last executing test programs: 56.841160399s ago: executing program 1 (id=2): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x802) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="000400000500000008"]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 56.812543557s ago: executing program 0 (id=1): syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) 56.521337034s ago: executing program 0 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000002c0)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000019640)={0x1, 0x0, 0x0, &(0x7f0000019680)=""/74, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000198c0)=0x1) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000019a40)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000019340)=@assoc_value={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) 56.267660306s ago: executing program 1 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000001240)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) 54.988591612s ago: executing program 0 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x36) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x5, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x2, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) 52.477979013s ago: executing program 1 (id=24): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000006000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000400"/28], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000003c0)={0x3, 0x1, 0x0, &(0x7f0000000500)=""/47, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000400)) r7 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000440)={0x1, r7}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000480)={0x1, r7}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, 0x0, 0x0) 49.170635794s ago: executing program 0 (id=25): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000740)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000007c0)={0x42, 0xfffffffc, 0x1}, 0x10) bind$tipc(r3, &(0x7f0000000800)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x4}}, 0x10) connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x2e, 0x0, 0x1e]}}, &(0x7f00000009c0)=""/4096, 0x2a, 0x1000, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000019c0)=0x2) request_key(&(0x7f0000001a00)='asymmetric\x00', 0x0, &(0x7f0000001a80)='q\xa9', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) io_setup(0x4, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r4) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x14, r5, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r4) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r4) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r6, 0xf1334f35af1741f5, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000000) 35.557785808s ago: executing program 32 (id=24): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000006000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000400"/28], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000003c0)={0x3, 0x1, 0x0, &(0x7f0000000500)=""/47, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000400)) r7 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000440)={0x1, r7}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000480)={0x1, r7}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, 0x0, 0x0) 32.868437583s ago: executing program 33 (id=25): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000740)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000007c0)={0x42, 0xfffffffc, 0x1}, 0x10) bind$tipc(r3, &(0x7f0000000800)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x4}}, 0x10) connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x2e, 0x0, 0x1e]}}, &(0x7f00000009c0)=""/4096, 0x2a, 0x1000, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000019c0)=0x2) request_key(&(0x7f0000001a00)='asymmetric\x00', 0x0, &(0x7f0000001a80)='q\xa9', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) io_setup(0x4, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r4) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x14, r5, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r4) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r4) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r6, 0xf1334f35af1741f5, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000000) 19.712468775s ago: executing program 4 (id=51): socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB]) mount(0x0, 0x0, 0x0, 0x201000c, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x498fe000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f000001fc00)=0x7) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000400)={[0x35, 0x10, 0x4100000000000004, 0x5, 0x2, 0x1004, 0x20f1, 0x0, 0x7fffffffffffb, 0x2, 0x6b, 0x36, 0x1, 0x80000000004, 0xfffffffffffffffc, 0x100000be2], 0x0, 0x3208c0}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000004c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000500)=ANY=[], 0x57) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000580)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019f6f5fe1bea02fc2dfd17e5ffff08ee030000000000000000", 0x39}], 0x1) writev(r6, &(0x7f00000005c0)=[{&(0x7f0000000600)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 18.239146704s ago: executing program 4 (id=52): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000640)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002d40)=""/102392, 0x18ff8) r4 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f000001bd40)={'ip6gre0\x00', {0x2, 0x0, @private}}) sched_setaffinity(r2, 0x47, &(0x7f000001bd80)=0x7) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) mkdir(&(0x7f000001bdc0)='dir0\x00', 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) mount(0x0, 0x0, &(0x7f000001be40)='tracefs\x00', 0x0, 0x0) dup(0xffffffffffffffff) 13.761922875s ago: executing program 3 (id=57): socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000019c00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000019d00)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000019e00)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001a200)={'bridge_slave_0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f000001a400)='./proc\x00', 0x180) mount(0x0, &(0x7f000001a440)='./proc\x00', &(0x7f000001a480)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000001a4c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f000001a500)='27', 0x2) openat$nci(0xffffffffffffff9c, &(0x7f000001a540), 0x2, 0x0) 13.266135198s ago: executing program 3 (id=58): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x6) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x8, 0x8}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}}], 0x2, 0x40008040) 12.953277034s ago: executing program 3 (id=59): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x9, 0x4) eventfd2(0xe5c, 0x80000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe79}, 0x1c) 11.518784644s ago: executing program 3 (id=61): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x485, 0x40000) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000019300), 0x0, 0x0) 11.493862957s ago: executing program 2 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000002c0)=""/102392, 0x18ff8) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000198c0)=0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000019a40)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000019340)=@assoc_value={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) 9.439220616s ago: executing program 2 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x2000000000000, 0x141002) 7.515526662s ago: executing program 4 (id=64): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r0, 0x24000080) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) syz_emit_ethernet(0x68, &(0x7f00000008c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x4]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x8e0}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000940)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000980)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000009c0)=[{&(0x7f0000000a00)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) ptrace$ARCH_GET_FS(0x1e, r1, 0x0, 0x1003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 6.991646005s ago: executing program 3 (id=65): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000040)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0x9, 0xffffffff, 0x2, 0xffffffff], [0xffdffffe, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x1, 0xffffffff}, {0x0, 0xffffffff}, {0x7, 