last executing test programs: 10m31.6144582s ago: executing program 32 (id=1836): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x2, 0x99ea, 0x8000, 0x0, 0xc, "ccd713d13796fa5e"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000240)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x2) 10m8.381990072s ago: executing program 33 (id=1894): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0) 9m58.093368739s ago: executing program 34 (id=1921): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x40c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f00000009c0)={0x2, 0xffffffff, 0x15, 0x6, 0xaf, 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00'}) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x24040811) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0x1, 0xb}, {0x2, 0xfffd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 9m52.658725374s ago: executing program 35 (id=1934): socket$inet6(0xa, 0x2, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd", 0x7c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 9m48.937241937s ago: executing program 36 (id=1946): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x3f, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) 9m29.19742663s ago: executing program 37 (id=1984): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) write$char_usb(r4, 0x0, 0x0) close(r4) syz_usb_control_io$printer(r0, 0x0, 0x0) 7m32.930839745s ago: executing program 38 (id=2560): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000100001e026bd700402d4df2500000000", @ANYRES32=r1, @ANYBLOB="884e0600c16a010060001280110001006272696467655f736c617665000000004800058005001c0000000000050020000000000005000500000000000500190002"], 0x80}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 7m16.33966649s ago: executing program 39 (id=2567): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002580)=@gettaction={0x94, 0x32, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x83, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000013880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8008) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) recvmmsg(r3, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) 5m53.309896559s ago: executing program 4 (id=2962): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb}, {}, {0xfff1, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x24004840) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) 5m51.171801793s ago: executing program 4 (id=2966): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) sendmsg$alg(0xffffffffffffffff, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000000380)="d1cba43c1411dbe4929fc766db13623c1737458004ebe656943a7346c62269972a663b3449e22e8ccace62b621b4574a5403492c366475fe2eef555f176b19af3e478355fb0349f7000cac", 0x4b}, {&(0x7f0000000440)="edf72624750030c51fb447eca6af6c38db60fe794b807a5f9d3d86f56be1465ece88db33bbdda51e61ec8616211e5974599b2a7114caa33002e202fdba5d439c365c7c626373681079dc183ce042811c407da2d02e526007eab910cb736ef47f8abfe01d873c53de187f9b5b70764a31e79bac729706959f71ead43f64fd1ec235", 0x81}], 0x2, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELRULE={0xdc, 0x8, 0xa, 0x802, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xc0, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x138}, 0x1, 0x0, 0x0, 0x20001050}, 0x20048000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5m50.734188286s ago: executing program 4 (id=2967): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r3, r2, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xd4b, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "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"}}}}}, 0x0) 5m50.036976243s ago: executing program 4 (id=2970): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000500)={r3, 0x6, 0x4279, 0x6, 0x2, 0x5}, 0x14) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) 5m49.631318104s ago: executing program 4 (id=2973): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)={0x1c, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4606ff05a0020000000000000002003e"], 0xbe) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffff", 0x41}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) 5m46.454118668s ago: executing program 4 (id=2977): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0xde, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) 5m45.854224544s ago: executing program 40 (id=2977): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0xde, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) 5m1.281356018s ago: executing program 0 (id=3102): syz_emit_ethernet(0x9a, &(0x7f0000000a40)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x1, 0x19, 0x8c, 0x64, 0x0, 0xcc, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x3, 0x68}, @timestamp={0x44, 0x10, 0x9, 0x0, 0xa, [0x2, 0x33, 0x7c2c]}]}}, {0x4e21, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "72e3524000", "4b4450edff621723f951130e8fff0ee8", {"ffad4543128a133d1adfb08281433146", "1c5100fffeffffffffffe900"}}}}}}}, 0x0) socket$inet6(0xa, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000002060300000000000000000000000000140007800800124000000000050015000200000005000100060000000500050002000000050004000000000009"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 5m0.827995055s ago: executing program 0 (id=3106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb}, {}, {0xfff1, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x24004840) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) 4m56.026711569s ago: executing program 0 (id=3115): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r3) r8 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r8, &(0x7f0000001100)='md0\x00', 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r9, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000010000000000000000000000030000000400000000000000000000000000000000100000") ioctl(r9, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000") ioctl(r9, 0x40140921, &(0x7f0000001500)="0100000007000000010000000100000006000000") ioctl(r9, 0x40140921, &(0x7f0000001600)="0200000007000000020000000200000006000000") ioctl(r9, 0x400c0930, 0x0) ioctl(r9, 0x40140921, &(0x7f0000001700)="030000000700000003000000ffffffff02000400") 4m55.217847089s ago: executing program 0 (id=3123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002140000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 4m54.812629976s ago: executing program 0 (id=3125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb}, {}, {0xfff1, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x24004840) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x4041080) 4m52.134019678s ago: executing program 0 (id=3134): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000002060300000000000000000000000000140007800800124000000000050015000200000005000100060000000500050002000000050004000000000009"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 4m51.358450391s ago: executing program 41 (id=3134): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000002060300000000000000000000000000140007800800124000000000050015000200000005000100060000000500050002000000050004000000000009"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 2m58.599678185s ago: executing program 8 (id=3532): setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0, 0x3}, 0x8) 2m58.297067693s ago: executing program 8 (id=3534): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x8, 0x8, 0x8, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e0"], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000540)='.\x00', 0x850003d1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000480), 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, 0x0, 0x0) 2m56.506029191s ago: executing program 8 (id=3539): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000"], 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r3, 0x3, &(0x7f0000000340)={&(0x7f0000000280)=""/48, 0x30}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) sendfile(r4, r4, 0x0, 0x23) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 2m55.362203566s ago: executing program 7 (id=3542): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x1}, 0x28) 2m54.547562167s ago: executing program 8 (id=3544): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x8}]}) close(0x3) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)={0x1040, 0x4000000, 0x20000000, 0x0, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x1, 0x1, 0x1}, 0x2}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040) setsockopt$inet_mreqn(r4, 0x0, 0x25, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r9, r8, 0x4, r8}, 0x6) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f0000000000)=@srh={0x6c, 0x0, 0x4, 0x0, 0x7, 0x10}, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) 2m54.506445992s ago: executing program 7 (id=3546): unshare(0x6020400) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, 0x0) 2m54.222313205s ago: executing program 7 (id=3547): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0x101d0}], 0x1}, 0x40000000) sendmsg$tipc(r1, 0x0, 0x0) 2m53.722913921s ago: executing program 8 (id=3550): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4880) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004c8d8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x200400d1) 2m53.362727241s ago: executing program 8 (id=3554): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000041}, 0x4c005) 2m53.045489597s ago: executing program 7 (id=3556): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) close(r3) socket$nl_route(0x10, 0x3, 0x0) 2m52.377376667s ago: executing program 7 (id=3560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x143942, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) close(0x4) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 2m46.594092157s ago: executing program 7 (id=3570): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000340)={'ip_vti0\x00', r2, 0x20, 0x40, 0x0, 0xfc48, {{0x7, 0x4, 0x1, 0x8, 0x1c, 0x65, 0x0, 0x3, 0x2f, 0x0, @local, @remote, {[@noop, @timestamp={0x44, 0x4, 0x98, 0x0, 0x7}]}}}}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000400)={r5, 0x3a9817ee}, 0x8) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x20, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0x8}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x4b, 0x0, 0xad) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007ffe2001c0007800c00018008000140f60000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1e4, 0x9, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0xa6}, @IPSET_ATTR_COMMENT={0xc, 0x1a, 'ip_vti0\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0xa4, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'syzkaller1\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip_vti0\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '+$\x00'}}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8000}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20488e1}, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@fallback=r10, r3, 0x0, 0x1, r3, @void, @value=r3}, 0x20) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x2) 2m38.211144115s ago: executing program 42 (id=3554): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000041}, 0x4c005) 2m30.587595966s ago: executing program 43 (id=3570): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000340)={'ip_vti0\x00', r2, 0x20, 0x40, 0x0, 0xfc48, {{0x7, 0x4, 0x1, 0x8, 0x1c, 0x65, 0x0, 0x3, 0x2f, 0x0, @local, @remote, {[@noop, @timestamp={0x44, 0x4, 0x98, 0x0, 0x7}]}}}}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000400)={r5, 0x3a9817ee}, 0x8) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x20, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0x8}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x4b, 0x0, 0xad) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007ffe2001c0007800c00018008000140f60000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1e4, 0x9, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0xa6}, @IPSET_ATTR_COMMENT={0xc, 0x1a, 'ip_vti0\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0xa4, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'syzkaller1\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip_vti0\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '+$\x00'}}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8000}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20488e1}, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@fallback=r10, r3, 0x0, 0x1, r3, @void, @value=r3}, 0x20) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x2) 49.31472185s ago: executing program 6 (id=3984): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x40080) 48.876726549s ago: executing program 6 (id=3987): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000140)={[{@nodioread_nolock}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@data_err_ignore}]}, 0x1, 0x54e, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="b2fc991555cf4f1b83cafc8889c21fcf"}}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xff) 46.559453389s ago: executing program 6 (id=3994): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) 45.937261808s ago: executing program 6 (id=4001): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0xec774000) 43.322791s ago: executing program 6 (id=4008): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x80000001}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 38.944190786s ago: executing program 6 (id=4013): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) 38.24552523s ago: executing program 44 (id=4013): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) 11.054668722s ago: executing program 9 (id=4141): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x2b, 0x80801, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2bc}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, 0x0, 0x5a}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 10.757824056s ago: executing program 3 (id=4144): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000036000100000000000000000001020000000000000f0001006f76732d73797374"], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000037000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000038000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000003a000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) ioctl(r0, 0x8933, &(0x7f0000000200)='lo\x00') sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000330001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c00020000000000080002000400"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000340001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000350001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000360001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000370001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000380001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000390001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="480000003a0001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) 10.197498949s ago: executing program 3 (id=4147): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xfffb, @empty}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x56df}}], 0x18}, 0x0) 10.110747016s ago: executing program 9 (id=4148): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r4, 0x16, 0x0, @void}, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) ptrace$setsig(0x4203, 0x0, 0x5, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000340)) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 6.859467618s ago: executing program 3 (id=4151): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000540)=""/20, 0x14}, {&(0x7f0000002c40)=""/4108, 0x100c}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f00000009c0)=""/78, 0x4e}, {&(0x7f0000000740)=""/129, 0x81}, {&(0x7f0000000d80)=""/102, 0x66}, {&(0x7f0000001340)=""/24, 0x18}, {&(0x7f0000000440)=""/147, 0x93}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000280)=""/70, 0x46}, {&(0x7f0000000500)=""/30, 0x1e}], 0xc}, 0x0) 5.076700827s ago: executing program 2 (id=4154): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r3) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r8, &(0x7f0000001100)='md0\x00', 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r9, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000010000000000000000000000030000000400000000000000000000000000000000100000") ioctl(r9, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000") ioctl(r9, 0x40140921, 0x0) ioctl(r9, 0x40140921, &(0x7f0000001600)="0200000007000000020000000200000006000000") ioctl(r9, 0x400c0930, 0x0) ioctl(r9, 0x40140921, &(0x7f0000001700)="030000000700000003000000ffffffff02000400") 4.962744239s ago: executing program 1 (id=4155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) listen(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x4, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) 4.889474271s ago: executing program 9 (id=4156): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 4.855601099s ago: executing program 3 (id=4157): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f02000007683815b12e890300000a000000059afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000010007bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e00000", 0xb7) 4.497403089s ago: executing program 1 (id=4158): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000036000100000000000000000001020000000000000f0001006f76732d73797374"], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000037000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000038000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000003a000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) ioctl(r0, 0x8933, &(0x7f0000000200)='lo\x00') sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000330001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c0002000000000008000200040000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000340001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000350001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000360001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000370001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000380001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000390001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="480000003a0001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) 4.475127303s ago: executing program 5 (id=4159): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x2b, 0x80801, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2bc}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, 0x0, 0x5a}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 4.459549667s ago: executing program 3 (id=4160): r0 = socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x10, 0x5, {0xa, 0x25, 0x25, 0x404, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0xff, 0xbe1}}}}}}}}]}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load user:trusted: 00000000000'], 0x31, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_usb_connect(0x3, 0x586, &(0x7f0000000bc0)={{0x12, 0x1, 0x110, 0x6a, 0xea, 0xcd, 0x40, 0x1557, 0xa80, 0x9e85, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x574, 0x2, 0x0, 0x5, 0xc0, 0x8, "", [{{0x9, 0x4, 0xb7, 0x0, 0xa, 0x74, 0xd0, 0x4d, 0x2, [], [{{0x9, 0x5, 0x80, 0x3, 0x8, 0x9, 0x9, 0x8, [@generic={0x2d, 0xd, "d879bf3fcd872682d6bea85444285e48e66dd7d3c191bb3b3b19963d8f5449cd21da992ba4a3611b235ffb"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x1, 0xff, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x5}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x7f, 0x9, 0x48}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0x4, 0x6, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x3}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x65, 0x7, 0xea}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0xa3, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x2}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x2, 0x6, 0x6}}, {{0x9, 0x5, 0x4, 0x1b, 0x8, 0x80, 0x1, 0x75, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x5}, @generic={0x46, 0x9, "254e68e005c6c69cb5f25f1b643625f761b87661d3c917943146faa37627f3ff34645a143a7c1b8f9bc9558da712e468e60f01c9f303fb4107cde12c160f476b20803d12"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0x9, 0x7, 0x2, [@generic={0xab, 