.308621][ T215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.397126][ T215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.487616][ T215] bond0 (unregistering): Released all slaves [ 384.106412][ T5604] Bluetooth: hci5: command tx timeout [ 384.772430][ T9361] syzkaller0: entered promiscuous mode [ 384.772452][ T9361] syzkaller0: entered allmulticast mode [ 384.914323][ T9402] netlink: 'syz.1.1023': attribute type 21 has an invalid length. [ 386.173308][ T5604] Bluetooth: hci5: command tx timeout [ 388.255735][ T5604] Bluetooth: hci5: command tx timeout [ 389.499582][ T9442] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 390.344374][ T5604] Bluetooth: hci5: command tx timeout [ 391.800131][ T9453] CacheFiles: Failed to register: -95 [ 394.087769][ T5599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 394.130336][ T5599] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 394.133617][ T5599] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 394.141223][ T5599] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 394.146070][ T5599] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 394.279047][ T5604] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 394.363649][ T5604] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 394.374617][ T5604] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 394.375768][ T5604] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 394.378103][ T5604] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 396.284829][ T5599] Bluetooth: hci6: command tx timeout [ 396.576333][ T5599] Bluetooth: hci7: command tx timeout [ 397.088787][ T5604] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 397.129413][ T5604] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 397.191710][ T5604] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 397.196461][ T5604] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 397.211010][ T5604] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 398.333331][ T5604] Bluetooth: hci6: command tx timeout [ 398.653696][ T5604] Bluetooth: hci7: command tx timeout [ 399.383650][ T5604] Bluetooth: hci8: command tx timeout [ 400.413817][ T5604] Bluetooth: hci6: command tx timeout [ 400.733293][ T5604] Bluetooth: hci7: command tx timeout [ 401.473389][ T5604] Bluetooth: hci8: command tx timeout [ 402.493377][ T5604] Bluetooth: hci6: command tx timeout [ 402.822408][ T5604] Bluetooth: hci7: command tx timeout [ 403.535121][ T5604] Bluetooth: hci8: command tx timeout [ 405.613322][ T5604] Bluetooth: hci8: command tx timeout [ 405.956216][ T5599] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 406.032553][ T5599] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 406.090183][ T5599] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 406.091521][ T5599] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 406.092217][ T5599] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 408.263517][ T5599] Bluetooth: hci9: command tx timeout [ 410.333387][ T5599] Bluetooth: hci9: command tx timeout [ 412.083389][ T215] hsr_slave_0: left promiscuous mode [ 412.133365][ T215] hsr_slave_1: left promiscuous mode [ 412.134182][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.134200][ T215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.158434][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.158462][ T215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.235049][ T215] veth1_macvtap: left promiscuous mode [ 412.235116][ T215] veth0_macvtap: left promiscuous mode [ 412.235263][ T215] veth1_vlan: left promiscuous mode [ 412.235368][ T215] veth0_vlan: left promiscuous mode [ 412.413662][ T5599] Bluetooth: hci9: command tx timeout [ 412.952283][ T215] team0 (unregistering): Port device team_slave_1 removed [ 413.003796][ T215] team0 (unregistering): Port device team_slave_0 removed [ 414.493318][ T5599] Bluetooth: hci9: command tx timeout [ 415.370585][ T215] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.057452][ T215] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.135514][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.135690][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.135837][ T9347] bridge_slave_0: entered allmulticast mode [ 416.137848][ T9347] bridge_slave_0: entered promiscuous mode [ 416.197861][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.197929][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.198038][ T9347] bridge_slave_1: entered allmulticast mode [ 416.199474][ T9347] bridge_slave_1: entered promiscuous mode [ 416.380097][ T215] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.433708][ T9455] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.433832][ T9455] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.433967][ T9455] bridge_slave_0: entered allmulticast mode [ 416.435482][ T9455] bridge_slave_0: entered promiscuous mode [ 416.483495][ T9455] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.484934][ T9455] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.485122][ T9455] bridge_slave_1: entered allmulticast mode [ 416.487689][ T9455] bridge_slave_1: entered promiscuous mode [ 416.538214][ T9347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.607973][ T9470] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.608073][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.608183][ T9470] bridge_slave_0: entered allmulticast mode [ 416.609594][ T9470] bridge_slave_0: entered promiscuous mode [ 416.624640][ T9347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.672077][ T9470] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.672767][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.672880][ T9470] bridge_slave_1: entered allmulticast mode [ 416.676022][ T9470] bridge_slave_1: entered promiscuous mode [ 416.858064][ T215] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.888274][ T9455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.888796][ T9459] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.888863][ T9459] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.888970][ T9459] bridge_slave_0: entered allmulticast mode [ 416.891249][ T9459] bridge_slave_0: entered promiscuous mode [ 416.940714][ T9465] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.940836][ T9465] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.940989][ T9465] bridge_slave_0: entered allmulticast mode [ 416.943072][ T9465] bridge_slave_0: entered promiscuous mode [ 416.957460][ T9455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.957919][ T9459] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.958064][ T9459] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.958228][ T9459] bridge_slave_1: entered allmulticast mode [ 416.960724][ T9459] bridge_slave_1: entered promiscuous mode [ 416.997837][ T9347] team0: Port device team_slave_0 added [ 416.998554][ T9465] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.998664][ T9465] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.998828][ T9465] bridge_slave_1: entered allmulticast mode [ 417.005312][ T9465] bridge_slave_1: entered promiscuous mode [ 417.054771][ T9470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.062950][ T9347] team0: Port device team_slave_1 added [ 417.120619][ T9470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.155232][ T9455] team0: Port device team_slave_0 added [ 417.158567][ T9459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.192338][ T9465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.196214][ T9455] team0: Port device team_slave_1 added [ 417.212855][ T9459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.236377][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.236393][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.236417][ T9347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.254691][ T9465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.277052][ T9470] team0: Port device team_slave_0 added [ 417.278888][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.278901][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.278926][ T9347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.351950][ T9470] team0: Port device team_slave_1 added [ 417.361789][ T9455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.361805][ T9455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.361825][ T9455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.392878][ T9459] team0: Port device team_slave_0 added [ 417.423914][ T9465] team0: Port device team_slave_0 added [ 417.425891][ T9459] team0: Port device team_slave_1 added [ 417.426525][ T9455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.426538][ T9455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.426555][ T9455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.477069][ T9465] team0: Port device team_slave_1 added [ 417.512892][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.512908][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.512921][ T9470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.576404][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.576420][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.576453][ T9470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.595847][ T9459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.595860][ T9459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.595885][ T9459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.609703][ T9347] hsr_slave_0: entered promiscuous mode [ 417.611014][ T9347] hsr_slave_1: entered promiscuous mode [ 417.611876][ T9347] debugfs: 'hsr0' already exists in 'hsr' [ 417.611898][ T9347] Cannot create hsr debugfs directory [ 417.629182][ T9459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.629195][ T9459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.629219][ T9459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.650641][ T9465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.650656][ T9465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.650682][ T9465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.102366][ T9465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.102383][ T9465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.102418][ T9465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.137671][ T9455] hsr_slave_0: entered promiscuous mode [ 418.138878][ T9455] hsr_slave_1: entered promiscuous mode [ 418.139733][ T9455] debugfs: 'hsr0' already exists in 'hsr' [ 418.139756][ T9455] Cannot create hsr debugfs directory [ 418.341780][ T9470] hsr_slave_0: entered promiscuous mode [ 418.342498][ T9470] hsr_slave_1: entered promiscuous mode [ 418.342998][ T9470] debugfs: 'hsr0' already exists in 'hsr' [ 418.343020][ T9470] Cannot create hsr debugfs directory [ 418.413472][ T9459] hsr_slave_0: entered promiscuous mode [ 418.415469][ T9459] hsr_slave_1: entered promiscuous mode [ 418.416002][ T9459] debugfs: 'hsr0' already exists in 'hsr' [ 418.416024][ T9459] Cannot create hsr debugfs directory [ 418.499228][ T9465] hsr_slave_0: entered promiscuous mode [ 418.499942][ T9465] hsr_slave_1: entered promiscuous mode [ 418.500436][ T9465] debugfs: 'hsr0' already exists in 'hsr' [ 418.500456][ T9465] Cannot create hsr debugfs directory [ 419.179478][ T215] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.596512][ T215] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.007215][ T215] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.206644][ T5250] 8021q: adding VLAN 0 to HW filter on device eth5 [ 420.374974][ T215] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.957152][ T5250] 8021q: adding VLAN 0 to HW filter on device eth6 [ 421.392124][ T215] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.537341][ T9455] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 421.595875][ T9455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.615893][ T9455] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 421.666306][ T9455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.670266][ T9455] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 421.705938][ T9455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.707247][ T5250] 8021q: adding VLAN 0 to HW filter on device eth7 [ 421.868628][ T215] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.914424][ T9455] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 421.955871][ T9455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.248548][ T215] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.358008][ T9347] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 422.396134][ T9347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.402829][ T9347] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 422.455194][ T9347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.462402][ T9347] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 422.504313][ T9347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.739732][ T215] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.794070][ T9347] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 422.849512][ T9347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.881503][ T5250] 8021q: adding VLAN 0 to HW filter on device eth8 [ 423.075627][ T9470] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 423.116416][ T9470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.139905][ T9470] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 423.176028][ T9470] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.193094][ T9470] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 423.225920][ T9470] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.299215][ T9470] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 423.336327][ T9470] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.425936][ T9455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.743463][ T215] bridge_slave_1: left allmulticast mode [ 423.743496][ T215] bridge_slave_1: left promiscuous mode [ 423.743744][ T215] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.906197][ T215] bridge_slave_0: left allmulticast mode [ 423.906230][ T215] bridge_slave_0: left promiscuous mode [ 423.906478][ T215] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.153556][ T215] bridge_slave_1: left allmulticast mode [ 424.153580][ T215] bridge_slave_1: left promiscuous mode [ 424.153755][ T215] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.246498][ T215] bridge_slave_0: left allmulticast mode [ 424.246520][ T215] bridge_slave_0: left promiscuous mode [ 424.246673][ T215] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.475031][ T215] bridge_slave_1: left allmulticast mode [ 424.475055][ T215] bridge_slave_1: left promiscuous mode [ 424.475192][ T215] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.584753][ T215] bridge_slave_0: left allmulticast mode [ 424.584793][ T215] bridge_slave_0: left promiscuous mode [ 424.584933][ T215] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.843482][ T215] bridge_slave_1: left allmulticast mode [ 424.843505][ T215] bridge_slave_1: left promiscuous mode [ 424.843640][ T215] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.944222][ T215] bridge_slave_0: left allmulticast mode [ 424.944243][ T215] bridge_slave_0: left promiscuous mode [ 424.944381][ T215] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.586043][ T215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.663978][ T215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.724675][ T215] bond0 (unregistering): Released all slaves [ 426.354989][ T215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.433969][ T215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.455082][ T215] bond0 (unregistering): Released all slaves [ 426.904061][ T215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.983717][ T215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.005788][ T215] bond0 (unregistering): Released all slaves [ 427.011442][ T215] bond1 (unregistering): Released all slaves [ 427.484083][ T215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.544628][ T215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.585515][ T215] bond0 (unregistering): Released all slaves [ 427.604941][ T9459] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 427.712801][ T9459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.728465][ T9455] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.772360][ T5250] 8021q: adding VLAN 0 to HW filter on device eth9 [ 427.892190][ T9459] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 427.926379][ T9459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.937576][ T9459] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 427.975583][ T9459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.021749][ T9459] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 428.057685][ T9459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.090911][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.091106][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.198207][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.198363][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.316078][ T9465] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 428.371674][ T9465] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.387658][ T9465] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 428.430396][ T9465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.442155][ T9465] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 428.477191][ T9465] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.487837][ T9465] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 428.526862][ T9465] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.669798][ T9347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.985938][ T9347] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.061852][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.062066][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.157421][ T9470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.161988][ T215] IPVS: stopping master sync thread 5955 ... [ 429.596091][ T5250] 8021q: adding VLAN 0 to HW filter on device eth10 [ 