0xffffffff}, {0x400, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000400)=0xfffffffffffffffe) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f00000002c0)={0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) 5.494026118s ago: executing program 4 (id=66): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) 5.226321217s ago: executing program 4 (id=67): socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB]) mount(0x0, 0x0, 0x0, 0x201000c, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x498fe000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000006c00)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000400)={[0x35, 0x10, 0x4100000000000004, 0x5, 0x2, 0x1004, 0x20f1, 0x0, 0x7fffffffffffb, 0x2, 0x6b, 0x36, 0x1, 0x80000000004, 0xfffffffffffffffc, 0x100000be2], 0x0, 0x3208c0}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000004c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000500)=ANY=[], 0x57) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000580)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019f6f5fe1bea02fc2dfd17e5ffff08ee030000000000000000", 0x39}], 0x1) writev(r6, &(0x7f00000005c0)=[{&(0x7f0000000600)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 2.979960992s ago: executing program 4 (id=68): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mprotect(&(0x7f000086f000/0x4000)=nil, 0x4000, 0x8) read$msr(r2, &(0x7f0000001200)=""/102392, 0x18ff8) r3 = socket(0x2, 0x3, 0x6) bind$inet6(r3, &(0x7f000001a200)={0xa, 0x4e25, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x13}, 0x1c) openat$procfs(0xffffffffffffff9c, &(0x7f000001a240)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f000001a280)=0x2, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r8, 0x2000012, 0xe, 0x0, &(0x7f00000005c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f000001a2c0)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x36, &(0x7f000001a300)=ANY=[@ANYBLOB="bbbbbbbbbbbbc59a1b746cda86dd6003000000001dfffe8000001200000000000000000000bbfe8000"/51], 0x0) syz_emit_ethernet(0xd81, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f000001a340)=0x207, 0x4) 2.799854127s ago: executing program 2 (id=69): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2801\x00', [0x300, 0x80000007, 0xffeffffc, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x9, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1fd, 0x401, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40bf, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x3]}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0) 2.567156687s ago: executing program 2 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='27', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 2.121925148s ago: executing program 2 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000002c0)=""/102392, 0x18ff8) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000198c0)=0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000019a40)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000019340)=@assoc_value={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) 113.237988ms ago: executing program 2 (id=72): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000640)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002d40)=""/102392, 0x18ff8) r4 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f000001bd40)={'ip6gre0\x00', {0x2, 0x0, @private}}) sched_setaffinity(r2, 0x47, &(0x7f000001bd80)=0x7) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) mkdir(&(0x7f000001bdc0)='dir0\x00', 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) mount(0x0, 0x0, &(0x7f000001be40)='tracefs\x00', 0x0, 0x0) dup(0xffffffffffffffff) 0s ago: executing program 3 (id=73): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x485, 0x40000) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000019300), 0x0, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 63.330032][ T5265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.367482][ T5265] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. syzkaller login: [ 84.904859][ T5590] cgroup: Unknown subsys name 'net' [ 85.136780][ T5590] cgroup: Unknown subsys name 'cpuset' [ 85.190988][ T5590] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.053651][ T5590] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.768483][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.787703][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.789275][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.793330][ T62] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.811850][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.816651][ T62] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.830536][ T62] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.833687][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.847093][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.876550][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.878870][ T62] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.904916][ T4919] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.906790][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.909435][ T4919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.913040][ T4919] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.931285][ T4919] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.932016][ T4919] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.959185][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.991968][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.017106][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.024499][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.028535][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.035145][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.126624][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.136550][ T4919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.315096][ T5601] rdma_rxe: Failed to create IPv4 UDP tunnel [ 91.334588][ T5603] rdma_rxe: Failed to create IPv4 UDP tunnel [ 91.355425][ T5604] rdma_rxe: Failed to create IPv6 UDP tunnel [ 91.381520][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.383848][ T5602] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 91.426675][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.452531][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.071970][ T5606] Bluetooth: hci3: command tx timeout [ 92.114598][ T203] cfg80211: failed to load regulatory.db [ 92.150337][ T5606] Bluetooth: hci4: command tx timeout [ 92.151191][ T4919] Bluetooth: hci2: command tx timeout [ 92.151201][ T5606] Bluetooth: hci1: command tx timeout [ 92.158130][ T5605] infiniband rxe0: set active [ 92.158149][ T5605] infiniband rxe0: added rxe_eth0 [ 92.230676][ T5618] Bluetooth: hci0: command tx timeout [ 92.242303][ T1004] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.365687][ T5605] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 92.365728][ T5605] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 92.371395][ T5605] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 92.627750][ T5605] RDS/IB: rxe0: added [ 92.632585][ T5605] smc: adding ib device rxe0 with port count 1 [ 92.644206][ T5605] smc: ib device rxe0 port 1 has no pnetid [ 92.684731][ T1004] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.720699][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.798146][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.164306][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.698318][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.699019][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.699174][ T5604] bridge_slave_0: entered allmulticast mode [ 93.722601][ T5604] bridge_slave_0: entered promiscuous mode [ 93.725109][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.800078][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.808860][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.809076][ T5604] bridge_slave_1: entered allmulticast mode [ 93.825422][ T5604] bridge_slave_1: entered promiscuous mode [ 94.018953][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.079968][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.100217][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.101830][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.101912][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.102247][ T5601] bridge_slave_0: entered allmulticast mode [ 94.107624][ T5601] bridge_slave_0: entered promiscuous mode [ 94.150302][ T5618] Bluetooth: hci3: command tx timeout [ 