0xc, "5099f3bad2fc7e5413dcff4ef72b5e593285a1db8b2f256cb6b08e50eb047e0cc10dc18966bcb3734968ae9df1a35d368c117d798df2d77ae3880378cab553dd16eefb5005c549ff3fd5f01cd6942230c57e64e636842705836f0fea03acf46462e2066f074b99fb1c64c91bd97fd37606f45e057911807e6cb35b18ffba663eb319c13121d6ba8d04e0024e16e6d42fee425fc463323d1bf30fd806c0ae3096a92f77521c08d9d004"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf8, 0x3}]}}, {{0x9, 0x5, 0xb, 0x0, 0xdf, 0x5, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x1}, @generic={0x2, 0xe}]}}]}}, {{0x9, 0x4, 0x89, 0x7, 0x8, 0x1c, 0xe, 0xd2, 0xb3, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "628144f3"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x16f1, 0xe}}], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x4, 0x6, 0x3}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x50, 0x2, 0x4, [@generic={0xc7, 0x22, "60909db07e04183532bedeba3ae46a890b5e8878cfb750b3cab6e9f4ee559acde6406828bd707dca696bd251fcd4ffb2167047891517a4fd4f64e420f5d43a7081948a9354f656424dcbe872110cc8da2888480ac366910a3cb7c5fae68b5368b703eab52bf54a79991f0c5234059cf3b005821688fae369914e7ce1728eaf391db59617c6902f247de3560bb919f5cb75d6a81a9a6c2fa9257ef177c6ab673699cc423bae1c978af05647a73c371aefffad7a75b79520f247db07b8b4e8fc87278c12c9d8"}, @generic={0x25, 0x21, "9a7fddca6f56678bcf3acc31ec0dc73ff133ae2167a2a0fceb303850b5b83d824b89ca"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x2, 0xc, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x4}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x4, 0x5, 0x81, [@generic={0xab, 0x22, "1314b79e03b2c29e9d636458b9abeeff82e1d5c6604d84e052c0743e2b9bd816bb536f349ae88a34eef792f7006beeb8a2f48a44e7d2b82deb8d882561d55b590320bc8abac2a28cbb238d031734713b0103b82f0b581c1de1984bd1e0cfdaee1e8227b93b77211a93dd72ec399b06a7c1f7b588d53b0a2f25738f2d23742d2180b53ad7f66ab11ed264e763e1b0c471fe43ccb241167d16ff4d4afe613c7f8560baac39d16f1ac515"}, @generic={0x81, 0x6, "9fbe7e8f6449619bfd910308824bdae83f72ea8924a20ac4b52ab6bf3981eed6fb113d9fed85697e6108ca2f644cbc14a3d362e7b379580778b02b1454aeb76ea5eb02bba2120317e6ec35270875f154c94bdb6a386348838ddf83596bf3aecb0f179be463425f4f1c677c8eec69ccbabcc5404f6cab0c592277c4f1f651c1"}]}}, {{0x9, 0x5, 0x0, 0x6, 0x8, 0x4, 0x40, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}]}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0xfe, 0xb, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x6, 0x7, 0xf7, [@generic={0xdf, 0x7, "8354950610091b1cf90464e063650966f5f0f175cd25da8d5127f58ca5a897ffec58066e9ad190ec4291fba97193b2164dec6cfb879aca1e96fbb7d05fdff8a67eecfd9f09def11b154f5fe270bec0c2123d4b186602883f15126eb890daea28688a88e0e76e77e5845b0acbaa27c04e543197f7a9bcdaf4918467d38f3464813c83d96fcd8e1534259ce32b78b43342f3583aa863ac27690263b6d329548a5d07843ae52334b32c1aced3cf48f20ec6c9be7dfeacb3a0da6bc39c0c4afa9a951e35e6681b99d3cebe7c6b9a4a8275d9f324e0a18c9285cf3a73b0606e"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xf7, 0x3, 0xe, [@generic={0x2a, 0xc, "e1c0e985a7e1714a5547a82db5f09dfcfffb74bd5947b7d0225edf02a00294079d558e0d30163329"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x2}]}}]}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x0, 0x3, 0x8, 0x5, 0x10, 0x3}, 0x39, &(0x7f0000001540)={0x5, 0xf, 0x39, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x7ff, 0xf000, 0x7, [0x18, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x5, 0xdf}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc7, 0x80, 0x8, 0x2, 0xc8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x7, 0xa, 0x3, 0x6}]}, 0xa, [{0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x3b, &(0x7f0000001700)=@string={0x3b, 0x3, "30259858e8d1fcea1216b719aa03afbc70a0b944e0596abe87350b099639cfe6831ed2b875200b79b097334e4b6339d2d3d8c8b81a1c8472e4"}}, {0x8e, &(0x7f0000001740)=@string={0x8e, 0x3, "3a60637c2d617ee03390137b08b81bd1905682c243a5ae76bdc692479f1a88a355cd2313c44ad3bc44bf4a4de39286a7da0fc90b6df2b233e6ef0d66911c7d96def5a211ee5c435f712e351850ef46cf8abc9fc7648c5047b7a6a38a1e8eda4d24b40c913af1189ddfc0d94617da89b63da1ffd965d429f1427972c582a3d550611a6f8950e9affe0b71c6e9"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x418}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10023}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xe}]}, 0x40}}, 0x0) 4.159991792s ago: executing program 9 (id=4161): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089061416e0885a0400000000000081009fa788a8", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) 4.001279803s ago: executing program 5 (id=4162): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@nodelalloc}, {@noinit_itable}, {@nouid32}]}, 0x1, 0x46b, &(0x7f0000000ac0)="$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") r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, r1) 3.984916086s ago: executing program 2 (id=4163): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r0, 0x400c4d07, &(0x7f0000000a00)="00000200000000000000020001") 3.711837026s ago: executing program 1 (id=4164): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x20000034) close(r1) 3.478115102s ago: executing program 2 (id=4165): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.186723695s ago: executing program 1 (id=4166): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast1, @random="8528d5915819", @private=0x2}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040021}, 0x30) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) 2.910054661s ago: executing program 5 (id=4167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 1.536957269s ago: executing program 2 (id=4168): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x40000002) 1.497265605s ago: executing program 5 (id=4169): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x51, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 1.425357512s ago: executing program 9 (id=4170): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0xfffc, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 1.055306414s ago: executing program 5 (id=4171): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f02000007683815b12e890300000a000000059afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000010007bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e00000", 0xb7) 829.247084ms ago: executing program 1 (id=4172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 740.233788ms ago: executing program 3 (id=4173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x2, &(0x7f0000000600)=[{0x1c}, {0x6}]}) 543.356937ms ago: executing program 5 (id=4174): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r3) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r8, &(0x7f0000001100)='md0\x00', 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r9, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000010000000000000000000000030000000400000000000000000000000000000000100000") ioctl(r9, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000") ioctl(r9, 0x40140921, &(0x7f0000001500)) ioctl(r9, 0x40140921, &(0x7f0000001600)="0200000007000000020000000200000006000000") ioctl(r9, 0x400c0930, 0x0) ioctl(r9, 0x40140921, &(0x7f0000001700)="030000000700000003000000ffffffff02000400") 338.286541ms ago: executing program 1 (id=4175): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000036000100000000000000000001020000000000000f0001006f76732d73797374"], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000037000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000038000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) sendmsg$netlink(r0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000003a000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) ioctl(r0, 0x8933, &(0x7f0000000200)='lo\x00') sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000330001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c0002000000000008000200040000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000340001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000350001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000360001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000370001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000380001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000390001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="480000003a0001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) 338.098375ms ago: executing program 2 (id=4176): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d07, 0x0) 300.447964ms ago: executing program 9 (id=4177): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000034) close(r1) 0s ago: executing program 2 (id=4178): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x80000fb, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=ANY=[], 0xf}, 0x0) kernel console output (not intermixed with test programs): 0000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1034.169893][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffcf7f3c0d0 [ 1034.169913][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1034.169952][ C0] [ 1034.292641][ C0] FAULT_INJECTION: forcing a failure. [ 1034.292641][ C0] name failslab, interval 1, probability 1, space 0, times 5 [ 1034.292693][ C0] CPU: 0 UID: 0 PID: 18532 Comm: syz.3.3415 Tainted: G L syzkaller #0 PREEMPT(full) [ 1034.292746][ C0] Tainted: [L]=SOFTLOCKUP [ 1034.292759][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1034.292783][ C0] Call Trace: [ 1034.292794][ C0] [ 1034.292807][ C0] dump_stack_lvl+0x100/0x190 [ 1034.292853][ C0] should_fail_ex.cold+0x5/0xa [ 1034.292902][ C0] should_failslab+0xc2/0x120 [ 1034.292941][ C0] __kmalloc_noprof+0xfc/0x820 [ 1034.293002][ C0] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 1034.293045][ C0] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 1034.293081][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.293118][ C0] ? kasan_save_stack+0x3f/0x50 [ 1034.293164][ C0] ? kasan_save_stack+0x30/0x50 [ 1034.293211][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1034.293256][ C0] ? __kmalloc_noprof+0x322/0x820 [ 1034.293305][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.293341][ C0] ? lock_acquire+0x1b9/0x370 [ 1034.293377][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.293413][ C0] ? find_held_lock+0x2b/0x80 [ 1034.293458][ C0] ? __kfree_rcu_sheaf+0x195/0x730 [ 1034.293485][ C0] ? __kfree_rcu_sheaf+0x195/0x730 [ 1034.293514][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1034.293558][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.293594][ C0] ? kvfree_call_rcu+0x1be/0x4f0 [ 1034.293633][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.293672][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.293708][ C0] ? __asan_memcpy+0x3c/0x60 [ 1034.293754][ C0] ieee80211_inform_bss+0x159/0x1170 [ 1034.293809][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1034.293865][ C0] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 1034.293921][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1034.293972][ C0] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 1034.294031][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1034.294101][ C0] ? mark_held_locks+0x40/0x70 [ 1034.294133][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.294174][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.294211][ C0] ? mark_held_locks+0x40/0x70 [ 1034.294250][ C0] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 1034.294295][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.294331][ C0] cfg80211_inform_bss_data+0x230/0x3b60 [ 1034.294395][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 1034.294448][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1034.294491][ C0] ? kfree_skbmem+0x19a/0x210 [ 1034.294522][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.294558][ C0] ? stack_trace_save+0x8e/0xc0 [ 1034.294607][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1034.294656][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.294693][ C0] ? stack_depot_save_flags+0x27/0x9d0 [ 1034.294750][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.294797][ C0] ? kasan_save_stack+0x3f/0x50 [ 1034.294863][ C0] ? kasan_save_stack+0x30/0x50 [ 1034.294917][ C0] ? kasan_save_track+0x14/0x30 [ 1034.294963][ C0] ? kasan_save_free_info+0x3b/0x70 [ 1034.295000][ C0] ? __kasan_slab_free+0x5f/0x80 [ 1034.295028][ C0] ? kmem_cache_free+0x127/0x6b0 [ 1034.295067][ C0] ? kfree_skbmem+0x19a/0x210 [ 1034.295096][ C0] ? sk_skb_reason_drop+0x10f/0x1b0 [ 1034.295138][ C0] ? ip6_mc_input+0x832/0xf50 [ 1034.295181][ C0] ? ipv6_rcv+0x34c/0x3d0 [ 1034.295222][ C0] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 1034.295277][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.295314][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1034.295367][ C0] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 1034.295424][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 1034.295477][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1034.295539][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.295576][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 1034.295618][ C0] ieee80211_scan_rx+0x4e6/0xb60 [ 1034.295665][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.295705][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1034.295744][ C0] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 1034.295784][ C0] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 1034.295817][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.295853][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1034.295908][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.295944][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1034.295986][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.296022][ C0] ? ieee80211_clean_skb+0x1a7/0x740 [ 1034.296074][ C0] ieee80211_rx_list+0xf19/0x2160 [ 1034.296109][ C0] ? __entry_text_end+0x1020b6/0x1020b9 [ 1034.296151][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.296187][ C0] ? lock_acquire+0x1b9/0x370 [ 1034.296221][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1034.296255][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.296298][ C0] ieee80211_rx_napi+0xdc/0x400 [ 1034.296330][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1034.296362][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1034.296398][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.296434][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1034.296474][ C0] ieee80211_handle_queued_frames+0xc8/0x120 [ 1034.296524][ C0] tasklet_action_common+0x2de/0x3d0 [ 1034.296572][ C0] handle_softirqs+0x1ea/0x9b0 [ 1034.296614][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1034.296651][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.296687][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1034.296716][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.296752][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1034.296805][ C0] __irq_exit_rcu+0x162/0x210 [ 1034.296842][ C0] irq_exit_rcu+0x9/0x30 [ 1034.296911][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1034.296947][ C0] [ 1034.296957][ C0] [ 1034.296969][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1034.297003][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 1034.297051][ C0] Code: 00 e8 71 23 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 bf cf 21 00 48 85 ed 0f 85 d7 01 00 00 e8 11 d5 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 1034.297081][ C0] RSP: 0000:ffffc90004daf720 EFLAGS: 00000293 [ 1034.297105][ C0] RAX: ffffffff8f9af7d8 RBX: ffffffff8f9af780 RCX: ffffffff81e86a01 [ 1034.297126][ C0] RDX: ffff888030139f00 RSI: ffffffff81e86a0f RDI: ffff888030139f00 [ 1034.297147][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1034.297166][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000038ae [ 1034.297184][ C0] R13: ffffffff8f9af7d8 R14: ffffc90004daf7a0 R15: dffffc0000000000 [ 1034.297216][ C0] ? console_flush_one_record+0xab1/0xe50 [ 1034.297260][ C0] ? console_flush_one_record+0xabf/0xe50 [ 1034.297319][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1034.297363][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.297399][ C0] ? check_prev_add+0x354/0xe60 [ 1034.297439][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.297476][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1034.297530][ C0] console_unlock+0x103/0x260 [ 1034.297574][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1034.297617][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.297653][ C0] ? lock_acquire+0x100/0x370 [ 1034.297693][ C0] ? vprintk_emit+0x66a/0x6b0 [ 1034.297743][ C0] vprintk_emit+0x407/0x6b0 [ 1034.297789][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1034.297834][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.297886][ C0] _printk+0xcf/0x110 [ 1034.297916][ C0] ? __pfx__printk+0x10/0x10 [ 1034.297944][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.297989][ C0] ? __pfx____ratelimit+0x10/0x10 [ 1034.298033][ C0] should_fail_ex+0x4e4/0x640 [ 1034.298078][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.298119][ C0] should_failslab+0xc2/0x120 [ 1034.298151][ C0] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1034.298200][ C0] ? __anon_vma_prepare+0xae/0x5e0 [ 1034.298246][ C0] __anon_vma_prepare+0xae/0x5e0 [ 1034.298285][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.298326][ C0] __vmf_anon_prepare+0x11f/0x250 [ 1034.298362][ C0] do_anonymous_page+0x51b/0x2080 [ 1034.298403][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 1034.298442][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.298488][ C0] __handle_mm_fault+0x1d2c/0x2a00 [ 1034.298536][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.298572][ C0] ? reacquire_held_locks+0xce/0x1e0 [ 1034.298608][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1034.298650][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.298696][ C0] ? lock_vma_under_rcu+0x17c/0x590 [ 1034.298761][ C0] handle_mm_fault+0x37b/0xa30 [ 1034.298809][ C0] do_user_addr_fault+0x5a3/0x12f0 [ 1034.298865][ C0] exc_page_fault+0x6f/0xd0 [ 1034.298909][ C0] asm_exc_page_fault+0x26/0x30 [ 1034.298939][ C0] RIP: 0033:0x7f77b935b044 [ 1034.298964][ C0] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 1034.298995][ C0] RSP: 002b:00007ffcf7f3bf80 EFLAGS: 00010246 [ 1034.299018][ C0] RAX: 00007f77ba230000 RBX: 00007f77ba2506c0 RCX: 00007f77b939dc97 [ 1034.299042][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f77ba2506c0 [ 1034.299062][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1034.299081][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffcf7f3c0d0 [ 1034.299101][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1034.299141][ C0] [ 1034.471118][ C0] FAULT_INJECTION: forcing a failure. [ 1034.471118][ C0] name failslab, interval 1, probability 1, space 0, times 4 [ 1034.471164][ C0] CPU: 0 UID: 0 PID: 18532 Comm: syz.3.3415 Tainted: G L syzkaller #0 PREEMPT(full) [ 1034.471206][ C0] Tainted: [L]=SOFTLOCKUP [ 1034.471217][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1034.471235][ C0] Call Trace: [ 1034.471245][ C0] [ 1034.471256][ C0] dump_stack_lvl+0x100/0x190 [ 1034.471293][ C0] should_fail_ex.cold+0x5/0xa [ 1034.471328][ C0] should_failslab+0xc2/0x120 [ 1034.471359][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1034.471410][ C0] ? __alloc_skb+0x140/0x710 [ 1034.471455][ C0] __alloc_skb+0x140/0x710 [ 1034.471491][ C0] ? __alloc_skb+0x5b7/0x710 [ 1034.471528][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1034.471565][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.471603][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.471638][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1034.471687][ C0] skb_copy+0x1ca/0x3a0 [ 1034.471722][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.471763][ C0] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 1034.471818][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 1034.471859][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.471901][ C0] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 1034.471946][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.471982][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1034.472021][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.472057][ C0] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 1034.472107][ C0] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 1034.472147][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.472188][ C0] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 