429.601770][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.601976][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.772291][ T9470] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.811973][ T6015] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.812311][ T6015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.829346][ T9459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.111871][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.112074][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.271447][ T9347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.346861][ T9459] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.405318][ T9465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.729403][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.729627][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.782113][ T9455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.891193][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.891415][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.910516][ T5250] 8021q: adding VLAN 0 to HW filter on device eth11 [ 430.945192][ T9465] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.292798][ T3151] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.292998][ T3151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.395678][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.395817][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.337998][ T9347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.461517][ T5250] 8021q: adding VLAN 0 to HW filter on device eth12 [ 432.470139][ T9455] veth0_vlan: entered promiscuous mode [ 432.591555][ T9455] veth1_vlan: entered promiscuous mode [ 432.803325][ T215] hsr_slave_0: left promiscuous mode [ 432.833349][ T215] hsr_slave_1: left promiscuous mode [ 432.834591][ T215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.875575][ T215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.063330][ T215] hsr_slave_0: left promiscuous mode [ 433.083357][ T215] hsr_slave_1: left promiscuous mode [ 433.084937][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.084953][ T215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.113974][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.113990][ T215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.283876][ T215] hsr_slave_0: left promiscuous mode [ 433.304783][ T215] hsr_slave_1: left promiscuous mode [ 433.305506][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.305521][ T215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.344342][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.344365][ T215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.483277][ T215] hsr_slave_0: left promiscuous mode [ 433.504027][ T215] hsr_slave_1: left promiscuous mode [ 433.504747][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.504762][ T215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.544299][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.544322][ T215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.672549][ T215] veth1_macvtap: left promiscuous mode [ 433.672607][ T215] veth0_macvtap: left promiscuous mode [ 433.672746][ T215] veth1_vlan: left promiscuous mode [ 433.672849][ T215] veth0_vlan: left promiscuous mode [ 433.804634][ T215] veth1_macvtap: left promiscuous mode [ 433.804692][ T215] veth0_macvtap: left promiscuous mode [ 433.804865][ T215] veth1_vlan: left promiscuous mode [ 433.804968][ T215] veth0_vlan: left promiscuous mode [ 433.953502][ T215] veth1_macvtap: left promiscuous mode [ 433.953560][ T215] veth0_macvtap: left promiscuous mode [ 433.953700][ T215] veth1_vlan: left promiscuous mode [ 433.953805][ T215] veth0_vlan: left promiscuous mode [ 434.695154][ T215] team0 (unregistering): Port device team_slave_1 removed [ 434.713714][ T215] team0 (unregistering): Port device team_slave_0 removed [ 435.315884][ T215] team0 (unregistering): Port device team_slave_1 removed [ 435.335374][ T215] team0 (unregistering): Port device team_slave_0 removed [ 435.884318][ T215] team0 (unregistering): Port device team_slave_1 removed [ 435.924131][ T215] team0 (unregistering): Port device team_slave_0 removed [ 436.475164][ T215] team0 (unregistering): Port device team_slave_1 removed [ 436.513926][ T215] team0 (unregistering): Port device team_slave_0 removed [ 436.823669][ T9347] veth0_vlan: entered promiscuous mode [ 436.832890][ T9455] veth0_macvtap: entered promiscuous mode [ 436.870314][ T9455] veth1_macvtap: entered promiscuous mode [ 436.916338][ T9347] veth1_vlan: entered promiscuous mode [ 437.049584][ T9455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.065474][ T9470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.171697][ T9455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.318884][ T9347] veth0_macvtap: entered promiscuous mode [ 437.407786][ T9347] veth1_macvtap: entered promiscuous mode [ 437.541829][ T9459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.984874][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.147855][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.496332][ T6015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.496355][ T6015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.682311][ T9465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.033010][ T5250] 8021q: adding VLAN 0 to HW filter on device eth13 [ 439.109558][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.109576][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.258387][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.258407][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.259100][ T9470] veth0_vlan: entered promiscuous mode [ 439.339312][ T9470] veth1_vlan: entered promiscuous mode [ 439.547207][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.547228][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.548683][ T9459] veth0_vlan: entered promiscuous mode [ 439.653520][ T9786] netlink: 'syz.7.1038': attribute type 4 has an invalid length. [ 439.659233][ T9459] veth1_vlan: entered promiscuous mode [ 439.885293][ T9470] veth0_macvtap: entered promiscuous mode [ 439.973768][ T9470] veth1_macvtap: entered promiscuous mode [ 440.007979][ T9465] veth0_vlan: entered promiscuous mode [ 440.016647][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.016713][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.108814][ T9459] veth0_macvtap: entered promiscuous mode [ 440.122323][ T9465] veth1_vlan: entered promiscuous mode [ 440.142584][ T9470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.156437][ T9459] veth1_macvtap: entered promiscuous mode [ 440.250412][ T9470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.246773][ T9459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.384188][ T9459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.540425][ T9465] veth0_macvtap: entered promiscuous mode [ 441.647890][ T9465] veth1_macvtap: entered promiscuous mode [ 441.975386][ T5250] 8021q: adding VLAN 0 to HW filter on device eth14 [ 442.113651][ T9465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.509612][ T37] audit: type=1800 audit(1789942233.630:55): pid=9822 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1047" name="syzkaller0" dev="sda1" ino=2045 res=0 errno=0 [ 443.385887][ T3151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.385902][ T3151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.413584][ T9465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.509213][ T9826] netlink: 'syz.7.1048': attribute type 4 has an invalid length. [ 443.509636][ T1125] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.509823][ T1125] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.510068][ T1125] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.510258][ T1125] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.510486][ T1125] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.751881][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.751900][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.012801][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.012820][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.176669][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.176689][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.473911][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.473931][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.474182][ T56] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.734544][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.734580][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.060111][ T37] audit: type=1800 audit(1789942237.360:56): pid=9864 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1056" name="syzkaller0" dev="sda1" ino=2045 res=0 errno=0 [ 446.070681][ T192] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.073553][ T5996] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.108116][ T192] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.118175][ T2986] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.118573][ T2986] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.137123][ T2986] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.331816][ T215] IPVS: stop unused estimator thread 0... [ 446.434036][ T2986] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.507532][ T2986] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.507940][ T2986] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.508115][ T2986] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.508381][ T2986] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.511266][ T2986] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.558050][ T2986] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.562864][ T1125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.645310][ T37] audit: type=1800 audit(1789942237.950:57): pid=9859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1056" name="syzkaller0" dev="sda1" ino=2045 res=0 errno=0 [ 446.695606][ T9873] netlink: 'syz.7.1057': attribute type 4 has an invalid length. [ 447.385156][ T9889] MINIX-fs: unable to read superblock [ 448.262353][ T5250] 8021q: adding VLAN 0 to HW filter on device eth15 [ 448.589592][ T9894] infiniband syz0: set down [ 448.589614][ T9894] infiniband syz0: added bond0 [ 448.632476][ T9894] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 448.632511][ T9894] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 448.632550][ T9894] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 448.691615][ T9894] RDS/IB: syz0: added [ 448.692415][ T9894] smc: adding ib device syz0 with port count 1 [ 448.692662][ T9894] smc: ib device syz0 port 1 has no pnetid [ 449.744648][ T9917] netlink: 'syz.9.1070': attribute type 4 has an invalid length. [ 450.626323][ T5250] 8021q: adding VLAN 0 to HW filter on device eth16 [ 451.078316][ T9940] FAULT_INJECTION: forcing a failure. [ 451.078316][ T9940] name failslab, interval 1, probability 0, space 0, times 0 [ 451.078368][ T9940] CPU: 0 UID: 0 PID: 9940 Comm: syz.9.1073 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 451.078393][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 451.078409][ T9940] Call Trace: [ 451.078418][ T9940] [ 451.078427][ T9940] dump_stack_lvl+0xe8/0x150 [ 451.078464][ T9940] should_fail_ex+0x46b/0x600 [ 451.078493][ T9940] ? __d_alloc+0x37/0x6f0 [ 451.078517][ T9940] should_failslab+0xa8/0x100 [ 451.078550][ T9940] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 451.078589][ T9940] ? __d_alloc+0x37/0x6f0 [ 451.078617][ T9940] __d_alloc+0x37/0x6f0 [ 451.078646][ T9940] d_alloc_parallel+0xde/0x16c0 [ 451.078673][ T9940] ? lock_acquire+0x115/0x350 [ 451.078709][ T9940] ? __d_lookup+0x66/0x790 [ 451.078735][ T9940] ? __d_lookup+0x66/0x790 [ 451.078759][ T9940] ? __pfx_d_alloc_parallel+0x10/0x10 [ 451.078785][ T9940] ? d_lookup+0x1f/0xc0 [ 451.078811][ T9940] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 451.078842][ T9940] lookup_open+0x2cd/0x1a60 [ 451.078897][ T9940] path_openat+0x67c/0x1d60 [ 451.078943][ T9940] do_file_open+0x23e/0x4a0 [ 451.078974][ T9940] ? __pfx_do_file_open+0x10/0x10 [ 451.079010][ T9940] ? __pfx_kfree_link+0x10/0x10 [ 451.079044][ T9940] ? alloc_fd+0x654/0x6d0 [ 451.079074][ T9940] do_sys_openat2+0x115/0x200 [ 451.079104][ T9940] ? __se_sys_futex+0x3a8/0x450 [ 451.079124][ T9940] ? __pfx_do_sys_openat2+0x10/0x10 [ 451.079156][ T9940] ? __pfx___se_sys_futex+0x10/0x10 [ 451.079173][ T9940] ? __pfx_ksys_write+0x10/0x10 [ 451.079194][ T9940] __x64_sys_openat+0x138/0x170 [ 451.079226][ T9940] do_syscall_64+0x166/0x520 [ 451.079257][ T9940] ? trace_irq_disable+0x3b/0x140 [ 451.079283][ T9940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.079304][ T9940] ? clear_bhb_loop+0x70/0xc0 [ 451.079328][ T9940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.079357][ T9940] RIP: 0033:0x7fa8f225e98e [ 451.079381][ T9940] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 451.079400][ T9940] RSP: 002b:00007fa8f04f5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 451.079424][ T9940] RAX: ffffffffffffffda RBX: 00007fa8f04f66c0 RCX: 00007fa8f225e98e [ 451.079441][ T9940] RDX: 0000000000000002 RSI: 00007fa8f04f5f90 RDI: ffffffffffffff9c [ 451.079457][ T9940] RBP: 00007fa8f233506b R08: 0000000000000000 R09: 0000000000000000 [ 451.079470][ T9940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.079482][ T9940] R13: 00007fa8f2526038 R14: 00007fa8f2525fa0 R15: 00007ffcb4a288b8 [ 451.079514][ T9940] [ 452.430562][ T215] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.591436][ T9967] netlink: 'syz.9.1081': attribute type 4 has an invalid length. [ 453.000638][ T9996] netlink: 15736 bytes leftover after parsing attributes in process `syz.9.1091'. [ 453.392435][ T215] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.979378][ T215] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.107442][T10027] netlink: 'syz.9.1101': attribute type 4 has an invalid length. [ 454.396376][T10036] FAULT_INJECTION: forcing a failure. [ 454.396376][T10036] name failslab, interval 1, probability 0, space 0, times 0 [ 454.396410][T10036] CPU: 0 UID: 0 PID: 10036 Comm: syz.9.1107 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 454.396434][T10036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.396446][T10036] Call Trace: [ 454.396454][T10036] [ 454.396463][T10036] dump_stack_lvl+0xe8/0x150 [ 454.396496][T10036] should_fail_ex+0x46b/0x600 [ 454.396529][T10036] should_failslab+0xa8/0x100 [ 454.396559][T10036] ? vm_area_dup+0x28/0x750 [ 454.396586][T10036] kmem_cache_alloc_noprof+0x9e/0x690 [ 454.396614][T10036] ? vm_area_dup+0x28/0x750 [ 454.396649][T10036] vm_area_dup+0x28/0x750 [ 454.396674][T10036] ? __split_vma+0x1b7/0xa00 [ 454.396697][T10036] __split_vma+0x1d7/0xa00 [ 454.396725][T10036] ? __pfx___split_vma+0x10/0x10 [ 454.396762][T10036] ? mas_find+0x6d9/0xcb0 [ 454.396796][T10036] vms_gather_munmap_vmas+0x4e3/0x1370 [ 454.396843][T10036] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 454.396872][T10036] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 454.396900][T10036] ? reacquire_held_locks+0x117/0x1a0 [ 454.396931][T10036] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 454.396968][T10036] do_vmi_align_munmap+0x2c7/0x4d0 [ 454.396993][T10036] ? move_page_tables+0x67a/0x1db0 [ 454.397025][T10036] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 454.397081][T10036] ? mas_walk+0x381/0x490 [ 454.397111][T10036] ? mas_find+0x645/0xcb0 [ 454.397144][T10036] do_vmi_munmap+0x252/0x2d0 [ 454.397177][T10036] move_vma+0x11bd/0x1850 [ 454.397216][T10036] ? arch_get_unmapped_area_topdown+0x269/0xb60 [ 454.397243][T10036] ? __pfx_move_vma+0x10/0x10 [ 454.397269][T10036] ? mtree_load+0x12a/0x780 [ 454.397299][T10036] ? cap_mmap_addr+0xaf/0x100 [ 454.397325][T10036] ? bpf_lsm_mmap_addr+0x9/0x50 [ 454.397367][T10036] mremap_to+0x7f9/0x8d0 [ 454.397394][T10036] ? __pfx_mremap_to+0x10/0x10 [ 454.397414][T10036] ? __pfx_mtree_load+0x10/0x10 [ 454.397434][T10036] ? __pfx_check_prep_vma+0x10/0x10 [ 454.397471][T10036] __se_sys_mremap+0xf59/0x12d0 [ 454.397505][T10036] ? __pfx___se_sys_mremap+0x10/0x10 [ 454.397523][T10036] ? do_futex+0x3e7/0x4e0 [ 454.397541][T10036] ? __asan_memcpy+0x40/0x70 [ 454.397570][T10036] ? __pfx_do_futex+0x10/0x10 [ 454.397589][T10036] ? lock_acquire+0x115/0x350 [ 454.397621][T10036] ? __se_sys_futex+0x3a8/0x450 [ 454.397660][T10036] ? __x64_sys_mremap+0x20/0xc0 [ 454.397683][T10036] do_syscall_64+0x166/0x520 [ 454.397711][T10036] ? trace_irq_disable+0x3b/0x140 [ 454.397736][T10036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.397756][T10036] ? clear_bhb_loop+0x70/0xc0 [ 454.397781][T10036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.397802][T10036] RIP: 0033:0x7fa8f229e159 [ 454.397821][T10036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.397839][T10036] RSP: 002b:00007fa8f04f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 454.397861][T10036] RAX: ffffffffffffffda RBX: 00007fa8f2525fa0 RCX: 00007fa8f229e159 [ 454.397876][T10036] RDX: 0000000000003021 RSI: 0000000000003000 RDI: 0000200000001000 [ 454.397890][T10036] RBP: 00007fa8f233506b R08: 0000200000ffd000 R09: 0000000000000000 [ 454.397904][T10036] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 454.397917][T10036] R13: 00007fa8f2526038 R14: 00007fa8f2525fa0 R15: 00007ffcb4a288b8 [ 454.397951][T10036] [ 454.802542][T10041] FAULT_INJECTION: forcing a failure. [ 454.802542][T10041] name failslab, interval 1, probability 0, space 0, times 0 [ 454.802578][T10041] CPU: 1 UID: 0 PID: 10041 Comm: syz.6.1108 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 454.802603][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.802615][T10041] Call Trace: [ 454.802624][T10041] [ 454.802633][T10041] dump_stack_lvl+0xe8/0x150 [ 454.802670][T10041] should_fail_ex+0x46b/0x600 [ 454.802704][T10041] should_failslab+0xa8/0x100 [ 454.802733][T10041] ? do_getname+0x2e/0x250 [ 454.802762][T10041] kmem_cache_alloc_noprof+0x9e/0x690 [ 454.802788][T10041] ? do_getname+0x2e/0x250 [ 454.802833][T10041] do_getname+0x2e/0x250 [ 454.802859][T10041] ? user_path_at+0x1e/0x160 [ 454.802884][T10041] user_path_at+0x2a/0x160 [ 