last executing test programs: 11m22.143972681s ago: executing program 1 (id=495): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e00)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc004811}, 0x4010) 11m16.542276244s ago: executing program 1 (id=503): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x891a, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000000000000000000000000042fe8000"/51], 0x0) 11m14.689592457s ago: executing program 1 (id=506): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(r3, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r5, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0x40045304, &(0x7f0000000000)) tkill(r4, 0x7) listen(r0, 0xffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a8435c6d70601fe800000000000000000000000007d2e2566785ee94af83e4b0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002540)=ANY=[@ANYBLOB="aaaaaaaaaaaafffff4ffffff86dd600000000018060100000000000000000000000000000000fe800000000000000000000000efffa94e234e22a79d3a61020c4b3aaccb1b165419472786adf0f344ed4235292e6fbbf2cf77b1b414e9b38bb7aa9ee7adac1c6cfa879f42534a94d1aa663bddbf1c991541ffefa03226302d34c365d0175669da9d779a948691158d266003c70e194119bab0710ac144ce047eb821c6fd0dac62fdb0405e32c91923a4afea093281d4b53fca016eadc0993b9308295ba783bfdd277198a921e3f90008472196b8ef37eded04767395b1207ac432a6f50e10c228c0249b34deff4b8b9e0278212d3a", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(r0, &(0x7f0000000200)='./tracing/synthetic_events\x00', 0x2, 0x28) 11m12.744378324s ago: executing program 2 (id=507): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271d, 0x0, &(0x7f0000000000)) 11m12.671974034s ago: executing program 1 (id=508): openat$ppp(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) symlink(&(0x7f0000001400)='./config\x00', &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/file0\x00') write(r2, &(0x7f0000000000)="5a000300010003", 0x7) socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shutdown(r3, 0x0) 11m11.061991867s ago: executing program 2 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dummy\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r1, &(0x7f0000001400)='2\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) write(r3, &(0x7f0000002500)='1\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0x2, 0x0) write(r4, &(0x7f0000002700)='1\n', 0x2) 11m3.461996952s ago: executing program 1 (id=518): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(r2, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r4, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0x40045304, &(0x7f0000000000)) tkill(r3, 0x7) listen(r0, 0xffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a8435c6d70601fe800000000000000000000000007d2e2566785ee94af83e4b0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002540)=ANY=[@ANYBLOB="aaaaaaaaaaaafffff4ffffff86dd600000000018060100000000000000000000000000000000fe800000000000000000000000efffa94e234e22a79d3a61020c4b3aaccb1b165419472786adf0f344ed4235292e6fbbf2cf77b1b414e9b38bb7aa9ee7adac1c6cfa879f42534a94d1aa663bddbf1c991541ffefa03226302d34c365d0175669da9d779a948691158d266003c70e194119bab0710ac144ce047eb821c6fd0dac62fdb0405e32c91923a4afea093281d4b53fca016eadc0993b9308295ba783bfdd277198a921e3f90008472196b8ef37eded04767395b1207ac432a6f50e10c228c0249b34deff4b8b9e0278212d3a", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(r0, &(0x7f0000000200)='./tracing/synthetic_events\x00', 0x2, 0x28) 11m2.483988078s ago: executing program 2 (id=520): r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271d, 0x0, &(0x7f0000000000)) 11m1.918038855s ago: executing program 2 (id=521): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f00000001a0001000000000000000000fc020000000000000000000000000000e000000200"/58, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000042b00a67e"], 0xf0}}, 0x40b0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082, 0x0, 0x0}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000400)={0x1fff, 0x40, 0xfa00, {{0xa, 0x4e23, 0xb, @loopback, 0xffff268d}, {0xa, 0x4e27, 0x20000000, @loopback, 0x2000005}, 0xffffffffffffffff, 0x1ff}}, 0x48) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r5, 0x84, 0xb, 0xfffffffffffffffe, &(0x7f0000000040)=0x41) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYRES8=r6, @ANYRESDEC, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a000100aaaaaaaaaa000000080004005e471177392e92e85a55d45b54dd2d87b3e472184631813d993523f14b82b94cfb3c0fecae2414d68a0a3f65157ae160d546e089ddcbee7aa551b418eb955e026909507a354d791b48f10ccc3f81caa9a34a2beabfade743a949dfc73fe558e1d55b6f8f97c3aacb85126be354", @ANYRESHEX=0x0], 0x48}, 0x1, 0x0, 0x0, 0x4042015}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r7, 0x301}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 11m1.602015742s ago: executing program 2 (id=522): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='0fc5:1227:ol', 0xc) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0) 10m57.820569293s ago: executing program 2 (id=525): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$procfs(0xffffff9c, &(0x7f0000000340)='/proc/meminfo\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x10001}}, './file1\x00'}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0xb00}], 0x1, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={{r0}, 0x3, 0x1000, 0x9}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x6}, 0x8) r6 = dup2(r4, r0) getsockopt$sock_buf(r6, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 10m57.819567703s ago: executing program 1 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x10b442, 0x0) 10m49.81330188s ago: executing program 32 (id=515): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x47, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f0000000440)={0x14, &(0x7f0000000300)={0x20, 0x9, 0x41, {0x41, 0x23, "b5abfba463766e28791763db982171812890e395c890f56a91003506ce1bb190a34c44b6216e2dab1a075af0d57ac09d28cef4455f3edb93a1c4a7369b2cba"}}, 0x0}, 0x0) 10m40.809903036s ago: executing program 33 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x10b442, 0x0) 10m40.463835887s ago: executing program 34 (id=525): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$procfs(0xffffff9c, &(0x7f0000000340)='/proc/meminfo\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x10001}}, './file1\x00'}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0xb00}], 0x1, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={{r0}, 0x3, 0x1000, 0x9}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x6}, 0x8) r6 = dup2(r4, r0) getsockopt$sock_buf(r6, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 6m39.90483795s ago: executing program 0 (id=925): pipe(&(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x6020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x80, 0x0, 0x3, 0x10007e, 0x20000006, 0x50, 0x6, 0x10000, 0x80005, 0x2, 0x8, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x1, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x1, 0x0, 0x5, 0x42f, 0x2000000e, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x0, 0x5, 0xc303, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x8001, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8001, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7ff, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6m38.747627798s ago: executing program 0 (id=929): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', 0x0, &(0x7f00000009c0)={{}, {}, [], {0x4, 0x2}, [], {0x10, 0x4}, {0x20, 0x3}}, 0x24, 0x1) rmdir(0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) read$FUSE(r4, &(0x7f0000003f80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$watch_queue(r4, &(0x7f0000000200)=""/148, 0xffffffc0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sched_setscheduler(r5, 0x0, &(0x7f00000004c0)=0x6) pipe2$9p(&(0x7f0000000480), 0x4080) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x32000, 0x0) statx(r4, &(0x7f00000003c0)='./control\x00', 0x2000, 0x10, &(0x7f0000000ac0)) sendmsg$AUDIT_USER(r1, 0x0, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) 6m38.230781142s ago: executing program 0 (id=931): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142bc00090ef83804919e1d9fb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) 6m36.556711262s ago: executing program 0 (id=933): syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf, 0x0, 0x0}, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6m35.979049557s ago: executing program 0 (id=934): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 6m35.525035662s ago: executing program 0 (id=935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x18, 0x0, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x4}]}, 0x18}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x100, 0xffffffffffffffff, 0x4}, 0x48) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r8, &(0x7f00000000c0)="1c", 0xfffffffffffffd2c, 0xc0000, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r10, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) 6m34.293027734s ago: executing program 3 (id=939): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(r3, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r5, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0x40045304, &(0x7f0000000000)) tkill(r4, 0x7) listen(r0, 0xffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a8435c6d70601fe800000000000000000000000007d2e2566785ee94af83e4b0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002540)=ANY=[@ANYBLOB="aaaaaaaaaaaafffff4ffffff86dd600000000018060100000000000000000000000000000000fe800000000000000000000000efffa94e234e22a79d3a61020c4b3aaccb1b165419472786adf0f344ed4235292e6fbbf2cf77b1b414e9b38bb7aa9ee7adac1c6cfa879f42534a94d1aa663bddbf1c991541ffefa03226302d34c365d0175669da9d779a948691158d266003c70e194119bab0710ac144ce047eb821c6fd0dac62fdb0405e32c91923a4afea093281d4b53fca016eadc0993b9308295ba783bfdd277198a921e3f90008472196b8ef37eded04767395b1207ac432a6f50e10c228c0249b34deff4b8b9e0278212d3a", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(r0, &(0x7f0000000200)='./tracing/synthetic_events\x00', 0x2, 0x28) 6m33.135839581s ago: executing program 3 (id=940): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x44, r2, 0x1, 0xfffffffc, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) 6m31.802351867s ago: executing program 3 (id=941): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 6m31.613821905s ago: executing program 3 (id=942): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 6m31.48934878s ago: executing program 3 (id=943): 6m31.386278253s ago: executing program 3 (id=944): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000380), &(0x7f0000000480)=r4}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, 0x0, 0x0, 0x4, 0x0, 0x0) connect$can_bcm(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) shutdown(r2, 0x1) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 6m20.111788234s ago: executing program 35 (id=935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x18, 0x0, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x4}]}, 0x18}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x100, 0xffffffffffffffff, 0x4}, 0x48) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r8, &(0x7f00000000c0)="1c", 0xfffffffffffffd2c, 0xc0000, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r10, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) 6m16.040755062s ago: executing program 36 (id=944): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000380), &(0x7f0000000480)=r4}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, 0x0, 0x0, 0x4, 0x0, 0x0) connect$can_bcm(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) shutdown(r2, 0x1) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 4m34.669757196s ago: executing program 5 (id=1104): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(r4, r1, 0x68, 0x1) syz_ublk_setup_queues(r0, r2, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) 4m33.280139732s ago: executing program 5 (id=1106): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1bf) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) write$P9_RVERSION(r0, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.u'}, 0x15) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='bfs\x00', 0x200000, 0x0) 4m32.490176728s ago: executing program 5 (id=1107): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x11000000) 4m31.931786732s ago: executing program 5 (id=1110): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000020, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 4m31.686473936s ago: executing program 5 (id=1112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m30.686722557s ago: executing program 5 (id=1114): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, 0x0, 0x0) 4m30.42415266s ago: executing program 37 (id=1114): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, 0x0, 0x0) 39.060764961s ago: executing program 8 (id=2043): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6}}, 0x40) syz_emit_ethernet(0xd81, &(0x7f0000000bc0)={@local, @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x0, 0xd6b, 0x66, 0x0, 0x4, 0x11, 0x0, @multicast2, @multicast2}, {0x4e21, 0x4e23, 0xd57, 0x0, @gue={{0x2, 0x0, 0x1, 0x4}, "3cb8a6a53d5ef4fdfafc41f84123bba0d2f87134fa3a5ef4b3d7164fa3afd79d262ec6a0f2065dd06858033de5c7845959ed9a3c0c9272660c8228ae2aa620ce4b785f3bfabffb877e8c92bbaf697fb11d8fefb2480895e7a2bb1ba46e72e56f089a03ec415906a32522647b0f1105753185ef7c5ab197fcd5386329501ffe3c89bbf305b5d3e807dbe48123bb070e1c41ebb7c00d1408605149d6f785e6a96c7f6c0c8c565e7b5070dd44c21cf54551015a3a9071ad778f80a55040ab913f56022a41ab294776a4f46587ae937d95dabda74c82532e47d158083585f36ef4f07be9eba6d8bc75c904f17045955c8c05a8caa2416fdbdf6cfc2452c8ca2d21e1dad300938404394a3a3849e585085585b78504776f3941aa5881e370b11adf663726c355784a86dc4e79c1609c6e36bcef0510d4c1b5a9faec4b01291ca6170f57e1867f54da92c48f77b3b75592072f3dd0b07d711cd981198dfc8e16fa28a80b6c9d816e928603d0b657080b70e4a2125e8b1bde749affbb719f6d4c5edcefa8227c004f89a8b8b123688587ca3682086ea7b30a56b2b113a1e40dbac4e448922ded7e8d85ab45fa65afe75b62f9441d3267740285cd81770a480088b96ed6238a4ef1b60289624e66ac6b59b42d409c45033a2adcd3919e5e5b8fd80e5c0f8759ff1d1546f1cea1091161cf4b17c843028ed7a61b3f11c4347a09db24ce2fdb872d74614aaf756438b77e357fd4cec0f33052f53b45d4469cca919745bb03cc09cc2503d48523aeaf4a2351966bf1b1eab8ceec5cf7bacdab16b0e3f9a9994dbace7527400767e9bc925dffb075807dc2654a11e07b6a6aec906b3d080644e8e376eedb6619d47e5b863eb2d29afba17da198bbcd863adbe706fab8e20e0ad0d9ff7e213b450358beae8534d1b736dc435e8893c2f0b53bdad2932ba79981fa67aaa27306de313da55d94773a7601d881e03586226c4e0116091e5a41d102df211ea9ce0928f3a4db8558128d2ea05c1306a8a34dfe5e9bb18ffd8b57f0b6fb904bb90d12e3af761f811696e72a9dfa3e1a0c321da742177700964778b79735508fe435216bafef08f797fe2076cf8a15189f22d9da2f1ab578620f74d5d6f9019f59996ce03a3acd4a5d0f2d1f79ab188b20534ba6dd2ce4343e924587e6db9c90918a6125fbac3ef0ac0d6ffe5264effb3e5107ad038b3b845d8a209150537d56ea4f4a2bb6a2b4d21573938dbdc9ec5ae6281d10715562cc38589139d22264d21ae342a9d5b49c47a368ef9ffd10e1adc033cb36314e59e8ca2c4ce00e1863c2b36325867f2def92282633d7d652abe41bbe4c88f8bf3a34748e9fe2826e76034fc70d263d04591e158f3ee3e3606b3dfc1d6908e3654449d2b6ee7cd7c2d81456324c06b082043716c7c2d9f825a343560fc0c4f7515b2d3cda7b2fbccbe7bda792dd63a1a7c75f5cf841bdd5c99dc4916a03a3e3ba37097f506df69a5ad806cea1ab3b2996c721d2173db5721cfd3bc9366dfe7e98955d236b6c3ca6d3aa36a166451947e73d460489a90ecbe9697336acc972ea302647ccd0db9edad991645c89007c113c43b9badc5fef514384d04c25941f71536d46695b2f9759c796115ebaae40bf21a0851ecec482eabcda32be76dafd7781cb4d2b9c1288edb7de56d5013b321feee0b7e87aa1cd5ed17daed393de90f16bbd5acf302c77bfb9c999c082d72106534678e647289a83ff0f0fbf1c4e4802240a53d7f89d49b4bc5fe95e38636c61a214c97ea46e25591a2161a7182201428a549762be6043d460cf45b75ceef2029daeefa476507c083eab1d44cafe2b65b7b1e5ba9ec9439df6e746939b93f747bf408f1b0d7f0d52ad6181a91ca00ad7db25c4ac2907f4b00267b649dc191c749e1aabf40a960936e5eeb768bf0e8731bfe7d38d7d4141441b784ea958187962f328be46ec47ab28eff2318636633097c6b4a5c92fb135e953e3de6ab905ce593f9dca55967aa8427153b665aa608c6da456de186356aa5e874d6cbd1f9cd6a9b572775a9a9a64ecddb31da8dcae3fbe5a733d42080cf121dc2768fd1ebe9432a53dd3cd63beea41ab14afc2dd924977681f7ed17880fabce8d229f201c524fd9f6cadbcc6989a59956a201d296e94bbbb8adff5cb857d3dbdddd4c4cc9fa22e311c7cbd969536967f45eb0304e4e6b13cd2237d4359d3ea7e41fae551f13b2fbed6c775f881aca40934e464fca3775c8b0813460a8a57cf2bc1b7b3f523508cdb123c8b6e0300195446bdc60aa0116ed0cb57866f3a52d41ea296494522b02ff81f44cbcf3b160be1e00ab8adfbfc3399fca80fb3e3e10501f6c0d332728cc65ee787bc06e42351e68fac14d7b78467ee9cc136c1d2207ceda7f41daac3a873aaea5a67c1722193c7fa841886928707d0fd3e473539743e7e410fa6a959c07b01132d1aa1f85d35a6ac748e923d30e79feba72efdfa17b1d8bd736a701e526a17ee3d4d95fb6bb6971b90a0ccff3da5c8ec9749ce4e855238ec4021585c8d839b7272599798e34ebb6bb168a35d900dec8cecade90d55f05f19056ddb25eb39f7b5b96aa5deddd2fa8e0016349af3603a12aec01241366903f3921cc7690519705586b7b42fe372f08d68d0d6f765dae17375fbebb2d861e899fd19b4fca2ae1cbf6fced7eb4291803ce66148718868e1ded9e29512d90df32773a54ba442bb742918b58ec0368f66829fdd733c4967ec2394b1c4fa9526b99dd8882ef42c22829a90cbcccb08066ba410b42c31f4685b7e78d8a903b63c0c16a4dc31fff57a2f8e432a8fe0626430afc84609d9f08730a7dc5dcbd6e1b11884172d9461976f856a413da9a53c89058e221dcbfd8bf6c1f506a1a34059f20304d8b03da3a9f3183f4731e4333b620555941dd0981be7f6d9b47b6689babf762469cf26378f354bc05a4f6bd34f00050fdbe3ff249c5459768631eaa09bc6a4248002dc599792cde7cf7458ad9bcbd42410bc8a5c24c0a44f4a523c316ca14fc452356f782697f75e310b91224957a6d39d01fd9baddf813f3cb327aad6c1d27a22385283a1463fa853d26441b6e241d78c6f49c300cec48770223fe69062501e369500c3c9257929ae03b4c513e96c7663e2293f62fceed92000061fa027a801ed55d7dc61ed879f4a4713bf0f981d16ce51d72d338e77d79df70e70e6635af182fab896a04f6eb764e341ef28c840c599eee518c8860c46a1030fca222a31faaccce1737036e01b5dc814c5d421ec871d5e43c4aa7af056877c6b5971b9a415fb3d7690131dfb24f35574c4be606ceab2fb0d571f2f21f2ee574a838527be78794c01518fb34397c31c2c565633e135c44d0119ff5f7f64319ec3dd00d3b71545691918dfbf3217a9e1ea1f80280c012cf592ff861223e40b1a19e612a871ab407826e9d4a5943aaae292057dd14fd29056d245e4db59ed6966139aabbad5d4f453d84edc71234b3e2451235880efb9ee0c8d669eab99ee249ab58d26fc82699018dfcbee7fbc5ea7f8ec48b020638f6235c65f4542cc6181df59eccc02c090bc1af51ae9a7b88f8c2cb744ff4ce6facef53701fe8c72036829ddd715e265194ec7e3113b4b209d126ecf18d08dce41aed8fed6dcccb458f306cccb02e03791644e5e383ed9093481165dcdbea1696c5b0517671743c4d781bf2c5575d7e58318465ca5c7a59a632f98fd860c8ab6e19644498c4750a94938675c86485a37b9e502f0ab0d179fc69616d1ff4005284c32160134ffd599e792106ba5dff64c75d0532d2235d2d37d3477ee69e717b74c8e409cc23d2e1c1b6b95822ecb22f5d0d46db069d8b1c32862c114af6580dee5907eb0fd0e80c16d9d7a56bec4a84541ef5d85b3fe9509cafab5bdfee4cdd0206b8eb38cab6fbff811cfa2c30a839a86c7b4b967a685eb2033e52110ce0eda4c0005ddf6e8ad2f28b1cc1248a6506a1d90cfb8012777b621061deff1c08258c9fc7707460e2a24419d188d6f3f798ebc9785b560c4646bfe9f07c6db631ff706e23c7c92c7b6b0a62b8f8743311992eb67139bb7b686fa29bbc3af551eb59d7e71fd5f252bd3eb3b663f621fb13e8462ae78b8bac2286c07124d2c31a735e2541829c69b25fe6d2643017042b8e41b2489a9a61451faf98d3d06d429064be1fe71deaa4c5156c4c1d47efa7390a590319990922b7680c5df3898ebd961ac57ba1dd687afc95716f4c6269f14821d95244faa968fbc41976b4f889ad6e6d1a97236825c0bc6217a15e4139ccfa756781098917788323faa69dba4d420945a552bdd9afa9e43ff735486477fcccaa3e2cea0d953ba680bf86d4d02ef6ac8960a592a1d3656acc066dabcbcaa16ed43ebe9e1db43f6c5ca88cc398a613e90a308f1f25ee4faa390c5edddf9f393de23b0b320d856653a7f453dd3e3d48790171361e19f159944298a6252989ac53783cfeb45550e9b704b71fea9365732ad7f7f323bac4e95867780600ddf182e11dec646a3766105742e32ef3da1cf2ee421517629a010be5816d27b4d6a5c4901ebcef945cd8371f2ebbaf45ad10506fe47872776e31dda7c20cafe46951e333499663dbc0e8194c6681eac0b9725df19aa69c83a50df966556292a7bba2d79cd324679c664a491dd999faf8cd37c83e75fa207513454b4b74e5b15ff5ed29f428a2a2a998d04d2500627d5169af6e54da989734d50d6623a297996e8a3c0b3130ed7f9b6afd034ecb68a619079ba8ee3bd6357779568ee6585c39a9bdc4d6cc12a29d0a5acc68b80"}}}}}}, 0x0) 38.669752315s ago: executing program 8 (id=2046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) 38.507283912s ago: executing program 9 (id=2048): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x24, 0x0, 0x0) 38.362864728s ago: executing program 9 (id=2050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000000) 38.195381191s ago: executing program 9 (id=2053): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x6, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678ac", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdff00000080000000000200", @ANYRES32=0x0, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a31000000000800"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r3, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 37.389461862s ago: executing program 6 (id=2058): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0x1, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x3, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r2], 0x20) 37.313558342s ago: executing program 8 (id=2059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[], 0xfdef) 35.938918835s ago: executing program 6 (id=2064): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) 35.92696977s ago: executing program 4 (id=2065): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000100)='$', 0x1, 