1034.472236][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.472277][ C0] __iterate_interfaces+0x2e6/0x650 [ 1034.472315][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1034.472362][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1034.472406][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1034.472452][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 1034.472486][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1034.472519][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1034.472577][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 1034.472625][ C0] handle_softirqs+0x1ea/0x9b0 [ 1034.472668][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1034.472704][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.472741][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1034.472777][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.472814][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1034.472865][ C0] __irq_exit_rcu+0x162/0x210 [ 1034.472906][ C0] irq_exit_rcu+0x9/0x30 [ 1034.472941][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1034.472978][ C0] [ 1034.472988][ C0] [ 1034.472999][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1034.473033][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 1034.473081][ C0] Code: 00 e8 71 23 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 bf cf 21 00 48 85 ed 0f 85 d7 01 00 00 e8 11 d5 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 1034.473110][ C0] RSP: 0000:ffffc90004daf720 EFLAGS: 00000293 [ 1034.473133][ C0] RAX: ffffffff8f9af7d8 RBX: ffffffff8f9af780 RCX: ffffffff81e86a01 [ 1034.473154][ C0] RDX: ffff888030139f00 RSI: ffffffff81e86a0f RDI: ffff888030139f00 [ 1034.473174][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1034.473192][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000038c8 [ 1034.473211][ C0] R13: ffffffff8f9af7d8 R14: ffffc90004daf7a0 R15: dffffc0000000000 [ 1034.473240][ C0] ? console_flush_one_record+0xab1/0xe50 [ 1034.473284][ C0] ? console_flush_one_record+0xabf/0xe50 [ 1034.473341][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1034.473385][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.473421][ C0] ? check_prev_add+0x354/0xe60 [ 1034.473460][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.473496][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1034.473549][ C0] console_unlock+0x103/0x260 [ 1034.473592][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1034.473635][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.473670][ C0] ? lock_acquire+0x100/0x370 [ 1034.473709][ C0] ? vprintk_emit+0x66a/0x6b0 [ 1034.473759][ C0] vprintk_emit+0x407/0x6b0 [ 1034.473804][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1034.473848][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.473900][ C0] _printk+0xcf/0x110 [ 1034.473929][ C0] ? __pfx__printk+0x10/0x10 [ 1034.473957][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.474002][ C0] ? __pfx____ratelimit+0x10/0x10 [ 1034.474044][ C0] should_fail_ex+0x4e4/0x640 [ 1034.474089][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.474130][ C0] should_failslab+0xc2/0x120 [ 1034.474161][ C0] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1034.474210][ C0] ? __anon_vma_prepare+0xae/0x5e0 [ 1034.474256][ C0] __anon_vma_prepare+0xae/0x5e0 [ 1034.474294][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.474335][ C0] __vmf_anon_prepare+0x11f/0x250 [ 1034.474371][ C0] do_anonymous_page+0x51b/0x2080 [ 1034.474411][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 1034.474451][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.474496][ C0] __handle_mm_fault+0x1d2c/0x2a00 [ 1034.474543][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.474579][ C0] ? reacquire_held_locks+0xce/0x1e0 [ 1034.474615][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1034.474657][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.474697][ C0] ? lock_vma_under_rcu+0x17c/0x590 [ 1034.474757][ C0] handle_mm_fault+0x37b/0xa30 [ 1034.474823][ C0] do_user_addr_fault+0x5a3/0x12f0 [ 1034.474901][ C0] exc_page_fault+0x6f/0xd0 [ 1034.474944][ C0] asm_exc_page_fault+0x26/0x30 [ 1034.474974][ C0] RIP: 0033:0x7f77b935b044 [ 1034.474998][ C0] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 1034.475028][ C0] RSP: 002b:00007ffcf7f3bf80 EFLAGS: 00010246 [ 1034.475051][ C0] RAX: 00007f77ba230000 RBX: 00007f77ba2506c0 RCX: 00007f77b939dc97 [ 1034.475071][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f77ba2506c0 [ 1034.475090][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1034.475108][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffcf7f3c0d0 [ 1034.475128][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1034.475166][ C0] [ 1034.485845][ C0] FAULT_INJECTION: forcing a failure. [ 1034.485845][ C0] name failslab, interval 1, probability 1, space 0, times 3 [ 1034.485893][ C0] CPU: 0 UID: 0 PID: 18532 Comm: syz.3.3415 Tainted: G L syzkaller #0 PREEMPT(full) [ 1034.485934][ C0] Tainted: [L]=SOFTLOCKUP [ 1034.485946][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1034.485967][ C0] Call Trace: [ 1034.485977][ C0] [ 1034.485988][ C0] dump_stack_lvl+0x100/0x190 [ 1034.486025][ C0] should_fail_ex.cold+0x5/0xa [ 1034.486060][ C0] should_failslab+0xc2/0x120 [ 1034.486091][ C0] __kmalloc_noprof+0xfc/0x820 [ 1034.486139][ C0] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 1034.486179][ C0] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 1034.486214][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.486251][ C0] ? kasan_save_stack+0x3f/0x50 [ 1034.486297][ C0] ? kasan_save_stack+0x30/0x50 [ 1034.486343][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1034.486388][ C0] ? __kmalloc_noprof+0x322/0x820 [ 1034.486437][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.486473][ C0] ? lock_acquire+0x1b9/0x370 [ 1034.486508][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.486544][ C0] ? find_held_lock+0x2b/0x80 [ 1034.486589][ C0] ? __kfree_rcu_sheaf+0x195/0x730 [ 1034.486617][ C0] ? __kfree_rcu_sheaf+0x195/0x730 [ 1034.486646][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1034.486689][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.486725][ C0] ? kvfree_call_rcu+0x1be/0x4f0 [ 1034.486765][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.486804][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.486840][ C0] ? __asan_memcpy+0x3c/0x60 [ 1034.486886][ C0] ieee80211_inform_bss+0x159/0x1170 [ 1034.486945][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1034.487001][ C0] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 1034.487051][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1034.487100][ C0] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 1034.487156][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1034.487202][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.487263][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.487299][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1034.487334][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.487370][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1034.487416][ C0] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 1034.487459][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.487495][ C0] cfg80211_inform_bss_data+0x230/0x3b60 [ 1034.487549][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.487585][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1034.487625][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1034.487669][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.487705][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1034.487742][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.487788][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.487824][ C0] ? lock_acquire+0x1b9/0x370 [ 1034.487858][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.487899][ C0] ? find_held_lock+0x2b/0x80 [ 1034.487943][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1034.487976][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1034.488007][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.488045][ C0] ? bpf_ksym_find+0x124/0x1c0 [ 1034.488100][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.488137][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1034.488170][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.488206][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1034.488241][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.488289][ C0] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 1034.488344][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 1034.488397][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1034.488444][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1034.488493][ C0] ? find_held_lock+0x2b/0x80 [ 1034.488538][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.488575][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 1034.488622][ C0] ieee80211_scan_rx+0x4e6/0xb60 [ 1034.488669][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.488706][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1034.488744][ C0] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 1034.488784][ C0] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 1034.488816][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.488853][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1034.488909][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.488945][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1034.488983][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.489019][ C0] ? ieee80211_clean_skb+0x1a7/0x740 [ 1034.489071][ C0] ieee80211_rx_list+0xf19/0x2160 [ 1034.489106][ C0] ? __entry_text_end+0x1020b6/0x1020b9 [ 1034.489147][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.489183][ C0] ? lock_acquire+0x1b9/0x370 [ 1034.489217][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1034.489251][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.489294][ C0] ieee80211_rx_napi+0xdc/0x400 [ 1034.489326][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1034.489358][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1034.489394][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.489430][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1034.489470][ C0] ieee80211_handle_queued_frames+0xc8/0x120 [ 1034.489520][ C0] tasklet_action_common+0x2de/0x3d0 [ 1034.489568][ C0] handle_softirqs+0x1ea/0x9b0 [ 1034.489610][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1034.489646][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.489683][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1034.489712][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.489748][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1034.489801][ C0] __irq_exit_rcu+0x162/0x210 [ 1034.489842][ C0] irq_exit_rcu+0x9/0x30 [ 1034.489877][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1034.489917][ C0] [ 1034.489927][ C0] [ 1034.489939][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1034.489973][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 1034.490020][ C0] Code: 00 e8 71 23 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 bf cf 21 00 48 85 ed 0f 85 d7 01 00 00 e8 11 d5 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 1034.490050][ C0] RSP: 0000:ffffc90004daf720 EFLAGS: 00000293 [ 1034.490074][ C0] RAX: ffffffff8f9af7d8 RBX: ffffffff8f9af780 RCX: ffffffff81e86a01 [ 1034.490095][ C0] RDX: ffff888030139f00 RSI: ffffffff81e86a0f RDI: ffff888030139f00 [ 1034.490116][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1034.490134][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000038ca [ 1034.490153][ C0] R13: ffffffff8f9af7d8 R14: ffffc90004daf7a0 R15: dffffc0000000000 [ 1034.490183][ C0] ? console_flush_one_record+0xab1/0xe50 [ 1034.490228][ C0] ? console_flush_one_record+0xabf/0xe50 [ 1034.490285][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1034.490329][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.490365][ C0] ? check_prev_add+0x354/0xe60 [ 1034.490405][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.490441][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1034.490495][ C0] console_unlock+0x103/0x260 [ 1034.490539][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1034.490582][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.490618][ C0] ? lock_acquire+0x100/0x370 [ 1034.490657][ C0] ? vprintk_emit+0x66a/0x6b0 [ 1034.490707][ C0] vprintk_emit+0x407/0x6b0 [ 1034.490753][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1034.490798][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.490845][ C0] _printk+0xcf/0x110 [ 1034.490874][ C0] ? __pfx__printk+0x10/0x10 [ 1034.490906][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.490950][ C0] ? __pfx____ratelimit+0x10/0x10 [ 1034.490994][ C0] should_fail_ex+0x4e4/0x640 [ 1034.491039][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.491081][ C0] should_failslab+0xc2/0x120 [ 1034.491112][ C0] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1034.491161][ C0] ? __anon_vma_prepare+0xae/0x5e0 [ 1034.491207][ C0] __anon_vma_prepare+0xae/0x5e0 [ 1034.491246][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.491287][ C0] __vmf_anon_prepare+0x11f/0x250 [ 1034.491323][ C0] do_anonymous_page+0x51b/0x2080 [ 1034.491364][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 1034.491404][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.491449][ C0] __handle_mm_fault+0x1d2c/0x2a00 [ 1034.491496][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.491533][ C0] ? reacquire_held_locks+0xce/0x1e0 [ 1034.491569][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1034.491611][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.491651][ C0] ? lock_vma_under_rcu+0x17c/0x590 [ 1034.491711][ C0] handle_mm_fault+0x37b/0xa30 [ 1034.491759][ C0] do_user_addr_fault+0x5a3/0x12f0 [ 1034.491815][ C0] exc_page_fault+0x6f/0xd0 [ 1034.491853][ C0] asm_exc_page_fault+0x26/0x30 [ 1034.491882][ C0] RIP: 0033:0x7f77b935b044 [ 1034.491909][ C0] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 1034.491937][ C0] RSP: 002b:00007ffcf7f3bf80 EFLAGS: 00010246 [ 1034.491960][ C0] RAX: 00007f77ba230000 RBX: 00007f77ba2506c0 RCX: 00007f77b939dc97 [ 1034.491980][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f77ba2506c0 [ 1034.491999][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1034.492018][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffcf7f3c0d0 [ 1034.492038][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1034.492076][ C0] [ 1038.074262][T17575] CPU: 0 UID: 0 PID: 17575 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.074321][T17575] Tainted: [L]=SOFTLOCKUP [ 1038.074335][T17575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1038.074357][T17575] Call Trace: [ 1038.074369][T17575] [ 1038.074384][T17575] dump_stack_lvl+0x100/0x190 [ 1038.074434][T17575] should_fail_ex.cold+0x5/0xa [ 1038.074470][T17575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.074523][T17575] should_failslab+0xc2/0x120 [ 1038.074563][T17575] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1038.074626][T17575] ? vm_area_dup+0x27/0x8e0 [ 1038.074682][T17575] vm_area_dup+0x27/0x8e0 [ 1038.074734][T17575] __split_vma+0x18c/0xda0 [ 1038.074789][T17575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.074840][T17575] ? __pfx___split_vma+0x10/0x10 [ 1038.074911][T17575] ? __pfx___up_read+0x10/0x10 [ 1038.074959][T17575] ? vms_complete_munmap_vmas+0xaac/0xdd0 [ 1038.075011][T17575] ? vms_complete_munmap_vmas+0xaac/0xdd0 [ 1038.075070][T17575] vms_gather_munmap_vmas+0x1d2/0x1720 [ 1038.075123][T17575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.075167][T17575] ? vms_complete_munmap_vmas+0x1e1/0xdd0 [ 1038.075224][T17575] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1038.075282][T17575] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 1038.075349][T17575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.075394][T17575] ? mprotect_fixup+0x51f/0xe30 [ 1038.075450][T17575] do_vmi_align_munmap+0x287/0x5f0 [ 1038.075508][T17575] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1038.075562][T17575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.075621][T17575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.075719][T17575] do_vmi_munmap+0x1f8/0x3e0 [ 1038.075780][T17575] __vm_munmap+0x196/0x390 [ 1038.075837][T17575] ? __pfx___vm_munmap+0x10/0x10 [ 1038.075933][T17575] __x64_sys_munmap+0x59/0x80 [ 1038.075980][T17575] do_syscall_64+0x115/0x870 [ 1038.076036][T17575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.076076][T17575] RIP: 0033:0x7faac4b1e097 [ 1038.076107][T17575] Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48 [ 1038.076146][T17575] RSP: 002b:00007fff0df88b08 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 1038.076183][T17575] RAX: ffffffffffffffda RBX: 00005568a1888540 RCX: 00007faac4b1e097 [ 1038.076209][T17575] RDX: 00005568a1888588 RSI: 0000000000000200 RDI: 00007faac49b2000 [ 1038.076234][T17575] RBP: 0000000000000015 R08: 0000000000000040 R09: 0000000000000003 [ 1038.076258][T17575] R10: 00005568a1881100 R11: 0000000000000246 R12: 00005568a1881100 [ 1038.076282][T17575] R13: 00007faac521739c R14: 0000000000002a00 R15: 0000000000000009 [ 1038.076332][T17575] [ 1038.285928][T18532] CPU: 1 UID: 0 PID: 18532 Comm: syz.3.3415 Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.285988][T18532] Tainted: [L]=SOFTLOCKUP [ 1038.286002][T18532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1038.286026][T18532] Call Trace: [ 1038.286043][T18532] [ 1038.286057][T18532] dump_stack_lvl+0x100/0x190 [ 1038.286107][T18532] should_fail_ex.cold+0x5/0xa [ 1038.286142][T18532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.286196][T18532] should_failslab+0xc2/0x120 [ 1038.286236][T18532] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1038.286297][T18532] ? __anon_vma_prepare+0xae/0x5e0 [ 1038.286362][T18532] __anon_vma_prepare+0xae/0x5e0 [ 1038.286409][T18532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.286460][T18532] __vmf_anon_prepare+0x11f/0x250 [ 1038.286505][T18532] do_anonymous_page+0x51b/0x2080 [ 1038.286555][T18532] ? rcu_read_unlock+0x2d/0xb0 [ 1038.286604][T18532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.286662][T18532] __handle_mm_fault+0x1d2c/0x2a00 [ 1038.286721][T18532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.286765][T18532] ? reacquire_held_locks+0xce/0x1e0 [ 1038.286811][T18532] ? __pfx___handle_mm_fault+0x10/0x10 [ 1038.286863][T18532] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.286912][T18532] ? lock_vma_under_rcu+0x17c/0x590 [ 1038.286988][T18532] handle_mm_fault+0x37b/0xa30 [ 1038.287048][T18532] do_user_addr_fault+0x5a3/0x12f0 [ 1038.287118][T18532] exc_page_fault+0x6f/0xd0 [ 1038.287166][T18532] asm_exc_page_fault+0x26/0x30 [ 1038.287202][T18532] RIP: 0033:0x7f77b935b044 [ 1038.287232][T18532] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 1038.287269][T18532] RSP: 002b:00007ffcf7f3bf80 EFLAGS: 00010246 [ 1038.287299][T18532] RAX: 00007f77ba230000 RBX: 00007f77ba2506c0 RCX: 00007f77b939dc97 [ 1038.287324][T18532] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f77ba2506c0 [ 1038.287348][T18532] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1038.287376][T18532] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffcf7f3c0d0 [ 1038.287401][T18532] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1038.287451][T18532] [ 1038.570153][T18528] CPU: 0 UID: 0 PID: 18528 Comm: syz.8.3413 Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.570214][T18528] Tainted: [L]=SOFTLOCKUP [ 1038.570228][T18528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1038.570258][T18528] Call Trace: [ 1038.570271][T18528] [ 1038.570286][T18528] dump_stack_lvl+0x100/0x190 [ 1038.570336][T18528] should_fail_ex.cold+0x5/0xa [ 1038.570372][T18528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.570429][T18528] should_failslab+0xc2/0x120 [ 1038.570470][T18528] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1038.570529][T18528] ? __alloc_skb+0x140/0x710 [ 1038.570582][T18528] __alloc_skb+0x140/0x710 [ 1038.570623][T18528] ? __alloc_skb+0x5b7/0x710 [ 1038.570670][T18528] ? __pfx___alloc_skb+0x10/0x10 [ 1038.570718][T18528] ? __pfx___register_sysctl_table+0x10/0x10 [ 1038.570776][T18528] ? is_module_address+0x69/0xf0 [ 1038.570824][T18528] inet_netconf_notify_devconf+0x9d/0x170 [ 