454.802909][T10041] __se_sys_mount+0x2dc/0x420 [ 454.802935][T10041] ? __pfx___se_sys_mount+0x10/0x10 [ 454.802964][T10041] ? __x64_sys_mount+0x20/0xc0 [ 454.802987][T10041] do_syscall_64+0x166/0x520 [ 454.803017][T10041] ? trace_irq_disable+0x3b/0x140 [ 454.803041][T10041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.803066][T10041] ? clear_bhb_loop+0x70/0xc0 [ 454.803090][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.803111][T10041] RIP: 0033:0x7f337d22e159 [ 454.803129][T10041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.803145][T10041] RSP: 002b:00007f337b486028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 454.803168][T10041] RAX: ffffffffffffffda RBX: 00007f337d4b5fa0 RCX: 00007f337d22e159 [ 454.803182][T10041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 454.803194][T10041] RBP: 00007f337d2c506b R08: 0000000000000000 R09: 0000000000000000 [ 454.803206][T10041] R10: 0000000000800006 R11: 0000000000000246 R12: 0000000000000000 [ 454.803219][T10041] R13: 00007f337d4b6038 R14: 00007f337d4b5fa0 R15: 00007ffde9dbcbf8 [ 454.803250][T10041] [ 455.455811][T10054] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1114'. [ 457.002583][ T215] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.079952][T10059] netlink: 'syz.9.1117': attribute type 4 has an invalid length. [ 457.377741][T10079] FAULT_INJECTION: forcing a failure. [ 457.377741][T10079] name failslab, interval 1, probability 0, space 0, times 0 [ 457.377779][T10079] CPU: 1 UID: 0 PID: 10079 Comm: syz.9.1120 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 457.377804][T10079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.377818][T10079] Call Trace: [ 457.377826][T10079] [ 457.377836][T10079] dump_stack_lvl+0xe8/0x150 [ 457.377872][T10079] should_fail_ex+0x46b/0x600 [ 457.377905][T10079] should_failslab+0xa8/0x100 [ 457.377935][T10079] ? mas_alloc_nodes+0x291/0x350 [ 457.377965][T10079] kmem_cache_alloc_noprof+0x9e/0x690 [ 457.377991][T10079] ? mas_alloc_nodes+0x291/0x350 [ 457.378026][T10079] mas_alloc_nodes+0x291/0x350 [ 457.378059][T10079] mas_preallocate+0x42d/0x840 [ 457.378094][T10079] ? __pfx_mas_preallocate+0x10/0x10 [ 457.378135][T10079] ? __mas_set_range+0x11a/0x3a0 [ 457.378160][T10079] __split_vma+0x2f3/0xa00 [ 457.378192][T10079] ? __pfx___split_vma+0x10/0x10 [ 457.378227][T10079] ? mas_find+0x6d9/0xcb0 [ 457.378261][T10079] vms_gather_munmap_vmas+0x4e3/0x1370 [ 457.378308][T10079] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 457.378339][T10079] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 457.378369][T10079] ? reacquire_held_locks+0x117/0x1a0 [ 457.378398][T10079] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 457.378435][T10079] do_vmi_align_munmap+0x2c7/0x4d0 [ 457.378465][T10079] ? move_page_tables+0x67a/0x1db0 [ 457.378502][T10079] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 457.378563][T10079] ? mas_walk+0x381/0x490 [ 457.378592][T10079] ? mas_find+0x645/0xcb0 [ 457.378632][T10079] do_vmi_munmap+0x252/0x2d0 [ 457.378669][T10079] move_vma+0x11bd/0x1850 [ 457.378710][T10079] ? arch_get_unmapped_area_topdown+0x269/0xb60 [ 457.378735][T10079] ? __pfx_move_vma+0x10/0x10 [ 457.378762][T10079] ? mtree_load+0x12a/0x780 [ 457.378790][T10079] ? cap_mmap_addr+0xaf/0x100 [ 457.378816][T10079] ? bpf_lsm_mmap_addr+0x9/0x50 [ 457.378850][T10079] mremap_to+0x7f9/0x8d0 [ 457.378877][T10079] ? __pfx_mremap_to+0x10/0x10 [ 457.378897][T10079] ? __pfx_mtree_load+0x10/0x10 [ 457.378917][T10079] ? __pfx_check_prep_vma+0x10/0x10 [ 457.378957][T10079] __se_sys_mremap+0xf59/0x12d0 [ 457.378990][T10079] ? __pfx___se_sys_mremap+0x10/0x10 [ 457.379009][T10079] ? do_futex+0x3e7/0x4e0 [ 457.379027][T10079] ? __asan_memcpy+0x40/0x70 [ 457.379054][T10079] ? __pfx_do_futex+0x10/0x10 [ 457.379074][T10079] ? lock_acquire+0x115/0x350 [ 457.379102][T10079] ? __se_sys_futex+0x3a8/0x450 [ 457.379139][T10079] ? __x64_sys_mremap+0x20/0xc0 [ 457.379160][T10079] do_syscall_64+0x166/0x520 [ 457.379188][T10079] ? trace_irq_disable+0x3b/0x140 [ 457.379213][T10079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.379234][T10079] ? clear_bhb_loop+0x70/0xc0 [ 457.379259][T10079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.379279][T10079] RIP: 0033:0x7fa8f229e159 [ 457.379299][T10079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.379317][T10079] RSP: 002b:00007fa8f04f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 457.379340][T10079] RAX: ffffffffffffffda RBX: 00007fa8f2525fa0 RCX: 00007fa8f229e159 [ 457.379356][T10079] RDX: 0000000000003021 RSI: 0000000000003000 RDI: 0000200000001000 [ 457.379370][T10079] RBP: 00007fa8f233506b R08: 0000200000ffd000 R09: 0000000000000000 [ 457.379385][T10079] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 457.379397][T10079] R13: 00007fa8f2526038 R14: 00007fa8f2525fa0 R15: 00007ffcb4a288b8 [ 457.379431][T10079] [ 458.452699][T10099] FAULT_INJECTION: forcing a failure. [ 458.452699][T10099] name failslab, interval 1, probability 0, space 0, times 0 [ 458.452735][T10099] CPU: 1 UID: 0 PID: 10099 Comm: syz.9.1125 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 458.452758][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.452770][T10099] Call Trace: [ 458.452778][T10099] [ 458.452787][T10099] dump_stack_lvl+0xe8/0x150 [ 458.452820][T10099] should_fail_ex+0x46b/0x600 [ 458.452852][T10099] should_failslab+0xa8/0x100 [ 458.452883][T10099] ? do_getname+0x2e/0x250 [ 458.452913][T10099] kmem_cache_alloc_noprof+0x9e/0x690 [ 458.452946][T10099] ? do_getname+0x2e/0x250 [ 458.452978][T10099] do_getname+0x2e/0x250 [ 458.453007][T10099] ? user_path_at+0x1e/0x160 [ 458.453033][T10099] user_path_at+0x2a/0x160 [ 458.453062][T10099] __se_sys_mount+0x2dc/0x420 [ 458.453088][T10099] ? __pfx___se_sys_mount+0x10/0x10 [ 458.453113][T10099] ? __x64_sys_mount+0x20/0xc0 [ 458.453136][T10099] do_syscall_64+0x166/0x520 [ 458.453168][T10099] ? trace_irq_disable+0x3b/0x140 [ 458.453192][T10099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.453215][T10099] ? clear_bhb_loop+0x70/0xc0 [ 458.453239][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.453259][T10099] RIP: 0033:0x7fa8f229e159 [ 458.453279][T10099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.453298][T10099] RSP: 002b:00007fa8f04f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 458.453322][T10099] RAX: ffffffffffffffda RBX: 00007fa8f2525fa0 RCX: 00007fa8f229e159 [ 458.453338][T10099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 458.453350][T10099] RBP: 00007fa8f233506b R08: 0000000000000000 R09: 0000000000000000 [ 458.453362][T10099] R10: 0000000000800006 R11: 0000000000000246 R12: 0000000000000000 [ 458.453374][T10099] R13: 00007fa8f2526038 R14: 00007fa8f2525fa0 R15: 00007ffcb4a288b8 [ 458.453404][T10099] [ 461.005234][ T37] audit: type=1800 audit(1789942251.500:58): pid=10143 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1140" name="syzkaller0" dev="sda1" ino=2045 res=0 errno=0 [ 461.261693][T10149] FAULT_INJECTION: forcing a failure. [ 461.261693][T10149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.261746][T10149] CPU: 0 UID: 0 PID: 10149 Comm: syz.8.1141 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 461.261771][T10149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 461.261783][T10149] Call Trace: [ 461.261792][T10149] [ 461.261801][T10149] dump_stack_lvl+0xe8/0x150 [ 461.261836][T10149] should_fail_ex+0x46b/0x600 [ 461.261869][T10149] strncpy_from_user+0x36/0x2c0 [ 461.261899][T10149] do_getname+0x77/0x250 [ 461.261932][T10149] user_path_at+0x2a/0x160 [ 461.261966][T10149] __se_sys_mount+0x2dc/0x420 [ 461.261993][T10149] ? __pfx___se_sys_mount+0x10/0x10 [ 461.262021][T10149] ? __x64_sys_mount+0x20/0xc0 [ 461.262044][T10149] do_syscall_64+0x166/0x520 [ 461.262074][T10149] ? trace_irq_disable+0x3b/0x140 [ 461.262099][T10149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.262119][T10149] ? clear_bhb_loop+0x70/0xc0 [ 461.262145][T10149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.262165][T10149] RIP: 0033:0x7f872763e159 [ 461.262184][T10149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.262200][T10149] RSP: 002b:00007f8725896028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 461.262223][T10149] RAX: ffffffffffffffda RBX: 00007f87278c5fa0 RCX: 00007f872763e159 [ 461.262239][T10149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 461.262251][T10149] RBP: 00007f87276d506b R08: 0000000000000000 R09: 0000000000000000 [ 461.262264][T10149] R10: 0000000000800006 R11: 0000000000000246 R12: 0000000000000000 [ 461.262278][T10149] R13: 00007f87278c6038 R14: 00007f87278c5fa0 R15: 00007ffe71ad3368 [ 461.262310][T10149] [ 461.655988][ T215] bond1: left allmulticast mode [ 461.716476][ T215] bond1: left promiscuous mode [ 461.717609][ T215] bridge0: port 4(bond1) entered disabled state [ 461.866054][T10169] FAULT_INJECTION: forcing a failure. [ 461.866054][T10169] name failslab, interval 1, probability 0, space 0, times 0 [ 461.866091][T10169] CPU: 1 UID: 0 PID: 10169 Comm: syz.7.1151 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 461.866115][T10169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 