0x20008005, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000100001000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000100001234320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff3400000a000000000000000000000060001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000ebff000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) 35.757595258s ago: executing program 6 (id=2066): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0xce20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e20, 0x0, @private2}}, 0x0, 0xff4}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={r3, 0xffff0001}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r4, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x60010000, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 35.743400885s ago: executing program 4 (id=2067): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 35.515928313s ago: executing program 4 (id=2069): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @mcast2, @remote, 0x40, 0x0, 0x0, 0xfffffffe}}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 35.456381553s ago: executing program 8 (id=2070): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) close(0x3) 35.360917377s ago: executing program 4 (id=2071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, 0x0, 0x0) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r5, 0xa43c}, {r4, 0x4221}], 0x2, 0x0, 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008000) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) 34.298147291s ago: executing program 7 (id=2072): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000540)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRESDEC, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1], 0x20000600}, 0x1, 0x0, 0x0, 0x4000081}, 0x20004080) 32.463174109s ago: executing program 8 (id=2073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000005c0)={0x2cc, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x157, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @preq={0x82, 0x51, {{}, 0x3, 0xfe, 0x3, @device_b, 0x6, @void, 0x8, 0xffffffff, 0x5, [{{0x1}, @device_a, 0x73}, {{}, @device_a, 0xfffffffb}, {{0x0, 0x0, 0x1}, @device_a, 0xfffffffc}, {{0x0, 0x0, 0x1}, @device_a, 0xfffffff7}, {{}, @device_b, 0x3}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0x84, 0x8}}, @random_vendor={0xdd, 0xf5, "7e937cd34c918e095e989325ee3221f80aeef36736f4d054988e041a8f34d3ebe210ffec55c208fb0039be3c627d0ba768e44b5e0e87407ea7cba835293b62cece68faf582aa00f6992e00b2f9b7145058b776bc890acbaca536dc4d8d0273279405316de4102a9acf014fb13d3428b214addf77485fe1a1ffb16e9c25622fbdc665b78a6ba215c1e88cdedb6d01223f51ec36e0bd3748d2a0fff9c2443d0d32ebc57b3551ad0e789f6e730322705fd5bf6340f7dd1d3498e7638f109006b6a062afed83d04814d882dc79715c50f64430869c8de1a6b042d10c3c52b5a8ef3f768d5157df1c780de39a96dcb2f4e09437f70ad244"}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_IE={0x11b, 0x2a, [@mesh_chsw={0x76, 0x6, {0xc5, 0x5, 0x34, 0xa386}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x2, 0x5, @broadcast, 0x8368, 0x18fd, 0xbe80}}, @mesh_chsw={0x76, 0x6, {0x5e, 0xfe, 0x25, 0xffff}}, @random_vendor={0xdd, 0xd8, "8d3f94c809662cbc5baf8acb4313cc81f245f6c1a2e94c0254d811aeb14f97dc88b7c538aa2091c953c9a66a58a192818dbe58a833b3cb1ad6deb6189ddb05047de2ef1fa86f121d2d0446a53b4a77add46ab9b8e1986f739365c5a9523a7c479a2f30a176a6dc5d3ceedc99bcfdf566fbd1f5ca2d8c25fec6b722a879395456ecd40cb38f22085c9c59cfe5b7921b1e37b7061bd59e3d297d866e2b9ca85fc9701b87e348b03bc2f5c7021b11d5f26401700fc6af2162b139f09b1cf8fadd0707037f046f71aea45160d2d90123d556ebd0697771b14ac3"}, @measure_req={0x26, 0x14, {0x9, 0x5, 0x3, "a5533d2d3cbee2eeb18dcd509809bd91b5"}}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x860}, 0x4000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 31.663606917s ago: executing program 6 (id=2074): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0x1, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x3, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r2], 0x20) 31.459365114s ago: executing program 7 (id=2075): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x1, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x3, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r1], 0x20) 26.368743715s ago: executing program 9 (id=2076): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0xfffffffffffffe8a}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002b00)=ANY=[@ANYBLOB="60000000020603000000000000000000000000160900020073797a3100000000050001000700000014000780080013005607497408001240080000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x8004) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') connect(r4, &(0x7f0000000440)=@isdn={0x22, 0x7, 0x4, 0x9, 0xe1}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080083850000002d000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x212, 0xffffffff, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x4, 0x2, 0x0, 0x0, "ee6a4130f0506500"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040812}, 0x1) unshare(0x20000400) 24.395904371s ago: executing program 6 (id=2077): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000100)='$', 0x1, 0x20008005, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000100001000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000100001234320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff3400000a000000000000000000000060001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000ebff000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) 24.20955666s ago: executing program 7 (id=2078): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) 24.189563494s ago: executing program 4 (id=2079): socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x32, 0x4, 0x2}, 0x50) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 23.888125507s ago: executing program 8 (id=2080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[], 0xfdef) 23.552232072s ago: executing program 9 (id=2081): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @mcast2, @remote, 0x40, 0x0, 0x0, 0xfffffffe}}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 23.000988376s ago: executing program 7 (id=2082): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1080, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0x0, 0xbed4, 0x8, 0x80000fe, 0x3, 0x0, 0x11000, 0x80000000, 0x2, 0x79b, 0x2, 0x1, 0x7d, 0x8, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x6, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0x0, 0x5, 0x5, 0x6, 0x8, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1003, 0x8, 0xffff, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x6, 0x84, 0x800100, 0x5, 0x255, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x7, 0x1, 0x0, 0xfffffffd, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 22.725455618s ago: executing program 4 (id=2083): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000012c0)=ANY=[@ANYBLOB="3c020000192e751688b121c5c515729d212629f3f8b1e07e20841d5ac2dd70b1"], 0x23c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r4, &(0x7f0000000040), r3, 0x0, 0x800000000ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829"], 0xfce) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.639345289s ago: executing program 6 (id=2084): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0xce20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e20, 0x0, @private2}}, 0x0, 0xff4}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={r3, 0xffff0001}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r4, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x60010000, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 21.017646348s ago: executing program 7 (id=2085): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) 20.797604357s ago: executing program 9 (id=2086): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x6, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678ac", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdff00000080000000000200", @ANYRES32=0x0, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a31000000000800"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r3, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 18.472075686s ago: executing program 7 (id=2087): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001040)=[@in6={0xa, 0x4e23, 0x9, @local, 0xd}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e21, 0x3, @private0, 0x5}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0xffff, @private2}, @in6={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}], 0xa0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x200000, 0x200003, 0x200000, 0x0, 0x6}) syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000900)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000c00)=0xf9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000c10)=0x3) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000c30)=0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000c40)=0x1c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40902, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x9, 0x0, 0x0, "810002ee0900598c44ff00be875f3c00"}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r4 = syz_open_pts(r3, 0x141601) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000040)={0x5, 0xff7f, 0x1, 0x9, 0x5, "995e825fc02930cf"}) fcntl$setstatus(r4, 0x4, 0x102800) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) 1.003293422s ago: executing program 38 (id=2080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[], 0xfdef) 823.800246ms ago: executing program 39 (id=2084): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0xce20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e20, 0x0, @private2}}, 0x0, 0xff4}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={r3, 0xffff0001}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r4, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x60010000, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 577.742167ms ago: executing program 40 (id=2086): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x6, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678ac", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdff00000080000000000200", @ANYRES32=0x0, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a31000000000800"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r3, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 332.179928ms ago: executing program 41 (id=2083): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000012c0)=ANY=[@ANYBLOB="3c020000192e751688b121c5c515729d212629f3f8b1e07e20841d5ac2dd70b1"], 0x23c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r4, &(0x7f0000000040), r3, 0x0, 0x800000000ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829"], 0xfce) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 42 (id=2087): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001040)=[@in6={0xa, 0x4e23, 0x9, @local, 0xd}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e21, 0x3, @private0, 0x5}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0xffff, @private2}, @in6={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}], 0xa0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x200000, 0x200003, 0x200000, 0x0, 0x6}) syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000900)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000c00)=0xf9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000c10)=0x3) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000c30)=0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000c40)=0x1c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40902, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x9, 0x0, 0x0, "810002ee0900598c44ff00be875f3c00"}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r4 = syz_open_pts(r3, 0x141601) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000040)={0x5, 0xff7f, 0x1, 0x9, 0x5, "995e825fc02930cf"}) fcntl$setstatus(r4, 0x4, 0x102800) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) kernel console output (not intermixed with test programs): adv: batadv0: Interface activated: batadv_slave_0 [ 712.485362][ T9614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.997234][ T1110] hsr_slave_0: left promiscuous mode [ 713.037188][ T1110] hsr_slave_1: left promiscuous mode [ 713.040483][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.040565][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.079235][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.079332][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.207120][ T1110] hsr_slave_0: left promiscuous mode [ 713.227156][ T1110] hsr_slave_1: left promiscuous mode [ 713.231068][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.267804][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.427189][ T1110] hsr_slave_0: left promiscuous mode [ 713.447050][ T1110] hsr_slave_1: left promiscuous mode [ 713.450746][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.487703][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.605484][ T1110] macsec0: left promiscuous mode [ 713.616073][ T1110] veth1_macvtap: left promiscuous mode [ 713.616699][ T1110] veth0_macvtap: left promiscuous mode [ 713.617108][ T1110] veth1_vlan: left promiscuous mode [ 713.617488][ T1110] veth0_vlan: left promiscuous mode [ 713.747485][ T1110] veth0_vlan: left promiscuous mode [ 714.608874][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 714.667825][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 715.259316][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 715.307612][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 715.819130][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 715.867711][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 716.181106][ T7995] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.237496][ T4129] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.281452][ T5784] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.630393][ T5784] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.751871][ T5784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.751943][ T5784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.059827][ T3328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.060474][ T3328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.271341][ T9720] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 717.315137][ T9720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 717.372651][ T9720] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 717.463286][ T9720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 717.483181][ T5244] 8021q: adding VLAN 0 to HW filter on device eth14 [ 717.488358][ T9720] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 717.566707][ T9720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 717.599880][ T9720] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 717.722272][ T9720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 718.921927][ T9714] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 719.193969][ T9714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 719.240505][ T9714] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 719.404787][ T9714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 719.436026][ T9714] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 719.539748][ T9714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.688345][ T9714] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 719.777291][ T9714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 720.403038][ T9781] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 720.432348][ T9781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 720.567922][ T9781] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 720.585364][ T37] audit: type=1800 audit(1788603663.121:110): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.950" name="zoned" dev="configfs" ino=26601 res=0 errno=0 [ 720.585476][ T37] audit: type=1800 audit(1788603663.121:111): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.950" name="zone_nr_conv" dev="configfs" ino=26602 res=0 errno=0 [ 720.669321][ T9781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 720.684678][ T9781] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 720.775976][ T9781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 720.811010][ T9781] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 720.861100][ T9781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 720.972629][ T9720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.179411][ T9720] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.308897][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.309495][ T5784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.351373][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.362293][ T5784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.773797][T10020] netlink: 28 bytes leftover after parsing attributes in process `syz.5.953'. [ 721.792981][T10020] openvswitch: netlink: Flow key attr not present in new flow. [ 722.092526][T10018] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.122716][T10018] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.428601][T10018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.450506][T10018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.469886][ T9788] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 723.661642][ T9788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 723.703177][ T9788] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 724.607193][ T9788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 724.627108][ T9788] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 724.651761][ T9788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.806322][ T9788] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 724.855299][ T1110] IPVS: stop unused estimator thread 0... [ 724.864169][ T9788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 725.125503][ T9714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.481107][ T9714] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.622585][ T9781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.703429][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.703902][ T5784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.867682][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.868148][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.061972][ T9781] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.168337][ T4129] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.180416][ T4129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.246628][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.251361][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.533506][ T9788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.801152][ T9788] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.959483][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.959881][ T5784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.018855][ T4129] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.022902][ T4129] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.159557][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.159956][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.311841][ T9720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.467260][ T1110] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.060036][ T67] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.687524][ T9714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.323367][ T9781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.353964][ T9720] veth0_vlan: entered promiscuous mode [ 730.393474][ T9720] veth1_vlan: entered promiscuous mode [ 730.936969][ T9720] veth0_macvtap: entered promiscuous mode [ 731.019051][ T9720] veth1_macvtap: entered promiscuous mode [ 731.112218][ T9720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.292921][ T9720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.694671][ T9788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.788147][ T3328] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.972577][ T5587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 732.055552][ T5587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 732.161131][ T5587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 732.195780][ T5587] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 732.206730][ T5587] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 732.622888][ T5587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 732.698521][ T5587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 732.709287][ T5587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 732.719299][ T5587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 732.739416][ T5587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 733.315249][ T9781] veth0_vlan: entered promiscuous mode [ 733.742032][ T9781] veth1_vlan: entered promiscuous mode [ 734.399332][ T5588] Bluetooth: hci1: command tx timeout [ 734.427858][ T48] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.539953][ T9781] veth0_macvtap: entered promiscuous mode [ 734.586980][ T9781] veth1_macvtap: entered promiscuous mode [ 734.616603][ T9788] veth0_vlan: entered promiscuous mode [ 734.877044][ T5588] Bluetooth: hci0: command tx timeout [ 735.004607][T10205] syzkaller0: entered promiscuous mode [ 735.005574][T10205] syzkaller0: entered allmulticast mode [ 735.053875][ T9788] veth1_vlan: entered promiscuous mode [ 735.079545][ T9781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.595083][ T5588] Bluetooth: hci1: command tx timeout [ 736.989416][ T5588] Bluetooth: hci0: command tx timeout [ 737.300251][ T9781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.652298][ T5588] Bluetooth: hci1: command tx timeout [ 739.036856][ T5588] Bluetooth: hci0: command tx timeout [ 739.296715][ T9788] veth0_macvtap: entered promiscuous mode [ 739.512366][ T9788] veth1_macvtap: entered promiscuous mode [ 739.614919][ T7995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.614945][ T7995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.952259][ T9788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.036391][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.044511][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.172296][ T9788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.182192][T10243] syzkaller0: entered promiscuous mode [ 740.182292][T10243] syzkaller0: entered allmulticast mode [ 740.717680][ T5588] Bluetooth: hci1: command tx timeout [ 740.971108][T10173] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.971819][T10173] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.972337][T10173] bridge_slave_0: entered allmulticast mode [ 740.981162][T10173] bridge_slave_0: entered promiscuous mode [ 741.039052][T10173] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.039274][T10173] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.039883][T10173] bridge_slave_1: entered allmulticast mode [ 741.046006][T10173] bridge_slave_1: entered promiscuous mode [ 741.054297][T10163] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.054641][T10163] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.055092][T10163] bridge_slave_0: entered allmulticast mode [ 741.068789][T10163] bridge_slave_0: entered promiscuous mode [ 741.118612][ T5588] Bluetooth: hci0: command tx timeout [ 741.208767][ T4129] bridge_slave_1: left allmulticast mode [ 741.208876][ T4129] bridge_slave_1: left promiscuous mode [ 741.209542][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.915023][ T4129] bridge_slave_0: left allmulticast mode [ 742.915134][ T4129] bridge_slave_0: left promiscuous mode [ 742.923270][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.368897][ T4129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.427602][ T4129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.461741][ T4129] bond0 (unregistering): Released all slaves [ 744.526265][T10163] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.527900][T10163] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.528424][T10163] bridge_slave_1: entered allmulticast mode [ 744.541358][T10163] bridge_slave_1: entered promiscuous mode [ 744.562199][T10277] syzkaller0: entered promiscuous mode [ 744.567868][T10277] syzkaller0: entered allmulticast mode [ 745.188366][T10173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.215058][T10163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.241335][T10173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.512784][ T4129] hsr_slave_0: left promiscuous mode [ 745.557338][ T4129] hsr_slave_1: left promiscuous mode [ 745.561707][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.577956][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.848651][ T4129] team0 (unregistering): Port device team_slave_1 removed [ 746.928076][ T4129] team0 (unregistering): Port device team_slave_0 removed [ 747.442096][T10163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.839929][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.400665][T10316] netlink: 20 bytes leftover after parsing attributes in process `syz.8.993'. [ 748.659469][T10173] team0: Port device team_slave_0 added [ 748.673815][T10163] team0: Port device team_slave_0 added [ 748.784343][T10173] team0: Port device team_slave_1 added [ 748.933310][T10163] team0: Port device team_slave_1 added [ 749.371653][T10173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.371739][T10173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.371818][T10173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.420009][T10163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.427701][T10163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.427735][T10163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.669099][T10173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.669188][T10173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.669261][T10173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.672163][T10163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.672181][T10163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.672214][T10163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.970981][ T7995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.971057][ T7995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.462301][T10173] hsr_slave_0: entered promiscuous mode [ 750.466445][T10173] hsr_slave_1: entered promiscuous mode [ 750.470901][T10173] debugfs: 'hsr0' already exists in 'hsr' [ 750.471016][T10173] Cannot create hsr debugfs directory [ 750.581839][T10163] hsr_slave_0: entered promiscuous mode [ 750.590206][T10163] hsr_slave_1: entered promiscuous mode [ 750.591224][T10163] debugfs: 'hsr0' already exists in 'hsr' [ 750.591252][T10163] Cannot create hsr debugfs directory [ 751.208375][ T6096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.208747][ T6096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.304163][T10350] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1002'. [ 751.903412][T10358] FAULT_INJECTION: forcing a failure. [ 751.903412][T10358] name failslab, interval 1, probability 0, space 0, times 0 [ 751.908367][T10358] CPU: 1 UID: 0 PID: 10358 Comm: syz.8.1004 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 751.908399][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 751.908418][T10358] Call Trace: [ 751.908495][T10358] [ 751.908535][T10358] dump_stack_lvl+0xe8/0x150 [ 751.908625][T10358] should_fail_ex+0x46b/0x600 [ 751.908658][T10358] should_failslab+0xa8/0x100 [ 751.908693][T10358] __kmalloc_noprof+0xfb/0x790 [ 751.908723][T10358] ? tctx_task_work_run+0x83b/0xa80 [ 751.908778][T10358] ? io_cache_alloc_new+0x40/0x100 [ 751.908805][T10358] ? io_cache_alloc_new+0x40/0x100 [ 751.908839][T10358] io_cache_alloc_new+0x40/0x100 [ 751.908868][T10358] io_uring_alloc_async_data+0x1b6/0x2e0 [ 751.908894][T10358] io_send_zc_prep+0x3f7/0x9e0 [ 751.908926][T10358] io_submit_sqes+0xbde/0x2310 [ 751.908988][T10358] __se_sys_io_uring_enter+0x364/0x1bb0 [ 751.909018][T10358] ? up_write+0x5a/0x190 [ 751.909055][T10358] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 751.909091][T10358] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 751.909131][T10358] ? rcu_is_watching+0x16/0xb0 [ 751.909179][T10358] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 751.909216][T10358] do_syscall_64+0x166/0x520 [ 751.909242][T10358] ? trace_irq_disable+0x3b/0x140 [ 751.909270][T10358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.909295][T10358] ? clear_bhb_loop+0x70/0xc0 [ 751.909324][T10358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.909352][T10358] RIP: 0033:0x7fd24702e159 [ 751.909455][T10358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.909474][T10358] RSP: 002b:00007fd245285f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 751.909525][T10358] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd24702e159 [ 751.909541][T10358] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 751.909554][T10358] RBP: 000000000000024a R08: 0000000000000000 R09: 0000000000000008 [ 751.909567][T10358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000a80 [ 751.909581][T10358] R13: 0000200000000a88 R14: 00000000000003c9 R15: 0000000000000000 [ 751.909613][T10358] [ 752.514203][ T5587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 752.571548][ T5587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 752.602740][ T5587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 752.624738][ T5587] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 752.625510][ T5587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 753.102663][ T5244] 8021q: adding VLAN 0 to HW filter on device eth17 [ 753.340729][T10376] syzkaller0: entered promiscuous mode [ 753.340827][T10376] syzkaller0: entered allmulticast mode [ 754.733504][ T5588] Bluetooth: hci3: command tx timeout [ 755.023188][T10393] fuse: Unknown parameter '0x0000000000000003' [ 756.131390][ T4129] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.796914][ T5588] Bluetooth: hci3: command tx timeout [ 757.053104][ T4129] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.293132][T10411] syzkaller0: entered promiscuous mode [ 757.293163][T10411] syzkaller0: entered allmulticast mode [ 757.796627][ T5244] 8021q: adding VLAN 0 to HW filter on device eth18 [ 759.406376][ T5588] Bluetooth: hci3: command tx timeout [ 759.607198][ T1188] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.906031][T10441] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1019'. [ 761.317120][ T3328] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.437206][ T5588] Bluetooth: hci3: command tx timeout [ 761.987449][ T5244] 8021q: adding VLAN 0 to HW filter on device eth19 [ 762.187341][ T4129] bridge_slave_1: left allmulticast mode [ 762.187441][ T4129] bridge_slave_1: left promiscuous mode [ 762.188189][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.341821][ T37] audit: type=1800 audit(1788603704.881:112): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1025" name="zoned" dev="configfs" ino=29431 res=0 errno=0 [ 762.366886][ T4129] bridge_slave_0: left allmulticast mode [ 762.366982][ T4129] bridge_slave_0: left promiscuous mode [ 762.367562][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.390775][ T37] audit: type=1800 audit(1788603704.931:113): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1025" name="zone_nr_conv" dev="configfs" ino=29432 res=0 errno=0 [ 764.489989][T10485] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1028'. [ 765.485566][T10496] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 765.595291][ T4129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.650575][ T4129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.689750][ T4129] bond0 (unregistering): Released all slaves [ 765.899580][T10473] syzkaller0: entered promiscuous mode [ 765.904378][T10473] syzkaller0: entered allmulticast mode [ 769.058085][ T4129] hsr_slave_0: left promiscuous mode [ 769.182723][ T4129] hsr_slave_1: left promiscuous mode [ 769.269899][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.270062][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.318104][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.320753][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.756090][ T4129] veth1_macvtap: left promiscuous mode [ 769.762957][ T4129] veth0_macvtap: left promiscuous mode [ 769.797801][ T4129] veth1_vlan: left promiscuous mode [ 769.798307][ T4129] veth0_vlan: left promiscuous mode [ 771.057739][ T4129] team0 (unregistering): Port device team_slave_1 removed [ 772.051703][ T4129] team0 (unregistering): Port device team_slave_0 removed [ 772.478495][T10549] syzkaller0: entered promiscuous mode [ 772.478528][T10549] syzkaller0: entered allmulticast mode [ 774.563916][T10362] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.564512][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.565097][T10362] bridge_slave_0: entered allmulticast mode [ 774.571685][T10362] bridge_slave_0: entered promiscuous mode [ 775.062879][T10362] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.063064][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.063290][T10362] bridge_slave_1: entered allmulticast mode [ 775.075528][T10362] bridge_slave_1: entered promiscuous mode [ 777.864810][T10601] syzkaller1: entered promiscuous mode [ 777.864916][T10601] syzkaller1: entered allmulticast mode [ 779.425020][T10362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.452431][T10362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.577196][ T1506] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.624982][T10362] team0: Port device team_slave_0 added [ 779.650754][T10362] team0: Port device team_slave_1 added [ 779.772750][T10362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.774059][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.774093][T10362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.790936][T10362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.790955][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.790985][T10362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.760246][T10362] hsr_slave_0: entered promiscuous mode [ 780.763828][T10362] hsr_slave_1: entered promiscuous mode [ 780.772002][T10658] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 782.277648][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1075'. [ 782.976483][T10691] xt_hashlimit: size too large, truncated to 1048576 [ 782.976581][T10691] xt_hashlimit: max too large, truncated to 1048576 [ 782.976620][T10691] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 783.135330][ T1110] IPVS: starting estimator thread 0... [ 783.508471][T10692] IPVS: using max 7 ests per chain, 16800 per kthread [ 784.194596][ T4129] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.509995][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.597417][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.429536][T10718] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1087'. [ 785.747905][T10725] FAULT_INJECTION: forcing a failure. [ 785.747905][T10725] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 785.757210][ T5587] Bluetooth: hci2: command 0x0406 tx timeout [ 785.772980][T10725] CPU: 1 UID: 0 PID: 10725 Comm: syz.5.1089 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 785.773013][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 785.773027][T10725] Call Trace: [ 785.773036][T10725] [ 785.773045][T10725] dump_stack_lvl+0xe8/0x150 [ 785.773083][T10725] should_fail_ex+0x46b/0x600 [ 785.773115][T10725] prepare_alloc_pages+0x223/0x650 [ 785.773155][T10725] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 785.773193][T10725] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 785.773231][T10725] ? __pfx_policy_nodemask+0x10/0x10 [ 785.773271][T10725] ? futex_unqueue+0x22/0x240 [ 785.773306][T10725] alloc_pages_mpol+0xd4/0x280 [ 785.773344][T10725] alloc_pages_noprof+0xd2/0x2f0 [ 785.773382][T10725] anon_pipe_write+0x21e/0x1a30 [ 785.773413][T10725] ? __pfx___futex_wait+0x10/0x10 [ 785.773449][T10725] ? try_to_wake_up+0x84b/0x1430 [ 785.773474][T10725] ? __pfx_anon_pipe_write+0x10/0x10 [ 785.773513][T10725] ? __pfx_futex_wait+0x10/0x10 [ 785.773542][T10725] ? bpf_lsm_file_permission+0x9/0x20 [ 785.773563][T10725] ? security_file_permission+0x75/0x260 [ 785.773595][T10725] vfs_write+0x61e/0xbb0 [ 785.773627][T10725] ? __pfx_vfs_write+0x10/0x10 [ 785.773659][T10725] ? __fget_files+0x2a/0x420 [ 785.773688][T10725] ksys_write+0x156/0x270 [ 785.773713][T10725] ? __pfx_ksys_write+0x10/0x10 [ 785.773746][T10725] do_syscall_64+0x166/0x520 [ 785.773770][T10725] ? trace_irq_disable+0x3b/0x140 [ 785.773794][T10725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.773815][T10725] ? clear_bhb_loop+0x70/0xc0 [ 785.773840][T10725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.773860][T10725] RIP: 0033:0x7f3db57be159 [ 785.773881][T10725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.773899][T10725] RSP: 002b:00007f3db3a16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 785.773930][T10725] RAX: ffffffffffffffda RBX: 00007f3db5a45fa0 RCX: 00007f3db57be159 [ 785.773946][T10725] RDX: 0000000000000015 RSI: 0000200000000180 RDI: 0000000000000004 [ 785.773959][T10725] RBP: 00007f3db5855024 R08: 0000000000000000 R09: 0000000000000000 [ 785.773972][T10725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.773985][T10725] R13: 00007f3db5a46038 R14: 00007f3db5a45fa0 R15: 00007ffc349e2ad8 [ 785.774017][T10725] [ 786.071494][T10725] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 787.428494][T10173] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 787.474454][T10173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 787.559414][T10173] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 787.814256][T10173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 790.904281][T10773] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 790.942636][ T4129] bridge_slave_1: left allmulticast mode [ 790.942740][ T4129] bridge_slave_1: left promiscuous mode [ 790.943653][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.204462][ T4129] bridge_slave_0: left allmulticast mode [ 791.210590][ T4129] bridge_slave_0: left promiscuous mode [ 791.210867][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.093209][ T5587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 792.140061][ T5587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 792.154729][ T5587] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 792.218473][ T5587] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 792.222420][ T5587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 792.356606][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1102'. [ 792.757897][ T4129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.817947][ T4129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.861984][ T4129] bond0 (unregistering): Released all slaves [ 792.910252][T10173] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 793.005129][T10173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 793.424504][T10801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 793.556017][T10801] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 793.620870][T10801] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 793.639253][T10801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 793.641565][T10801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 794.495082][ T5588] Bluetooth: hci4: command tx timeout [ 795.106582][T10833] FAULT_INJECTION: forcing a failure. [ 795.106582][T10833] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 795.121019][T10833] CPU: 0 UID: 0 PID: 10833 Comm: syz.5.1106 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 795.121055][T10833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 795.121070][T10833] Call Trace: [ 795.121081][T10833] [ 795.121093][T10833] dump_stack_lvl+0xe8/0x150 [ 795.121146][T10833] should_fail_ex+0x46b/0x600 [ 795.121181][T10833] prepare_alloc_pages+0x223/0x650 [ 795.121221][T10833] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 795.121261][T10833] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 795.121299][T10833] ? __pfx_policy_nodemask+0x10/0x10 [ 795.121340][T10833] ? futex_unqueue+0x22/0x240 [ 795.121376][T10833] alloc_pages_mpol+0xd4/0x280 [ 795.121417][T10833] alloc_pages_noprof+0xd2/0x2f0 [ 795.121455][T10833] anon_pipe_write+0x21e/0x1a30 [ 795.121490][T10833] ? __pfx___futex_wait+0x10/0x10 [ 795.121531][T10833] ? try_to_wake_up+0x84b/0x1430 [ 795.121560][T10833] ? __pfx_anon_pipe_write+0x10/0x10 [ 795.121615][T10833] ? __pfx_futex_wait+0x10/0x10 [ 795.121643][T10833] ? bpf_lsm_file_permission+0x9/0x20 [ 795.121666][T10833] ? security_file_permission+0x75/0x260 [ 795.121702][T10833] vfs_write+0x61e/0xbb0 [ 795.121738][T10833] ? __pfx_vfs_write+0x10/0x10 [ 795.121776][T10833] ? __fget_files+0x2a/0x420 [ 795.121810][T10833] ksys_write+0x156/0x270 [ 795.121840][T10833] ? __pfx_ksys_write+0x10/0x10 [ 795.121879][T10833] do_syscall_64+0x166/0x520 [ 795.121908][T10833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.121933][T10833] ? clear_bhb_loop+0x70/0xc0 [ 795.121962][T10833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.121986][T10833] RIP: 0033:0x7f3db57be159 [ 795.122014][T10833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.122035][T10833] RSP: 002b:00007f3db3a16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 795.122061][T10833] RAX: ffffffffffffffda RBX: 00007f3db5a45fa0 RCX: 00007f3db57be159 [ 795.122079][T10833] RDX: 0000000000000015 RSI: 0000200000000180 RDI: 0000000000000004 [ 795.122095][T10833] RBP: 00007f3db5855024 R08: 0000000000000000 R09: 0000000000000000 [ 795.122118][T10833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.122132][T10833] R13: 00007f3db5a46038 R14: 00007f3db5a45fa0 R15: 00007ffc349e2ad8 [ 795.122168][T10833] [ 795.512540][T10833] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 795.922833][ T5588] Bluetooth: hci6: command tx timeout [ 796.556985][ T5588] Bluetooth: hci4: command tx timeout [ 798.001137][T10164] Bluetooth: hci6: command tx timeout [ 798.015927][T10801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 798.122546][T10801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 798.135606][T10801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 798.149799][T10801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 798.162843][T10801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 798.638317][ T5588] Bluetooth: hci4: command tx timeout [ 798.777046][ T4129] hsr_slave_0: left promiscuous mode [ 798.816956][ T4129] hsr_slave_1: left promiscuous mode [ 798.821472][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.821553][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.868143][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.876007][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.965230][ T4129] veth1_macvtap: left promiscuous mode [ 798.965464][ T4129] veth0_macvtap: left promiscuous mode [ 798.965865][ T4129] veth1_vlan: left promiscuous mode [ 798.966529][ T4129] veth0_vlan: left promiscuous mode [ 799.857527][ T4129] team0 (unregistering): Port device team_slave_1 removed [ 799.918971][ T4129] team0 (unregistering): Port device team_slave_0 removed [ 800.076904][ T5588] Bluetooth: hci6: command tx timeout [ 800.396888][ T5588] Bluetooth: hci0: command tx timeout [ 800.718347][ T5588] Bluetooth: hci4: command tx timeout [ 802.158664][ T5588] Bluetooth: hci6: command tx timeout [ 802.497205][ T5588] Bluetooth: hci0: command tx timeout [ 803.620848][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.629062][T10811] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.629264][T10811] bridge_slave_0: entered allmulticast mode [ 803.661506][T10811] bridge_slave_0: entered promiscuous mode [ 803.792764][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.792953][T10811] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.793453][T10811] bridge_slave_1: entered allmulticast mode [ 803.851270][T10811] bridge_slave_1: entered promiscuous mode [ 804.422955][T10795] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.430419][T10795] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.430645][T10795] bridge_slave_0: entered allmulticast mode [ 804.459790][T10795] bridge_slave_0: entered promiscuous mode [ 804.559296][ T5588] Bluetooth: hci0: command tx timeout [ 804.643175][T10795] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.643309][T10795] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.643508][T10795] bridge_slave_1: entered allmulticast mode [ 804.651357][T10795] bridge_slave_1: entered promiscuous mode [ 804.732288][T10811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.784941][T10811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.136325][T10795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.284683][T10795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.347903][T10811] team0: Port device team_slave_0 added [ 805.431047][T10811] team0: Port device team_slave_1 added [ 805.532486][T10362] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 805.574186][T10362] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 805.649587][T10795] team0: Port device team_slave_0 added [ 805.672577][T10362] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 805.820250][T10362] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 806.265113][T10795] team0: Port device team_slave_1 added [ 806.436547][T10811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.443741][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.443778][T10811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.576065][T10362] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 806.637025][ T5588] Bluetooth: hci0: command tx timeout [ 806.700901][T10362] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 806.896560][T10811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.896647][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.896832][T10811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.981044][T10362] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 807.030303][T10362] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 807.215886][T10795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.215979][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.216009][T10795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.311012][T10876] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.311233][T10876] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.311472][T10876] bridge_slave_0: entered allmulticast mode [ 807.343776][T10876] bridge_slave_0: entered promiscuous mode [ 807.362065][T10795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.362155][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.362224][T10795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.415233][T10876] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.415653][T10876] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.416304][T10876] bridge_slave_1: entered allmulticast mode [ 807.441902][T10876] bridge_slave_1: entered promiscuous mode [ 807.741756][T10811] hsr_slave_0: entered promiscuous mode [ 807.745624][T10811] hsr_slave_1: entered promiscuous mode [ 807.756247][T10811] debugfs: 'hsr0' already exists in 'hsr' [ 807.756332][T10811] Cannot create hsr debugfs directory [ 807.796042][T10876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.911440][T10876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.011731][T10795] hsr_slave_0: entered promiscuous mode [ 808.023320][T10795] hsr_slave_1: entered promiscuous mode [ 808.024396][T10795] debugfs: 'hsr0' already exists in 'hsr' [ 808.024424][T10795] Cannot create hsr debugfs directory [ 808.244454][T10876] team0: Port device team_slave_0 added [ 808.272217][T10876] team0: Port device team_slave_1 added [ 808.759144][T10876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.761104][T10876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.761198][T10876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.947281][T10876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.948182][T10876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.948219][T10876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.971134][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.694630][T10876] hsr_slave_0: entered promiscuous mode [ 810.700532][T10876] hsr_slave_1: entered promiscuous mode [ 810.703099][T10876] debugfs: 'hsr0' already exists in 'hsr' [ 810.703189][T10876] Cannot create hsr debugfs directory [ 811.203331][ T5588] Bluetooth: hci5: command 0x0406 tx timeout [ 812.334482][T10362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.594209][T11057] 9p: Bad value for 'rfdno' [ 813.628847][ T5244] 8021q: adding VLAN 0 to HW filter on device eth17 [ 814.071424][ T5588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 814.144001][ T5588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 814.162692][ T5588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 814.174462][ T5588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 814.178493][ T5588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 814.517275][ T4129] bridge_slave_1: left allmulticast mode [ 814.523137][ T4129] bridge_slave_1: left promiscuous mode [ 814.523430][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.688576][ T4129] bridge_slave_0: left allmulticast mode [ 814.688724][ T4129] bridge_slave_0: left promiscuous mode [ 814.689674][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.997062][ T4129] bridge_slave_1: left allmulticast mode [ 814.997157][ T4129] bridge_slave_1: left promiscuous mode [ 814.998150][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.088157][ T4129] bridge_slave_0: left allmulticast mode [ 815.088249][ T4129] bridge_slave_0: left promiscuous mode [ 815.089002][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.988220][ T4129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.047821][ T4129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.100484][ T4129] bond0 (unregistering): Released all slaves [ 816.236919][ T5588] Bluetooth: hci1: command tx timeout [ 816.357603][ T4129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.440657][ T4129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.499148][ T4129] bond0 (unregistering): Released all slaves [ 817.790575][ T5244] 8021q: adding VLAN 0 to HW filter on device eth18 [ 818.330230][ T5588] Bluetooth: hci1: command tx timeout [ 818.965301][ T5244] 8021q: adding VLAN 0 to HW filter on device eth19 [ 819.238868][ T4129] hsr_slave_0: left promiscuous mode [ 819.276915][ T4129] hsr_slave_1: left promiscuous mode [ 819.282117][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.320852][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.477014][ T4129] hsr_slave_0: left promiscuous mode [ 819.497014][ T4129] hsr_slave_1: left promiscuous mode [ 819.499572][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.538040][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.161543][ T4129] team0 (unregistering): Port device team_slave_1 removed [ 820.218997][ T4129] team0 (unregistering): Port device team_slave_0 removed [ 820.397014][ T5588] Bluetooth: hci1: command tx timeout [ 820.909311][ T4129] team0 (unregistering): Port device team_slave_1 removed [ 820.957633][ T4129] team0 (unregistering): Port device team_slave_0 removed [ 822.428393][T11062] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.429792][T11062] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.430400][T11062] bridge_slave_0: entered allmulticast mode [ 822.452731][T11062] bridge_slave_0: entered promiscuous mode [ 822.468939][T11062] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.472323][T11062] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.472777][T11062] bridge_slave_1: entered allmulticast mode [ 822.477030][ T5588] Bluetooth: hci1: command tx timeout [ 822.504523][T11062] bridge_slave_1: entered promiscuous mode [ 822.575319][T11062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.590804][T11062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.940515][T11062] team0: Port device team_slave_0 added [ 822.948269][T11062] team0: Port device team_slave_1 added [ 823.029188][T11062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.031782][T11062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.031885][T11062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.145149][T11062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.145230][T11062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.145262][T11062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.353701][ T5244] 8021q: adding VLAN 0 to HW filter on device eth20 [ 823.462289][T11062] hsr_slave_0: entered promiscuous mode [ 823.469603][T11062] hsr_slave_1: entered promiscuous mode [ 823.470392][T11062] debugfs: 'hsr0' already exists in 'hsr' [ 823.470417][T11062] Cannot create hsr debugfs directory [ 823.745182][T11188] netlink: 4136 bytes leftover after parsing attributes in process `syz.8.1190'. [ 824.357811][ T4129] IPVS: stop unused estimator thread 0... [ 827.319014][T11265] bridge0: port 3(vxlan0) entered blocking state [ 827.319614][T11265] bridge0: port 3(vxlan0) entered disabled state [ 827.320169][T11265] vxlan0: entered allmulticast mode [ 827.341548][T11265] vxlan0: entered promiscuous mode [ 830.680663][ T4129] bridge_slave_1: left allmulticast mode [ 830.680757][ T4129] bridge_slave_1: left promiscuous mode [ 830.681031][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.838742][ T4129] bridge_slave_0: left allmulticast mode [ 830.845630][ T4129] bridge_slave_0: left promiscuous mode [ 830.845923][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.107148][ T4129] bridge_slave_1: left allmulticast mode [ 831.107246][ T4129] bridge_slave_1: left promiscuous mode [ 831.107975][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.289035][ T4129] bridge_slave_0: left allmulticast mode [ 831.294929][ T4129] bridge_slave_0: left promiscuous mode [ 831.295205][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.348003][ T4129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.457998][ T4129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.529669][ T4129] bond0 (unregistering): Released all slaves [ 832.788637][ T4129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.867971][ T4129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.929110][ T4129] bond0 (unregistering): Released all slaves [ 833.217223][T10811] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 833.292880][T10811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 833.304794][T10811] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 833.430420][T10811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 833.435190][T10811] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 833.482469][T10811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 834.071352][T10811] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 834.147195][T10811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 834.346997][ T4129] hsr_slave_0: left promiscuous mode [ 834.612249][ T4129] hsr_slave_1: left promiscuous mode [ 834.619613][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.656508][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.847277][ T4129] hsr_slave_0: left promiscuous mode [ 834.888358][ T4129] hsr_slave_1: left promiscuous mode [ 834.889343][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.927835][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.308079][ T4129] team0 (unregistering): Port device team_slave_1 removed [ 835.358923][ T4129] team0 (unregistering): Port device team_slave_0 removed [ 835.817612][ T4129] team0 (unregistering): Port device team_slave_1 removed [ 835.869626][ T4129] team0 (unregistering): Port device team_slave_0 removed [ 836.916262][T10811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.005150][T10811] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.044651][ T1506] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.052811][ T1506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.078894][ T1506] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.086369][ T1506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.098699][T10811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.186211][T10795] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 841.323959][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 841.331175][T10795] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 841.462477][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 841.520974][T10795] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 841.570075][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 841.602058][T10795] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 841.690215][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 842.212852][T10811] veth0_vlan: entered promiscuous mode [ 842.430991][T10811] veth1_vlan: entered promiscuous mode [ 842.475525][T10876] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 842.561721][T10876] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 842.614869][T10876] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 842.744267][T10876] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 842.766923][T10876] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 842.814950][T10876] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 843.024021][T10876] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 843.051845][T10876] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 843.158826][T11505] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 843.179226][T11505] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 843.179290][T11505] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 843.233040][T11505] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 843.303264][T11505] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 843.724309][T10811] veth0_macvtap: entered promiscuous mode [ 843.758294][T10795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.767764][T10811] veth1_macvtap: entered promiscuous mode [ 843.841784][T11062] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 843.926872][T11062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 843.943390][T11062] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 843.999172][T11062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 844.045170][T11062] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 844.122481][T11062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 844.151241][T11062] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 844.183104][T11062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 844.321312][T10795] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.374839][T10811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.413230][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.415236][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.430247][T10811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.503525][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.516671][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.458854][T10876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.917466][ T5784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.926953][ T5784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.991822][T10876] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.172816][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.179480][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.396927][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.404389][ T5784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.428235][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.438258][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.629703][T10771] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.678060][ T5784] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.706972][ T5785] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.716574][ T5785] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.962648][T11062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.201407][T11062] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.295187][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.302673][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.537248][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.539189][ T5784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.161225][ T6096] IPVS: starting estimator thread 0... [ 850.269130][T11589] IPVS: using max 7 ests per chain, 16800 per kthread [ 850.680517][T11600] netlink: 'syz.8.1239': attribute type 10 has an invalid length. [ 850.746453][T11600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.828329][T11600] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 851.351916][T10795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.799964][T10876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.091278][T11062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.080380][T11643] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 854.248700][T10801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 854.284311][ T6096] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.325227][T10801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 854.357270][T10801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 854.383702][T10801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 854.405016][T10801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 854.437630][ T1506] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.531052][ T4129] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.637351][T10982] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.155069][T10876] veth0_vlan: entered promiscuous mode [ 855.724351][T10876] veth1_vlan: entered promiscuous mode [ 855.997914][T11062] veth0_vlan: entered promiscuous mode [ 856.670469][T10801] Bluetooth: hci2: command tx timeout [ 857.638799][T11062] veth1_vlan: entered promiscuous mode [ 858.511715][ T5588] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 858.568391][ T5588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 858.581521][ T5588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 858.611949][ T5588] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 858.615790][ T5588] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 858.717454][ T5588] Bluetooth: hci2: command tx timeout [ 858.768181][T11690] overlayfs: conflicting options: nfs_export=on,index=off [ 859.129699][T10876] veth0_macvtap: entered promiscuous mode [ 859.735630][T11705] Bluetooth: MGMT ver 1.23 [ 860.921948][T10801] Bluetooth: hci3: command tx timeout [ 860.933652][ T5588] Bluetooth: hci2: command tx timeout [ 861.159616][T11062] veth0_macvtap: entered promiscuous mode [ 861.216387][T11062] veth1_macvtap: entered promiscuous mode [ 861.779753][T11713] overlayfs: conflicting options: nfs_export=on,index=off [ 862.035749][T11716] netlink: 380 bytes leftover after parsing attributes in process `syz.7.1264'. [ 862.685602][T11062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.802256][T11062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.971743][T10801] Bluetooth: hci3: command tx timeout [ 862.971818][ T5588] Bluetooth: hci2: command tx timeout [ 865.041423][T10801] Bluetooth: hci3: command tx timeout [ 866.868197][T11746] overlayfs: conflicting options: nfs_export=on,index=off [ 867.117432][T10801] Bluetooth: hci3: command tx timeout [ 867.187429][T10982] bridge_slave_1: left allmulticast mode [ 867.187526][T10982] bridge_slave_1: left promiscuous mode [ 867.188287][T10982] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.378248][T10982] bridge_slave_0: left allmulticast mode [ 867.378342][T10982] bridge_slave_0: left promiscuous mode [ 867.378993][T10982] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.287625][T10982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.368718][T10982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.389428][T10982] bond0 (unregistering): Released all slaves [ 868.673070][ T1188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.673134][ T1188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.023771][T11777] overlayfs: conflicting options: nfs_export=on,index=off [ 870.412513][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.503480][T10982] hsr_slave_0: left promiscuous mode [ 870.538769][T10982] hsr_slave_1: left promiscuous mode [ 870.542180][T10982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.581161][T10982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.172390][T10982] team0 (unregistering): Port device team_slave_1 removed [ 871.219411][T10982] team0 (unregistering): Port device team_slave_0 removed [ 871.438506][T10771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.438578][T10771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.551999][T11647] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.552378][T11647] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.552950][T11647] bridge_slave_0: entered allmulticast mode [ 871.573310][T11647] bridge_slave_0: entered promiscuous mode [ 871.657309][T11647] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.657773][T11647] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.658383][T11647] bridge_slave_1: entered allmulticast mode [ 871.684701][T11647] bridge_slave_1: entered promiscuous mode [ 872.045745][T11798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 872.309590][T11804] overlayfs: conflicting options: nfs_export=on,index=off [ 872.500809][T11647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.600492][T11647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.343274][T11685] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.343489][T11685] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.343710][T11685] bridge_slave_0: entered allmulticast mode [ 873.368295][T11685] bridge_slave_0: entered promiscuous mode [ 873.380115][T11647] team0: Port device team_slave_0 added [ 873.384302][T11647] team0: Port device team_slave_1 added [ 873.499214][T11685] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.506598][T11685] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.514141][T11685] bridge_slave_1: entered allmulticast mode [ 873.523165][T11685] bridge_slave_1: entered promiscuous mode [ 873.664721][T11647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.664787][T11647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.664811][T11647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.787496][T11647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.787581][T11647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.787614][T11647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.244169][T11685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.264796][ T5244] 8021q: adding VLAN 0 to HW filter on device eth1 [ 874.310129][T11685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.525986][T11685] team0: Port device team_slave_0 added [ 874.602161][T11685] team0: Port device team_slave_1 added [ 874.628840][T11647] hsr_slave_0: entered promiscuous mode [ 874.637849][T11647] hsr_slave_1: entered promiscuous mode [ 874.723927][T11685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.732709][T11685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.732747][T11685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.862476][T11685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.862556][T11685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.862588][T11685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.078434][T11847] overlayfs: conflicting options: nfs_export=on,index=off [ 876.823504][T11876] overlayfs: conflicting options: nfs_export=on,index=off [ 877.726192][T11864] tipc: Started in network mode [ 877.726308][T11864] tipc: Node identity ac1414aa, cluster identity 4711 [ 877.904346][T11864] tipc: New replicast peer: 172.20.20.187 [ 878.070628][T11864] tipc: Enabled bearer , priority 10 [ 878.193320][T11685] hsr_slave_0: entered promiscuous mode [ 878.204424][T11685] hsr_slave_1: entered promiscuous mode [ 878.225444][T11685] debugfs: 'hsr0' already exists in 'hsr' [ 878.227326][T11685] Cannot create hsr debugfs directory [ 878.688545][T11900] fuse: Bad value for 'fd' [ 880.191039][T10500] tipc: Node number set to 2886997162 [ 880.544713][T11926] tipc: Started in network mode [ 880.550571][T11926] tipc: Node identity ac1414aa, cluster identity 4711 [ 880.550881][T11926] tipc: New replicast peer: 172.20.20.187 [ 880.582460][T11926] tipc: Enabled bearer , priority 10 [ 881.045708][T11933] fuse: Bad value for 'fd' [ 881.729329][ T5244] 8021q: adding VLAN 0 to HW filter on device eth2 [ 881.739533][ T5695] tipc: Node number set to 2886997162 [ 886.403526][T11983] FAULT_INJECTION: forcing a failure. [ 886.403526][T11983] name failslab, interval 1, probability 0, space 0, times 0 [ 886.426899][T11983] CPU: 0 UID: 0 PID: 11983 Comm: syz.9.1349 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 886.426936][T11983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 886.426951][T11983] Call Trace: [ 886.426961][T11983] [ 886.426972][T11983] dump_stack_lvl+0xe8/0x150 [ 886.427016][T11983] should_fail_ex+0x46b/0x600 [ 886.427049][T11983] should_failslab+0xa8/0x100 [ 886.427086][T11983] __kmalloc_noprof+0xfb/0x790 [ 886.427116][T11983] ? __memcg_list_lru_alloc+0x211/0x830 [ 886.427151][T11983] ? __memcg_list_lru_alloc+0x211/0x830 [ 886.427194][T11983] __memcg_list_lru_alloc+0x211/0x830 [ 886.427236][T11983] ? xa_load+0x60/0x210 [ 886.427267][T11983] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 886.427321][T11983] __memcg_slab_post_alloc_hook+0x3e6/0xfe0 [ 886.427355][T11983] ? __memcg_slab_post_alloc_hook+0x22f/0xfe0 [ 886.427405][T11983] ? __d_alloc+0x37/0x6f0 [ 886.427430][T11983] kmem_cache_alloc_lru_noprof+0x41c/0x680 [ 886.427459][T11983] ? __d_alloc+0x37/0x6f0 [ 886.427483][T11983] ? __d_alloc+0x37/0x6f0 [ 886.427515][T11983] __d_alloc+0x37/0x6f0 [ 886.427540][T11983] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 886.427656][T11983] d_alloc_pseudo+0x21/0xc0 [ 886.427692][T11983] alloc_path_pseudo+0x107/0x220 [ 886.427732][T11983] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 886.427778][T11983] alloc_file_pseudo_noaccount+0xad/0x2b0 [ 886.427819][T11983] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 886.427852][T11983] ? iput+0x456/0xf00 [ 886.427888][T11983] bdev_file_open_by_dev+0x181/0x240 [ 886.427925][T11983] setup_bdev_super+0x5a/0x680 [ 886.427957][T11983] get_tree_bdev_flags+0x388/0x4f0 [ 886.427986][T11983] ? __pfx_bfs_fill_super+0x10/0x10 [ 886.428026][T11983] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 886.428057][T11983] ? safesetid_security_capable+0xa9/0x1a0 [ 886.428090][T11983] vfs_get_tree+0x92/0x2a0 [ 886.428120][T11983] do_new_mount+0x319/0xdc0 [ 886.428142][T11983] ? cap_capable+0x123/0x460 [ 886.428176][T11983] ? __pfx_do_new_mount+0x10/0x10 [ 886.428203][T11983] ? ns_capable+0x89/0xe0 [ 886.428237][T11983] ? path_mount+0x647/0x1050 [ 886.428277][T11983] ? user_path_at+0xd4/0x160 [ 886.428305][T11983] __se_sys_mount+0x31d/0x420 [ 886.428336][T11983] ? __pfx___se_sys_mount+0x10/0x10 [ 886.428366][T11983] ? __x64_sys_mount+0x20/0xc0 [ 886.428392][T11983] do_syscall_64+0x166/0x520 [ 886.428419][T11983] ? trace_irq_disable+0x3b/0x140 [ 886.428448][T11983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.428471][T11983] ? clear_bhb_loop+0x70/0xc0 [ 886.428500][T11983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.428525][T11983] RIP: 0033:0x7f93ee31e159 [ 886.428548][T11983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.428569][T11983] RSP: 002b:00007f93ec576028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 886.428594][T11983] RAX: ffffffffffffffda RBX: 00007f93ee5a5fa0 RCX: 00007f93ee31e159 [ 886.428612][T11983] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 886.428629][T11983] RBP: 00007f93ee3b5024 R08: 0000000000000000 R09: 0000000000000000 [ 886.428644][T11983] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 886.428659][T11983] R13: 00007f93ee5a6038 R14: 00007f93ee5a5fa0 R15: 00007ffea0ff2b98 [ 886.428705][T11983] [ 886.440320][T11983] /dev/nullb0: Can't open blockdev [ 886.927039][ T3328] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.131825][T10771] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.140792][T10771] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.140834][T10771] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.573840][T12010] netlink: 'syz.8.1359': attribute type 1 has an invalid length. [ 889.257883][T12013] veth3: entered allmulticast mode [ 889.478201][T12006] bond1: (slave veth0_to_bond): making interface the new active one [ 889.565923][T12035] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1368'. [ 889.583244][T12006] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 889.634301][T12016] macvlan2: entered promiscuous mode [ 889.644008][T12016] macvlan2: entered allmulticast mode [ 889.644930][T12016] bond1: entered promiscuous mode [ 889.644950][T12016] veth0_to_bond: entered promiscuous mode [ 889.678411][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1368'. [ 889.709446][T12016] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 889.712552][T12016] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 889.810695][T12016] bond1: left promiscuous mode [ 889.810769][T12016] veth0_to_bond: left promiscuous mode [ 890.185151][T12037] bridge0: port 3(vxlan0) entered blocking state [ 890.190138][T12037] bridge0: port 3(vxlan0) entered disabled state [ 890.190374][T12037] vxlan0: entered allmulticast mode [ 890.219711][T12037] vxlan0: entered promiscuous mode [ 890.236562][T12035] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 890.265981][T12035] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 890.808816][T10982] bridge_slave_1: left allmulticast mode [ 890.874344][T10982] bridge_slave_1: left promiscuous mode [ 890.874630][T10982] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.082199][T12048] Driver unsupported XDP return value 0 on prog (id 88) dev N/A, expect packet loss! [ 891.350901][T10982] bridge_slave_0: left allmulticast mode [ 891.351014][T10982] bridge_slave_0: left promiscuous mode [ 891.351729][T10982] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.207749][T10982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.297926][T10982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.352805][T10982] bond0 (unregistering): Released all slaves [ 894.550224][T12088] overlayfs: conflicting options: nfs_export=on,index=off [ 894.559314][T10982] hsr_slave_0: left promiscuous mode [ 894.618718][T10982] hsr_slave_1: left promiscuous mode [ 894.625187][T10982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.661438][T10982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.847509][T10982] veth0_macvtap: left promiscuous mode [ 894.854057][T10982] veth1_vlan: left promiscuous mode [ 894.875647][T10982] veth0_vlan: left promiscuous mode [ 895.105452][T12097] syz.8.1387 (12097) used greatest stack depth: 18120 bytes left [ 896.339837][T12124] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1395'. [ 896.569311][T12127] overlayfs: conflicting options: nfs_export=on,index=off [ 898.130549][T10982] team0 (unregistering): Port device team_slave_1 removed [ 898.262508][T10982] team0 (unregistering): Port device team_slave_0 removed [ 898.650178][ T5244] 8021q: adding VLAN 0 to HW filter on device eth3 [ 899.894769][T12163] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1404'. [ 900.275498][T12168] overlayfs: conflicting options: nfs_export=on,index=off [ 904.889771][T12213] fuse: Unknown parameter 'use00000000000000000000' [ 905.199227][T12193] bond0: (slave batadv0): Releasing backup interface [ 905.409497][T12193] bridge_slave_0: left allmulticast mode [ 905.410801][T12193] bridge_slave_0: left promiscuous mode [ 905.411621][T12193] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.447457][T12218] overlayfs: conflicting options: nfs_export=on,index=off [ 905.740788][T12193] bridge_slave_1: left allmulticast mode [ 905.740872][T12193] bridge_slave_1: left promiscuous mode [ 905.741139][T12193] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.131357][T12193] bond1: (slave veth0_to_bond): Releasing active interface [ 906.216152][T12193] bond0: (slave bond_slave_0): Releasing backup interface [ 906.298172][T12193] bond0: (slave bond_slave_1): Releasing backup interface [ 906.382302][T12193] team0: Port device team_slave_0 removed [ 906.435230][T12193] team0: Port device team_slave_1 removed [ 906.441795][T12193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 906.441976][T12193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.479785][T12193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 906.479887][T12193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.519698][T12193] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 908.679990][T12265] overlayfs: conflicting options: nfs_export=on,index=off [ 910.674615][T12279] syz.7.1432 (12279) used greatest stack depth: 18088 bytes left [ 910.886887][T10500] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 911.046827][T10500] usb 9-1: Using ep0 maxpacket: 32 [ 911.335698][T10500] usb 9-1: unable to get BOS descriptor or descriptor too short [ 911.343603][T10500] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 911.354909][T10500] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 911.356607][T10500] usb 9-1: can't read configurations, error -71 [ 911.958414][T11647] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 912.305235][T12310] overlayfs: conflicting options: nfs_export=on,index=off [ 912.334725][T11647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 912.421719][T11647] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 915.122623][T11647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 915.823117][T11685] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 915.855846][T11685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 915.903331][T11685] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 916.094665][T11685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 916.118901][T11685] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 916.193274][T11685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 916.208995][T11685] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 916.393921][ T5588] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 916.442405][ T5588] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 916.464649][ T5588] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 916.470581][ T5588] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 916.472270][ T5588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 916.566204][T11685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 916.614190][T12335] netlink: 'syz.8.1443': attribute type 13 has an invalid length. [ 918.102037][T12365] siw: device registration error -23 [ 918.559760][T10164] Bluetooth: hci6: command 0x0406 tx timeout [ 918.573913][T11685] kthread_run failed with err -4 [ 918.609045][T12378] netlink: 'syz.7.1451': attribute type 39 has an invalid length. [ 918.692028][ T5588] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 918.768311][ T5588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 918.772448][ T5588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 918.811871][ T5588] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 918.824413][ T5588] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 919.127735][T10164] Bluetooth: hci0: command tx timeout [ 919.947357][T12389] tipc: Enabling of bearer rejected, already enabled [ 920.685566][T12410] netlink: 'syz.9.1461': attribute type 16 has an invalid length. [ 920.697013][T12410] netlink: 'syz.9.1461': attribute type 1 has an invalid length. [ 920.697034][T12410] netlink: 120 bytes leftover after parsing attributes in process `syz.9.1461'. [ 921.037399][T10164] Bluetooth: hci2: command tx timeout [ 921.196992][T10164] Bluetooth: hci0: command tx timeout [ 922.710099][T12441] netlink: 'syz.9.1470': attribute type 16 has an invalid length. [ 922.710223][T12441] netlink: 'syz.9.1470': attribute type 1 has an invalid length. [ 922.710243][T12441] netlink: 120 bytes leftover after parsing attributes in process `syz.9.1470'. [ 923.117058][T10164] Bluetooth: hci2: command tx timeout [ 923.286881][T10164] Bluetooth: hci0: command tx timeout [ 923.334306][T12457] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1475'. [ 923.658073][T12464] netlink: 'syz.8.1479': attribute type 16 has an invalid length. [ 923.666184][T12464] netlink: 'syz.8.1479': attribute type 1 has an invalid length. [ 923.666206][T12464] netlink: 120 bytes leftover after parsing attributes in process `syz.8.1479'. [ 923.926878][ T5916] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 924.796857][ T5916] usb 10-1: Using ep0 maxpacket: 32 [ 924.945412][ T5916] usb 10-1: unable to get BOS descriptor or descriptor too short [ 924.955104][ T5916] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 924.976977][ T5916] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 924.980491][ T5916] usb 10-1: can't read configurations, error -71 [ 925.196939][T10164] Bluetooth: hci2: command tx timeout [ 925.361076][T10164] Bluetooth: hci0: command tx timeout [ 927.007869][T12504] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1493'. [ 927.277807][T10164] Bluetooth: hci2: command tx timeout [ 927.676892][T10050] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 927.838608][T10050] usb 9-1: Using ep0 maxpacket: 32 [ 927.862329][T10050] usb 9-1: unable to get BOS descriptor or descriptor too short [ 927.867123][T10050] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 927.876909][T10050] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 927.876948][T10050] usb 9-1: can't read configurations, error -71 [ 927.936944][T10982] bridge_slave_1: left allmulticast mode [ 927.942898][T10982] bridge_slave_1: left promiscuous mode [ 927.943245][T10982] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.089054][T10982] bridge_slave_0: left allmulticast mode [ 928.090767][T10982] bridge_slave_0: left promiscuous mode [ 928.091278][T10982] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.547946][T12536] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1504'. [ 928.857815][T10982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 928.958278][T10982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.069546][T10982] bond0 (unregistering): Released all slaves [ 929.295760][T12379] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.295983][T12379] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.296166][T12379] bridge_slave_0: entered allmulticast mode [ 929.303588][T12379] bridge_slave_0: entered promiscuous mode [ 929.432467][T12379] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.441072][T12379] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.441318][T12379] bridge_slave_1: entered allmulticast mode [ 929.467840][T12379] bridge_slave_1: entered promiscuous mode [ 929.482502][T12339] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.482762][T12339] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.483305][T12339] bridge_slave_0: entered allmulticast mode [ 929.507322][T12339] bridge_slave_0: entered promiscuous mode [ 929.679078][T12339] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.679539][T12339] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.680089][T12339] bridge_slave_1: entered allmulticast mode [ 929.700796][T12339] bridge_slave_1: entered promiscuous mode [ 929.904626][T12379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.136959][T10982] hsr_slave_0: left promiscuous mode [ 930.176967][T10982] hsr_slave_1: left promiscuous mode [ 930.180215][T10982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.198812][T10982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.059710][T12566] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1515'. [ 931.140051][T10982] team0 (unregistering): Port device team_slave_1 removed [ 931.198615][T10982] team0 (unregistering): Port device team_slave_0 removed [ 931.471389][T12379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.483262][T12339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.802996][T12569] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1516'. [ 931.839525][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.871700][T12339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.075690][T12581] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1520'. [ 932.079716][T12379] team0: Port device team_slave_0 added [ 932.294698][T12379] team0: Port device team_slave_1 added [ 932.308355][T12339] team0: Port device team_slave_0 added [ 932.317937][T12585] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1524'. [ 932.427393][T12339] team0: Port device team_slave_1 added [ 933.138368][T12379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.138443][T12379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.138516][T12379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.229582][T12379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.229664][T12379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.229698][T12379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.268623][T12339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.268683][T12339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.268761][T12339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.509487][T12339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.509558][T12339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.509589][T12339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.985272][T12379] hsr_slave_0: entered promiscuous mode [ 933.990569][T12379] hsr_slave_1: entered promiscuous mode [ 934.010528][T12339] hsr_slave_0: entered promiscuous mode [ 934.017868][T12339] hsr_slave_1: entered promiscuous mode [ 934.024649][T12339] debugfs: 'hsr0' already exists in 'hsr' [ 934.024679][T12339] Cannot create hsr debugfs directory [ 934.127446][ T5244] 8021q: adding VLAN 0 to HW filter on device eth1 [ 934.672938][T12627] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1530'. [ 934.805423][T12632] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1535'. [ 934.944758][T12635] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1534'. [ 935.932538][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1540'. [ 936.570767][T12656] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1544'. [ 936.788209][T12658] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1545'. [ 936.895634][T12654] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1543'. [ 938.987437][T12696] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1553'. [ 939.040726][ T5588] Bluetooth: hci1: command 0x0406 tx timeout [ 939.276233][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1554'. [ 939.639984][ T5244] 8021q: adding VLAN 0 to HW filter on device eth2 [ 941.008732][ T1573] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 941.073565][T12734] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1564'. [ 941.206820][ T1573] usb 10-1: Using ep0 maxpacket: 32 [ 941.355048][ T1573] usb 10-1: unable to get BOS descriptor or descriptor too short [ 941.355169][ T1573] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 941.356153][ T1573] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 941.356191][ T1573] usb 10-1: can't read configurations, error -71 [ 941.653691][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1567'. [ 942.314575][T12763] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1573'. [ 943.513026][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1577'. [ 944.796945][ T5916] page_pool_release_retry() stalled pool shutdown: id 127, 1 inflight 60 sec [ 944.987247][ T5716] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 945.147051][ T5716] usb 8-1: Using ep0 maxpacket: 8 [ 945.158107][ T5716] usb 8-1: unable to get BOS descriptor or descriptor too short [ 945.158772][ T5716] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 945.194289][ T5716] usb 8-1: config 4 interface 0 has no altsetting 0 [ 945.209435][ T5716] usb 8-1: string descriptor 0 read error: -22 [ 945.209689][ T5716] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 945.248164][ T5716] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 945.285417][ T5716] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 945.290067][ T5716] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 945.290172][ T5716] usb 8-1: media controller created [ 945.332426][T12813] v: renamed from veth0_vlan (while UP) [ 945.354650][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 945.463775][T12815] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1583'. [ 945.700419][ T5716] zl10353_read_register: readreg error (reg=127, ret==0) [ 945.888166][T12821] siw: device registration error -23 [ 945.958982][ T5716] usb 8-1: USB disconnect, device number 2 [ 946.498711][T10982] bridge_slave_1: left allmulticast mode [ 946.498814][T10982] bridge_slave_1: left promiscuous mode [ 946.499127][T10982] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.652233][T10982] bridge_slave_0: left allmulticast mode [ 946.658910][T10982] bridge_slave_0: left promiscuous mode [ 946.659198][T10982] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.884768][T12837] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1592'. [ 947.065820][T12840] siw: device registration error -23 [ 947.207811][T12840] smbdirect: ib_dev[s`z1] renamed to [syz0] [ 947.350975][T10982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.428283][T10982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.437115][ T1573] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 947.502515][T10982] bond0 (unregistering): Released all slaves [ 947.678580][ T1573] usb 8-1: Using ep0 maxpacket: 8 [ 947.689038][ T1573] usb 8-1: unable to get BOS descriptor or descriptor too short [ 947.689246][ T1573] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 947.709137][ T1573] usb 8-1: config 4 interface 0 has no altsetting 0 [ 947.719626][ T1573] usb 8-1: string descriptor 0 read error: -22 [ 947.719963][ T1573] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 948.010912][ T1573] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 948.418782][ T1573] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 948.421506][ T1573] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 948.421662][ T1573] usb 8-1: media controller created [ 948.605179][ T1573] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 948.626878][T10050] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 948.757966][ T1573] zl10353_read_register: readreg error (reg=127, ret==0) [ 948.766906][T10050] usb 9-1: device descriptor read/64, error -71 [ 948.833605][T12864] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1601'. [ 949.011792][ T1573] usb 8-1: USB disconnect, device number 3 [ 949.106832][T10050] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 949.266803][T10050] usb 9-1: device descriptor read/64, error -71 [ 949.298026][T10982] hsr_slave_0: left promiscuous mode [ 949.337429][T10982] hsr_slave_1: left promiscuous mode [ 949.342905][T10982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.377493][T10050] usb usb9-port1: attempt power cycle [ 949.405428][T10982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.766964][T10050] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 949.800818][T10050] usb 9-1: device descriptor read/8, error -71 [ 949.926186][T10982] team0 (unregistering): Port device team_slave_1 removed [ 949.979958][T10982] team0 (unregistering): Port device team_slave_0 removed [ 950.037124][T10050] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 950.068173][T10050] usb 9-1: device descriptor read/8, error -71 [ 950.177219][T10050] usb usb9-port1: unable to enumerate USB device [ 950.368871][ T5244] 8021q: adding VLAN 0 to HW filter on device eth2 [ 952.282702][T12911] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1610'. [ 952.607672][ T1573] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 952.887767][ T1573] usb 9-1: Using ep0 maxpacket: 8 [ 952.903561][ T1573] usb 9-1: unable to get BOS descriptor or descriptor too short [ 952.903714][ T1573] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 952.910140][ T1573] usb 9-1: config 4 interface 0 has no altsetting 0 [ 952.932398][ T1573] usb 9-1: string descriptor 0 read error: -22 [ 952.932708][ T1573] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 953.098488][ T1573] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 953.126125][ T1573] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 953.222411][ T1573] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 953.222571][ T1573] usb 9-1: media controller created [ 953.397229][ T1573] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 953.689939][ T1573] zl10353_read_register: readreg error (reg=127, ret==0) [ 954.034371][ T1573] usb 9-1: USB disconnect, device number 10 [ 954.336907][T10500] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 954.466945][T10500] usb 10-1: device descriptor read/64, error -71 [ 954.736843][T10500] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 954.876814][T10500] usb 10-1: device descriptor read/64, error -71 [ 955.012762][T10500] usb usb10-port1: attempt power cycle [ 955.388690][T10500] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 955.417645][T10500] usb 10-1: device descriptor read/8, error -71 [ 955.656871][T10500] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 955.681608][T10500] usb 10-1: device descriptor read/8, error -71 [ 955.797274][T10500] usb usb10-port1: unable to enumerate USB device [ 955.885558][T12339] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 955.940699][T12339] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 955.962692][T12339] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 956.020769][T12339] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 956.034269][T12339] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 956.094274][T12339] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 956.210241][T12339] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 956.231715][T12339] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 956.861567][T12379] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 956.931590][T12379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 956.956630][T12379] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 957.140979][T12379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 957.151313][T12379] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 957.301971][T12379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 957.325886][T12379] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 957.369780][T12379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 957.444598][T12339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.584274][T12339] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.622904][T10982] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.631305][T10982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.706422][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.708928][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.070905][T12379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.222521][T12379] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.256019][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.256304][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.298209][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.298537][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.897426][ T5916] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 960.056940][ T5916] usb 10-1: device descriptor read/64, error -71 [ 960.252954][T12339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.356930][ T5916] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 960.526906][ T5916] usb 10-1: device descriptor read/64, error -71 [ 960.639517][ T5916] usb usb10-port1: attempt power cycle [ 961.010113][ T5916] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 961.024166][T12379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.031832][ T5916] usb 10-1: device descriptor read/8, error -71 [ 961.287787][ T5916] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 961.315626][ T5916] usb 10-1: device descriptor read/8, error -71 [ 961.473391][ T5916] usb usb10-port1: unable to enumerate USB device [ 961.496970][T12339] veth0_vlan: entered promiscuous mode [ 961.594765][T12339] veth1_vlan: entered promiscuous mode [ 961.898871][T12339] veth0_macvtap: entered promiscuous mode [ 961.986201][T12339] veth1_macvtap: entered promiscuous mode [ 962.146423][T12339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.392393][T12339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.604583][T12379] veth0_vlan: entered promiscuous mode [ 964.192347][T12379] veth1_vlan: entered promiscuous mode [ 964.621895][ T1506] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.652066][ T1506] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.683788][ T1506] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.400825][T12379] veth0_macvtap: entered promiscuous mode [ 965.419972][ T1506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.420779][ T1506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.457063][ T1573] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 965.593219][T12379] veth1_macvtap: entered promiscuous mode [ 965.636882][ T1573] usb 8-1: device descriptor read/64, error -71 [ 965.733832][T13115] tipc: Enabled bearer , priority 0 [ 965.755146][T12470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.755241][T12470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.831622][T12379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.877541][ T1573] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 965.950452][T12379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.166827][ T1573] usb 8-1: device descriptor read/64, error -71 [ 966.328326][ T1573] usb usb8-port1: attempt power cycle [ 967.301376][T13128] bridge0: port 3(vxlan0) entered blocking state [ 967.329438][ T1573] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 967.330776][T13128] bridge0: port 3(vxlan0) entered disabled state [ 967.331021][T13128] vxlan0: entered allmulticast mode [ 967.346411][T13128] vxlan0: entered promiscuous mode [ 967.349208][ T1573] usb 8-1: device descriptor read/8, error -71 [ 967.599389][ T1573] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 967.640041][ T1573] usb 8-1: device descriptor read/8, error -71 [ 967.789904][ T1573] usb usb8-port1: unable to enumerate USB device [ 967.850967][T13132] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 967.860759][T13132] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 968.188264][ T1188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.188840][ T1188] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.284546][T13144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 968.388795][T13142] tipc: Enabling of bearer rejected, failed to enable media [ 968.428002][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.428086][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.686980][ T4129] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.699394][ T4129] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.710081][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.176218][T13130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.176293][T13130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.748216][T13182] tipc: Enabling of bearer rejected, failed to enable media [ 974.085683][T13190] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1679'. [ 975.426441][T13225] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1688'. [ 975.824713][T13237] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1688'. [ 975.824806][T13237] netlink: 'syz.9.1688': attribute type 9 has an invalid length. [ 977.678239][ T5773] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 977.898291][ T5773] usb 10-1: Using ep0 maxpacket: 32 [ 978.360744][T13318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1712'. [ 978.437952][ T5773] usb 10-1: unable to get BOS descriptor or descriptor too short [ 978.438131][ T5773] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 978.439207][ T5773] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 978.439247][ T5773] usb 10-1: can't read configurations, error -71 [ 978.611245][ T12] IPVS: starting estimator thread 0... [ 978.717384][T13324] IPVS: using max 9 ests per chain, 21600 per kthread [ 979.130449][T13321] syzkaller0: entered promiscuous mode [ 979.130471][T13321] syzkaller0: entered allmulticast mode [ 981.970484][T13393] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1732'. [ 982.109334][ T67] IPVS: starting estimator thread 0... [ 982.192970][T13394] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 982.262642][T13395] IPVS: using max 8 ests per chain, 19200 per kthread [ 982.355924][T13400] netlink: 'syz.4.1735': attribute type 1 has an invalid length. [ 982.368404][T13400] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1735'. [ 982.368436][T13400] netlink: 'syz.4.1735': attribute type 2 has an invalid length. [ 982.368446][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'. [ 984.150084][T13425] bridge_slave_0: left allmulticast mode [ 984.150189][T13425] bridge_slave_0: left promiscuous mode [ 984.151257][T13425] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.413396][T13425] bridge_slave_1: left allmulticast mode [ 984.421056][T13425] bridge_slave_1: left promiscuous mode [ 984.421344][T13425] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.618958][T13425] bond0: (slave bond_slave_0): Releasing backup interface [ 984.708159][T13425] bond0: (slave bond_slave_1): Releasing backup interface [ 984.794841][T13425] team0: Port device team_slave_0 removed [ 984.843828][T13425] team0: Port device team_slave_1 removed [ 984.864423][T13425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.864460][T13425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.914795][T13425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.914904][T13425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.965146][T13425] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 985.354816][ T5773] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 985.508684][ T5773] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 985.521542][ T5773] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 985.521576][ T5773] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.521598][ T5773] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 985.521650][ T5773] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 985.549655][ T5773] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 985.549703][ T5773] usb 10-1: Product: syz [ 985.549720][ T5773] usb 10-1: Manufacturer: syz [ 985.632709][ T5773] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 985.895845][T13467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.897405][T13467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.384140][T10049] usb 10-1: USB disconnect, device number 16 [ 986.594663][T13490] fuse: Bad value for 'fd' [ 986.916204][T13485] bridge_slave_0: left allmulticast mode [ 986.916377][T13485] bridge_slave_0: left promiscuous mode [ 986.920385][T13485] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.294107][T13485] bridge_slave_1: left allmulticast mode [ 987.299412][T13485] bridge_slave_1: left promiscuous mode [ 987.299988][T13485] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.523359][T13485] bond0: (slave bond_slave_0): Releasing backup interface [ 987.646917][T13485] bond0: (slave bond_slave_1): Releasing backup interface [ 987.748542][T13485] team0: Port device team_slave_0 removed [ 987.808450][T13485] team0: Port device team_slave_1 removed [ 987.823762][T13485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.832916][T13485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.865592][T13485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.874909][T13485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.899584][T13485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 988.950874][T13538] fuse: Bad value for 'fd' [ 989.272286][ T5773] hid-generic 0005:0008:0009.0001: item fetching failed at offset 2/3 [ 989.347687][ T5773] hid-generic 0005:0008:0009.0001: probe with driver hid-generic failed with error -22 [ 989.882671][T13544] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 990.323022][T13555] syz_tun: entered promiscuous mode [ 990.405854][T13555] vlan2: entered promiscuous mode [ 991.150008][T13577] fuse: Bad value for 'fd' [ 991.548946][ T5773] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 991.720821][ T5773] usb 7-1: Using ep0 maxpacket: 8 [ 991.727700][ T5773] usb 7-1: unable to get BOS descriptor or descriptor too short [ 991.731242][ T5773] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 991.740256][ T5773] usb 7-1: config 4 interface 0 has no altsetting 0 [ 991.818046][ T5773] usb 7-1: string descriptor 0 read error: -22 [ 991.832376][ T1573] hid-generic 0005:0008:0009.0002: item fetching failed at offset 2/3 [ 991.841505][ T1573] hid-generic 0005:0008:0009.0002: probe with driver hid-generic failed with error -22 [ 991.874732][ T5773] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 992.111673][ T5773] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 992.183478][ T5773] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 992.201762][ T5773] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 992.308597][ T5773] usb 7-1: media controller created [ 992.482210][ T5773] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 992.601026][ T5773] zl10353_read_register: readreg error (reg=127, ret==0) [ 992.674006][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'. [ 993.028314][ T5773] usb 7-1: USB disconnect, device number 2 [ 993.190917][T13613] syz_tun: entered promiscuous mode [ 993.217056][T13613] vlan2: entered promiscuous mode [ 993.293764][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.585716][T13626] fuse: Bad value for 'fd' [ 993.910982][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1822'. [ 995.414007][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1835'. [ 996.091414][T13683] fuse: Bad value for 'fd' [ 996.280443][T13689] 8021q: VLANs not supported on ip6tnl0 [ 998.229305][T13712] netlink: 'syz.4.1853': attribute type 13 has an invalid length. [ 998.577318][T13726] fuse: Invalid rootmode [ 999.546884][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1862'. [ 999.693910][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1862'. [ 1001.043132][T13771] fuse: Invalid rootmode [ 