1038.570881][T18528] __devinet_sysctl_register+0x227/0x360 [ 1038.570925][T18528] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 1038.570973][T18528] ? inetdev_init+0x245/0x570 [ 1038.571011][T18528] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 1038.571058][T18528] ? netlink_rcv_skb+0x159/0x420 [ 1038.571094][T18528] ? genl_rcv+0x28/0x40 [ 1038.571132][T18528] ? netlink_unicast+0x585/0x850 [ 1038.571171][T18528] ? netlink_sendmsg+0x8b0/0xda0 [ 1038.571207][T18528] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1038.571238][T18528] ? ___sys_sendmsg+0x190/0x1e0 [ 1038.571271][T18528] ? __sys_sendmsg+0x160/0x210 [ 1038.571322][T18528] devinet_sysctl_register+0x17b/0x210 [ 1038.571369][T18528] inetdev_init+0x2b8/0x570 [ 1038.571412][T18528] inetdev_event+0x7fa/0x17f0 [ 1038.571455][T18528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.571498][T18528] ? ib_netdevice_event+0xfc/0x330 [ 1038.571538][T18528] ? __pfx_inetdev_event+0x10/0x10 [ 1038.571581][T18528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.571623][T18528] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1038.571674][T18528] notifier_call_chain+0x99/0x3f0 [ 1038.571738][T18528] call_netdevice_notifiers_info+0xbe/0x110 [ 1038.571799][T18528] register_netdevice+0x1998/0x25a0 [ 1038.571867][T18528] ? __pfx_register_netdevice+0x10/0x10 [ 1038.571916][T18528] ? find_held_lock+0x2b/0x80 [ 1038.571969][T18528] ? l2tp_eth_create+0x94a/0xd80 [ 1038.572016][T18528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.572067][T18528] l2tp_eth_create+0x7e8/0xd80 [ 1038.572116][T18528] ? l2tp_tunnel_get+0x226/0x490 [ 1038.572149][T18528] ? __pfx_l2tp_eth_create+0x10/0x10 [ 1038.572208][T18528] ? __pfx_l2tp_eth_create+0x10/0x10 [ 1038.572256][T18528] l2tp_nl_cmd_session_create+0x88f/0xc00 [ 1038.572310][T18528] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 1038.572361][T18528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.572403][T18528] ? __nla_parse+0x40/0x60 [ 1038.572446][T18528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.572487][T18528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.572528][T18528] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1038.572587][T18528] genl_family_rcv_msg_doit+0x214/0x300 [ 1038.572637][T18528] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1038.572681][T18528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.572722][T18528] ? genl_get_cmd+0x3e7/0x760 [ 1038.572774][T18528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.572815][T18528] ? security_capable+0x80/0x260 [ 1038.572852][T18528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.572899][T18528] ? ns_capable+0xd2/0xf0 [ 1038.572943][T18528] genl_rcv_msg+0x560/0x800 [ 1038.572993][T18528] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1038.573039][T18528] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 1038.573093][T18528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.573134][T18528] ? __lock_acquire+0x49f/0x1a40 [ 1038.573181][T18528] netlink_rcv_skb+0x159/0x420 [ 1038.573219][T18528] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1038.573266][T18528] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1038.573323][T18528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.573364][T18528] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1038.573407][T18528] genl_rcv+0x28/0x40 [ 1038.573446][T18528] netlink_unicast+0x585/0x850 [ 1038.573491][T18528] ? __pfx_netlink_unicast+0x10/0x10 [ 1038.573542][T18528] netlink_sendmsg+0x8b0/0xda0 [ 1038.573589][T18528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1038.573634][T18528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.573675][T18528] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1038.573720][T18528] ____sys_sendmsg+0xa4d/0xbe0 [ 1038.573752][T18528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1038.573795][T18528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1038.573850][T18528] ___sys_sendmsg+0x190/0x1e0 [ 1038.573896][T18528] ? __pfx____sys_sendmsg+0x10/0x10 [ 1038.573930][T18528] ? __lock_acquire+0x49f/0x1a40 [ 1038.573970][T18528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.574030][T18528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.574102][T18528] __sys_sendmsg+0x160/0x210 [ 1038.574152][T18528] ? __pfx___sys_sendmsg+0x10/0x10 [ 1038.574215][T18528] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.574264][T18528] do_syscall_64+0x115/0x870 [ 1038.574314][T18528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.574350][T18528] RIP: 0033:0x7f8fdab9de99 [ 1038.574378][T18528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.574413][T18528] RSP: 002b:00007f8fdba22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1038.574446][T18528] RAX: ffffffffffffffda RBX: 00007f8fdae25fa0 RCX: 00007f8fdab9de99 [ 1038.574470][T18528] RDX: 0000000020000034 RSI: 0000200000000140 RDI: 0000000000000007 [ 1038.574492][T18528] RBP: 00007f8fdac33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1038.574514][T18528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.574536][T18528] R13: 00007f8fdae26038 R14: 00007f8fdae25fa0 R15: 00007ffce46ae8f8 [ 1038.574581][T18528] [ 1039.221197][T17811] CPU: 0 UID: 0 PID: 17811 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1039.221257][T17811] Tainted: [L]=SOFTLOCKUP [ 1039.221272][T17811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1039.221296][T17811] Call Trace: [ 1039.221308][T17811] [ 1039.221322][T17811] dump_stack_lvl+0x100/0x190 [ 1039.221372][T17811] should_fail_ex.cold+0x5/0xa [ 1039.221408][T17811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.221461][T17811] should_failslab+0xc2/0x120 [ 1039.221500][T17811] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1039.221562][T17811] ? vm_area_dup+0x27/0x8e0 [ 1039.221618][T17811] vm_area_dup+0x27/0x8e0 [ 1039.221670][T17811] __split_vma+0x18c/0xda0 [ 1039.221720][T17811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.221770][T17811] ? __pfx___split_vma+0x10/0x10 [ 1039.221834][T17811] ? __pfx___up_read+0x10/0x10 [ 1039.221887][T17811] ? vms_complete_munmap_vmas+0xaac/0xdd0 [ 1039.221938][T17811] ? vms_complete_munmap_vmas+0xaac/0xdd0 [ 1039.221996][T17811] vms_gather_munmap_vmas+0x1d2/0x1720 [ 1039.222054][T17811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.222099][T17811] ? vms_complete_munmap_vmas+0x1e1/0xdd0 [ 1039.222157][T17811] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1039.222215][T17811] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 1039.222285][T17811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.222330][T17811] ? mprotect_fixup+0x51f/0xe30 [ 1039.222386][T17811] do_vmi_align_munmap+0x287/0x5f0 [ 1039.222445][T17811] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1039.222497][T17811] ? lockdep_hardirqs_on+0x78/0x100 [ 1039.222544][T17811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.222601][T17811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.222699][T17811] do_vmi_munmap+0x1f8/0x3e0 [ 1039.222758][T17811] __vm_munmap+0x196/0x390 [ 1039.222815][T17811] ? __pfx___vm_munmap+0x10/0x10 [ 1039.222907][T17811] __x64_sys_munmap+0x59/0x80 [ 1039.222949][T17811] do_syscall_64+0x115/0x870 [ 1039.223001][T17811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.223040][T17811] RIP: 0033:0x7faac4b1e097 [ 1039.223071][T17811] Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48 [ 1039.223108][T17811] RSP: 002b:00007fff0df88b08 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 1039.223144][T17811] RAX: ffffffffffffffda RBX: 00005568a1894e10 RCX: 00007faac4b1e097 [ 1039.223170][T17811] RDX: 00005568a189b5f8 RSI: 0000000000000200 RDI: 00007faac513f000 [ 1039.223195][T17811] RBP: 0000000000000011 R08: 00005568a18843b0 R09: 0000000000000003 [ 1039.223219][T17811] R10: 00005568a1881100 R11: 0000000000000246 R12: 00005568a1881100 [ 1039.223244][T17811] R13: 00007faac521739c R14: 0000000000002200 R15: 0000000000000009 [ 1039.223293][T17811] [ 1039.754982][T18126] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1039.773173][T16151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1039.848928][T16151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1039.856879][T16151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1039.875215][T16151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1039.877076][T18126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1039.888993][T16151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1040.061855][T18551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1040.991795][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3430'. [ 1041.063901][T18582] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3429'. [ 1041.120593][T18587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1041.161479][T18589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3431'. [ 1041.206712][T18589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3431'. [ 1041.293324][T18589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3431'. [ 1041.321215][T18589] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3431'. [ 1041.348168][T18589] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3431'. [ 1041.389779][T18589] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3431'. [ 1041.419146][T18589] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3431'. [ 1041.946550][T10873] Bluetooth: hci2: command tx timeout [ 1042.179683][T18615] netlink: 'syz.3.3436': attribute type 1 has an invalid length. [ 1042.340328][T18615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1042.584538][T18126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.111429][T10111] netdevsim netdevsim6 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.226160][T18126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.268213][T10111] netdevsim netdevsim6 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.500009][ T1160] netdevsim netdevsim6 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.617265][T10111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.624571][T10111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.813041][T18647] syzkaller1: entered promiscuous mode [ 1043.829102][T18647] syzkaller1: entered allmulticast mode [ 1043.857326][ T361] netdevsim netdevsim6 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.909261][T17449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.916554][T17449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.967588][ T36] bridge_slave_1: left allmulticast mode [ 1043.984656][ T36] bridge_slave_1: left promiscuous mode [ 1044.004026][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.024880][T10873] Bluetooth: hci2: command tx timeout [ 1044.112740][ T36] bridge_slave_0: left allmulticast mode [ 1044.135998][ T36] bridge_slave_0: left promiscuous mode [ 1044.154499][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.381938][T18678] netlink: 'syz.2.3454': attribute type 1 has an invalid length. [ 1044.566695][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.578907][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.589670][ T36] bond0 (unregistering): Released all slaves [ 1044.992548][T18678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1045.132019][T18687] __nla_validate_parse: 12 callbacks suppressed [ 1045.132048][T18687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3457'. [ 1045.216925][T18692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3457'. [ 1045.243693][ T36] hsr_slave_0: left promiscuous mode [ 1045.274104][ T36] hsr_slave_1: left promiscuous mode [ 1045.291029][T18687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3457'. [ 1045.309556][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.348281][T18687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3457'. [ 1045.372933][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.387796][T18687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3457'. [ 1045.424363][T18697] Cannot find add_set index 2 as target [ 1045.436887][T18687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3457'. [ 1045.470252][T18687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3457'. [ 1045.505587][T18687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3457'. [ 1045.547478][T18687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3457'. [ 1046.105209][T10873] Bluetooth: hci2: command tx timeout [ 1046.194015][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1046.226937][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1046.518774][T18723] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3466'. [ 1047.151772][T18545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.212587][T18545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.262090][T18545] bridge_slave_0: entered allmulticast mode [ 1047.320761][T18545] bridge_slave_0: entered promiscuous mode [ 1047.419018][T18545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.434324][T18750] block nbd1: not configured, cannot reconfigure [ 1047.481238][T18545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.511241][T18545] bridge_slave_1: entered allmulticast mode [ 1047.583899][T18545] bridge_slave_1: entered promiscuous mode [ 1047.851299][T18545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.895058][T18545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.128755][T18545] team0: Port device team_slave_0 added [ 1048.179920][T18545] team0: Port device team_slave_1 added [ 1048.185352][T10873] Bluetooth: hci2: command tx timeout [ 1048.421590][T18545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.455850][T18545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.552814][T18545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.619891][T18545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.651826][T18545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.784860][T18545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.280739][T18794] netlink: 'syz.1.3486': attribute type 4 has an invalid length. [ 1049.427961][T18545] hsr_slave_0: entered promiscuous mode [ 1049.511176][T18545] hsr_slave_1: entered promiscuous mode [ 1049.811671][T18803] netlink: 'syz.3.3490': attribute type 1 has an invalid length. [ 1049.836146][T18803] netlink: 'syz.3.3490': attribute type 2 has an invalid length. [ 1050.299132][T18818] 9pnet_virtio: no channels available for device syz [ 1050.899727][T18817] __nla_validate_parse: 20 callbacks suppressed [ 1050.899774][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3492'. [ 1051.487532][T18545] netdevsim netdevsim6 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.812795][T18840] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3499'. [ 1051.877111][T18840] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3499'. [ 1051.923734][T18840] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3499'. [ 1052.006395][T18545] netdevsim netdevsim6 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.009207][T18840] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3499'. [ 1052.068421][T18850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3502'. [ 1052.114201][T18840] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3499'. [ 1052.177040][T18847] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3499'. [ 1052.230795][T18853] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3499'. [ 1052.239041][T18126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.324318][T18847] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3499'. [ 1052.517625][T18545] netdevsim netdevsim6 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.866678][T18545] netdevsim netdevsim6 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.039111][T18869] Cannot find del_set index 4 as target [ 1053.150701][T18868] syzkaller0: entered promiscuous mode [ 1053.205291][T18868] syzkaller0: entered allmulticast mode [ 1053.479998][T18882] 9pnet_virtio: no channels available for device syz [ 1053.793495][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.153267][T18545] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1055.212514][T18545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1055.246518][T18545] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1055.290578][T18545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1055.339915][T18545] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1055.370516][T18545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1055.396766][T18545] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1055.437670][T18545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1055.558026][T18126] veth0_vlan: entered promiscuous mode [ 1055.641181][T18126] veth1_vlan: entered promiscuous mode [ 1055.890319][T18126] veth0_macvtap: entered promiscuous mode [ 1056.007829][T18126] veth1_macvtap: entered promiscuous mode [ 1056.243997][T18945] 9pnet_virtio: no channels available for device syz [ 1056.815304][T18944] __nla_validate_parse: 3 callbacks suppressed [ 1056.815352][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3524'. [ 1057.118487][T18545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.160571][T18126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.263623][T18126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.397022][T18545] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.435053][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.476536][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.523622][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.557483][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.564783][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.650812][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.672262][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.679539][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.713047][T18967] netlink: 'syz.8.3529': attribute type 1 has an invalid length. [ 1057.992239][T18965] random: crng reseeded on system resumption [ 1058.070645][T18967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1058.263549][T18975] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1058.357290][T18977] md: couldn't update array info. -22 [ 1058.396597][T18975] md: could not open device unknown-block(7,0). [ 1058.456400][T18975] md: md_import_device returned -16 [ 1058.469879][T18977] md: could not open device unknown-block(7,1). [ 1058.477401][T18977] md: md_import_device returned -16 [ 1058.543045][T18975] md: could not open device unknown-block(7,2). [ 1058.563776][T18975] md: md_import_device returned -16 [ 1058.585503][T18977] md: could not open device unknown-block(7,3). [ 1058.612317][T18977] md: md_import_device returned -16 [ 1058.617846][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.631618][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.868926][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.924718][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.227984][T18985] random: crng reseeded on system resumption [ 1061.336861][T19013] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3539'. [ 1061.354911][T19013] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3539'. [ 1061.366237][T19013] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3539'. [ 1061.378160][T19013] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3539'. [ 1061.405469][T19013] 9pnet_virtio: no channels available for device syz [ 1062.454235][T19029] netlink: 'syz.1.3543': attribute type 1 has an invalid length. [ 1062.746710][T19029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1062.809362][T19044] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1062.871831][T19045] IPVS: Error connecting to the multicast addr [ 1062.925864][T19044] md: couldn't update array info. -22 [ 1062.960145][T19049] md: could not open device unknown-block(7,0). [ 1062.990636][T19049] md: md_import_device returned -16 [ 1063.019722][T19044] md: could not open device unknown-block(7,1). [ 1063.089217][T19044] md: md_import_device returned -16 [ 1063.125073][T19049] md: could not open device unknown-block(7,2). [ 1063.167770][T19049] md: md_import_device returned -16 [ 1063.215981][T19044] md: could not open device unknown-block(7,3). [ 1063.256081][T19044] md: md_import_device returned -16 [ 1063.876033][T18545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.113458][T19082] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3556'. [ 1065.420518][T19099] netlink: 