461.866127][T10169] Call Trace: [ 461.866135][T10169] [ 461.866145][T10169] dump_stack_lvl+0xe8/0x150 [ 461.866182][T10169] should_fail_ex+0x46b/0x600 [ 461.866215][T10169] should_failslab+0xa8/0x100 [ 461.866249][T10169] __kmalloc_noprof+0xfb/0x790 [ 461.866280][T10169] ? tomoyo_realpath_from_path+0xef/0x640 [ 461.866310][T10169] ? tomoyo_realpath_from_path+0xef/0x640 [ 461.866339][T10169] ? __kmalloc_noprof+0x43e/0x790 [ 461.866368][T10169] tomoyo_realpath_from_path+0xef/0x640 [ 461.866417][T10169] tomoyo_mount_permission+0x3e9/0x9e0 [ 461.866444][T10169] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 461.866476][T10169] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 461.866504][T10169] ? kasan_save_track+0x4f/0x80 [ 461.866580][T10169] ? kasan_quarantine_put+0xbb/0x1f0 [ 461.866610][T10169] security_sb_mount+0xe4/0x320 [ 461.866646][T10169] path_mount+0xbc/0x1050 [ 461.866671][T10169] ? user_path_at+0xd4/0x160 [ 461.866696][T10169] __se_sys_mount+0x31d/0x420 [ 461.866721][T10169] ? __pfx___se_sys_mount+0x10/0x10 [ 461.866748][T10169] ? __x64_sys_mount+0x20/0xc0 [ 461.866771][T10169] do_syscall_64+0x166/0x520 [ 461.866801][T10169] ? trace_irq_disable+0x3b/0x140 [ 461.866826][T10169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.866847][T10169] ? clear_bhb_loop+0x70/0xc0 [ 461.866872][T10169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.866892][T10169] RIP: 0033:0x7f328d43e159 [ 461.866910][T10169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.866927][T10169] RSP: 002b:00007f328b696028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 461.866950][T10169] RAX: ffffffffffffffda RBX: 00007f328d6c5fa0 RCX: 00007f328d43e159 [ 461.866966][T10169] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 461.866980][T10169] RBP: 00007f328d4d506b R08: 0000000000000000 R09: 0000000000000000 [ 461.866994][T10169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.867006][T10169] R13: 00007f328d6c6038 R14: 00007f328d6c5fa0 R15: 00007ffd29482968 [ 461.867038][T10169] [ 461.894854][T10169] ERROR: Out of memory at tomoyo_realpath_from_path. [ 462.028013][T10172] 9p: Bad value for 'rfdno' [ 462.142101][ T215] bridge_slave_1: left allmulticast mode [ 462.142138][ T215] bridge_slave_1: left promiscuous mode [ 462.142412][ T215] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.306650][ T215] bridge_slave_0: left allmulticast mode [ 462.306686][ T215] bridge_slave_0: left promiscuous mode [ 462.307007][ T215] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.665737][ T215] bridge_slave_1: left allmulticast mode [ 462.665773][ T215] bridge_slave_1: left promiscuous mode [ 462.666035][ T215] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.894403][ T215] bridge_slave_0: left allmulticast mode [ 462.894440][ T215] bridge_slave_0: left promiscuous mode [ 462.894678][ T215] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.150281][T10208] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1162'. [ 463.718671][ T40] rpcbind: server 127.0.0.1 not responding, timed out [ 463.855519][T10218] process 'syz.9.1166' launched './file0' with NULL argv: empty string added [ 464.877117][T10243] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1177'. [ 464.964098][ T215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.076530][ T215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.205145][ T215] bond0 (unregistering): (slave team0): Releasing backup interface [ 465.251017][ T215] bond0 (unregistering): Released all slaves [ 465.333319][ T215] bond1 (unregistering): Released all slaves [ 466.014036][ T215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.157968][ T215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.242195][ T215] bond0 (unregistering): Released all slaves [ 466.340496][T10193] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 466.384633][ T5250] 8021q: adding VLAN 0 to HW filter on device eth17 [ 466.856442][T10301] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1201'. [ 467.034091][T10292] bond0: no command found in slaves file - use +ifname or -ifname [ 468.265767][T10327] FAULT_INJECTION: forcing a failure. [ 468.265767][T10327] name failslab, interval 1, probability 0, space 0, times 0 [ 468.265817][T10327] CPU: 1 UID: 0 PID: 10327 Comm: syz.6.1209 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 468.265858][T10327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.265872][T10327] Call Trace: [ 468.265881][T10327] [ 468.265890][T10327] dump_stack_lvl+0xe8/0x150 [ 468.265937][T10327] should_fail_ex+0x46b/0x600 [ 468.265970][T10327] should_failslab+0xa8/0x100 [ 468.266001][T10327] ? __send_signal_locked+0x22c/0xeb0 [ 468.266025][T10327] kmem_cache_alloc_noprof+0x9e/0x690 [ 468.266053][T10327] ? __send_signal_locked+0x22c/0xeb0 [ 468.266076][T10327] ? sig_get_ucounts+0x3e4/0x450 [ 468.266104][T10327] __send_signal_locked+0x22c/0xeb0 [ 468.266134][T10327] send_signal_locked+0x138/0x9e0 [ 468.266163][T10327] ? __pfx_send_signal_locked+0x10/0x10 [ 468.266183][T10327] ? rt_spin_lock+0x2d0/0x400 [ 468.266321][T10327] ? __pfx_rt_spin_lock+0x10/0x10 [ 468.266358][T10327] force_sig_info_to_task+0x31d/0x4b0 [ 468.266389][T10327] force_sig_fault+0xf0/0x150 [ 468.266412][T10327] ? __pfx_force_sig_fault+0x10/0x10 [ 468.266439][T10327] ? __bad_area_nosemaphore+0x31e/0x6a0 [ 468.266463][T10327] exc_page_fault+0x6a/0xc0 [ 468.266552][T10327] asm_exc_page_fault+0x26/0x30 [ 468.266572][T10327] RIP: 0033:0x7f337d2172df [ 468.266593][T10327] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79 [ 468.266609][T10327] RSP: 002b:00007f337b485bd8 EFLAGS: 00010283 [ 468.266633][T10327] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 468.266646][T10327] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007f337b485c00 [ 468.266661][T10327] RBP: 00007f337b485c00 R08: 0000000000000000 R09: 0000000000000000 [ 468.266674][T10327] R10: 0000000000000000 R11: 000000000012bb41 R12: cccccccccccccccd [ 468.266687][T10327] R13: 00007f337d4b6038 R14: 00007f337d4b5fa0 R15: 00007ffde9dbcbf8 [ 468.266717][T10327] [ 468.601778][T10328] tipc: Started in network mode [ 468.601808][T10328] tipc: Node identity 4, cluster identity 4711 [ 468.601822][T10328] tipc: Node number set to 4 [ 469.348453][T10358] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1217'. [ 469.929895][T10367] MINIX-fs: unable to read superblock [ 470.633700][ T56] IPVS: starting estimator thread 0... [ 470.738455][T10371] IPVS: using max 11 ests per chain, 26400 per kthread [ 470.764049][ T5250] 8021q: adding VLAN 0 to HW filter on device eth18 [ 471.495564][T10390] 9p: Bad value for 'wfdno' [ 472.173303][T10407] netlink: 'syz.2.1237': attribute type 4 has an invalid length. [ 472.801981][T10430] 9p: Bad value for 'wfdno' [ 473.227151][T10440] netlink: 'syz.2.1248': attribute type 21 has an invalid length. [ 473.549407][T10420] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 474.588783][T10450] netlink: 'syz.9.1252': attribute type 4 has an invalid length. [ 474.850867][T10462] binder: 10449:10462 ioctl c018620c 0 returned -14 [ 475.330766][T10472] 9p: Bad value for 'wfdno' [ 475.738975][T10489] netlink: 'syz.8.1264': attribute type 21 has an invalid length. [ 476.132369][T10492] netlink: 'syz.6.1267': attribute type 4 has an invalid length. [ 477.608819][T10519] 9p: Bad value for 'wfdno' [ 477.673603][ T215] hsr_slave_0: left promiscuous mode [ 477.716736][ T215] hsr_slave_1: left promiscuous mode [ 477.718236][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.718292][ T215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.900095][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.900149][ T215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.103034][T10531] netlink: 'syz.6.1280': attribute type 21 has an invalid length. [ 478.603299][ T215] hsr_slave_0: left promiscuous mode [ 478.703687][ T215] hsr_slave_1: left promiscuous mode [ 478.706239][ T215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.788949][ T215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.972400][ T215] veth1_macvtap: left promiscuous mode [ 478.972507][ T215] veth0_macvtap: left promiscuous mode [ 478.972771][ T215] veth1_vlan: left promiscuous mode [ 478.972950][ T215] veth0_vlan: left promiscuous mode [ 479.921011][T10550] io-wq is not configured for unbound workers [ 479.957330][T10557] 9p: Bad value for 'wfdno' [ 482.650965][T10562] netlink: 'syz.9.1293': attribute type 21 has an invalid length. [ 482.735614][T10564] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1292'. [ 483.578563][ T215] team0 (unregistering): Port device team_slave_1 removed [ 483.635459][ T215] team0 (unregistering): Port device team_slave_0 removed [ 484.061846][T10588] netlink: 'syz.9.1304': attribute type 21 has an invalid length. [ 485.190280][T10595] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1305'. [ 486.026856][T10601] netlink: 'syz.9.1309': attribute type 31 has an invalid length. [ 486.076956][ T215] team0 (unregistering): Port device team_slave_1 removed [ 486.244236][ T215] team0 (unregistering): Port