94.195802][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.195919][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.196070][ T5603] bridge_slave_0: entered allmulticast mode [ 94.198989][ T5603] bridge_slave_0: entered promiscuous mode [ 94.206813][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.219774][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.230904][ T5618] Bluetooth: hci2: command tx timeout [ 94.240570][ T4919] Bluetooth: hci4: command tx timeout [ 94.240920][ T5618] Bluetooth: hci1: command tx timeout [ 94.262453][ T5601] bridge_slave_1: entered allmulticast mode [ 94.265185][ T5601] bridge_slave_1: entered promiscuous mode [ 94.267267][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.267381][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.267930][ T5602] bridge_slave_0: entered allmulticast mode [ 94.302721][ T5602] bridge_slave_0: entered promiscuous mode [ 94.321161][ T5618] Bluetooth: hci0: command tx timeout [ 94.340647][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.340834][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.341000][ T5603] bridge_slave_1: entered allmulticast mode [ 94.346572][ T5603] bridge_slave_1: entered promiscuous mode [ 94.393091][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.393298][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.393461][ T5602] bridge_slave_1: entered allmulticast mode [ 94.396377][ T5602] bridge_slave_1: entered promiscuous mode [ 94.405448][ T5604] team0: Port device team_slave_0 added [ 94.543396][ T5604] team0: Port device team_slave_1 added [ 94.588451][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.624866][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.629916][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.649590][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.699000][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.725803][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.727011][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.727022][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.727047][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.818813][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.818831][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.818854][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.878367][ T5601] team0: Port device team_slave_0 added [ 94.906188][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.915190][ T5603] team0: Port device team_slave_0 added [ 94.924053][ T5601] team0: Port device team_slave_1 added [ 94.926963][ T5602] team0: Port device team_slave_0 added [ 94.943869][ T5603] team0: Port device team_slave_1 added [ 94.976072][ T5602] team0: Port device team_slave_1 added [ 95.098331][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.098349][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.098376][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.478426][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.478447][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.478477][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.493674][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.493755][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.493830][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.557112][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.557131][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.557160][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.619856][ T5604] hsr_slave_0: entered promiscuous mode [ 95.623705][ T5604] hsr_slave_1: entered promiscuous mode [ 95.632165][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.632193][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.632229][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.694767][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.694787][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.694816][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.894622][ T5601] hsr_slave_0: entered promiscuous mode [ 95.895553][ T5601] hsr_slave_1: entered promiscuous mode [ 95.896242][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 95.896274][ T5601] Cannot create hsr debugfs directory [ 95.950456][ T5603] hsr_slave_0: entered promiscuous mode [ 95.952633][ T5603] hsr_slave_1: entered promiscuous mode [ 95.953316][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 95.953335][ T5603] Cannot create hsr debugfs directory [ 95.987909][ T5602] hsr_slave_0: entered promiscuous mode [ 95.988794][ T5602] hsr_slave_1: entered promiscuous mode [ 95.989457][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 95.989481][ T5602] Cannot create hsr debugfs directory [ 96.230323][ T5618] Bluetooth: hci3: command tx timeout [ 96.310370][ T4919] Bluetooth: hci4: command tx timeout [ 96.310405][ T4919] Bluetooth: hci2: command tx timeout [ 96.310552][ T5618] Bluetooth: hci1: command tx timeout [ 96.390446][ T5618] Bluetooth: hci0: command tx timeout [ 96.953688][ T5604] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.989936][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.030496][ T5604] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.055236][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.069737][ T5604] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.094017][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.125372][ T5604] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.154123][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.233003][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.233181][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.234033][ T5605] bridge_slave_0: entered allmulticast mode [ 97.235629][ T5605] bridge_slave_0: entered promiscuous mode [ 97.277124][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.277268][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.277433][ T5605] bridge_slave_1: entered allmulticast mode [ 97.279199][ T5605] bridge_slave_1: entered promiscuous mode [ 97.372647][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.374833][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.415027][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.431835][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.435756][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.486799][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.514851][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.544408][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.582886][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.623932][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.628732][ T5605] team0: Port device team_slave_0 added [ 97.657917][ T5605] team0: Port device team_slave_1 added [ 97.755906][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.755936][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.755956][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.794607][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.794655][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.794726][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.943097][ T5602] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.975356][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.005139][ T5602] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.034720][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.049818][ T5605] hsr_slave_0: entered promiscuous mode [ 98.054701][ T5605] hsr_slave_1: entered promiscuous mode [ 98.057075][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 98.057126][ T5605] Cannot create hsr debugfs directory [ 98.066435][ T5602] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.105579][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.136401][ T5602] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.164983][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.311139][ T5618] Bluetooth: hci3: command tx timeout [ 98.390636][ T5606] Bluetooth: hci2: command tx timeout [ 98.390674][ T5606] Bluetooth: hci4: command tx timeout [ 98.390737][ T5618] Bluetooth: hci1: command tx timeout [ 98.470451][ T5618] Bluetooth: hci0: command tx timeout [ 98.508103][ T5601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.536525][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.564601][ T5601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.605453][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.624433][ T5601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.657329][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.684660][ T5601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.717279][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.863643][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.026714][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.055432][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.072515][ T5605] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.095307][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.116604][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.116760][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.153230][ T5605] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.193842][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.206141][ T5605] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.243795][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.257824][ T5605] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.283939][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.289878][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.298380][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.361906][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.428935][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.447918][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.448038][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.493093][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.493239][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.564409][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.603976][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.626737][ T1391] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.626887][ T1391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.697885][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.698069][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.839706][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.914875][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.915138][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.994325][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.994461][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.137241][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.290645][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.357270][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.358968][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.473475][ T1536] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.473852][ T1536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.823035][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.258319][ T5604] veth0_vlan: entered promiscuous mode [ 101.389433][ T5604] veth1_vlan: entered promiscuous mode [ 101.462839][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.599137][ T5604] veth0_macvtap: entered promiscuous mode [ 101.648006][ T5604] veth1_macvtap: entered promiscuous mode [ 101.717922][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.823911][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.868024][ T5603] veth0_vlan: entered promiscuous mode [ 101.903975][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.975685][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.054321][ T5603] veth1_vlan: entered promiscuous mode [ 102.257587][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.609196][ T5603] veth0_macvtap: entered promiscuous mode [ 102.664809][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.664836][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.717468][ T5603] veth1_macvtap: entered promiscuous mode [ 102.727194][ T5601] veth0_vlan: entered promiscuous mode [ 102.804571][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.804594][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.844424][ T5601] veth1_vlan: entered promiscuous mode [ 102.885862][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.889836][ T5605] veth0_vlan: entered promiscuous mode [ 102.892520][ T5602] veth0_vlan: entered promiscuous mode [ 102.935240][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.958544][ T5605] veth1_vlan: entered promiscuous mode [ 102.975286][ T5602] veth1_vlan: entered promiscuous mode [ 103.128754][ T5601] veth0_macvtap: entered promiscuous mode [ 103.167529][ T5604] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.230950][ T5601] veth1_macvtap: entered promiscuous mode [ 103.508442][ T5605] veth0_macvtap: entered promiscuous mode [ 103.536617][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.536638][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.537509][ T5602] veth0_macvtap: entered promiscuous mode [ 103.579064][ T5605] veth1_macvtap: entered promiscuous mode [ 103.643114][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.648955][ T5602] veth1_macvtap: entered promiscuous mode [ 103.722172][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.891786][ T5828] FAULT_INJECTION: forcing a failure. [ 103.891786][ T5828] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.891843][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 103.891869][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.891891][ T5828] Call Trace: [ 103.891900][ T5828] [ 103.891910][ T5828] dump_stack_lvl+0xe8/0x150 [ 103.891963][ T5828] should_fail_ex+0x447/0x5e0 [ 103.891998][ T5828] _copy_to_user+0x31/0xb0 [ 103.892031][ T5828] bpf_verifier_vlog+0x496/0x900 [ 103.892079][ T5828] __btf_verifier_log+0xe2/0x140 [ 103.892122][ T5828] ? __pfx___btf_verifier_log+0x10/0x10 [ 103.892162][ T5828] ? btf_parse_hdr+0x1da/0x810 [ 103.892200][ T5828] btf_parse_hdr+0x2bd/0x810 [ 103.892238][ T5828] btf_new_fd+0x312/0x8f0 [ 103.892268][ T5828] ? userfaultfd_unmap_complete+0x280/0x310 [ 103.892302][ T5828] __sys_bpf+0xda7/0xe00 [ 103.892338][ T5828] ? userfaultfd_unmap_complete+0x280/0x310 [ 103.892369][ T5828] ? __pfx___sys_bpf+0x10/0x10 [ 103.892396][ T5828] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 103.892430][ T5828] ? do_futex+0x3e7/0x4e0 [ 103.892462][ T5828] ? userfaultfd_unmap_complete+0x280/0x310 [ 103.892525][ T5828] ? rcu_is_watching+0x16/0xb0 [ 103.892559][ T5828] __x64_sys_bpf+0xba/0xd0 [ 103.892590][ T5828] do_syscall_64+0x166/0x520 [ 103.892616][ T5828] ? trace_irq_disable+0x3b/0x140 [ 103.892641][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.892666][ T5828] ? clear_bhb_loop+0x70/0xc0 [ 103.892695][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.892718][ T5828] RIP: 0033:0x7f263995f559 [ 103.892756][ T5828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.892776][ T5828] RSP: 002b:00007f2637bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.892801][ T5828] RAX: ffffffffffffffda RBX: 00007f2639be5fa0 RCX: 00007f263995f559 [ 103.892819][ T5828] RDX: 0000000000000028 RSI: 00002000000006c0 RDI: 0000000000000012 [ 103.892834][ T5828] RBP: 00007f26399f6b50 R08: 0000000000000000 R09: 0000000000000000 [ 103.892848][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.892863][ T5828] R13: 00007f2639be6038 R14: 00007f2639be5fa0 R15: 00007ffc87acc848 [ 103.892899][ T5828] [ 103.895051][ T1409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.895070][ T1409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.148858][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.193718][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.196770][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.294287][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.579930][ T5751] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.396426][ T1409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.396450][ T1409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.446310][ T5843] FAULT_INJECTION: forcing a failure. [ 105.446310][ T5843] name failslab, interval 1, probability 0, space 0, times 1 [ 105.446348][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.446375][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.446390][ T5843] Call Trace: [ 105.446403][ T5843] [ 105.446412][ T5843] dump_stack_lvl+0xe8/0x150 [ 105.446459][ T5843] should_fail_ex+0x447/0x5e0 [ 105.446495][ T5843] should_failslab+0xa8/0x100 [ 105.446526][ T5843] __kmalloc_noprof+0xf6/0x790 [ 105.446550][ T5843] ? handler_new_ref+0x244/0x930 [ 105.446576][ T5843] ? handler_new_ref+0x244/0x930 [ 105.446611][ T5843] handler_new_ref+0x244/0x930 [ 105.446644][ T5843] ? __pfx_v4l2_ctrl_type_op_init+0x10/0x10 [ 105.446673][ T5843] v4l2_ctrl_new+0x1395/0x1820 [ 105.446725][ T5843] v4l2_ctrl_new_std+0x24e/0x300 [ 105.446765][ T5843] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 105.446792][ T5843] ? trace_kmalloc+0x2a/0xf0 [ 105.446830][ T5843] ? v4l2_ctrl_handler_init_class+0x1a1/0x2c0 [ 105.446856][ T5843] ? __kvmalloc_node_noprof+0x5cf/0x880 [ 105.446902][ T5843] ? v4l2_ctrl_handler_init_class+0x1fb/0x2c0 [ 105.446932][ T5843] vicodec_open+0x219/0xbf0 [ 105.446970][ T5843] v4l2_open+0x1bf/0x3a0 [ 105.447004][ T5843] chrdev_open+0x4dc/0x600 [ 105.447033][ T5843] ? __pfx_chrdev_open+0x10/0x10 [ 105.447058][ T5843] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 105.447090][ T5843] ? __pfx_chrdev_open+0x10/0x10 [ 105.447115][ T5843] do_dentry_open+0x841/0x1410 [ 105.447154][ T5843] vfs_open_consume+0x4a/0x360 [ 105.447180][ T5843] ? path_openat+0x16e6/0x2100 [ 105.447205][ T5843] path_openat+0x1701/0x2100 [ 105.447247][ T5843] do_file_open+0x23e/0x4a0 [ 105.447267][ T5843] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 105.447299][ T5843] ? __pfx_do_file_open+0x10/0x10 [ 105.447346][ T5843] ? alloc_fd+0x6b2/0x760 [ 105.447388][ T5843] do_sys_openat2+0x115/0x200 [ 105.447417][ T5843] ? __se_sys_futex+0x3a8/0x450 [ 105.447448][ T5843] ? __pfx_do_sys_openat2+0x10/0x10 [ 105.447483][ T5843] ? rcu_is_watching+0x16/0xb0 [ 105.447515][ T5843] __x64_sys_openat+0x138/0x170 [ 105.447551][ T5843] do_syscall_64+0x166/0x520 [ 105.447575][ T5843] ? trace_irq_disable+0x3b/0x140 [ 105.447598][ T5843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.447622][ T5843] ? clear_bhb_loop+0x70/0xc0 [ 105.447650][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.447673][ T5843] RIP: 0033:0x7f04a6b9f559 [ 105.447694][ T5843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.447713][ T5843] RSP: 002b:00007f04a4df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.447737][ T5843] RAX: ffffffffffffffda RBX: 00007f04a6e25fa0 RCX: 00007f04a6b9f559 [ 105.447754][ T5843] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 00000000ffffff9c [ 105.447769][ T5843] RBP: 00007f04a6c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 105.447783][ T5843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.447797][ T5843] R13: 00007f04a6e26038 R14: 00007f04a6e25fa0 R15: 00007ffd3ab016f8 [ 105.447833][ T5843] [ 106.123474][ T1409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.123498][ T1409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.262200][ T1409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.262235][ T1409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.410202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.430207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.440224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.450204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.460218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.470204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.480215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.490200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.500207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.510199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.088100][ T1536] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.294643][ T152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.307147][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.436773][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.436798][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.477899][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.478349][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.478670][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.479073][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.479254][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.479462][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.721997][ T1409] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.722551][ T1409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.762745][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.762769][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.941810][ T1409] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.202192][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.202215][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.195416][ T36] audit: type=1800 audit(1793536106.347:2): pid=5871 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.16" name=08 dev="sda1" ino=2046 res=0 errno=-22 [ 111.965119][ T5882] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.021279][ T152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.021330][ T152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.121383][ T1385] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.141455][ T1385] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.144149][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.144654][ T71] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.144850][ T71] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.145102][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.695336][ T5889] sctp: [Deprecated]: syz.0.20 (pid 5889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.695336][ T5889] Use struct sctp_sack_info instead [ 113.468664][ T5883] syz.2.18 (5883) used greatest stack depth: 18008 bytes left [ 113.599464][ T5887] Zero length message leads to an empty skb [ 120.007469][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.723665][ T13] rpcbind: server 127.0.0.1 not responding, timed out [ 126.193423][ T5942] sctp: [Deprecated]: syz.3.31 (pid 5942) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.193423][ T5942] Use struct sctp_sack_info instead [ 131.705541][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 133.127743][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.136589][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.798524][ T4919] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 133.823818][ T4919] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 133.841118][ T4919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 133.861899][ T4919] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 133.869313][ T4919] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.919241][ T5618] Bluetooth: hci5: command tx timeout [ 136.435114][ T5989] FAULT_INJECTION: forcing a failure. [ 136.435114][ T5989] name failslab, interval 1, probability 5, space 0, times 0 [ 136.435162][ T5989] CPU: 1 UID: 0 PID: 5989 Comm: syz.4.38 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 136.435191][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 136.435206][ T5989] Call Trace: [ 136.435215][ T5989] [ 136.435226][ T5989] dump_stack_lvl+0xe8/0x150 [ 136.435285][ T5989] should_fail_ex+0x447/0x5e0 [ 136.435323][ T5989] should_failslab+0xa8/0x100 [ 136.435352][ T5989] ? key_alloc+0x30e/0xfe0 [ 136.435392][ T5989] kmem_cache_alloc_noprof+0x99/0x680 [ 136.435432][ T5989] ? key_alloc+0x30e/0xfe0 [ 136.435477][ T5989] key_alloc+0x30e/0xfe0 [ 136.435529][ T5989] keyring_alloc+0x45/0xb0 [ 136.435561][ T5989] lookup_user_key+0x50d/0x12c0 [ 136.435610][ T5989] ? __pfx_lookup_user_key+0x10/0x10 [ 136.435654][ T5989] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 136.435709][ T5989] ? strncpy_from_user+0x150/0x2c0 [ 136.435751][ T5989] __se_sys_add_key+0x315/0x420 [ 136.435787][ T5989] ? __pfx___se_sys_add_key+0x10/0x10 [ 136.435830][ T5989] ? __x64_sys_add_key+0x20/0xc0 [ 136.435864][ T5989] do_syscall_64+0x166/0x520 [ 136.435894][ T5989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.435920][ T5989] ? clear_bhb_loop+0x70/0xc0 [ 136.435951][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.435976][ T5989] RIP: 0033:0x7f5ee5eef559 [ 136.436003][ T5989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.436024][ T5989] RSP: 002b:00007f5ee411d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 136.436051][ T5989] RAX: ffffffffffffffda RBX: 00007f5ee6176090 RCX: 00007f5ee5eef559 [ 136.436070][ T5989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 136.436086][ T5989] RBP: 00007f5ee5f86b50 R08: ffffffffffffffff R09: 0000000000000000 [ 136.436103][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.436118][ T5989] R13: 00007f5ee6176128 R14: 00007f5ee6176090 R15: 00007fffb1499578 [ 136.436157][ T5989] [ 137.992640][ T5618] Bluetooth: hci5: command tx timeout [ 138.526015][ T4919] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.554182][ T4919] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.560587][ T4919] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.591658][ T4919] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.607840][ T4919] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.055645][ T1385] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.948245][ T1385] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.570903][ T5618] Bluetooth: hci5: command tx timeout [ 141.600281][ T5618] Bluetooth: hci3: command tx timeout [ 142.416296][ T1385] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.661616][ T5967] rxe_eth0 speed is unknown, defaulting to 1000 [ 144.272544][ T6021] sctp: [Deprecated]: syz.2.44 (pid 6021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.272544][ T6021] Use struct sctp_sack_info instead [ 144.885342][ T5618] Bluetooth: hci3: command tx timeout [ 144.885400][ T5618] Bluetooth: hci5: command tx timeout [ 145.015604][ T1385] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.868979][ T6033] FAULT_INJECTION: forcing a failure. [ 146.868979][ T6033] name failslab, interval 1, probability 5, space 0, times 0 [ 146.869005][ T6033] CPU: 1 UID: 0 PID: 6033 Comm: syz.4.48 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 146.869023][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 146.869033][ T6033] Call Trace: [ 146.869039][ T6033] [ 146.869046][ T6033] dump_stack_lvl+0xe8/0x150 [ 146.869077][ T6033] should_fail_ex+0x447/0x5e0 [ 146.869099][ T6033] ? alloc_inode+0xb8/0x1b0 [ 146.869120][ T6033] should_failslab+0xa8/0x100 [ 146.869140][ T6033] kmem_cache_alloc_lru_noprof+0x9d/0x680 [ 146.869165][ T6033] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 146.869189][ T6033] ? alloc_inode+0xb8/0x1b0 [ 146.869213][ T6033] alloc_inode+0xb8/0x1b0 [ 146.869246][ T6033] alloc_anon_inode+0x1e/0x330 [ 146.869270][ T6033] anon_inode_make_secure_inode+0x7b/0x180 [ 146.869292][ T6033] ? __pfx_anon_inode_make_secure_inode+0x10/0x10 [ 146.869318][ T6033] __anon_inode_getfile+0xce/0x210 [ 146.869340][ T6033] new_userfaultfd+0x1fb/0x3c0 [ 146.869362][ T6033] __x64_sys_userfaultfd+0x81/0xa0 [ 146.869381][ T6033] do_syscall_64+0x166/0x520 [ 146.869397][ T6033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.869412][ T6033] ? clear_bhb_loop+0x70/0xc0 [ 146.869430][ T6033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.869445][ T6033] RIP: 0033:0x7f5ee5eef559 [ 146.869458][ T6033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.869470][ T6033] RSP: 002b:00007f5ee413e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 146.869485][ T6033] RAX: ffffffffffffffda RBX: 00007f5ee6175fa0 RCX: 00007f5ee5eef559 [ 146.869496][ T6033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080801 [ 146.869505][ T6033] RBP: 00007f5ee5f86b50 R08: 0000000000000000 R09: 0000000000000000 [ 146.869514][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.869523][ T6033] R13: 00007f5ee6176038 R14: 00007f5ee6175fa0 R15: 00007fffb1499578 [ 146.869545][ T6033] [ 146.953099][ T4919] Bluetooth: hci3: command tx timeout [ 147.085797][ T5993] rxe_eth0 speed is unknown, defaulting to 1000 [ 150.176156][ T6044] netlink: 25 bytes leftover after parsing attributes in process `syz.4.51'. [ 150.181029][ T6044] netlink: 'syz.4.51': attribute type 4 has an invalid length. [ 150.184358][ T4919] Bluetooth: hci3: command tx timeout [ 150.451783][ T1385] bridge_slave_1: left allmulticast mode [ 150.484531][ T1385] bridge_slave_1: left promiscuous mode [ 150.511857][ T1385] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.697107][ T1385] bridge_slave_0: left allmulticast mode [ 152.697137][ T1385] bridge_slave_0: left promiscuous mode [ 152.718184][ T1385] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.788293][ T6065] FAULT_INJECTION: forcing a failure. [ 154.788293][ T6065] name failslab, interval 1, probability 5, space 0, times 0 [ 154.788326][ T6065] CPU: 0 UID: 0 PID: 6065 Comm: syz.3.57 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.788349][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 154.788362][ T6065] Call Trace: [ 154.788371][ T6065] [ 154.788380][ T6065] dump_stack_lvl+0xe8/0x150 [ 154.788425][ T6065] should_fail_ex+0x447/0x5e0 [ 154.788457][ T6065] should_failslab+0xa8/0x100 [ 154.788483][ T6065] __kmalloc_cache_node_noprof+0xa7/0x670 [ 154.788508][ T6065] ? init_rescuer+0x167/0x530 [ 154.788538][ T6065] ? init_rescuer+0x167/0x530 [ 154.788572][ T6065] init_rescuer+0x167/0x530 [ 154.788599][ T6065] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 154.788624][ T6065] ? rt_mutex_slowunlock+0x219/0x460 [ 154.788658][ T6065] ? __pfx_init_rescuer+0x10/0x10 [ 154.788687][ T6065] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 154.788726][ T6065] ? __alloc_workqueue+0x1cda/0x21d0 [ 154.788769][ T6065] __alloc_workqueue+0x1d85/0x21d0 [ 154.788823][ T6065] alloc_workqueue_noprof+0xe3/0x210 [ 154.788856][ T6065] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 154.788891][ T6065] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 154.788912][ T6065] nci_register_device+0x22b/0x9a0 [ 154.788940][ T6065] ? __pfx_nci_register_device+0x10/0x10 [ 154.788965][ T6065] ? __rt_spin_lock_init+0x3e/0x50 [ 154.788987][ T6065] ? __init_waitqueue_head+0xad/0x160 [ 154.789012][ T6065] virtual_ncidev_open+0x129/0x190 [ 154.789033][ T6065] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 154.789052][ T6065] misc_open+0x2de/0x350 [ 154.789074][ T6065] chrdev_open+0x4dc/0x600 [ 154.789094][ T6065] ? __pfx_chrdev_open+0x10/0x10 [ 154.789112][ T6065] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 154.789135][ T6065] ? __pfx_chrdev_open+0x10/0x10 [ 154.789152][ T6065] do_dentry_open+0x841/0x1410 [ 154.789180][ T6065] vfs_open_consume+0x4a/0x360 [ 154.789199][ T6065] ? path_openat+0x16e6/0x2100 [ 154.789216][ T6065] path_openat+0x1701/0x2100 [ 154.789246][ T6065] do_file_open+0x23e/0x4a0 [ 154.789261][ T6065] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 154.789284][ T6065] ? __pfx_do_file_open+0x10/0x10 [ 154.789317][ T6065] ? alloc_fd+0x6b2/0x760 [ 154.789347][ T6065] do_sys_openat2+0x115/0x200 [ 154.789368][ T6065] ? __se_sys_futex+0x3a8/0x450 [ 154.789390][ T6065] ? __pfx_do_sys_openat2+0x10/0x10 [ 154.789415][ T6065] ? rcu_is_watching+0x16/0xb0 [ 154.789438][ T6065] __x64_sys_openat+0x138/0x170 [ 154.789463][ T6065] do_syscall_64+0x166/0x520 [ 154.789480][ T6065] ? trace_irq_disable+0x3b/0x140 [ 154.789497][ T6065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.789514][ T6065] ? clear_bhb_loop+0x70/0xc0 [ 154.789533][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.789550][ T6065] RIP: 0033:0x7f04a6b9f559 [ 154.789565][ T6065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.789579][ T6065] RSP: 002b:00007f04a4df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 154.789596][ T6065] RAX: ffffffffffffffda RBX: 00007f04a6e25fa0 RCX: 00007f04a6b9f559 [ 154.789608][ T6065] RDX: 0000000000000002 RSI: 000020000001a540 RDI: ffffffffffffff9c [ 154.789620][ T6065] RBP: 00007f04a6c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 154.789630][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.789639][ T6065] R13: 00007f04a6e26038 R14: 00007f04a6e25fa0 R15: 00007ffd3ab016f8 [ 154.789665][ T6065] [ 154.789671][ T6065] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_cmd_wq" [ 155.272570][ T1385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.363201][ T1385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.439095][ T1385] bond0 (unregistering): Released all slaves [ 158.343762][ T6086] sctp: [Deprecated]: syz.2.62 (pid 6086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.343762][ T6086] Use struct sctp_sack_info instead [ 160.675058][ T6090] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.675142][ T6090] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 160.783794][ T6090] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 160.864537][ T6090] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 160.864602][ T6090] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 160.901170][ T6090] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 160.984373][ T6090] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 160.984446][ T6090] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.073006][ T6090] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.152511][ T6090] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 161.152571][ T6090] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 161.241304][ T6090] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 161.322802][ T6090] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.322877][ T6090] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.411410][ T6090] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.874812][ T4919] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.041815][ T4919] Bluetooth: hci4: command 0x0c1a tx timeout [ 163.191115][ T4919] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.260225][ T4919] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.544164][ T4919] Bluetooth: hci5: command 0x0c1a tx timeout [ 164.935654][ T6125] netlink: 25 bytes leftover after parsing attributes in process `syz.4.67'. [ 164.951599][ T6123] netlink: 'syz.4.67': attribute type 4 has an invalid length. [ 164.966299][ T4919] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.113376][ T4919] Bluetooth: hci4: command 0x0c1a tx timeout [ 165.297179][ T4919] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.758214][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 165.976270][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.976406][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.976582][ T5967] bridge_slave_0: entered allmulticast mode [ 165.992516][ T5967] bridge_slave_0: entered promiscuous mode [ 166.103936][ T6131] FAULT_INJECTION: forcing a failure. [ 166.103936][ T6131] name failslab, interval 1, probability 5, space 0, times 0 [ 166.103973][ T6131] CPU: 0 UID: 0 PID: 6131 Comm: syz.2.70 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 166.104001][ T6131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 166.104015][ T6131] Call Trace: [ 166.104024][ T6131] [ 166.104035][ T6131] dump_stack_lvl+0xe8/0x150 [ 166.104081][ T6131] should_fail_ex+0x447/0x5e0 [ 166.104117][ T6131] should_failslab+0xa8/0x100 [ 166.104147][ T6131] __kmalloc_cache_noprof+0x9c/0x670 [ 166.104172][ T6131] ? alloc_vfsmnt+0x6d/0x510 [ 166.104197][ T6131] ? alloc_vfsmnt+0x6d/0x510 [ 166.104229][ T6131] alloc_vfsmnt+0x6d/0x510 [ 166.104258][ T6131] clone_mnt+0x4c/0xad0 [ 166.104284][ T6131] ? get_mountpoint+0x4f0/0x530 [ 166.104311][ T6131] copy_tree+0xde/0x9a0 [ 166.104341][ T6131] ? __do_loopback+0x218/0x4b0 [ 166.104369][ T6131] do_loopback+0x34b/0x4a0 [ 166.104398][ T6131] ? bpf_lsm_capable+0x9/0x20 [ 166.104431][ T6131] ? __pfx_do_loopback+0x10/0x10 [ 166.104475][ T6131] ? user_path_at+0xd4/0x160 [ 166.104514][ T6131] __se_sys_mount+0x31d/0x420 [ 166.104552][ T6131] ? __pfx___se_sys_mount+0x10/0x10 [ 166.104593][ T6131] ? __x64_sys_mount+0x20/0xc0 [ 166.104628][ T6131] do_syscall_64+0x166/0x520 [ 166.104654][ T6131] ? trace_irq_disable+0x3b/0x140 [ 166.104679][ T6131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.104704][ T6131] ? clear_bhb_loop+0x70/0xc0 [ 166.104733][ T6131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.104757][ T6131] RIP: 0033:0x7f263995f559 [ 166.104779][ T6131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.104798][ T6131] RSP: 002b:00007f2637bb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 166.104823][ T6131] RAX: ffffffffffffffda RBX: 00007f2639be5fa0 RCX: 00007f263995f559 [ 166.104854][ T6131] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000080 [ 166.104870][ T6131] RBP: 00007f26399f6b50 R08: 0000000000000000 R09: 0000000000000000 [ 166.104885][ T6131] R10: 0000000002a05404 R11: 0000000000000246 R12: 0000000000000000 [ 166.104899][ T6131] R13: 00007f2639be6038 R14: 00007f2639be5fa0 R15: 00007ffc87acc848 [ 166.104937][ T6131] [ 166.311838][ T4919] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.405349][ T1385] hsr_slave_0: left promiscuous mode [ 166.440342][ T1385] hsr_slave_1: left promiscuous mode [ 166.444835][ T1385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.445000][ T1385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.500646][ T1385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.500676][ T1385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.797585][ T6134] sctp: [Deprecated]: syz.2.71 (pid 6134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.797585][ T6134] Use struct sctp_sack_info instead [ 167.952479][ T4919] Bluetooth: hci5: command 0x0c1a tx timeout [ 167.952530][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.952564][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout [ 167.952589][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.391141][ T4919] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.784848][ T1385] veth1_macvtap: left promiscuous mode [ 169.785085][ T1385] veth0_macvtap: left promiscuous mode [ 169.785883][ T1385] veth1_vlan: left promiscuous mode [ 169.786228][ T1385] veth0_vlan: left promiscuous mode [ 169.990255][ T4919] Bluetooth: hci5: command 0x0c1a tx timeout [ 219.470841][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.470933][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 288.910134][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 288.929789][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5907/4:b..l.. P5598/3:b..l.. [ 288.940916][ C0] rcu: (detected by 0, t=10505 jiffies, g=16797, q=355 ncpus=2) [ 288.948683][ C0] task:syz-executor state:R running task stack:23304 pid:5598 tgid:5598 ppid:5590 task_flags:0x40050c flags:0x00080002 [ 288.962250][ C0] Call Trace: [ 288.965560][ C0] [ 288.968531][ C0] __schedule+0x171d/0x56f0 [ 288.973105][ C0] ? __pfx___schedule+0x10/0x10 [ 288.977992][ C0] ? __alloc_frozen_pages_noprof+0x279/0x440 [ 288.984049][ C0] preempt_schedule_irq+0x4b/0x90 [ 288.989135][ C0] irqentry_exit+0x14f/0x9b0 [ 288.993757][ C0] ? trace_irq_disable+0x3b/0x140 [ 288.998823][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 289.004842][ C0] RIP: 0010:page_table_check_clear+0x2b8/0x540 [ 289.011055][ C0] Code: be 04 00 00 00 e8 88 d3 f8 ff 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 4d 01 00 00 45 8b 26 <31> ff 44 89 e6 e8 ae 37 86 ff 45 85 e4 0f 85 4c 02 00 00 49 8d 7e [ 289.030690][ C0] RSP: 0018:ffffc90004d57350 EFLAGS: 00000246 [ 289.036820][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: dffffc0000000000 [ 289.044830][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801e187448 [ 289.052846][ C0] RBP: ffff88801e187400 R08: ffff88801e18744b R09: 1ffff11003c30e89 [ 289.060874][ C0] R10: dffffc0000000000 R11: ffffed1003c30e8a R12: 0000000000000000 [ 289.068879][ C0] R13: 0000000000000001 R14: ffff88801e187448 R15: 000000000005ce40 [ 289.076904][ C0] ? page_table_check_clear+0x17e/0x540 [ 289.082491][ C0] __zap_vma_range+0x34c6/0x4a50 [ 289.087484][ C0] ? flush_tlb_mm_range+0x542/0x10b0 [ 289.092816][ C0] ? mas_next_node+0xbd7/0xe50 [ 289.097646][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 289.102976][ C0] ? mas_find+0x6d9/0xcb0 [ 289.107383][ C0] unmap_vmas+0x38b/0x550 [ 289.111759][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 289.116645][ C0] ? mas_next_slot+0xc94/0xd70 [ 289.121478][ C0] exit_mmap+0x290/0xa40 [ 289.125769][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 289.130567][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 289.135647][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 289.141520][ C0] ? __pfx_exit_aio+0x10/0x10 [ 289.146250][ C0] ? uprobe_clear_state+0x2a7/0x3e0 [ 289.151489][ C0] __mmput+0xcb/0x3d0 [ 289.155508][ C0] exit_mm+0x18e/0x240 [ 289.159620][ C0] do_exit+0x6a8/0x2360 [ 289.163811][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 289.169683][ C0] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 289.175010][ C0] ? __pfx_do_exit+0x10/0x10 [ 289.179645][ C0] ? reacquire_held_locks+0x117/0x1a0 [ 289.185058][ C0] ? rt_spin_lock+0x1e2/0x400 [ 289.189796][ C0] ? rt_spin_unlock+0x159/0x200 [ 289.194694][ C0] do_group_exit+0x22d/0x2f0 [ 289.199321][ C0] ? rt_spin_unlock+0x165/0x200 [ 289.204241][ C0] get_signal+0x136a/0x1430 [ 289.208812][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 289.214403][ C0] ? __pfx___x64_sys_wait4+0x10/0x10 [ 289.219718][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 289.225922][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 289.231330][ C0] ? rcu_is_watching+0x16/0xb0 [ 289.236175][ C0] do_syscall_64+0x328/0x520 [ 289.240798][ C0] ? trace_irq_disable+0x3b/0x140 [ 289.245864][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.251979][ C0] ? clear_bhb_loop+0x70/0xc0 [ 289.256700][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.262623][ C0] RIP: 0033:0x7f263991a6d7 [ 289.267072][ C0] RSP: 002b:00007ffc87accd30 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 289.275527][ C0] RAX: fffffffffffffe00 RBX: 000055555db6c500 RCX: 00007f263991a6d7 [ 289.283548][ C0] RDX: 0000000040000000 RSI: 00007ffc87accd8c RDI: ffffffffffffffff [ 289.291546][ C0] RBP: 00007ffc87accd8c R08: 0000000000000000 R09: 0000000000000000 [ 289.299564][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 289.307559][ C0] R13: 0000000000000003 R14: 00007ffc87accfe8 R15: 0000000000000000 [ 289.315580][ C0] [ 289.318623][ C0] task:kworker/0:8 state:R running task stack:24216 pid:5907 tgid:5907 