'syz.7.3560': attribute type 13 has an invalid length. [ 1068.050836][T19099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.058766][T19099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.370111][T19111] netlink: 'syz.2.3562': attribute type 1 has an invalid length. [ 1068.511452][T19099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.561478][T19099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.333099][T19111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1069.363385][T19129] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1069.447702][T19129] md: couldn't update array info. -22 [ 1069.454125][T10105] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.473350][T19131] md: could not open device unknown-block(7,0). [ 1069.499839][T19131] md: md_import_device returned -16 [ 1069.505534][T10105] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.522749][T19129] md: could not open device unknown-block(7,1). [ 1069.541528][T19129] md: md_import_device returned -16 [ 1069.547298][T10105] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.570552][T10105] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.605565][T19129] md: could not open device unknown-block(7,2). [ 1069.622006][T19129] md: md_import_device returned -16 [ 1069.648637][T19131] md: could not open device unknown-block(7,3). [ 1069.686569][T19131] md: md_import_device returned -16 [ 1069.732561][T19134] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3566'. [ 1069.809756][T19134] gretap0: entered promiscuous mode [ 1069.909758][T19134] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3566'. [ 1069.971563][T19134] 0ªî{X¹¦: renamed from gretap0 [ 1070.016706][T19134] 0ªî{X¹¦: left promiscuous mode [ 1070.048005][T19134] 0ªî{X¹¦: entered allmulticast mode [ 1070.087368][T19134] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1070.196581][T18545] veth0_vlan: entered promiscuous mode [ 1070.270963][T18545] veth1_vlan: entered promiscuous mode [ 1070.456186][T18545] veth0_macvtap: entered promiscuous mode [ 1070.498532][T18545] veth1_macvtap: entered promiscuous mode [ 1070.599278][T18545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.702400][T18545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.803799][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.850824][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.896450][T19160] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3572'. [ 1070.980584][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.029281][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.127701][T19159] syzkaller1: entered promiscuous mode [ 1071.137570][T19159] syzkaller1: entered allmulticast mode [ 1071.982001][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.039286][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.976171][ T6118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.071012][ T6118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.276244][T19194] random: crng reseeded on system resumption [ 1077.125335][T19193] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1077.271528][T19195] md: couldn't update array info. -22 [ 1077.324732][T19193] md: could not open device unknown-block(7,0). [ 1077.355373][T19193] md: md_import_device returned -16 [ 1077.385208][T19195] md: could not open device unknown-block(7,1). [ 1077.415695][T19195] md: md_import_device returned -16 [ 1077.453848][T19193] md: could not open device unknown-block(7,2). [ 1077.496076][T19193] md: md_import_device returned -16 [ 1077.525180][T19195] md: could not open device unknown-block(7,3). [ 1077.551733][T19195] md: md_import_device returned -16 [ 1077.591221][ T5789] IPVS: starting estimator thread 0... [ 1077.711858][T19206] IPVS: using max 25 ests per chain, 60000 per kthread [ 1077.808483][T19209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3583'. [ 1078.141203][T19217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3584'. [ 1079.322375][T16151] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1079.351335][T16151] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1079.363012][T16151] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1079.377161][T16151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1079.413215][T16151] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1079.852366][T19247] netlink: zone id is out of range [ 1079.875041][T19247] netlink: get zone limit has 4 unknown bytes [ 1080.057772][T19253] md: couldn't update array info. -22 [ 1080.096878][T19253] md: could not open device unknown-block(7,0). [ 1080.123789][T19253] md: md_import_device returned -16 [ 1080.151533][T19257] md: could not open device unknown-block(7,1). [ 1080.176012][T19257] md: md_import_device returned -16 [ 1080.210727][T19253] md: could not open device unknown-block(7,2). [ 1080.234128][T19253] md: md_import_device returned -16 [ 1081.549154][T16151] Bluetooth: hci5: command tx timeout [ 1083.681331][T16151] Bluetooth: hci5: command tx timeout [ 1084.378970][T19285] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.828348][T19285] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.216439][T19285] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.484610][T19236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.515749][T19236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.533361][T19236] bridge_slave_0: entered allmulticast mode [ 1085.550895][T19236] bridge_slave_0: entered promiscuous mode [ 1085.597662][T19073] syz_tun (unregistering): left allmulticast mode [ 1085.635018][T19236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.645932][T19236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.653280][T19236] bridge_slave_1: entered allmulticast mode [ 1085.661664][T19236] bridge_slave_1: entered promiscuous mode [ 1085.703595][T19285] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.713752][T16151] Bluetooth: hci5: command tx timeout [ 1085.908315][ T6118] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1085.923047][ T6118] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.961701][T19236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.993263][T19236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.099058][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.139121][ T6118] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.180280][ T6118] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.323626][T19236] team0: Port device team_slave_0 added [ 1086.441486][ T57] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.481335][T19309] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1086.497371][T19150] Set syz1 is full, maxelem 65536 reached [ 1086.501514][T19236] team0: Port device team_slave_1 added [ 1086.656194][T19309] md: couldn't update array info. -22 [ 1086.677908][T19312] md: could not open device unknown-block(7,0). [ 1086.706662][T19312] md: md_import_device returned -16 [ 1086.741160][T19313] md: could not open device unknown-block(7,1). [ 1086.765272][T19313] md: md_import_device returned -16 [ 1086.792249][ T6118] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.811825][T19309] md: could not open device unknown-block(7,2). [ 1086.841648][ T6118] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.875785][T19309] md: md_import_device returned -16 [ 1086.925473][T10873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1086.938419][T19313] md: could not open device unknown-block(7,3). [ 1086.945370][T10873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1086.946938][T19313] md: md_import_device returned -16 [ 1086.963373][T10873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1086.983325][T10873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1087.010733][T10873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1087.023462][T19236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.084160][T19236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.147372][T19236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.185533][ T361] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.239472][ T6118] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1087.278682][ T6118] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.352089][T19236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.374300][T19236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.402930][T19236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.459090][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.642830][T19236] hsr_slave_0: entered promiscuous mode [ 1087.677918][T19236] hsr_slave_1: entered promiscuous mode [ 1087.732275][T19236] debugfs: 'hsr0' already exists in 'hsr' [ 1087.761245][T19236] Cannot create hsr debugfs directory [ 1087.787051][T16151] Bluetooth: hci5: command tx timeout [ 1087.897283][T19333] md: couldn't update array info. -22 [ 1087.948794][T19337] md: could not open device unknown-block(7,0). [ 1088.002715][T19337] md: md_import_device returned -16 [ 1088.040647][T19338] md: could not open device unknown-block(7,1). [ 1088.085898][T19338] md: md_import_device returned -16 [ 1088.133838][T19333] md: could not open device unknown-block(7,2). [ 1088.164601][T19333] md: md_import_device returned -16 [ 1088.503472][ T1053] netdevsim netdevsim8 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.647402][T19363] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1088.755260][T19363] md: couldn't update array info. -22 [ 1088.774327][T19365] md: could not open device unknown-block(7,0). [ 1088.814245][ T361] netdevsim netdevsim8 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.840135][T19365] md: md_import_device returned -16 [ 1088.880095][T19363] md: could not open device unknown-block(7,1). [ 1088.905167][T19363] md: md_import_device returned -16 [ 1088.970616][T19370] md: could not open device unknown-block(7,2). [ 1089.065354][T16151] Bluetooth: hci4: command tx timeout [ 1089.083428][T19370] md: md_import_device returned -16 [ 1089.138144][T19375] md: could not open device unknown-block(7,3). [ 1089.165082][T19375] md: md_import_device returned -16 [ 1089.345744][T19377] 9pnet_virtio: no channels available for device syz [ 1089.961332][ T1053] netdevsim netdevsim8 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.245596][T19376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3613'. [ 1090.419882][ T1053] netdevsim netdevsim8 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.463284][ T6118] bridge_slave_1: left allmulticast mode [ 1090.490202][ T6118] bridge_slave_1: left promiscuous mode [ 1090.519343][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.568313][ T6118] bridge_slave_0: left allmulticast mode [ 1090.590250][ T6118] bridge_slave_0: left promiscuous mode [ 1090.606061][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.973769][ T6118] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1091.051391][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.063002][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.079662][ T6118] bond0 (unregistering): Released all slaves [ 1091.103423][ T6118] bond1 (unregistering): Released all slaves [ 1091.134232][ T6118] bond2 (unregistering): Released all slaves [ 1091.145299][T16151] Bluetooth: hci4: command tx timeout [ 1091.282159][T19399] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.524124][ T1053] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.788550][T19413] md: couldn't update array info. -22 [ 1091.828491][T19413] md: could not open device unknown-block(7,0). [ 1091.840462][T19413] md: md_import_device returned -16 [ 1091.891529][T19413] md: could not open device unknown-block(7,1). [ 1091.925043][T19413] md: md_import_device returned -16 [ 1091.941372][T19422] md: could not open device unknown-block(7,2). [ 1091.969976][T19422] md: md_import_device returned -16 [ 1092.499281][T19438] 9pnet_virtio: no channels available for device syz [ 1093.229629][T16151] Bluetooth: hci4: command tx timeout [ 1093.501480][T19236] netdevsim netdevsim5 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.721965][T19436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3626'. [ 1093.823036][ T6118] hsr_slave_0: left promiscuous mode [ 1093.852895][T19457] random: crng reseeded on system resumption [ 1094.010452][ T6118] hsr_slave_1: left promiscuous mode [ 1094.130652][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.305069][T16151] Bluetooth: hci4: command tx timeout [ 1095.438931][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 1095.497929][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 1096.074202][T19236] netdevsim netdevsim5 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.347032][T19493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3640'. [ 1096.364042][T19493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3640'. [ 1096.376040][T19493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3640'. [ 1096.387674][T19493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3640'. [ 1096.418678][T19493] 9pnet_virtio: no channels available for device syz [ 1097.893284][T19236] netdevsim netdevsim5 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.402670][T19236] netdevsim netdevsim5 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.607806][ T6118] IPVS: stop unused estimator thread 0... [ 1099.557185][T19559] 9pnet_virtio: no channels available for device syz [ 1100.356420][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3656'. [ 1100.682567][T19561] syzkaller0: entered promiscuous mode [ 1100.713475][T19561] syzkaller0: entered allmulticast mode [ 1100.931149][T19579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3660'. [ 1103.804333][T19317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.830496][T19317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.861935][T19317] bridge_slave_0: entered allmulticast mode [ 1103.907866][T19317] bridge_slave_0: entered promiscuous mode [ 1103.936283][T19236] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1103.953905][T19605] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3661'. [ 1103.983100][T19605] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3661'. [ 1104.011114][T19236] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1104.032844][T19236] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1104.071428][T19236] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1104.110445][T19317] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.139883][T19317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.169669][T19317] bridge_slave_1: entered allmulticast mode [ 1104.199112][T19317] bridge_slave_1: entered promiscuous mode [ 1104.274036][T19236] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1104.377151][T19236] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1104.407956][T19236] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1104.440682][T19236] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1104.602801][T19627] netlink: 'syz.6.3668': attribute type 1 has an invalid length. [ 1104.630002][T19627] netlink: 'syz.6.3668': attribute type 4 has an invalid length. [ 1104.649172][T19627] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3668'. [ 1104.668835][T19621] netlink: 'syz.6.3668': attribute type 1 has an invalid length. [ 1104.698113][T19621] netlink: 'syz.6.3668': attribute type 4 has an invalid length. [ 1104.731295][T19621] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3668'. [ 1104.773046][T19624] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3668'. [ 1104.860952][T19317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.924344][T19317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.008180][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3671'. [ 1105.755316][T19652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3671'. [ 1106.331147][T10105] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1106.414396][T19668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3678'. [ 1106.449940][T19317] team0: Port device team_slave_0 added [ 1106.470652][T19668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3678'. [ 1106.478419][T19317] team0: Port device team_slave_1 added [ 1106.502467][T10105] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1106.514381][T10105] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1106.576706][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1106.708919][T19317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.747114][T19317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.808715][T19317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.823917][T19317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.837477][T19317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.864418][T19317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.877504][T19680] netlink: 5408 bytes leftover after parsing attributes in process `syz.1.3683'. [ 1106.906053][T19680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1107.003321][T19317] hsr_slave_0: entered promiscuous mode [ 1107.010403][T19317] hsr_slave_1: entered promiscuous mode [ 1107.017298][T19317] debugfs: 'hsr0' already exists in 'hsr' [ 1107.023042][T19317] Cannot create hsr debugfs directory [ 1107.170377][T10105] netdevsim netdevsim7 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.269877][ T6119] netdevsim netdevsim7 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.429588][ T6119] netdevsim netdevsim7 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.488340][T10105] netdevsim netdevsim7 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.513536][ T6118] bridge_slave_1: left allmulticast mode [ 1107.524629][ T6118] bridge_slave_1: left promiscuous mode [ 1107.531086][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.541659][ T6118] bridge_slave_0: left allmulticast mode [ 1107.548080][ T6118] bridge_slave_0: left promiscuous mode [ 1107.553939][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.722693][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1107.733374][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1107.752873][ T6118] bond0 (unregistering): Released all slaves [ 1107.783232][T19236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.874358][T19317] netdevsim netdevsim9 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.932287][T19236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.947841][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.955069][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.019364][T19317] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.053508][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.060678][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.127266][T19317] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.179939][ T6118] hsr_slave_0: left promiscuous mode [ 1108.193168][ T6118] hsr_slave_1: left promiscuous mode [ 1108.202809][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.211788][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.393065][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 1108.415417][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 1108.598452][T19317] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.290680][T19662] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1109.405755][T19317] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1109.459872][T19317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1109.516987][T19317] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1109.581958][T19317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1109.618043][T19317] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1109.691192][T19317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1109.738715][T19236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.789031][T19710] random: crng reseeded on system resumption [ 1110.102434][T19317] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1110.896389][T19317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1110.909183][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3692'. [ 1111.497076][T19734] syzkaller0: entered promiscuous mode [ 1111.527027][T19734] syzkaller0: entered allmulticast mode [ 1111.859061][T19743] 9pnet_virtio: no channels available for device syz [ 1112.355332][T19742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3697'. [ 1112.671511][T19317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.781212][T19747] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3698'. [ 