device team_slave_0 removed [ 487.046678][T10624] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1320'. [ 487.046745][T10624] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1320'. [ 487.077575][T10530] netlink: 'syz.2.1279': attribute type 4 has an invalid length. [ 487.080678][ T5250] 8021q: adding VLAN 0 to HW filter on device eth19 [ 489.738009][T10673] netlink: 'syz.7.1331': attribute type 4 has an invalid length. [ 491.464627][T10686] vxlan0: entered allmulticast mode [ 491.667049][T10719] netlink: 'syz.2.1350': attribute type 10 has an invalid length. [ 491.667077][T10719] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1350'. [ 492.039112][ T5250] 8021q: adding VLAN 0 to HW filter on device eth20 [ 492.162672][T10717] netlink: 'syz.8.1349': attribute type 4 has an invalid length. [ 493.680581][T10757] MINIX-fs: unable to read superblock [ 494.433386][ T985] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.433452][ T985] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.433488][ T985] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.443417][ T6015] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.956116][T10767] netlink: 'syz.7.1367': attribute type 21 has an invalid length. [ 496.148828][T10802] netlink: 'syz.8.1379': attribute type 6 has an invalid length. [ 496.271797][T10805] MINIX-fs: unable to read superblock [ 498.307002][T10846] MINIX-fs: unable to read superblock [ 499.919447][T10870] syzkaller0: entered promiscuous mode [ 499.919469][T10870] syzkaller0: entered allmulticast mode [ 500.009369][T10868] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 500.063666][ T37] audit: type=1326 audit(1789942291.370:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10875 comm="syz.8.1404" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872763e159 code=0x7fc00000 [ 500.276864][ T37] audit: type=1326 audit(1789942291.570:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10875 comm="syz.8.1404" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f872763e159 code=0x7fc00000 [ 501.461244][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.461319][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.203680][T10936] block nbd6: shutting down sockets [ 505.103517][T10943] netlink: 'syz.9.1422': attribute type 31 has an invalid length. [ 505.861626][T10959] 9p: Bad value for 'wfdno' [ 507.760252][T10997] netlink: 'syz.2.1438': attribute type 4 has an invalid length. [ 508.659452][ T5599] Bluetooth: hci5: command 0x0406 tx timeout [ 509.431313][T11013] FAULT_INJECTION: forcing a failure. [ 509.431313][T11013] name failslab, interval 1, probability 0, space 0, times 0 [ 509.431367][T11013] CPU: 0 UID: 0 PID: 11013 Comm: syz.6.1446 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 509.431394][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 509.431407][T11013] Call Trace: [ 509.431417][T11013] [ 509.431428][T11013] dump_stack_lvl+0xe8/0x150 [ 509.431471][T11013] should_fail_ex+0x46b/0x600 [ 509.431501][T11013] ? sock_alloc_inode+0x2c/0x1a0 [ 509.431701][T11013] should_failslab+0xa8/0x100 [ 509.431737][T11013] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 509.431767][T11013] ? sock_alloc_inode+0x2c/0x1a0 [ 509.431797][T11013] ? __pfx_sock_alloc_inode+0x10/0x10 [ 509.431822][T11013] sock_alloc_inode+0x2c/0x1a0 [ 509.431848][T11013] ? __pfx_sock_alloc_inode+0x10/0x10 [ 509.431871][T11013] alloc_inode+0x6a/0x1b0 [ 509.431904][T11013] __sock_create+0x12d/0x9d0 [ 509.431973][T11013] __sys_socket+0xd6/0x1b0 [ 509.432005][T11013] __x64_sys_socket+0x7a/0x90 [ 509.432035][T11013] do_syscall_64+0x166/0x520 [ 509.432108][T11013] ? trace_irq_disable+0x3b/0x140 [ 509.432136][T11013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.432160][T11013] ? clear_bhb_loop+0x70/0xc0 [ 509.432187][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.432209][T11013] RIP: 0033:0x7f337d22e159 [ 509.432231][T11013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.432249][T11013] RSP: 002b:00007f337b486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 509.432274][T11013] RAX: ffffffffffffffda RBX: 00007f337d4b5fa0 RCX: 00007f337d22e159 [ 509.432291][T11013] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 509.432303][T11013] RBP: 00007f337d2c506b R08: 0000000000000000 R09: 0000000000000000 [ 509.432317][T11013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.432330][T11013] R13: 00007f337d4b6038 R14: 00007f337d4b5fa0 R15: 00007ffde9dbcbf8 [ 509.432366][T11013] [ 509.432395][T11013] socket: no more sockets [ 511.769026][T11048] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1456'. [ 514.351763][T11088] netlink: 'syz.9.1463': attribute type 4 has an invalid length. [ 515.246919][T11110] FAULT_INJECTION: forcing a failure. [ 515.246919][T11110] name failslab, interval 1, probability 0, space 0, times 0 [ 515.246968][T11110] CPU: 0 UID: 0 PID: 11110 Comm: syz.2.1469 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 515.246995][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.247009][T11110] Call Trace: [ 515.247018][T11110] [ 515.247027][T11110] dump_stack_lvl+0xe8/0x150 [ 515.247063][T11110] should_fail_ex+0x46b/0x600 [ 515.247093][T11110] ? sock_alloc_inode+0x2c/0x1a0 [ 515.247119][T11110] should_failslab+0xa8/0x100 [ 515.247162][T11110] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 515.247191][T11110] ? sock_alloc_inode+0x2c/0x1a0 [ 515.247223][T11110] ? __pfx_sock_alloc_inode+0x10/0x10 [ 515.247249][T11110] sock_alloc_inode+0x2c/0x1a0 [ 515.247275][T11110] ? __pfx_sock_alloc_inode+0x10/0x10 [ 515.247299][T11110] alloc_inode+0x6a/0x1b0 [ 515.247332][T11110] __sock_create+0x12d/0x9d0 [ 515.247370][T11110] __sys_socket+0xd6/0x1b0 [ 515.247401][T11110] __x64_sys_socket+0x7a/0x90 [ 515.247429][T11110] do_syscall_64+0x166/0x520 [ 515.247461][T11110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.247482][T11110] ? clear_bhb_loop+0x70/0xc0 [ 515.247508][T11110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.247530][T11110] RIP: 0033:0x7effc38ce159 [ 515.247550][T11110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.247568][T11110] RSP: 002b:00007effc1b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 515.247591][T11110] RAX: ffffffffffffffda RBX: 00007effc3b55fa0 RCX: 00007effc38ce159 [ 515.247606][T11110] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 515.247619][T11110] RBP: 00007effc396506b R08: 0000000000000000 R09: 0000000000000000 [ 515.247633][T11110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.247646][T11110] R13: 00007effc3b56038 R14: 00007effc3b55fa0 R15: 00007ffc0467a348 [ 515.247678][T11110] [ 515.247689][T11110] socket: no more sockets [ 515.364825][T11114] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1468'. [ 516.677535][T11135] netlink: 'syz.9.1475': attribute type 4 has an invalid length. [ 518.907029][ T5597] Bluetooth: hci7: command 0x0406 tx timeout [ 519.007544][ T5597] Bluetooth: hci6: command 0x0406 tx timeout [ 519.273813][T11176] FAULT_INJECTION: forcing a failure. [ 519.273813][T11176] name failslab, interval 1, probability 0, space 0, times 0 [ 519.273857][T11176] CPU: 1 UID: 0 PID: 11176 Comm: syz.8.1481 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 519.273881][T11176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.273904][T11176] Call Trace: [ 519.273929][T11176] [ 519.273938][T11176] dump_stack_lvl+0xe8/0x150 [ 519.273975][T11176] should_fail_ex+0x46b/0x600 [ 519.274009][T11176] should_failslab+0xa8/0x100 [ 519.274038][T11176] ? anon_vma_clone+0x3f3/0x9f0 [ 519.274063][T11176] kmem_cache_alloc_noprof+0x9e/0x690 [ 519.274090][T11176] ? vm_area_dup+0x28/0x750 [ 519.274115][T11176] ? anon_vma_clone+0x3f3/0x9f0 [ 519.274145][T11176] anon_vma_clone+0x3f3/0x9f0 [ 519.274179][T11176] copy_vma+0x70a/0xad0 [ 519.274206][T11176] ? __pfx_copy_vma+0x10/0x10 [ 519.274251][T11176] ? rcu_is_watching+0x16/0xb0 [ 519.274280][T11176] ? percpu_counter_add_batch+0xec/0x1d0 [ 519.274312][T11176] move_vma+0x8fc/0x1850 [ 519.274349][T11176] ? arch_get_unmapped_area_topdown+0x269/0xb60 [ 519.274374][T11176] ? __pfx_move_vma+0x10/0x10 [ 519.274398][T11176] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 519.274421][T11176] ? mtree_load+0x12a/0x780 [ 519.274554][T11176] ? cap_mmap_addr+0xaf/0x100 [ 519.274582][T11176] ? bpf_lsm_mmap_addr+0x9/0x50 [ 519.274613][T11176] mremap_to+0x7f9/0x8d0 [ 519.274640][T11176] ? __pfx_mremap_to+0x10/0x10 [ 519.274659][T11176] ? __pfx_mtree_load+0x10/0x10 [ 519.274679][T11176] ? __pfx_check_prep_vma+0x10/0x10 [ 519.274718][T11176] __se_sys_mremap+0xf59/0x12d0 [ 519.274749][T11176] ? __pfx___se_sys_mremap+0x10/0x10 [ 519.274767][T11176] ? do_futex+0x3e7/0x4e0 [ 519.274785][T11176] ? __asan_memcpy+0x40/0x70 [ 519.274813][T11176] ? __pfx_do_futex+0x10/0x10 [ 519.274833][T11176] ? lock_acquire+0x115/0x350 [ 519.274864][T11176] ? __se_sys_futex+0x3a8/0x450 [ 519.274910][T11176] ? __x64_sys_mremap+0x20/0xc0 [ 519.274933][T11176] do_syscall_64+0x166/0x520 [ 519.274961][T11176] ? trace_irq_disable+0x3b/0x140 [ 519.274986][T11176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.275005][T11176] ? clear_bhb_loop+0x70/0xc0 [ 519.275028][T11176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.275046][T11176] RIP: 0033:0x7f872763e159 [ 519.275067][T11176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.275084][T11176] RSP: 002b:00007f8725896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 519.275105][T11176] RAX: ffffffffffffffda RBX: 00007f87278c5fa0 RCX: 00007f872763e159 [ 519.275119][T11176] RDX: 0000000000003021 RSI: 0000000000003000 RDI: 0000200000001000 [ 519.275132][T11176] RBP: 00007f87276d506b R08: 0000200000ffd000 R09: 0000000000000000 [ 519.275145][T11176] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 519.275156][T11176] R13: 00007f87278c6038 R14: 00007f87278c5fa0 R15: 00007ffe71ad3368 [ 519.275185][T11176] [ 522.181692][T11216] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 522.353426][ T6015] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.474838][ T985] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.476556][ T985] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.476790][ T985] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.530471][T11257] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1500'. [ 524.013416][ T5592] Bluetooth: hci8: command 0x0406 tx timeout [ 525.519927][T11282] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 525.543903][ T3151] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.573538][ T5996] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.578182][ T5996] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.578245][ T5996] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.693540][ T5592] Bluetooth: hci9: command 0x0406 tx timeout [ 530.151464][T11344] bond0: (slave vxlan1): Opening slave failed [ 531.820350][T11393] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1530'. [ 532.208490][T11398] MINIX-fs: unable to read superblock [ 536.786018][T11466] MINIX-fs: unable to read superblock [ 539.255695][T11503] MINIX-fs: unable to read superblock [ 546.478628][T11559] syz.9.1572 (11559) used greatest stack depth: 15264 bytes left [ 547.442606][T11587] netlink: 'syz.6.1580': attribute type 4 has an invalid length. [ 568.226407][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.433762][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.712623][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.746831][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.686341][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.742230][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.546770][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.549115][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 792.046860][ T38] INFO: task kworker/1:4:5703 blocked for more than 143 seconds. [ 792.046920][ T38] Not tainted syzkaller #0 [ 792.046959][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 792.047014][ T38] task:kworker/1:4 state:D stack:21768 pid:5703 tgid:5703 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 792.047166][ T38] Workqueue: events xfrm_state_gc_task [ 792.047480][ T38] Call Trace: [ 792.047534][ T38] [ 792.048267][ T38] __schedule+0x16d9/0x5700 [ 792.050090][ T38] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 792.376100][ T38] ? __pfx___schedule+0x10/0x10 [ 792.376389][ T38] ? schedule+0x90/0x2b0 [ 792.377039][ T38] ? schedule+0x90/0x2b0 [ 792.377527][ T38] schedule+0x164/0x2b0 [ 792.468783][ T38] schedule_timeout+0xc0/0x2c0 [ 792.469188][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 792.469815][ T38] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 792.470130][ T38] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 792.558062][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 792.558305][ T38] ? wait_for_completion+0x272/0x5e0 [ 792.558676][ T38] wait_for_completion+0x2ca/0x5e0 [ 792.560092][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 792.560718][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 792.763515][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 792.764501][ T38] synchronize_rcu_normal+0x2a4/0x380 [ 792.764764][ T38] ? __pfx_synchronize_rcu_normal+0x10/0x10 [ 792.766539][ T38] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 792.766755][ T38] ? ring_buffer_event_data+0x94/0x100 [ 792.901601][ T38] ? trace_event_buffer_commit+0x258/0x7a0 [ 792.982004][ T38] synchronize_rcu_expedited+0x15a/0x770 [ 792.982612][ T38] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 792.983564][ T38] ? __local_bh_enable+0x1e3/0x2f0 [ 793.166374][ T38] xfrm_state_gc_task+0x101/0x740 [ 793.166586][ T38] ? xfrm_state_gc_task+0x7c/0x740 [ 793.167059][ T38] ? __pfx_xfrm_state_gc_task+0x10/0x10 [ 793.167873][ T38] ? rcu_is_watching+0x16/0xb0 [ 793.168097][ T38] ? process_scheduled_works+0x97a/0x1630 [ 793.168389][ T38] process_scheduled_works+0xc3d/0x1630 [ 793.376428][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 793.377019][ T38] ? assign_work+0x3cf/0x5d0 [ 793.378153][ T38] worker_thread+0xa47/0xfb0 [ 793.618409][ T38] ? __kthread_parkme+0x71/0x1f0 [ 794.009608][ T38] kthread+0x38b/0x470 [ 794.009891][ T38] ? __pfx_worker_thread+0x10/0x10 [ 794.009972][ T38] ? __pfx_kthread+0x10/0x10 [ 794.010363][ T38] ret_from_fork+0x514/0xb70 [ 794.011131][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 794.115966][ T38] ? __switch_to+0xc89/0x1420 [ 794.116860][ T38] ? __pfx_kthread+0x10/0x10 [ 794.117236][ T38] ret_from_fork_asm+0x1a/0x30 [ 794.312234][ T38] [ 794.312318][ T38] INFO: task kworker/1:7:6723 blocked for more than 145 seconds. [ 794.312359][ T38] Not tainted syzkaller #0 [ 794.312390][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 794.312422][ T38] task:kworker/1:7 state:D stack:22152 pid:6723 tgid:6723 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 794.312553][ T38] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 794.312833][ T38] Call Trace: [ 794.312873][ T38] [ 794.599706][ T38] __schedule+0x16d9/0x5700 [ 794.701818][ T38] ? __pfx___schedule+0x10/0x10 [ 795.247587][ T38] rt_mutex_schedule+0x76/0xf0 [ 795.247905][ T38] ? __rt_mutex_slowlock_locked+0x1d6/0x25b0 [ 795.248394][ T38] __rt_mutex_slowlock_locked+0x1f88/0x25b0 [ 795.249685][ T38] ? __rt_mutex_slowlock_locked+0x1d6/0x25b0 [ 795.675784][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 795.842791][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 796.179680][ T38] ? rcu_is_watching+0x16/0xb0 [ 796.180541][ T38] __rwbase_read_lock+0xc3/0x190 [ 796.181019][ T38] ? __pfx___rwbase_read_lock+0x10/0x10 [ 796.182058][ T38] down_read+0x132/0x200 [ 796.182507][ T38] ? __pfx_down_read+0x10/0x10 [ 796.567238][ T38] ? __asan_memset+0x22/0x50 [ 796.567595][ T38] ? blake2s_final+0x145/0x260 [ 796.568479][ T38] wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 796.569098][ T38] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 796.981391][ T38] ? __asan_memset+0x22/0x50 [ 796.981816][ T38] ? blake2s_final+0x145/0x260 [ 797.180963][ T38] ? __crypto_memneq+0x42/0x470 [ 797.577203][ T38] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 797.577375][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 797.578175][ T38] wg_packet_handshake_receive_worker+0x701/0x10a0 [ 797.578418][ T38] ? ring_buffer_event_data+0x94/0x100 [ 797.578616][ T38] ? look_up_lock_class+0x57/0x110 [ 797.579131][ T38] ? wg_packet_handshake_receive_worker+0x16e/0x10a0 [ 797.580180][ T38] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 798.482229][ T38] ? __pfx_trace_event_raw_event_lock_acquire+0x10/0x10 [ 798.494719][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 798.495569][ T38] ? lock_acquire+0x115/0x350 [ 798.496819][ T38] ? rcu_is_watching+0x16/0xb0 [ 798.497410][ T38] ? process_scheduled_works+0x97a/0x1630 [ 798.497952][ T38] process_scheduled_works+0xc3d/0x1630 [ 799.130980][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 799.131744][ T38] ? assign_work+0x3cf/0x5d0 [ 799.132544][ T38] worker_thread+0xa47/0xfb0 [ 799.626780][ T38] ? __kthread_parkme+0x71/0x1f0 [ 799.628302][ T38] kthread+0x38b/0x470 [ 799.628469][ T38] ? __pfx_worker_thread+0x10/0x10 [ 799.628565][ T38] ? __pfx_kthread+0x10/0x10 [ 799.629028][ T38] ret_from_fork+0x514/0xb70 [ 800.990922][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 800.991140][ T38] ? __switch_to+0xc89/0x1420 [ 800.991779][ T38] ? __pfx_kthread+0x10/0x10 [ 800.991978][ T38] ret_from_fork_asm+0x1a/0x30 [ 801.693082][ T38] [ 801.696413][ T38] INFO: task kworker/1:1:10905 blocked for more than 153 seconds. [ 801.696496][ T38] Not tainted syzkaller #0 [ 801.696569][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 801.696614][ T38] task:kworker/1:1 state:D stack:24992 pid:10905 tgid:10905 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 801.696695][ T38] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 801.696779][ T38] Call Trace: [ 801.696802][ T38] [ 801.697345][ T38] __schedule+0x16d9/0x5700 [ 801.700160][ T38] ? __pfx___schedule+0x10/0x10 [ 801.702062][ T38] rt_mutex_schedule+0x76/0xf0 [ 801.702346][ T38] ? __rt_mutex_slowlock_locked+0x1d6/0x25b0 [ 801.702515][ T38] __rt_mutex_slowlock_locked+0x1f88/0x25b0