1002.964576][T13791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1880'. [ 1003.077937][T13794] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1882'. [ 1003.308626][T13802] fuse: Invalid rootmode [ 1003.964484][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1895'. [ 1004.003595][T13825] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1894'. [ 1004.016228][T13825] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1894'. [ 1004.016259][T13825] netlink: 'syz.4.1894': attribute type 9 has an invalid length. [ 1004.041549][T13825] syzkaller0: entered promiscuous mode [ 1004.047189][T13825] syzkaller0: entered allmulticast mode [ 1004.051573][T13825] tipc: Started in network mode [ 1004.051610][T13825] tipc: Node identity b2e16d93f134, cluster identity 4711 [ 1004.051858][T13825] tipc: Enabled bearer , priority 0 [ 1004.227763][T13822] tipc: Resetting bearer [ 1005.605335][T13822] tipc: Disabling bearer [ 1005.795432][ T5709] tipc: Node number set to 1138060691 [ 1006.075739][T13860] fuse: Bad value for 'rootmode' [ 1006.362773][T13866] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1909'. [ 1006.443105][T13869] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1910'. [ 1007.340656][T13887] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1917'. [ 1007.449631][T13886] netlink: 240 bytes leftover after parsing attributes in process `syz.8.1917'. [ 1007.449663][T13886] netlink: 'syz.8.1917': attribute type 9 has an invalid length. [ 1007.462262][T13886] tipc: Enabling of bearer rejected, already enabled [ 1008.016077][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1924'. [ 1008.205739][T13908] fuse: Bad value for 'rootmode' [ 1008.293764][T13911] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1928'. [ 1008.520507][T13917] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1929'. [ 1008.885158][T13927] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1931'. [ 1009.090040][T13923] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1931'. [ 1009.100715][T13923] netlink: 'syz.7.1931': attribute type 9 has an invalid length. [ 1009.106442][T13923] syzkaller0: entered promiscuous mode [ 1009.106475][T13923] syzkaller0: entered allmulticast mode [ 1010.407974][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1937'. [ 1011.571435][T13982] __nla_validate_parse: 1 callbacks suppressed [ 1011.578398][T13982] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1948'. [ 1012.726345][T13980] tipc: Enabling of bearer rejected, already enabled [ 1012.897505][T13997] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1952'. [ 1013.088860][T14001] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1953'. [ 1015.595229][T14041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.609725][T14042] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1963'. [ 1015.869717][T14052] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1963'. [ 1015.869818][T14052] netlink: 'syz.6.1963': attribute type 9 has an invalid length. [ 1016.131525][ T6096] IPVS: starting estimator thread 0... [ 1016.155517][T14048] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1965'. [ 1016.236878][T14067] IPVS: using max 8 ests per chain, 19200 per kthread [ 1016.366063][T14052] tipc: Started in network mode [ 1016.371806][T14052] tipc: Node identity de2dc888225f, cluster identity 4711 [ 1016.371988][T14052] tipc: Enabled bearer , priority 0 [ 1016.489482][T14035] tipc: Disabling bearer [ 1018.409173][T14102] FAULT_INJECTION: forcing a failure. [ 1018.409173][T14102] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.409216][T14102] CPU: 1 UID: 0 PID: 14102 Comm: syz.9.1982 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1018.409246][T14102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1018.409261][T14102] Call Trace: [ 1018.409271][T14102] [ 1018.409282][T14102] dump_stack_lvl+0xe8/0x150 [ 1018.409326][T14102] should_fail_ex+0x46b/0x600 [ 1018.409358][T14102] should_failslab+0xa8/0x100 [ 1018.409396][T14102] __kmalloc_noprof+0xfb/0x790 [ 1018.409428][T14102] ? io_cache_alloc_new+0x40/0x100 [ 1018.409455][T14102] ? io_cache_alloc_new+0x40/0x100 [ 1018.409492][T14102] io_cache_alloc_new+0x40/0x100 [ 1018.409523][T14102] io_arm_apoll+0x45c/0x910 [ 1018.409564][T14102] ? __pfx_io_arm_apoll+0x10/0x10 [ 1018.409604][T14102] ? __io_issue_sqe+0x207/0x4d0 [ 1018.409636][T14102] ? io_arm_poll_handler+0x20e/0x2a0 [ 1018.409685][T14102] io_queue_async+0x18b/0x2e0 [ 1018.409724][T14102] io_submit_sqes+0x1125/0x2310 [ 1018.409790][T14102] __se_sys_io_uring_enter+0x364/0x1bb0 [ 1018.409821][T14102] ? up_write+0x5a/0x190 [ 1018.409855][T14102] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1018.409880][T14102] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1018.409921][T14102] ? rcu_is_watching+0x16/0xb0 [ 1018.409970][T14102] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1018.410005][T14102] do_syscall_64+0x166/0x520 [ 1018.410032][T14102] ? trace_irq_disable+0x3b/0x140 [ 1018.410063][T14102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.410086][T14102] ? clear_bhb_loop+0x70/0xc0 [ 1018.410115][T14102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.410139][T14102] RIP: 0033:0x7f93ee31e159 [ 1018.410160][T14102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.410181][T14102] RSP: 002b:00007f93ec575f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1018.410208][T14102] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f93ee31e159 [ 1018.410226][T14102] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000d [ 1018.410240][T14102] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000008 [ 1018.410254][T14102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000a80 [ 1018.410270][T14102] R13: 0000200000000a88 R14: 00000000000003c9 R15: 0000000000000000 [ 1018.410305][T14102] [ 1018.714786][T14109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1984'. [ 1018.954114][T14115] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1984'. [ 1018.954204][T14115] netlink: 'syz.4.1984': attribute type 9 has an invalid length. [ 1019.668715][T14120] syzkaller0: entered promiscuous mode [ 1019.668814][T14120] syzkaller0: entered allmulticast mode [ 1019.672041][T14124] tipc: Enabled bearer , priority 0 [ 1019.712002][T14104] tipc: Resetting bearer [ 1019.784324][T14128] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1988'. [ 1019.882406][T14104] tipc: Disabling bearer [ 1021.432891][T14153] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1999'. [ 1021.450406][T14155] fuse: Bad value for 'fd' [ 1021.827421][T14163] gretap0: entered promiscuous mode [ 1021.841707][T14163] macsec1: entered promiscuous mode [ 1021.877548][T14163] gretap0: left promiscuous mode [ 1021.959408][T14173] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2004'. [ 1022.384937][T14185] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2006'. [ 1024.862864][T14190] sch_fq: defrate 2 ignored. [ 1025.249654][T14201] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1025.314752][T14181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1025.724285][T14207] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2012'. [ 1025.756162][T14213] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2013'. [ 1025.891961][T14216] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2013'. [ 1026.849607][T14245] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2023'. [ 1026.999039][T14253] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2024'. [ 1027.093173][T14258] syz.9.2027 (14258) used greatest stack depth: 17040 bytes left [ 1027.190501][T14263] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2024'. [ 1027.201123][T14263] netlink: 'syz.6.2024': attribute type 9 has an invalid length. [ 1027.500812][T14248] tipc: Enabled bearer , priority 0 [ 1027.629448][T14274] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2030'. [ 1027.722363][T14277] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2031'. [ 1027.773832][T14278] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2031'. [ 1027.783411][T14268] syzkaller0: entered promiscuous mode [ 1027.783432][T14268] syzkaller0: entered allmulticast mode [ 1027.827106][T14244] tipc: Resetting bearer [ 1028.049970][T14244] tipc: Disabling bearer [ 1029.043506][T14313] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2042'. [ 1030.116261][T14353] Bluetooth: MGMT ver 1.23 [ 1030.637937][T14360] bridge_slave_0: left allmulticast mode [ 1030.646129][T14360] bridge_slave_0: left promiscuous mode [ 1030.673184][T14360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.039602][T14360] bridge_slave_1: left allmulticast mode [ 1031.054144][T14360] bridge_slave_1: left promiscuous mode [ 1031.054424][T14360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.678273][T14360] bond0: (slave bond_slave_0): Releasing backup interface [ 1031.781126][T14360] bond0: (slave bond_slave_1): Releasing backup interface [ 1031.844925][T14384] __nla_validate_parse: 3 callbacks suppressed [ 1031.852364][T14384] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2062'. [ 1031.878227][T14360] team0: Port device team_slave_0 removed [ 1031.899647][T14385] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2062'. [ 1031.940110][T14360] team0: Port device team_slave_1 removed [ 1031.948124][T14360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.955683][T14360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.991440][T14360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.991547][T14360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.032065][T14360] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1041.450160][T10164] Bluetooth: hci0: command 0x0406 tx timeout [ 1041.864334][T14426] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2076'. [ 1041.925886][T14427] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2076'. [ 1055.733376][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1068.701689][T10164] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1068.761329][T10164] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1068.780417][T10164] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1068.972657][T10164] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1068.992464][T10164] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1069.706483][T10164] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1069.893874][T10164] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1070.125542][T10164] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1070.309249][T10164] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1070.399995][T10164] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1070.908966][ T5588] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1071.010959][ T5588] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1071.027613][ T5588] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1071.051239][ T5588] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1071.063511][ T5588] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1071.215257][ T5588] Bluetooth: hci3: command tx timeout [ 1072.346001][ T5588] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1072.430612][ T5588] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1072.449018][ T5588] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1072.487556][ T5588] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1072.537210][ T5588] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1072.639845][ T5588] Bluetooth: hci4: command tx timeout [ 1073.528781][T10164] Bluetooth: hci3: command tx timeout [ 1073.757115][T10164] Bluetooth: hci7: command tx timeout [ 1073.937866][ T5588] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1074.002886][ T5588] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1074.107940][ T5588] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1074.117098][ T5588] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1074.129779][ T5588] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1074.717273][T10164] Bluetooth: hci4: command tx timeout [ 1075.596885][ T5588] Bluetooth: hci8: command tx timeout [ 1075.611112][T10164] Bluetooth: hci3: command tx timeout [ 1075.879598][T10164] Bluetooth: hci7: command tx timeout [ 1076.156947][T10164] Bluetooth: hci9: command tx timeout [ 1076.796887][T10164] Bluetooth: hci4: command tx timeout [ 1077.676817][T10164] Bluetooth: hci8: command tx timeout [ 1077.757294][T10164] Bluetooth: hci3: command tx timeout [ 1077.916838][T10164] Bluetooth: hci7: command tx timeout [ 1078.236884][T10164] Bluetooth: hci9: command tx timeout [ 1078.879967][T10164] Bluetooth: hci4: command tx timeout [ 1079.756798][T10164] Bluetooth: hci8: command tx timeout [ 1079.996813][T10164] Bluetooth: hci7: command tx timeout [ 1080.319550][T10164] Bluetooth: hci9: command tx timeout [ 1082.006162][T10164] Bluetooth: hci8: command tx timeout [ 1082.574755][T10164] Bluetooth: hci9: command tx timeout [ 1116.160287][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1135.575096][ T5588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1135.638567][ T5588] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1135.655483][ T5588] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1135.676951][ T5588] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1135.703508][ T5588] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1137.842530][ T5588] Bluetooth: hci6: command tx timeout [ 1139.631124][T10164] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1139.707982][T10164] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1139.728861][T10164] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1139.739671][T10164] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1139.749706][T10164] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1139.916986][ T5588] Bluetooth: hci6: command tx timeout [ 1140.913818][T10164] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1140.972580][T10164] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1141.704490][T10164] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1141.720298][T10164] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1141.742326][T10164] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1141.996795][ T5588] Bluetooth: hci6: command tx timeout [ 1142.236947][ T5588] Bluetooth: hci10: command tx timeout [ 1142.429883][T10164] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1142.544253][T10164] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1142.553454][T10164] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1142.569109][T10164] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1143.191229][T10164] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1143.996751][ T5588] Bluetooth: hci11: command tx timeout [ 1144.086760][ T5588] Bluetooth: hci6: command tx timeout [ 1144.317388][T10164] Bluetooth: hci10: command tx timeout [ 1144.671897][T10164] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1144.732919][T10164] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1144.755180][T10164] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1144.803968][T10164] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1144.812201][T10164] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1146.076946][ T5588] Bluetooth: hci12: command tx timeout [ 1146.084152][ T5588] Bluetooth: hci11: command tx timeout [ 1146.516273][ T5588] Bluetooth: hci10: command tx timeout [ 1146.877704][ T5588] Bluetooth: hci13: command tx timeout [ 1148.186789][ T5588] Bluetooth: hci12: command tx timeout [ 1148.193943][T10801] Bluetooth: hci11: command tx timeout [ 1148.561676][T10801] Bluetooth: hci10: command tx timeout [ 1148.966584][T10801] Bluetooth: hci13: command tx timeout [ 1149.596763][T10801] Bluetooth: hci2: command 0x0406 tx timeout [ 1150.236792][T10801] Bluetooth: hci11: command tx timeout [ 1150.236862][ T5588] Bluetooth: hci12: command tx timeout [ 1151.036708][T10801] Bluetooth: hci13: command tx timeout [ 1152.316781][T10801] Bluetooth: hci12: command tx timeout [ 1153.135612][T10164] Bluetooth: hci13: command tx timeout [ 1177.599287][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1195.558573][T10164] Bluetooth: hci4: command 0x0406 tx timeout [ 1195.558667][T10164] Bluetooth: hci3: command 0x0406 tx timeout [ 1195.558698][T10164] Bluetooth: hci7: command 0x0406 tx timeout [ 1202.650591][T14549] Bluetooth: hci9: command tx timeout [ 1202.653439][T14551] Bluetooth: hci8: command 0x0406 tx timeout [ 1205.757001][ T38] INFO: task syz.4.2083:14454 blocked for more than 143 seconds. [ 1205.764908][ T38] Not tainted syzkaller #0 [ 1205.764926][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1205.764939][ T38] task:syz.4.2083 state:D stack:28504 pid:14454 tgid:14449 ppid:12379 task_flags:0x400140 flags:0x00080002 [ 1205.765016][ T38] Call Trace: [ 1205.765026][ T38] [ 1205.765043][ T38] __schedule+0x16d9/0x5700 [ 1205.765094][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1205.765134][ T38] ? __pfx___schedule+0x10/0x10 [ 1205.765182][ T38] rt_mutex_schedule+0x76/0xf0 [ 1205.765212][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1205.765264][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1205.765303][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1205.765338][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1205.765394][ T38] ? devinet_ioctl+0x2fb/0x1c50 [ 1205.765429][ T38] ? devinet_ioctl+0x2fb/0x1c50 [ 1205.765454][ T38] mutex_lock_nested+0x168/0x1d0 [ 1205.765494][ T38] devinet_ioctl+0x2fb/0x1c50 [ 1205.765535][ T38] ? __pfx_devinet_ioctl+0x10/0x10 [ 1205.765569][ T38] ? get_user_ifreq+0x12b/0x180 [ 1205.765607][ T38] inet_ioctl+0x42a/0x560 [ 1205.765642][ T38] ? __pfx_inet_ioctl+0x10/0x10 [ 1205.765706][ T38] ? packet_ioctl+0x27f/0x370 [ 1205.765735][ T38] sock_do_ioctl+0x101/0x320 [ 1205.765763][ T38] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1205.765784][ T38] ? hook_file_ioctl+0x1f5/0x610 [ 1205.765823][ T38] ? __asan_memset+0x22/0x50 [ 1205.765851][ T38] ? smack_file_ioctl+0x265/0x370 [ 1205.765881][ T38] sock_ioctl+0x57d/0x7f0 [ 1205.765906][ T38] ? __pfx_sock_ioctl+0x10/0x10 [ 1205.765931][ T38] ? __fget_files+0x2a/0x420 [ 1205.765953][ T38] ? __fget_files+0x3a8/0x420 [ 1205.765975][ T38] ? __fget_files+0x2a/0x420 [ 1205.766002][ T38] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1205.766027][ T38] ? __pfx_sock_ioctl+0x10/0x10 [ 1205.766051][ T38] __se_sys_ioctl+0xff/0x170 [ 1205.766084][ T38] do_syscall_64+0x166/0x520 [ 1205.766112][ T38] ? trace_irq_disable+0x3b/0x140 [ 1205.766141][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.766172][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1205.766202][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.766227][ T38] RIP: 0033:0x7f8495c1e159 [ 1205.766249][ T38] RSP: 002b:00007f8493e55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1205.766273][ T38] RAX: ffffffffffffffda RBX: 00007f8495ea6090 RCX: 00007f8495c1e159 [ 1205.766291][ T38] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000004 [ 1205.766307][ T38] RBP: 00007f8495cb5024 R08: 0000000000000000 R09: 0000000000000000 [ 1205.766322][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1205.766337][ T38] R13: 00007f8495ea6128 R14: 00007f8495ea6090 R15: 00007ffe0049ea08 [ 1205.766374][ T38] [ 1205.766386][ T38] INFO: task syz.6.2084:14453 blocked for more than 143 seconds. [ 1205.766403][ T38] Not tainted syzkaller #0 [ 1205.766415][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1205.766426][ T38] task:syz.6.2084 state:D stack:27720 pid:14453 tgid:14450 ppid:12339 task_flags:0x400140 flags:0x00080002 [ 1205.766495][ T38] Call Trace: [ 1205.766502][ T38] [ 1205.766516][ T38] __schedule+0x16d9/0x5700 [ 1206.301101][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1206.301168][ T38] ? __pfx___schedule+0x10/0x10 [ 1206.301219][ T38] rt_mutex_schedule+0x76/0xf0 [ 1206.301252][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1206.301305][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1206.301343][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1206.301380][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1206.301434][ T38] ? xsk_bind+0x13a/0x11d0 [ 1206.301572][ T38] ? xsk_bind+0x13a/0x11d0 [ 1206.301606][ T38] mutex_lock_nested+0x168/0x1d0 [ 1206.301647][ T38] xsk_bind+0x13a/0x11d0 [ 1206.301684][ T38] ? hook_socket_bind+0x1ba/0x290 [ 1206.301711][ T38] ? bpf_lsm_socket_bind+0x9/0x20 [ 1206.301750][ T38] __sys_bind+0x2e9/0x410 [ 1206.301782][ T38] ? __pfx___sys_bind+0x10/0x10 [ 1206.301822][ T38] ? rcu_is_watching+0x16/0xb0 [ 1206.301867][ T38] __x64_sys_bind+0x7a/0x90 [ 1206.301897][ T38] do_syscall_64+0x166/0x520 [ 1206.301925][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.301951][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1206.301981][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.302005][ T38] RIP: 0033:0x7fdbaaa2e159 [ 1206.302027][ T38] RSP: 002b:00007fdba8c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1206.302053][ T38] RAX: ffffffffffffffda RBX: 00007fdbaacb5fa0 RCX: 00007fdbaaa2e159 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1206.302070][ T38] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000007 [ 1206.302086][ T38] RBP: 00007fdbaaac5024 R08: 0000000000000000 R09: 0000000000000000 [ 1206.302101][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1206.302116][ T38] R13: 00007fdbaacb6038 R14: 00007fdbaacb5fa0 R15: 00007ffe6a34b798 [ 1206.302153][ T38] [ 1206.353364][ T38] INFO: task syz.9.2086:14465 blocked for more than 143 seconds. [ 1206.353388][ T38] Not tainted syzkaller #0 [ 1206.353401][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1206.353411][ T38] task:syz.9.2086 state:D stack:27728 pid:14465 tgid:14464 ppid:11062 task_flags:0x400140 flags:0x00080002 [ 1206.353483][ T38] Call Trace: [ 1206.353493][ T38] [ 1206.353509][ T38] __schedule+0x16d9/0x5700 [ 1206.353559][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1206.353599][ T38] ? __pfx___schedule+0x10/0x10 [ 1206.353641][ T38] rt_mutex_schedule+0x76/0xf0 [ 1206.446706][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1206.446774][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1206.446815][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1206.446853][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1206.446919][ T38] ? register_netdevice_notifier_net+0x1a/0xa0 [ 1206.446948][ T38] mutex_lock_nested+0x168/0x1d0 [ 1206.446980][ T38] ? net_generic+0x1e/0x240 [ 1206.447020][ T38] register_netdevice_notifier_net+0x1a/0xa0 [ 1206.447054][ T38] ops_init+0x35d/0x5d0 [ 1206.447095][ T38] setup_net+0x118/0x350 [ 1206.447125][ T38] ? __pfx_setup_net+0x10/0x10 [ 1206.447157][ T38] ? __ns_common_init+0x2fc/0x4a0 [ 1206.447203][ T38] copy_net_ns+0x53b/0x780 [ 1206.447235][ T38] create_new_namespaces+0x3f0/0x6b0 [ 1206.447271][ T38] ? security_capable+0x7e/0x2c0 [ 1206.447308][ T38] unshare_nsproxy_namespaces+0x149/0x190 [ 1206.447345][ T38] ksys_unshare+0x5a7/0x950 [ 1206.447388][ T38] ? __pfx_ksys_unshare+0x10/0x10 [ 1206.447423][ T38] ? rcu_is_watching+0x16/0xb0 [ 1206.447469][ T38] __x64_sys_unshare+0x38/0x50 [ 1206.447505][ T38] do_syscall_64+0x166/0x520 [ 1206.447532][ T38] ? trace_irq_disable+0x3b/0x140 [ 1206.447562][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.447586][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1206.447616][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.447640][ T38] RIP: 0033:0x7f93ee31e159 [ 1206.447661][ T38] RSP: 002b:00007f93ec576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1206.447687][ T38] RAX: ffffffffffffffda RBX: 00007f93ee5a5fa0 RCX: 00007f93ee31e159 [ 1206.447706][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1206.447720][ T38] RBP: 00007f93ee3b5024 R08: 0000000000000000 R09: 0000000000000000 [ 1206.447736][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1206.447750][ T38] R13: 00007f93ee5a6038 R14: 00007f93ee5a5fa0 R15: 00007ffea0ff2b98 [ 1206.447788][ T38] [ 1206.447829][ T38] [ 1206.447829][ T38] Showing all locks held in the system: [ 1206.447918][ T38] locks held by ksoftirqd/0/15: 5, last CPU#0: [ 1206.447968][ T38] #0: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1206.448059][ T38] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1206.448142][ T38] #2: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x882/0xc50 [ 1206.599566][ T38] #3: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 1206.599637][ T38] #4: ffff8880b8624548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 1206.599708][ T38] locks held by pr/ttyS0/17: 2, last CPU#0: [ 1206.599726][ T38] #0: ffffffff8e09d578 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1206.599794][ T38] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1206.599867][ T38] locks held by rcuc/1/28: 3, last CPU#1: [ 1206.599884][ T38] #0: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1206.599949][ T38] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 1206.600009][ T38] #2: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 1206.600077][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 1206.600094][ T38] #0: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1206.600155][ T38] locks held by kworker/u8:2/48: 6, on CPU#0: [ 1206.600173][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.600239][ T38] #1: ffffc90000ba7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.600315][ T38] #2: ffff88802556a310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1206.600381][ T38] #3: ffff88803b1d2d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1206.600440][ T38] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1206.600506][ T38] #5: ffff8880b8637350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 1206.600573][ T38] locks held by kworker/u8:4/66: 6, on CPU#0: [ 1206.600591][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.600654][ T38] #1: ffffc9000151fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.600720][ T38] #2: ffff888059168310 (&devlink->lock_key#22){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1206.600784][ T38] #3: ffff888061e90920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1206.600839][ T38] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1206.600907][ T38] #5: ffff8880b8637350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 1206.750614][ T38] locks held by kworker/u8:6/749: 6, on CPU#0: [ 1206.750633][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.750702][ T38] #1: ffffc900057d7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.750772][ T38] #2: ffff88801b75e310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1206.750837][ T38] #3: ffff888032a38520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1206.750896][ T38] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1206.750965][ T38] #5: ffff8880b8637350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 1206.751036][ T38] locks held by kworker/u8:8/1110: 6, on CPU#0: [ 1206.751053][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.751119][ T38] #1: ffffc900062efc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.751187][ T38] #2: ffff8880222c2310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1206.751250][ T38] #3: ffff88803b90b520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1206.751314][ T38] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1206.751380][ T38] #5: ffff8880b8637350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 1206.751447][ T38] locks held by kworker/u8:10/1506: 3, last CPU#0: [ 1206.751465][ T38] #0: ffff888032f4e138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.751531][ T38] #1: ffffc90006ebfc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.751598][ T38] #2: ffff8880371e61c0 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xcf/0xf90 [ 1206.751743][ T38] locks held by kworker/u8:11/3328: 4, last CPU#1: [ 1206.751762][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.751827][ T38] #1: ffffc9001013fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.751896][ T38] #2: ffff8880591e08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1206.916314][ T38] #3: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1206.916397][ T38] locks held by kworker/u8:12/4129: 6, on CPU#0: [ 1206.916415][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.916479][ T38] #1: ffffc90010affc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.916724][ T38] #2: ffff8880333dc310 (&devlink->lock_key#17){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1206.916801][ T38] #3: ffff8880223f9d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1206.916858][ T38] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1206.916924][ T38] #5: ffff8880b8637350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 1206.916991][ T38] locks held by klogd/4938: 1, last CPU#0: [ 1206.917007][ T38] #0: ffffffff8e1b5b78 (syslog_lock){+.+.}-{4:4}, at: syslog_print+0x4ad/0x610 [ 1206.917074][ T38] locks held by getty/5335: 2, on CPU#0: [ 1206.917091][ T38] #0: ffff8880366e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1206.917158][ T38] #1: ffffc900044bb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1206.917220][ T38] locks held by syz-executor/5569: 1, last CPU#0: [ 1206.917237][ T38] #0: ffff8880339b9f30 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1206.917302][ T38] locks held by kworker/u8:13/5784: 6, on CPU#0: [ 1206.917318][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.917383][ T38] #1: ffffc90005c47c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.917458][ T38] #2: ffff888062082310 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1206.917521][ T38] #3: ffff88803ab2d520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1206.917585][ T38] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1206.917649][ T38] #5: ffff8880b8637350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 1206.917711][ T38] locks held by kworker/u8:14/5785: 7, last CPU#1: [ 1206.917728][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1206.917809][ T38] #1: ffffc90005bd7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.105968][ T38] #2: ffff8880b87262d8 (&base->lock){-...}-{2:2}, at: __mod_timer+0x922/0xf10 [ 1207.106047][ T38] #3: ffffffff99d9da60 (&obj_hash[i].lock){-...}-{2:2}, at: debug_object_activate+0xa8/0x3b0 [ 1207.106110][ T38] #4: ffff88805f1e28e0 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 1207.106177][ T38] #5: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1207.106237][ T38] #6: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1207.106303][ T38] locks held by kworker/1:7/5857: 3, last CPU#1: [ 1207.106322][ T38] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.106387][ T38] #1: ffffc90005be7c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.106450][ T38] #2: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1207.106516][ T38] locks held by kworker/u8:16/6096: 3, on CPU#0: [ 1207.108181][ T38] #0: ffff88802b72d938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.108251][ T38] #1: ffffc9000616fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.108318][ T38] #2: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1207.108386][ T38] locks held by kworker/0:1/7882: 3, last CPU#0: [ 1207.108404][ T38] #0: ffff8880616f1138 ((wq_completion)wg-kex-wg1#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.108474][ T38] #1: ffffc9000676fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.108562][ T38] #2: ffff88804c66d7b8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 1207.108626][ T38] locks held by kworker/u9:0/10164: 4, last CPU#1: [ 1207.108643][ T38] #0: ffff88803786f938 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.108707][ T38] #1: ffffc90004c67c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.108773][ T38] #2: ffff88805f170f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1207.108932][ T38] #3: ffff88805f1700b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1207.325467][ T38] locks held by kworker/u8:1/10771: 4, on CPU#0: [ 1207.325496][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.325582][ T38] #1: ffffc90005a77c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.325657][ T38] #2: ffff888087ce08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1207.325735][ T38] #3: ffff8880b8629410 ((lock)#3){+.+.}-{3:3}, at: kcov_remote_start+0xeb/0x730 [ 1207.325812][ T38] locks held by syz-executor/10811: 1, on CPU#1: [ 1207.325831][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1207.325902][ T38] locks held by kworker/u8:3/10982: 6, on CPU#0: [ 1207.325921][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.325995][ T38] #1: ffffc90004b57c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.326079][ T38] #2: ffff888060b1c310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1207.326150][ T38] #3: ffff88805f1e2920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1207.326216][ T38] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1207.326292][ T38] #5: ffff88813ffbad58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x5a0 [ 1207.326366][ T38] locks held by kworker/u8:7/12470: 6, on CPU#0: [ 1207.326384][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.326458][ T38] #1: ffffc900044d7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.382448][ T38] #2: ffff888062082310 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1207.382539][ T38] #3: ffff88803ab2d520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1207.382607][ T38] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1207.382685][ T38] #5: ffff88813ffbad58 (&n->list_lock){+.+.}-{3:3}, at: get_page_from_freelist+0xc5f/0x2600 [ 1207.618895][ T38] locks held by kworker/u8:15/13130: 6, on CPU#0: [ 1207.618915][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.618987][ T38] #1: ffffc90008277c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.619055][ T38] #2: ffff88801b75e310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1207.619127][ T38] #3: ffff888032a38520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1207.619185][ T38] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1207.619254][ T38] #5: ffff88813fffc2d8 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xc5f/0x2600 [ 1207.619321][ T38] locks held by kworker/u8:18/13773: 3, on CPU#1: [ 1207.619338][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.619401][ T38] #1: ffffc90005987c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1207.619466][ T38] #2: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1207.619536][ T38] locks held by syz.8.2080/14441: 1, on CPU#0: [ 1207.619552][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1207.619613][ T38] locks held by syz.4.2083/14452: 1, on CPU#0: [ 1207.619630][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1207.619691][ T38] locks held by syz.4.2083/14454: 1, on CPU#0: [ 1207.619707][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 1207.619768][ T38] locks held by syz.6.2084/14453: 1, on CPU#0: [ 1207.619785][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: xsk_bind+0x13a/0x11d0 [ 1207.619856][ T38] locks held by syz.9.2086/14465: 2, on CPU#0: [ 1207.619873][ T38] #0: ffffffff8f5c3200 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 1207.619932][ T38] #1: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1207.619996][ T38] locks held by syz-executor/14477: 1, on CPU#0: [ 1207.620012][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1207.620081][ T38] locks held by syz-executor/14481: 1, on CPU#0: [ 1207.620099][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1207.620169][ T38] locks held by syz-executor/14485: 1, on CPU#0: [ 1207.620191][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1207.620258][ T38] locks held by syz-executor/14488: 1, on CPU#0: [ 1207.820503][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1207.820592][ T38] locks held by syz-executor/14493: 1, on CPU#0: [ 1207.820610][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1207.820677][ T38] locks held by syz-executor/14513: 1, on CPU#0: [ 1207.820694][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1207.820759][ T38] locks held by syz-executor/14520: 1, on CPU#0: [ 1207.820776][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1207.820842][ T38] locks held by syz-executor/14523: 1, on CPU#0: [ 1207.820859][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1207.820924][ T38] locks held by syz-executor/14531: 1, on CPU#0: [ 1207.820941][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1207.821007][ T38] locks held by syz-executor/14537: 1, on CPU#0: [ 1207.821025][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1207.821099][ T38] locks held by syz-executor/14550: 9, last CPU#0: [ 1207.821116][ T38] #0: ffffffff8e29eaf0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 1207.821181][ T38] #1: ffff88805d1bba30 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18e/0x1d80 [ 1207.821243][ T38] #2: ffff88803e300430 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x27d/0x1d80 [ 1207.821310][ T38] #3: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1207.821368][ T38] #4: ffff88802b893598 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1207.821432][ T38] #5: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1207.821499][ T38] #6: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1207.821558][ T38] #7: ffff88802a87a7d8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x569/0x58f0 [ 1207.821632][ T38] #8: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1e0/0x400 [ 1207.821701][ T38] locks held by syz-executor/14553: 4, last CPU#0: [ 1207.821718][ T38] #0: ffff8880321fba30 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 1207.821773][ T38] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1207.821830][ T38] #2: ffff88802b8937d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1207.821895][ T38] #3: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 1207.949752][ T38] locks held by syz-executor/14555: 1, last CPU#0: [ 1207.949772][ T38] #0: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1207.949839][ T38] locks held by syz-executor/14556: 1, last CPU#0: [ 1207.949856][ T38] #0: ffffffff8e310ff0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1207.949921][ T38] [ 1207.949928][ T38] ============================================= [ 1207.949928][ T38] [ 1207.949939][ T38] NMI backtrace for cpu 0 [ 1207.949960][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1207.949991][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1207.950006][ T38] Call Trace: [ 1207.950015][ T38] [ 1207.950032][ T38] dump_stack_lvl+0xe8/0x150 [ 1207.950074][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1207.950224][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1207.950265][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1207.950303][ T38] sys_info+0x135/0x170 [ 1207.950333][ T38] watchdog+0xfd7/0x1030 [ 1207.950370][ T38] ? watchdog+0x1c7/0x1030 [ 1207.950406][ T38] kthread+0x38b/0x470 [ 1207.950431][ T38] ? __pfx_watchdog+0x10/0x10 [ 1207.950458][ T38] ? __pfx_kthread+0x10/0x10 [ 1207.950484][ T38] ret_from_fork+0x514/0xb70 [ 1207.950509][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1207.950532][ T38] ? __switch_to+0xc89/0x1420 [ 1207.950566][ T38] ? __pfx_kthread+0x10/0x10 [ 1207.950591][ T38] ret_from_fork_asm+0x1a/0x30 [ 1207.950631][ T38] [ 1207.950640][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1207.950676][ C1] NMI backtrace for cpu 1 [ 1207.950691][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1207.950712][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1207.950724][ C1] RIP: 0010:check_preemption_disabled+0x1/0xd0 [ 1207.950752][ C1] Code: 20 22 cc 8b 48 c7 c6 60 22 cc 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 2b ce 4e 07 65 48 8b 0d fb cd 4e 07 85 c9 [ 1207.950768][ C1] RSP: 0018:ffffc90000a3fc50 EFLAGS: 00000046 [ 1207.950785][ C1] RAX: ffffffff81b7102c RBX: 0000011924424420 RCX: ffff88801d683e80 [ 1207.950799][ C1] RDX: 0000000000000000 RSI: ffffffff8b700aa0 RDI: ffffffff8bcc2280 [ 1207.950813][ C1] RBP: 0000000000000001 R08: 0000000000000100 R09: 0000000000000100 [ 1207.950824][ C1] R10: dffffc0000000000 R11: fffffbfff1f63bd0 R12: 7fffffffffffffff [ 1207.950838][ C1] R13: dffffc0000000000 R14: ffff8880b8728540 R15: dffffc0000000000 [ 1207.950852][ C1] FS: 0000000000000000(0000) GS:ffff888125cd4000(0000) knlGS:0000000000000000 [ 1207.950867][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1207.950880][ C1] CR2: 00007f8d4598a791 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 1207.950897][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1207.950909][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1207.950922][ C1] Call Trace: [ 1207.950929][ C1] [ 1207.950936][ C1] tick_program_event+0x38/0x120 [ 1207.950973][ C1] hrtimer_run_softirq+0x259/0x2e0 [ 1207.950998][ C1] handle_softirqs+0x1da/0x6d0 [ 1207.951030][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1207.951058][ C1] run_ktimerd+0x6a/0x100 [ 1207.951085][ C1] smpboot_thread_fn+0x565/0xa70 [ 1207.951123][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1207.951157][ C1] kthread+0x38b/0x470 [ 1207.951175][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1207.951200][ C1] ? __pfx_kthread+0x10/0x10 [ 1207.951219][ C1] ret_from_fork+0x514/0xb70 [ 1207.951237][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1207.951255][ C1] ? __switch_to+0xc89/0x1420 [ 1207.951282][ C1] ? __pfx_kthread+0x10/0x10 [ 1207.951300][ C1] ret_from_fork_asm+0x1a/0x30 [ 1207.951326][ C1] [ 1208.092831][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1209.293147][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1209.302816][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1209.312899][ T38] Call Trace: [ 1209.316205][ T38] [ 1209.319189][ T38] vpanic+0x56d/0xa60 [ 1209.323206][ T38] ? __pfx___schedule+0x10/0x10 [ 1209.328172][ T38] ? __pfx_vpanic+0x10/0x10 [ 1209.332716][ T38] panic+0xc5/0xd0 [ 1209.336468][ T38] ? __pfx_panic+0x10/0x10 [ 1209.340905][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 1209.346400][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1209.351811][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1209.358010][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1209.364213][ T38] watchdog+0x1030/0x1030 [ 1209.368595][ T38] ? watchdog+0x1c7/0x1030 [ 1209.373067][ T38] kthread+0x38b/0x470 [ 1209.377172][ T38] ? __pfx_watchdog+0x10/0x10 [ 1209.381879][ T38] ? __pfx_kthread+0x10/0x10 [ 1209.386508][ T38] ret_from_fork+0x514/0xb70 [ 1209.391135][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1209.396283][ T38] ? __switch_to+0xc89/0x1420 [ 1209.401005][ T38] ? __pfx_kthread+0x10/0x10 [ 1209.405628][ T38] ret_from_fork_asm+0x1a/0x30 [ 1209.410450][ T38] [ 1209.414106][ T38] Kernel Offset: disabled [ 1209.418446][ T38] Rebooting in 86400 seconds..