1112.815114][T19746] syzkaller1: entered promiscuous mode [ 1112.860519][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3699'. [ 1112.870720][T19746] syzkaller1: entered allmulticast mode [ 1113.123612][T19317] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.200984][T10111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.208480][T10111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.208632][T19755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1113.263297][T10111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.270558][T10111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.279275][T19756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1113.337672][T19755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1113.378578][T19755] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1113.451921][T19755] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1113.503305][T19756] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1113.535465][T19236] veth0_vlan: entered promiscuous mode [ 1113.647500][T19236] veth1_vlan: entered promiscuous mode [ 1113.771406][T19767] random: crng reseeded on system resumption [ 1115.229301][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.553785][T19236] veth0_macvtap: entered promiscuous mode [ 1115.656933][T19236] veth1_macvtap: entered promiscuous mode [ 1115.756899][T19236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.829184][T19236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.055678][T19803] 9pnet_virtio: no channels available for device syz [ 1116.820661][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.854890][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.378695][T19802] __nla_validate_parse: 4 callbacks suppressed [ 1117.378723][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3711'. [ 1117.460050][T19794] syzkaller1: entered promiscuous mode [ 1117.490800][T19794] syzkaller1: entered allmulticast mode [ 1117.942526][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.969520][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.392465][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.435694][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.614258][T10105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.670404][T10105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.720854][T19831] random: crng reseeded on system resumption [ 1118.902220][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3722'. [ 1119.087629][T19845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3722'. [ 1119.151404][T19852] netlink: 388 bytes leftover after parsing attributes in process `syz.5.3588'. [ 1119.188924][T19855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.231167][T19317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.254495][T19847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3723'. [ 1119.339172][T19855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.428923][T19855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.730182][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3725'. [ 1119.747995][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3725'. [ 1119.760326][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3725'. [ 1119.776023][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3725'. [ 1119.806215][T19869] 9pnet_virtio: no channels available for device syz [ 1120.994435][T19881] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3728'. [ 1121.962005][T19891] syzkaller1: entered promiscuous mode [ 1122.035257][T19891] syzkaller1: entered allmulticast mode [ 1122.486935][T19911] random: crng reseeded on system resumption [ 1122.941588][T19317] veth0_vlan: entered promiscuous mode [ 1123.008179][T19920] tipc: Started in network mode [ 1123.035925][T19920] tipc: Node identity 96b853e9266d, cluster identity 4711 [ 1123.070785][T19920] tipc: Enabled bearer , priority 0 [ 1123.424589][T19937] 9pnet_virtio: no channels available for device syz [ 1124.296562][T19921] syzkaller0: entered promiscuous mode [ 1124.307313][T19921] syzkaller0: entered allmulticast mode [ 1124.332557][T19921] tipc: Resetting bearer [ 1124.406922][T19936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3740'. [ 1124.819978][ T47] tipc: Resetting bearer [ 1124.869431][T19917] tipc: Resetting bearer [ 1127.937037][T19953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1128.210152][T19984] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3750'. [ 1128.261048][T19917] tipc: Disabling bearer [ 1128.285968][T11684] tipc: Node number set to 2966770665 [ 1128.302047][T19971] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1128.412391][T19317] veth1_vlan: entered promiscuous mode [ 1128.613443][T19317] veth0_macvtap: entered promiscuous mode [ 1128.674423][T19317] veth1_macvtap: entered promiscuous mode [ 1128.724575][T19985] syzkaller1: entered promiscuous mode [ 1128.761744][T19985] syzkaller1: entered allmulticast mode [ 1128.806108][T19993] random: crng reseeded on system resumption [ 1129.029270][T20010] syzkaller0: entered promiscuous mode [ 1129.047899][T20010] syzkaller0: entered allmulticast mode [ 1129.151174][T19317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.179035][T20003] tipc: Started in network mode [ 1129.209583][T20003] tipc: Node identity daa5c0afaeb3, cluster identity 4711 [ 1129.223029][T20003] tipc: Enabled bearer , priority 0 [ 1129.317028][T19317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.503180][T20023] 9pnet_virtio: no channels available for device syz [ 1130.293351][T20003] tipc: Resetting bearer [ 1130.337182][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3756'. [ 1130.364517][T19995] tipc: Resetting bearer [ 1130.467547][T19995] tipc: Disabling bearer [ 1130.598471][T11661] tipc: Node number set to 1947648175 [ 1130.641738][T10111] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.688375][T10111] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.031325][T10111] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.068339][T10111] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.853180][T20059] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1132.871889][T20059] bond1 (unregistering): Released all slaves [ 1133.057328][T20079] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3768'. [ 1133.867774][T20043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1134.046183][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.054527][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.327777][T10111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.373239][T10111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.540643][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3770'. [ 1134.558649][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3770'. [ 1134.571507][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3770'. [ 1134.583143][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3770'. [ 1134.614229][T20101] 9pnet_virtio: no channels available for device syz [ 1135.276765][T20104] netlink: 'syz.5.3771': attribute type 29 has an invalid length. [ 1135.284710][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3771'. [ 1135.296384][T20104] netlink: 'syz.5.3771': attribute type 29 has an invalid length. [ 1135.304323][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3771'. [ 1135.859574][T20117] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1135.922991][T20117] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1135.968231][T20117] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1137.252868][T20134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3779'. [ 1137.654020][T16151] block nbd0: Receive control failed (result -107) [ 1137.725911][T20142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3781'. [ 1137.745519][T20142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3781'. [ 1137.759256][T20142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3781'. [ 1137.773039][T20142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3781'. [ 1137.784677][T20142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3781'. [ 1137.870188][T20143] 9pnet_virtio: no channels available for device syz [ 1138.797833][T20157] 9pnet_virtio: no channels available for device syz [ 1139.700572][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3784'. [ 1143.713970][T20185] loop9: detected capacity change from 0 to 512 [ 1143.763848][T20185] EXT4-fs: Ignoring removed bh option [ 1144.867614][T20185] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1144.897002][T20198] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3797'. [ 1144.898092][T20185] EXT4-fs (loop9): 1 truncate cleaned up [ 1144.913619][T20202] netlink: 'syz.1.3797': attribute type 1 has an invalid length. [ 1144.925614][T20202] netlink: 'syz.1.3797': attribute type 4 has an invalid length. [ 1144.951538][T20202] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3797'. [ 1145.011535][T20185] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1145.122173][T20185] EXT4-fs: Ignoring removed bh option [ 1145.223027][T20185] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 1145.518712][T19317] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.062674][T20219] ip6gre1: entered promiscuous mode [ 1146.218341][T20230] 9pnet_virtio: no channels available for device syz [ 1146.277165][T20219] ip6gre1: entered allmulticast mode [ 1146.810156][T20229] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3802'. [ 1147.402155][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3808'. [ 1147.587872][T20256] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3810'. [ 1147.745192][T20254] syzkaller1: entered promiscuous mode [ 1147.786861][T20254] syzkaller1: entered allmulticast mode [ 1148.001741][T20266] netlink: 'syz.6.3813': attribute type 1 has an invalid length. [ 1148.137806][T20266] netlink: 'syz.6.3813': attribute type 4 has an invalid length. [ 1148.280307][T20266] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3813'. [ 1148.961388][T20264] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3813'. [ 1149.393087][T20288] loop6: detected capacity change from 0 to 128 [ 1149.487892][T20288] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1149.545011][T20288] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1149.960437][T18545] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1150.281512][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3822'. [ 1150.303164][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3822'. [ 1150.316475][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3822'. [ 1150.333186][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3822'. [ 1150.358485][T20308] 9pnet_virtio: no channels available for device syz [ 1151.147572][T20312] loop6: detected capacity change from 0 to 2048 [ 1151.179559][T20321] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3828'. [ 1151.283885][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3825'. [ 1151.307050][T20312] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1151.320869][T20326] syzkaller1: entered promiscuous mode [ 1151.345203][T20326] syzkaller1: entered allmulticast mode [ 1151.346778][T20312] UDF-fs: Scanning with blocksize 512 failed [ 1151.467482][T20332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3829'. [ 1151.640106][T20312] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1151.847104][T20312] UDF-fs: Scanning with blocksize 1024 failed [ 1152.470272][T20312] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=515, location=515 [ 1152.487951][T20312] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1152.566007][T20312] UDF-fs: Scanning with blocksize 2048 failed [ 1152.588998][T20312] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=259, location=259 [ 1152.626677][T20312] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=515, location=515 [ 1152.728447][T20312] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1152.739580][T20332] bond2: entered promiscuous mode [ 1152.778539][T20332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1152.792321][T20312] UDF-fs: Scanning with blocksize 4096 failed [ 1152.846704][T20312] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 1152.909105][T20340] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1153.172755][T20340] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 1153.495665][T20340] bond2: (slave sit1): Error -95 calling set_mac_address [ 1154.297551][T20367] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3838'. [ 1154.587040][T20367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1154.670001][T20381] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1154.763220][T20367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.638240][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3843'. [ 1161.006495][T20501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3876'. [ 1162.086579][T20525] loop5: detected capacity change from 0 to 2048 [ 1162.232180][T20525] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1162.277779][T20525] UDF-fs: Scanning with blocksize 512 failed [ 1162.323434][T20525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1163.922187][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3896'. [ 1163.943125][T20559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3894'. [ 1164.612824][T20559] batadv0: entered promiscuous mode [ 1164.693189][T20559] macsec1: entered promiscuous mode [ 1164.753659][T20559] macsec1: entered allmulticast mode [ 1164.831671][T20559] batadv0: entered allmulticast mode [ 1164.896881][T20589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3901'. [ 1164.920055][T20559] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1164.983321][T20559] batadv0: left allmulticast mode [ 1165.058413][T20559] batadv0: left promiscuous mode [ 1167.920288][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3915'. [ 1167.960114][T20660] overlayfs: overlapping lowerdir path [ 1168.016201][T20661] random: crng reseeded on system resumption [ 1169.179229][T20667] loop9: detected capacity change from 0 to 128 [ 1169.359141][T20670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3919'. [ 1169.518677][T20667] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 1169.588612][T20667] FAT-fs (loop9): Filesystem has been set read-only [ 1169.839853][T20676] netlink: 5408 bytes leftover after parsing attributes in process `syz.5.3920'. [ 1169.888717][T20676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1170.713172][T20699] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1170.805079][T20699] md: couldn't update array info. -22 [ 1171.065506][T20706] md: could not open device unknown-block(7,0). [ 1171.213863][T20706] md: md_import_device returned -16 [ 1171.534637][T20699] md: could not open device unknown-block(7,1). [ 1171.749827][T20699] md: md_import_device returned -16 [ 1171.802083][T20707] md: could not open device unknown-block(7,2). [ 1171.835046][T20707] md: md_import_device returned -16 [ 1171.903894][T20706] md: could not open device unknown-block(7,3). [ 1171.926177][T20706] md: md_import_device returned -16 [ 1172.819291][T20732] loop9: detected capacity change from 0 to 256 [ 1172.875119][T20726] overlayfs: overlapping lowerdir path [ 1172.936532][T20731] random: crng reseeded on system resumption [ 1173.546936][T20739] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3936'. [ 1173.565207][ T30] audit: type=1804 audit(1785243183.188:4): pid=20732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.3935" name="/newroot/25/file0/bus" dev="loop9" ino=1048770 res=1 errno=0 [ 1173.625077][T20708] Bluetooth: hci2: command 0x0406 tx timeout [ 1173.668155][T20740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3937'. [ 1174.023183][T20740] batadv0: entered promiscuous mode [ 1174.086700][T20740] macsec1: entered promiscuous mode [ 1174.157122][T20740] macsec1: entered allmulticast mode [ 1174.162775][T20740] batadv0: entered allmulticast mode [ 1174.208682][T20740] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1174.253990][T20756] netlink: 5408 bytes leftover after parsing attributes in process `syz.5.3940'. [ 1174.322051][T20756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1174.337800][T20740] batadv0: left allmulticast mode [ 1174.442945][T20740] batadv0: left promiscuous mode [ 1176.157405][T20783] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1176.245229][T20783] md: couldn't update array info. -22 [ 1176.259237][T20785] md: could not open device unknown-block(7,0). [ 1176.285970][T20785] md: md_import_device returned -16 [ 1176.311519][T20783] md: could not open device unknown-block(7,1). [ 1176.326970][T20783] md: md_import_device returned -16 [ 1176.378306][T20785] md: could not open device unknown-block(7,2). [ 1176.411311][T20785] md: md_import_device returned -16 [ 1176.465638][T20783] md: could not open device unknown-block(7,3). [ 1176.491688][T20783] md: md_import_device returned -16 [ 1176.685456][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.051153][T20811] overlayfs: overlapping lowerdir path [ 1177.099725][T20811] random: crng reseeded on system resumption [ 1180.206348][T20827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3956'. [ 1180.318415][T20831] netlink: 5408 bytes leftover after parsing attributes in process `syz.3.3958'. [ 1180.358567][T20831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1182.458846][T20854] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1182.573446][T20854] md: couldn't update array info. -22 [ 1182.656526][T20854] md: could not open device unknown-block(7,0). [ 1182.692742][T20854] md: md_import_device returned -16 [ 1182.713176][T20860] md: could not open device unknown-block(7,1). [ 1182.785176][T20860] md: md_import_device returned -16 [ 1182.828207][T20854] md: could not open device unknown-block(7,2). [ 1182.877688][T20854] md: md_import_device returned -16 [ 1182.910696][T20860] md: could not open device unknown-block(7,3). [ 1182.981061][T20860] md: md_import_device returned -16 [ 1183.162666][T20880] overlayfs: overlapping lowerdir path [ 1183.267714][T20882] random: crng reseeded on system resumption [ 1184.720671][T20889] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3971'. [ 1184.890492][T16151] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1185.008807][T20889] batadv0: entered promiscuous mode [ 1185.023655][T20902] netlink: 5408 bytes leftover after parsing attributes in process `syz.3.3976'. [ 1185.050645][T20902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1185.063058][T20889] macsec1: entered promiscuous mode [ 1185.117978][T20889] macsec1: entered allmulticast mode [ 1185.182202][T20889] batadv0: entered allmulticast mode [ 1185.245657][T20889] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1185.327084][T20889] batadv0: left allmulticast mode [ 1185.435804][T20889] batadv0: left promiscuous mode [ 1188.062170][T20936] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1188.155959][T20936] md: couldn't update array info. -22 [ 1188.178203][T20941] md: could not open device unknown-block(7,0). [ 1188.190212][T20940] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1188.224919][T20941] md: md_import_device returned -16 [ 1188.308467][T20936] md: could not open device unknown-block(7,1). [ 1188.332760][T20944] loop6: detected capacity change from 0 to 512 [ 1188.408328][T20936] md: md_import_device returned -16 [ 1188.465233][T20944] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1188.487905][T20944] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 1188.505995][T20944] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1188.640240][T20941] md: could not open device unknown-block(7,2). [ 1188.649080][T20944] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz.6.3987: bg 0: block 15: invalid block bitmap [ 1188.658676][T20941] md: md_import_device returned -16 [ 1188.703426][T20944] loop6: lost filesystem error report for type 5 error -117 [ 1188.744898][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1188.760251][ C1] EXT4-fs (loop6): initial error at time 1785243454: ext4_validate_block_bitmap:431 [ 1188.760290][T20948] md: could not open device unknown-block(7,3). [ 1188.760368][T20948] md: md_import_device returned -16 [ 1188.770653][ C1] EXT4-fs (loop6): last error at time 1785243454: ext4_validate_block_bitmap:431 [ 