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 289.332239][ C0] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 289.338348][ C0] Call Trace: [ 289.341674][ C0] [ 289.344642][ C0] __schedule+0x171d/0x56f0 [ 289.349182][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 289.354293][ C0] ? __pfx___schedule+0x10/0x10 [ 289.359217][ C0] preempt_schedule_irq+0x4b/0x90 [ 289.364276][ C0] irqentry_exit+0x14f/0x9b0 [ 289.368896][ C0] ? trace_irq_disable+0x3b/0x140 [ 289.373957][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 289.379972][ C0] RIP: 0010:ip_finish_output2+0x889/0x1100 [ 289.385821][ C0] Code: 02 00 00 0f 85 09 02 00 00 e8 93 5c f2 f7 48 8b 5c 24 48 4d 85 ff 75 07 e8 84 5c f2 f7 eb 06 e8 7d 5c f2 f7 fb 48 8b 44 24 50 <0f> b6 04 28 84 c0 0f 85 99 00 00 00 48 8b 44 24 08 44 8b 20 44 89 [ 289.405460][ C0] RSP: 0018:ffffc90005c37660 EFLAGS: 00000293 [ 289.411559][ C0] RAX: 1ffff110057cfe57 RBX: ffff88802be7f2b0 RCX: ffff888032f78000 [ 289.419564][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.427558][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.435554][ C0] R10: dffffc0000000000 R11: fffffbfff21ab298 R12: 0000000000000000 [ 289.443558][ C0] R13: ffff888061167000 R14: ffff88802be7f2c0 R15: 0000000000000200 [ 289.451582][ C0] ? ip_finish_output2+0x3de/0x1100 [ 289.456858][ C0] ip_output+0x29f/0x450 [ 289.461140][ C0] ? ip_output+0x5a/0x450 [ 289.465522][ C0] iptunnel_xmit+0x61b/0xd70 [ 289.470158][ C0] udp_tunnel_xmit_skb+0x29b/0x3e0 [ 289.475316][ C0] send4+0xa47/0xec0 [ 289.479254][ C0] ? send4+0x217/0xec0 [ 289.483373][ C0] ? __pfx_send4+0x10/0x10 [ 289.487818][ C0] ? rt_read_lock+0x2a7/0x4b0 [ 289.492552][ C0] ? rcu_is_watching+0x16/0xb0 [ 289.497350][ C0] ? __local_bh_disable_ip+0x3d/0x420 [ 289.502769][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 289.508618][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 289.514465][ C0] wg_socket_send_skb_to_peer+0xe8/0x200 [ 289.520133][ C0] wg_packet_tx_worker+0x1c3/0x7d0 [ 289.525282][ C0] ? rcu_is_watching+0x16/0xb0 [ 289.530082][ C0] ? process_scheduled_works+0x97a/0x1630 [ 289.535847][ C0] process_scheduled_works+0xc3d/0x1630 [ 289.541472][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 289.547519][ C0] ? assign_work+0x3cf/0x5d0 [ 289.552151][ C0] worker_thread+0xa47/0xfb0 [ 289.556814][ C0] ? __kthread_parkme+0x71/0x1f0 [ 289.561793][ C0] kthread+0x38b/0x470 [ 289.565905][ C0] ? __pfx_worker_thread+0x10/0x10 [ 289.571038][ C0] ? __pfx_kthread+0x10/0x10 [ 289.575670][ C0] ret_from_fork+0x514/0xb70 [ 289.580317][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 289.585471][ C0] ? __switch_to+0xc78/0x1410 [ 289.590192][ C0] ? __pfx_kthread+0x10/0x10 [ 289.594825][ C0] ret_from_fork_asm+0x1a/0x30 [ 289.599691][ C0] [ 289.602738][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10148 jiffies! g16797 f0x0 RCU_GP_WAIT_FQS(5) ->state=I [ 289.614744][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=7071 [ 289.622594][ C0] rcu: rcu_preempt kthread starved for 10151 jiffies! g16797 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=1 [ 289.633637][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 289.643635][ C0] rcu: RCU grace-period kthread stack dump: [ 289.649544][ C0] task:rcu_preempt state:I stack:27784 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 289.661515][ C0] Call Trace: [ 289.664821][ C0] [ 289.667788][ C0] __schedule+0x171d/0x56f0 [ 289.672360][ C0] ? __pfx___schedule+0x10/0x10 [ 289.677238][ C0] ? lock_acquire+0x115/0x350 [ 289.681967][ C0] ? schedule+0x90/0x2b0 [ 289.686251][ C0] schedule+0x164/0x2b0 [ 289.690442][ C0] schedule_timeout+0x152/0x2c0 [ 289.695344][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 289.700747][ C0] ? __pfx_process_timeout+0x10/0x10 [ 289.706101][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 289.711949][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 289.717547][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 289.723153][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 289.728074][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 289.733999][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 289.739324][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 289.745165][ C0] rcu_gp_kthread+0x9c/0x340 [ 289.749804][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 289.755035][ C0] ? __kthread_parkme+0x71/0x1f0 [ 289.760005][ C0] ? __kthread_parkme+0x199/0x1f0 [ 289.765064][ C0] kthread+0x38b/0x470 [ 289.769192][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 289.774422][ C0] ? __pfx_kthread+0x10/0x10 [ 289.779055][ C0] ret_from_fork+0x514/0xb70 [ 289.783687][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 289.788834][ C0] ? __switch_to+0xc78/0x1410 [ 289.793575][ C0] ? __pfx_kthread+0x10/0x10 [ 289.798205][ C0] ret_from_fork_asm+0x1a/0x30 [ 289.803023][ C0] [ 289.806085][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 289.812469][ C0] Sending NMI from CPU 0 to CPUs 1: [ 289.817707][ C1] NMI backtrace for cpu 1 [ 289.817733][ C1] CPU: 1 UID: 0 PID: 6143 Comm: syz.4.68 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 289.817767][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 289.817783][ C1] RIP: 0010:lock_release+0x93/0x3c0 [ 289.817827][ C1] Code: 0f 85 17 02 00 00 65 4c 8b 3d d1 b4 2d 12 41 83 bf 0c 0c 00 00 00 0f 85 01 02 00 00 49 81 3e a0 69 92 94 0f 84 f4 01 00 00 9c <5b> fa 48 c7 c7 a6 61 b1 8d e8 df 49 d1 09 65 ff 05 48 fd 2d 12 c7 [ 289.817842][ C1] RSP: 0018:ffffc90004f17370 EFLAGS: 00000202 [ 289.817858][ C1] RAX: 0000000000000000 RBX: ffff88801bbda588 RCX: 8000000000000001 [ 289.817872][ C1] RDX: 0000000000000001 RSI: ffffffff8bed2a60 RDI: ffffffff8bed2a20 [ 289.817884][ C1] RBP: 0000000000000002 R08: ffffffff90d594bf R09: 1ffffffff21ab297 [ 289.817897][ C1] R10: dffffc0000000000 R11: fffffbfff21ab298 R12: 1ffff110056ecc50 [ 289.817911][ C1] R13: ffffffff8b768a99 R14: ffffffff8f3c1600 R15: ffff88802b765dc0 [ 289.817925][ C1] FS: 00007f5ee413e6c0(0000) GS:ffff888124816000(0000) knlGS:0000000000000000 [ 289.817941][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.817954][ C1] CR2: 00007f5c3b368ea7 CR3: 000000003530c000 CR4: 00000000003526f0 [ 289.817970][ C1] Call Trace: [ 289.817978][ C1] [ 289.817987][ C1] ? page_pool_put_unrefed_netmem+0x74c/0xa30 [ 289.818019][ C1] rt_spin_unlock+0x165/0x200 [ 289.818049][ C1] page_pool_put_unrefed_netmem+0x74c/0xa30 [ 289.818081][ C1] dev_map_enqueue_multi+0x10c3/0x11f0 [ 289.818114][ C1] ? __pfx_dev_map_enqueue_multi+0x10/0x10 [ 289.818139][ C1] ? lock_acquire+0x115/0x350 [ 289.818166][ C1] ? pfn_valid+0x125/0x4c0 [ 289.818197][ C1] xdp_do_redirect_frame+0x4db/0x650 [ 289.818234][ C1] bpf_test_run_xdp_live+0xdf0/0x1c20 [ 289.818265][ C1] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 289.818295][ C1] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 289.818347][ C1] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 289.818376][ C1] ? _copy_from_user+0x94/0xb0 [ 289.818399][ C1] ? bpf_test_init+0x113/0x150 [ 289.818419][ C1] ? xdp_convert_md_to_buff+0x5b/0x330 [ 289.818445][ C1] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 289.818477][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 289.818503][ C1] ? __fget_files+0x2a/0x420 [ 289.818531][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 289.818555][ C1] bpf_prog_test_run+0x2cb/0x340 [ 289.818581][ C1] __sys_bpf+0xb1e/0xe00 [ 289.818606][ C1] ? vfs_read+0x7e0/0xa90 [ 289.818631][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 289.818654][ C1] ? do_futex+0x3e7/0x4e0 [ 289.818698][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 289.818720][ C1] ? rcu_is_watching+0x16/0xb0 [ 289.818744][ C1] __x64_sys_bpf+0xba/0xd0 [ 289.818765][ C1] do_syscall_64+0x166/0x520 [ 289.818784][ C1] ? trace_irq_disable+0x3b/0x140 [ 289.818802][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.818820][ C1] ? clear_bhb_loop+0x70/0xc0 [ 289.818840][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.818858][ C1] RIP: 0033:0x7f5ee5eef559 [ 289.818879][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.818893][ C1] RSP: 002b:00007f5ee413e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.818911][ C1] RAX: ffffffffffffffda RBX: 00007f5ee6175fa0 RCX: 00007f5ee5eef559 [ 289.818923][ C1] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 289.818935][ C1] RBP: 00007f5ee5f86b50 R08: 0000000000000000 R09: 0000000000000000 [ 289.818946][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.818956][ C1] R13: 00007f5ee6176038 R14: 00007f5ee6175fa0 R15: 00007fffb1499578 [ 289.818979][ C1]