1188.860563][T20944] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1188.887342][T20954] loop5: detected capacity change from 0 to 1024 [ 1188.904372][T20944] loop6: lost filesystem error report for type 5 error -117 [ 1188.906662][T20944] EXT4-fs (loop6): 1 truncate cleaned up [ 1188.942641][T20954] EXT4-fs: Ignoring removed i_version option [ 1188.983542][T20954] EXT4-fs: inline encryption not supported [ 1189.008170][T20954] EXT4-fs: quotafile must be on filesystem root [ 1189.026423][T20944] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1189.215855][T20944] EXT4-fs (loop6): shut down requested (2) [ 1189.378254][T20964] futex_wake_op: syz.3.3991 tries to shift op by 144; fix this program [ 1190.354529][T18545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.580361][T20997] loop6: detected capacity change from 0 to 2048 [ 1192.676734][T20997] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1193.029383][ T30] audit: type=1800 audit(1785243458.696:5): pid=21008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4001" name="bus" dev="loop6" ino=1367 res=0 errno=0 [ 1193.080116][T21007] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1193.205494][T21007] md: couldn't update array info. -22 [ 1193.298267][T21013] md: could not open device unknown-block(7,0). [ 1193.324932][T21013] md: md_import_device returned -16 [ 1193.349828][T21007] md: could not open device unknown-block(7,1). [ 1193.394026][T21007] md: md_import_device returned -16 [ 1193.456387][T21013] md: could not open device unknown-block(7,2). [ 1193.524872][T21013] md: md_import_device returned -16 [ 1193.577129][T21007] md: could not open device unknown-block(7,3). [ 1193.647678][T21007] md: md_import_device returned -16 [ 1193.659205][T18545] UDF-fs: error (device loop6): udf_read_inode: (ino 1317) failed !bh [ 1193.808143][T18545] UDF-fs: error (device loop6): udf_read_inode: (ino 1317) failed !bh [ 1194.701596][T21027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4007'. [ 1197.294749][T21027] batadv0: entered promiscuous mode [ 1197.359326][T21027] macsec1: entered promiscuous mode [ 1197.418737][T21027] macsec1: entered allmulticast mode [ 1197.439874][T21027] batadv0: entered allmulticast mode [ 1197.465595][T21027] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1197.568895][T21027] batadv0: left allmulticast mode [ 1197.575315][T21027] batadv0: left promiscuous mode [ 1197.894082][T21031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1198.211388][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.659871][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.068148][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.660607][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.686925][T20708] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1200.690548][T21086] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1200.713585][T20708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1200.724393][T20708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1200.734201][T20708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1200.743452][T20708] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1200.860811][T21088] md: couldn't update array info. -22 [ 1200.889808][T21093] md: could not open device unknown-block(7,1). [ 1200.959312][T21093] md: md_import_device returned -16 [ 1201.025139][T21086] md: could not open device unknown-block(7,0). [ 1201.058543][T21100] netlink: 'syz.5.4022': attribute type 1 has an invalid length. [ 1201.103971][T21086] md: md_import_device returned -16 [ 1201.105475][T21100] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.4022'. [ 1201.151437][T21088] md: could not open device unknown-block(7,2). [ 1201.170870][T21102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4017'. [ 1201.221967][T21088] md: md_import_device returned -16 [ 1201.294350][T21086] md: could not open device unknown-block(7,3). [ 1201.380973][T21086] md: md_import_device returned -16 [ 1201.882989][ T6119] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.518149][T21116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1202.545337][ T6119] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.572803][ T6119] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.806686][T21141] loop9: detected capacity change from 0 to 256 [ 1202.819660][ T6119] netdevsim netdevsim6 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.832118][T20708] Bluetooth: hci2: command tx timeout [ 1202.953882][ T13] bridge_slave_1: left allmulticast mode [ 1203.018501][ T13] bridge_slave_1: left promiscuous mode [ 1203.038920][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.137206][ T13] bridge_slave_0: left allmulticast mode [ 1203.164882][ T13] bridge_slave_0: left promiscuous mode [ 1203.192067][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.250402][T21141] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 1203.339869][T21157] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1203.456946][T21157] md: couldn't update array info. -22 [ 1203.478368][T21162] md: could not open device unknown-block(7,0). [ 1203.516398][T21162] md: md_import_device returned -16 [ 1203.550815][T21157] md: could not open device unknown-block(7,1). [ 1203.585084][T21157] md: md_import_device returned -16 [ 1203.631187][T21162] md: could not open device unknown-block(7,2). [ 1203.669133][T21162] md: md_import_device returned -16 [ 1203.740006][T21157] md: could not open device unknown-block(7,3). [ 1203.760572][T21157] md: md_import_device returned -16 [ 1203.933469][T21175] netlink: 'syz.9.4040': attribute type 1 has an invalid length. [ 1203.980350][T21175] netlink: 16150 bytes leftover after parsing attributes in process `syz.9.4040'. [ 1204.225195][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1204.275649][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.331155][ T13] bond0 (unregistering): Released all slaves [ 1204.344990][T20708] Bluetooth: hci5: command 0x0406 tx timeout [ 1204.735212][ T13] tipc: Left network mode [ 1204.808289][T21192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4039'. [ 1204.934403][T16151] Bluetooth: hci2: command tx timeout [ 1205.534272][T21131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1205.970678][T21217] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1206.015630][T21208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1206.057891][T21217] md: couldn't update array info. -22 [ 1206.078258][T21222] md: could not open device unknown-block(7,0). [ 1206.119992][T21222] md: md_import_device returned -16 [ 1206.138666][T21217] md: could not open device unknown-block(7,1). [ 1206.169277][T21223] netlink: 'syz.3.4053': attribute type 1 has an invalid length. [ 1206.178710][T21217] md: md_import_device returned -16 [ 1206.205095][T21223] netlink: 'syz.3.4053': attribute type 4 has an invalid length. [ 1206.218747][T21211] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1206.233358][T21223] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4053'. [ 1206.242457][T21219] 9p: Bad value for 'rfdno' [ 1206.262735][T21217] md: could not open device unknown-block(7,2). [ 1206.311788][T21217] md: md_import_device returned -16 [ 1206.350901][T21227] md: could not open device unknown-block(7,3). [ 1206.387825][T21227] md: md_import_device returned -16 [ 1206.985008][T16151] Bluetooth: hci2: command tx timeout [ 1208.156413][ T13] hsr_slave_0: left promiscuous mode [ 1208.193076][ T13] hsr_slave_1: left promiscuous mode [ 1208.215358][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1208.250874][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1208.277905][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1208.297489][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.361414][ T13] veth1_macvtap: left promiscuous mode [ 1208.375172][ T13] veth0_macvtap: left promiscuous mode [ 1208.386469][ T13] veth1_vlan: left promiscuous mode [ 1208.404187][ T13] veth0_vlan: left promiscuous mode [ 1208.804620][T21271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4059'. [ 1209.067015][T20708] Bluetooth: hci2: command tx timeout [ 1209.198424][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1209.216849][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1209.385132][T21254] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1209.575402][T20708] Bluetooth: hci4: command 0x0406 tx timeout [ 1210.063820][T21286] netlink: 'syz.2.4066': attribute type 1 has an invalid length. [ 1210.117585][T21286] netlink: 'syz.2.4066': attribute type 4 has an invalid length. [ 1210.164322][T21286] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4066'. [ 1210.424336][T21294] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1210.499664][T21294] md: couldn't update array info. -22 [ 1210.531380][ T13] IPVS: stop unused estimator thread 0... [ 1210.565470][T21294] md: could not open device unknown-block(7,0). [ 1210.593150][T21294] md: md_import_device returned -16 [ 1210.611695][T21303] md: could not open device unknown-block(7,1). [ 1210.618239][T21303] md: md_import_device returned -16 [ 1210.716461][T21294] md: could not open device unknown-block(7,2). [ 1210.734305][T21083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.745385][T21294] md: md_import_device returned -16 [ 1210.755519][T21303] md: could not open device unknown-block(7,3). [ 1210.768739][T21083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.778645][T21303] md: md_import_device returned -16 [ 1210.804593][T21083] bridge_slave_0: entered allmulticast mode [ 1210.850022][T21083] bridge_slave_0: entered promiscuous mode [ 1210.876568][T21083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.912509][T21083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.948863][T21083] bridge_slave_1: entered allmulticast mode [ 1210.985273][T21083] bridge_slave_1: entered promiscuous mode [ 1211.170167][T21083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.276223][T21083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.508492][T21083] team0: Port device team_slave_0 added [ 1211.549820][T21083] team0: Port device team_slave_1 added [ 1212.556653][T21083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.578926][T21083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.607555][T21083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.621548][T21083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.632890][T21083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.674912][T21083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.743675][T21327] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1212.810200][T21276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1212.932567][T21083] hsr_slave_0: entered promiscuous mode [ 1212.978418][T21083] hsr_slave_1: entered promiscuous mode [ 1213.987529][T21342] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4080'. [ 1214.011905][T21342] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4080'. [ 1214.021354][T21337] netlink: 'syz.1.4078': attribute type 12 has an invalid length. [ 1214.029376][T21337] netlink: 'syz.1.4078': attribute type 29 has an invalid length. [ 1214.039279][T21337] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4078'. [ 1214.099845][T21344] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4080'. [ 1214.116672][T21346] netlink: zone id is out of range [ 1214.140503][T21346] netlink: zone id is out of range [ 1214.148368][T21346] netlink: zone id is out of range [ 1214.153798][T21346] netlink: zone id is out of range [ 1214.165186][T21346] netlink: zone id is out of range [ 1214.170629][T21346] netlink: zone id is out of range [ 1214.175990][T21346] netlink: zone id is out of range [ 1214.202931][T21342] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4080'. [ 1214.217489][T21346] netlink: zone id is out of range [ 1214.243104][T21346] netlink: zone id is out of range [ 1214.254065][T21344] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4080'. [ 1214.290389][T21346] netlink: zone id is out of range [ 1214.305226][T21342] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4080'. [ 1214.366506][T21344] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4080'. [ 1214.424025][T21352] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1214.428692][T21342] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4080'. [ 1215.282584][T21342] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4080'. [ 1215.316135][T21360] md: could not open device unknown-block(7,0). [ 1215.338731][T21360] md: md_import_device returned -16 [ 1215.371509][T21352] md: couldn't update array info. -22 [ 1215.464312][T21361] md: could not open device unknown-block(7,1). [ 1215.475097][T21361] md: md_import_device returned -16 [ 1215.610566][T21352] md: could not open device unknown-block(7,3). [ 1215.670821][T21352] md: md_import_device returned -16 [ 1217.192915][T21083] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.714551][T21083] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.889365][T21407] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1219.015895][T21407] md: couldn't update array info. -22 [ 1219.077723][T21407] md: could not open device unknown-block(7,0). [ 1219.105983][T21407] md: md_import_device returned -16 [ 1219.133425][T21409] md: could not open device unknown-block(7,1). [ 1219.146048][T21409] md: md_import_device returned -16 [ 1219.236640][T21407] md: could not open device unknown-block(7,2). [ 1219.249568][T21407] md: md_import_device returned -16 [ 1219.268767][T21409] md: could not open device unknown-block(7,3). [ 1219.296461][T21409] md: md_import_device returned -16 [ 1219.329432][T21083] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.677857][T21083] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.242208][T21449] net_ratelimit: 755 callbacks suppressed [ 1221.242238][T21449] netlink: zone id is out of range [ 1221.321170][T21449] netlink: zone id is out of range [ 1221.348563][T21449] netlink: zone id is out of range [ 1221.396951][T21449] netlink: zone id is out of range [ 1221.424387][T21449] netlink: zone id is out of range [ 1221.450970][T21449] netlink: zone id is out of range [ 1221.501477][T21449] netlink: zone id is out of range [ 1221.529076][T21449] netlink: zone id is out of range [ 1221.568248][T21449] netlink: zone id is out of range [ 1221.592330][T21449] netlink: zone id is out of range [ 1221.906413][T21470] __nla_validate_parse: 9 callbacks suppressed [ 1221.906443][T21470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4118'. [ 1222.569512][T21474] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1222.736803][T21476] md: couldn't update array info. -22 [ 1222.777922][T21474] md: could not open device unknown-block(7,0). [ 1222.842150][T21474] md: md_import_device returned -16 [ 1222.902640][T21474] md: could not open device unknown-block(7,2). [ 1222.937115][T21474] md: md_import_device returned -16 [ 1223.009209][T21476] md: could not open device unknown-block(7,3). [ 1223.045417][T21476] md: md_import_device returned -16 [ 1223.403106][T21083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1223.479193][T21083] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1223.519510][T21083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1223.588703][T21083] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1223.688335][T21507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4127'. [ 1223.778975][T21508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4127'. [ 1223.848176][T21507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4127'. [ 1223.859393][T21507] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4127'. [ 1223.869837][T21507] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4127'. [ 1223.926273][T21508] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4127'. [ 1224.389681][T21513] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4127'. [ 1224.558242][T21517] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4127'. [ 1224.601159][T21507] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4127'. [ 1224.676409][T21083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1224.754003][T21083] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1224.788722][T21083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1224.857695][T21083] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1225.340054][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1225.452661][T21541] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1225.515159][T21083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.535084][T21541] md: couldn't update array info. -22 [ 1225.564234][T21545] md: could not open device unknown-block(7,0). [ 1225.594268][T21545] md: md_import_device returned -16 [ 1225.623292][T21541] md: could not open device unknown-block(7,2). [ 1225.647727][T21083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.674378][T21541] md: md_import_device returned -16 [ 1225.689475][T21545] md: could not open device unknown-block(7,3). [ 1225.718379][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.723536][T21545] md: md_import_device returned -16 [ 1225.725673][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.874236][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.881482][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.009031][T21553] loop5: detected capacity change from 0 to 128 [ 1226.127649][T21553] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1226.256573][T21553] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1226.299362][T21561] netlink: 'syz.9.4141': attribute type 1 has an invalid length. [ 1226.398717][T21561] netlink: 'syz.9.4141': attribute type 4 has an invalid length. [ 1226.434514][T21553] EXT4-fs error (device loop5): __ext4_find_entry:1624: inode #2: comm syz.5.4139: checksumming directory block 0 [ 1226.539286][T21571] EXT4-fs error (device loop5): __ext4_find_entry:1624: inode #2: comm syz.5.4139: checksumming directory block 0 [ 1228.299888][T19236] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1231.610756][T21596] netlink: 'syz.3.4151': attribute type 29 has an invalid length. [ 1232.220406][T21606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1232.335638][T21612] md: couldn't update array info. -22 [ 1232.405276][T21606] md: could not open device unknown-block(7,0). [ 1232.443849][T21606] md: md_import_device returned -16 [ 1232.515425][T21606] md: could not open device unknown-block(7,2). [ 1232.558439][T21606] md: md_import_device returned -16 [ 1232.634555][T21623] __nla_validate_parse: 10 callbacks suppressed [ 1232.634585][T21623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1232.635335][T21621] netlink: 'syz.5.4159': attribute type 1 has an invalid length. [ 1232.657366][T21623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1232.657951][T21606] md: could not open device unknown-block(7,3). [ 1232.698508][T21623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1232.700105][T21606] md: md_import_device returned -16 [ 1232.719796][T21621] netlink: 'syz.5.4159': attribute type 4 has an invalid length. [ 1232.728169][T21621] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4159'. [ 1232.753255][T21623] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1232.805441][T21626] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1232.857118][T21623] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1232.866994][ T5791] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1232.887223][T21623] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1232.934471][T21083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1232.949943][T21623] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1232.983973][T21623] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1233.044662][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1233.068027][ T5791] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1233.120651][ T5791] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1233.153272][T21631] loop5: detected capacity change from 0 to 512 [ 1233.191923][ T5791] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1233.223732][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.245930][T21631] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1233.264314][ T5791] usb 4-1: Product: syz [ 1233.294126][ T5791] usb 4-1: Manufacturer: syz [ 1233.317479][ T5791] usb 4-1: SerialNumber: syz [ 1233.336307][T21631] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1233.576272][T21622] trusted_key: encrypted_key: hex blob is missing [ 1233.588547][T21631] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1233.604142][T21622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.641282][T21631] EXT4-fs (loop5): 1 truncate cleaned up [ 1233.676613][T21631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.690758][T21622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.346105][T19236] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.533724][T21083] veth0_vlan: entered promiscuous mode [ 1235.624736][ T5791] usb 4-1: Can't get UAC3 power state for id 10 [ 1235.628517][T21083] veth1_vlan: entered promiscuous mode [ 1235.735361][T21083] veth0_macvtap: entered promiscuous mode [ 1235.768422][T21083] veth1_macvtap: entered promiscuous mode [ 1235.848066][T21083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.877522][ T5791] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 1235.909343][T21083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1235.990478][T10116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.002004][ T5791] usb 4-1: applying playback min mute quirk [ 1236.030235][T10116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.072885][ T5791] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1236.079521][T10116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.103361][ T5791] usb 4-1: applying playback min mute quirk [ 1236.125971][ T5791] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1236.133757][T10116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.177998][ T5791] usb 4-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 1236.696894][T21681] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1236.785440][T21681] md: couldn't update array info. -22 [ 1236.877054][T21681] md: could not open device unknown-block(7,0). [ 1236.897855][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1236.910291][T21681] md: md_import_device returned -16 [ 1236.956257][T21689] [ 1236.958630][T21689] ====================================================== [ 1236.965648][T21689] WARNING: possible circular locking dependency detected [ 1236.972683][T21689] syzkaller #0 Tainted: G L [ 1236.978760][T21689] ------------------------------------------------------ [ 1236.985795][T21689] syz.5.4174/21689 is trying to acquire lock: [ 1236.988018][ T5791] usb 4-1: USB disconnect, device number 11 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1236.991951][T21689] ffffffff8f793ce0 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 1237.006929][T21689] [ 1237.006929][T21689] but task is already holding lock: [ 1237.014316][T21689] ffff888036a56358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x112d/0x36b0 [ 1237.023780][T21689] [ 1237.023780][T21689] which lock already depends on the new lock. [ 1237.023780][T21689] [ 1237.034189][T21689] [ 1237.034189][T21689] the existing dependency chain (in reverse order) is: [ 1237.043203][T21689] [ 1237.043203][T21689] -> #3 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 1237.051487][T21689] lock_acquire+0x1b9/0x370 [ 1237.056545][T21689] __mutex_lock+0x1a4/0x1bd0 [ 1237.061679][T21689] md_start_sync+0x79/0xbe0 [ 1237.066729][T21689] process_one_work+0xa23/0x1940 [ 1237.072199][T21689] worker_thread+0x5ef/0xe50 [ 1237.077343][T21689] kthread+0x370/0x450 [ 1237.082005][T21689] ret_from_fork+0x72b/0xd50 [ 1237.087139][T21689] ret_from_fork_asm+0x1a/0x30 [ 1237.092447][T21689] [ 1237.092447][T21689] -> #2 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 1237.101949][T21689] lock_acquire+0x1b9/0x370 [ 1237.107080][T21689] process_one_work+0x98e/0x1940 [ 1237.112554][T21689] worker_thread+0x5ef/0xe50 [ 1237.117673][T21689] kthread+0x370/0x450 [ 1237.122310][T21689] ret_from_fork+0x72b/0xd50 [ 1237.127443][T21689] ret_from_fork_asm+0x1a/0x30 [ 1237.132752][T21689] [ 1237.132752][T21689] -> #1 ((wq_completion)md_misc){+.+.}-{0:0}: [ 1237.141063][T21689] lock_acquire+0x1b9/0x370 [ 1237.146106][T21689] touch_wq_lockdep_map+0xad/0x1c0 [ 1237.151791][T21689] __flush_workqueue+0x131/0x1200 [ 1237.157371][T21689] md_alloc+0x30/0x10a0 [ 1237.162069][T21689] md_probe+0x73/0xf0 [ 1237.166590][T21689] blk_probe_dev+0x149/0x1e0 [ 1237.171793][T21689] blk_request_module+0x16/0xc0 [ 1237.177179][T21689] blkdev_get_no_open+0x9b/0xf0 [ 1237.182575][T21689] blkdev_open+0x141/0x4f0 [ 1237.187566][T21689] do_dentry_open+0x6ab/0x14d0 [ 1237.192870][T21689] vfs_open+0x82/0x3f0 [ 1237.197496][T21689] path_openat+0x2873/0x4280 [ 1237.202632][T21689] do_file_open+0x20e/0x430 [ 1237.207710][T21689] do_sys_openat2+0x10f/0x1e0 [ 1237.212952][T21689] __x64_sys_openat+0x12d/0x210 [ 1237.218329][T21689] do_syscall_64+0x115/0x870 [ 1237.223463][T21689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.230018][T21689] [ 1237.230018][T21689] -> #0 (major_names_lock){+.+.}-{4:4}: [ 1237.237800][T21689] check_prev_add+0xeb/0xe60 [ 1237.242935][T21689] __lock_acquire+0x136c/0x1a40 [ 1237.248320][T21689] lock_acquire+0x1b9/0x370 [ 1237.253359][T21689] __mutex_lock+0x1a4/0x1bd0 [ 1237.258490][T21689] blk_probe_dev+0x28/0x1e0 [ 1237.263544][T21689] blk_request_module+0x16/0xc0 [ 1237.268963][T21689] blkdev_get_no_open+0x9b/0xf0 [ 1237.274397][T21689] bdev_file_open_by_dev+0x70/0x210 [ 1237.280147][T21689] md_import_device+0x120/0x360 [ 1237.285528][T21689] md_add_new_disk+0xcc0/0x1820 [ 1237.290904][T21689] md_ioctl+0x2b28/0x36b0 [ 1237.295753][T21689] blkdev_ioctl+0x5ad/0x6f0 [ 1237.300782][T21689] __x64_sys_ioctl+0x18e/0x210 [ 1237.306080][T21689] do_syscall_64+0x115/0x870 [ 1237.311304][T21689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.317730][T21689] [ 1237.317730][T21689] other info that might help us debug this: [ 1237.317730][T21689] [ 1237.327965][T21689] Chain exists of: [ 1237.327965][T21689] major_names_lock --> (work_completion)(&mddev->sync_work) --> &mddev->reconfig_mutex [ 1237.327965][T21689] [ 1237.343571][T21689] Possible unsafe locking scenario: [ 1237.343571][T21689] [ 1237.351351][T21689] CPU0 CPU1 [ 1237.356723][T21689] ---- ---- [ 1237.362092][T21689] lock(&mddev->reconfig_mutex); [ 1237.367129][T21689] lock((work_completion)(&mddev->sync_work)); [ 1237.375938][T21689] lock(&mddev->reconfig_mutex); [ 1237.383530][T21689] lock(major_names_lock); [ 1237.388051][T21689] [ 1237.388051][T21689] *** DEADLOCK *** [ 1237.388051][T21689] [ 1237.396198][T21689] 1 lock held by syz.5.4174/21689: [ 1237.401304][T21689] #0: ffff888036a56358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x112d/0x36b0 [ 1237.411185][T21689] [ 1237.411185][T21689] stack backtrace: [ 1237.417072][T21689] CPU: 0 UID: 0 PID: 21689 Comm: syz.5.4174 Tainted: G L syzkaller #0 PREEMPT(full) [ 1237.417123][T21689] Tainted: [L]=SOFTLOCKUP [ 1237.417136][T21689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1237.417157][T21689] Call Trace: [ 1237.417169][T21689] [ 1237.417182][T21689] dump_stack_lvl+0x100/0x190 [ 1237.417224][T21689] print_circular_bug.cold+0x178/0x1c7 [ 1237.417282][T21689] check_noncircular+0x146/0x160 [ 1237.417325][T21689] check_prev_add+0xeb/0xe60 [ 1237.417359][T21689] ? rcu_is_watching+0x12/0xc0 [ 1237.417408][T21689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1237.417452][T21689] __lock_acquire+0x136c/0x1a40 [ 1237.417499][T21689] lock_acquire+0x1b9/0x370 [ 1237.417535][T21689] ? blk_probe_dev+0x28/0x1e0 [ 1237.417575][T21689] ? __pfx___might_resched+0x10/0x10 [ 1237.417613][T21689] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1237.417668][T21689] __mutex_lock+0x1a4/0x1bd0 [ 1237.417713][T21689] ? blk_probe_dev+0x28/0x1e0 [ 1237.417744][T21689] ? blk_probe_dev+0x28/0x1e0 [ 1237.417773][T21689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1237.417817][T21689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1237.417857][T21689] ? find_held_lock+0x2b/0x80 [ 1237.417908][T21689] ? __pfx___mutex_lock+0x10/0x10 [ 1237.417953][T21689] ? find_inode_fast+0x1fa/0xa30 [ 1237.417996][T21689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1237.418037][T21689] ? ilookup+0x189/0x210 [ 1237.418074][T21689] ? blk_probe_dev+0x28/0x1e0 [ 1237.418104][T21689] blk_probe_dev+0x28/0x1e0 [ 1237.418137][T21689] blk_request_module+0x16/0xc0 [ 1237.418179][T21689] blkdev_get_no_open+0x9b/0xf0 [ 1237.418233][T21689] bdev_file_open_by_dev+0x70/0x210 [ 1237.418287][T21689] md_import_device+0x120/0x360 [ 1237.418326][T21689] md_add_new_disk+0xcc0/0x1820 [ 1237.418363][T21689] md_ioctl+0x2b28/0x36b0 [ 1237.418396][T21689] ? __pfx_md_ioctl+0x10/0x10 [ 1237.418426][T21689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1237.418466][T21689] ? do_vfs_ioctl+0x226/0x13e0 [ 1237.418514][T21689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1237.418560][T21689] ? find_held_lock+0x2b/0x80 [ 1237.418609][T21689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1237.418651][T21689] ? __pfx_md_ioctl+0x10/0x10 [ 1237.418682][T21689] blkdev_ioctl+0x5ad/0x6f0 [ 1237.418712][T21689] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1237.418771][T21689] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1237.418827][T21689] __x64_sys_ioctl+0x18e/0x210 [ 1237.418868][T21689] do_syscall_64+0x115/0x870 [ 1237.418913][T21689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.418949][T21689] RIP: 0033:0x7fa184f9de99 [ 1237.418976][T21689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.419011][T21689] RSP: 002b:00007fa185e1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1237.419043][T21689] RAX: ffffffffffffffda RBX: 00007fa185226090 RCX: 00007fa184f9de99 [ 1237.419067][T21689] RDX: 0000200000001500 RSI: 0000000040140921 RDI: 000000000000000c [ 1237.419091][T21689] RBP: 00007fa185033eaf R08: 0000000000000000 R09: 0000000000000000 [ 1237.419113][T21689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1237.419135][T21689] R13: 00007fa185226128 R14: 00007fa185226090 R15: 00007ffc2e2bcd98 [ 1237.419169][T21689] [ 1237.824895][T21684] __nla_validate_parse: 6 callbacks suppressed [ 1237.824922][T21684] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4175'. [ 1237.861626][T21687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4175'. [ 1237.895558][ T6118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1237.922958][T17577] udevd[17577]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1237.952420][ T6118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.034163][T21689] md: could not open device unknown-block(0,0). [ 1238.042025][T21692] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4175'. [ 1238.052343][T21689] md: md_import_device returned -6 [ 1238.057666][T21681] md: could not open device unknown-block(7,2). [ 1238.111871][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.166639][T21681] md: md_import_device returned -16 [ 1238.178792][T21702] md: could not open device unknown-block(7,3). [ 1238.273389][T21702] md: md_import_device returned -16 [ 1238.378676][T21083] ieee80211 phy84: Selected rate control algorithm 'minstrel_ht' [ 1238.853506][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.035908][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.133195][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.278600][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.362385][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1239.432404][ T1053] netdevsim netdevsim3 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.445166][ T47] netdevsim netdevsim3 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.481066][ T47] netdevsim netdevsim3 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.505312][ T1053] netdevsim netdevsim3 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.524487][ T12] bridge_slave_1: left allmulticast mode [ 1239.534407][ T12] bridge_slave_1: left promiscuous mode [ 1239.541843][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.552881][ T12] bridge_slave_0: left allmulticast mode [ 1239.581974][ T12] bridge_slave_0: left promiscuous mode [ 1239.592946][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.838694][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.871432][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.895286][ T12] bond0 (unregistering): Released all slaves [ 1239.913642][ T12] bond1 (unregistering): Released all slaves [ 1239.939102][ T12] bond2 (unregistering): Released all slaves [ 1239.976852][ T12] bond3 (unregistering): Released all slaves [ 1240.347186][ T12] hsr_slave_0: left promiscuous mode [ 1240.353085][ T12] hsr_slave_1: left promiscuous mode [ 1240.359080][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1240.366958][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1240.375346][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1240.382784][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1240.401971][ T12] veth1_macvtap: left promiscuous mode [ 1240.407592][ T12] veth0_macvtap: left promiscuous mode [ 1240.413152][ T12] veth1_vlan: left promiscuous mode [ 1240.418470][ T12] veth0_vlan: left promiscuous mode [ 1240.580695][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1240.594778][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1241.050766][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.118830][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.153597][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.235905][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.312504][T10116] netdevsim netdevsim9 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.330169][T10116] netdevsim netdevsim9 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.347126][T10116] netdevsim netdevsim9 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.366247][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.379341][T10116] netdevsim netdevsim9 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.427001][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.484273][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.572734][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.636706][ T6118] netdevsim netdevsim4 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.657267][ T6118] netdevsim netdevsim4 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.674321][T10116] netdevsim netdevsim4 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.696338][T10116] netdevsim netdevsim4 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.707317][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.719529][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.779066][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.790711][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.828924][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.841422][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.880353][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.891422][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.950483][ T1160] netdevsim netdevsim1 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.975741][ T1160] netdevsim netdevsim1 eth26: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.991116][ T1160] netdevsim netdevsim1 eth27: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.006700][ T6118] netdevsim netdevsim1 eth28: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.027297][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.083080][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.132809][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.171152][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.261082][ T6118] netdevsim netdevsim2 eth29: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.286889][ T6118] netdevsim netdevsim2 eth30: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.313665][ T6118] netdevsim netdevsim2 eth31: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.322479][ T6118] netdevsim netdevsim2 eth32: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.332426][ T12] bridge_slave_1: left allmulticast mode [ 1242.338433][ T12] bridge_slave_1: left promiscuous mode [ 1242.347182][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.356870][ T12] bridge_slave_0: left allmulticast mode [ 1242.362554][ T12] bridge_slave_0: left promiscuous mode [ 1242.368714][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.380450][ T12] bridge_slave_1: left allmulticast mode [ 1242.386421][ T12] bridge_slave_1: left promiscuous mode [ 1242.392123][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.400724][ T12] bridge_slave_0: left allmulticast mode [ 1242.406551][ T12] bridge_slave_0: left promiscuous mode [ 1242.412232][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.424013][ T12] bridge_slave_1: left allmulticast mode [ 1242.430355][ T12] bridge_slave_1: left promiscuous mode [ 1242.436127][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.447185][ T12] bridge_slave_0: left allmulticast mode [ 1242.452907][ T12] bridge_slave_0: left promiscuous mode [ 1242.458592][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.616666][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1242.627464][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1242.637462][ T12] bond0 (unregistering): Released all slaves [ 1242.682205][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1242.693809][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1242.704434][ T12] bond0 (unregistering): Released all slaves [ 1242.787094][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1242.797672][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1242.807667][ T12] bond0 (unregistering): Released all slaves [ 1242.817554][ T12] bond1 (unregistering): Released all slaves [ 1242.828923][ T12] bond2 (unregistering): Released all slaves [ 1242.872847][ T12] team0: Port device xfrm0 removed [ 1242.943682][ T12] bond0 (unregistering): Released all slaves [ 1242.952733][ T12] bond1 (unregistering): Released all slaves [ 1242.964374][ T12] bond2 (unregistering): Released all slaves [ 1243.103050][ T12] tipc: Left network mode [ 1243.634207][ T12] hsr_slave_0: left promiscuous mode [ 1243.640350][ T12] hsr_slave_1: left promiscuous mode [ 1243.646710][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1243.654136][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1243.669611][ T12] hsr_slave_0: left promiscuous mode [ 1243.676753][ T12] hsr_slave_1: left promiscuous mode [ 1243.682681][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1243.694373][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1243.702497][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1243.711184][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.722667][ T12] hsr_slave_0: left promiscuous mode [ 1243.728773][ T12] hsr_slave_1: left promiscuous mode [ 1243.734606][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1243.742148][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1243.750157][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1243.757696][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.769472][ T12] hsr_slave_0: left promiscuous mode [ 1243.777973][ T12] hsr_slave_1: left promiscuous mode [ 1243.799816][ T12] veth1_macvtap: left promiscuous mode [ 1243.805458][ T12] veth0_macvtap: left promiscuous mode [ 1243.811054][ T12] veth1_vlan: left promiscuous mode [ 1243.819579][ T12] veth0_vlan: left promiscuous mode [ 1243.826212][ T12] veth1_macvtap: left promiscuous mode [ 1243.831845][ T12] veth0_macvtap: left promiscuous mode [ 1243.837822][ T12] veth1_vlan: left promiscuous mode [ 1243.843162][ T12] veth0_vlan: left promiscuous mode [ 1243.849784][ T12] veth1_macvtap: left promiscuous mode [ 1243.855434][ T12] veth0_macvtap: left promiscuous mode [ 1243.861014][ T12] veth1_vlan: left promiscuous mode [ 1243.866875][ T12] veth0_vlan: left promiscuous mode [ 1243.873356][ T12] veth1_macvtap: left promiscuous mode [ 1243.880399][ T12] veth0_macvtap: left promiscuous mode [ 1243.887159][ T12] veth1_vlan: left promiscuous mode [ 1243.892573][ T12] veth0_vlan: left promiscuous mode [ 1244.162546][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1244.184413][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1244.303955][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1244.316690][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1244.471525][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1244.483648][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1245.582311][ T12] IPVS: stop unused estimator thread 0...