last executing test programs: 12.273586652s ago: executing program 2 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800, 0x0, 0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x3b}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2}}}}}}, 0x6e) 11.567888559s ago: executing program 2 (id=92): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r4, r2, r3, 0x0, 0x40000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2000000}) 11.350547726s ago: executing program 2 (id=96): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new trusted:syz 02000'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 11.223456435s ago: executing program 2 (id=98): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) chmod(0x0, 0x35e) 11.041993508s ago: executing program 2 (id=101): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f0000000040)="8f2a0a65bd8c12bada98b743002b0304000dfa80a7b6070d63", 0x19) 10.713781215s ago: executing program 3 (id=104): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r4, r2, r3, 0x0, 0x40000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2000000}) 10.569149392s ago: executing program 3 (id=106): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new trusted:syz 02000'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 10.47067719s ago: executing program 3 (id=107): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 10.179624113s ago: executing program 3 (id=110): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) chmod(0x0, 0x35e) 10.011057663s ago: executing program 3 (id=112): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x210a, r2}, 0x0) landlock_restrict_self(r3, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, 0x0, 0x0) landlock_restrict_self(r1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x81c0, 0x9) 9.901295537s ago: executing program 2 (id=115): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new trusted:syz 02000 '], 0x2d, 0xfffffffffffffff9) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 9.737227426s ago: executing program 1 (id=117): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) 9.562687794s ago: executing program 1 (id=118): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 9.494804027s ago: executing program 1 (id=119): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}) 9.414260445s ago: executing program 1 (id=120): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) chmod(0x0, 0x35e) 9.207502984s ago: executing program 1 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 8.866720403s ago: executing program 3 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000100)={0x50, r1, 0x1, 0x470bd2a, 0x1000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x56f}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x4f60, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 8.018426307s ago: executing program 1 (id=124): r0 = socket(0x840000000002, 0x3, 0x100) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x49, [0x3, 0xc95a, 0xfffffff3, 0x5, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffbf2, 0x5f, 0x3, 0x0, 0xffff2d37, 0x1dda, 0x6, 0x7, 0x0, 0x80000001, 0x3, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0x9, 0xfffffffe, 0x1f461e2c, 0x3, 0x521, 0x2, 0x1000005, 0x3, 0x8001, 0x4c74, 0x8f00, 0x4, 0x6, 0x10000, 0x0, 0x0, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0x2, 0xffffffff, 0x0, 0x7, 0x10000005, 0x2b, 0xe, 0x313, 0x4, 0xea4, 0xa, 0x5, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x5, 0x6, 0xffffffff, 0x9, 0x4, 0x9, 0x4, 0x9, 0x7, 0x5, 0xfffffffd, 0x3, 0x10008080, 0xffff, 0x2, 0x7f, 0x9, 0x6, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0x8], [0x4, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x80000000, 0x8d5, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ee, 0x8, 0x8, 0x186, 0xd, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x10000000, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x0, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x8, 0x1, 0x6c0a, 0x9, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) ioctl$int_in(r1, 0x5452, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x0, [0x984, 0x9, 0x5]}, &(0x7f0000000a80)=0x44) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x40, 0x0, 0xc, {{0x15, 0x4, 0x3, 0x9, 0x54, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast2, @local, {[@lsrr={0x83, 0xf, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @remote]}, @generic={0x82, 0x6, "cd16b7b4"}, @lsrr={0x83, 0x1f, 0x29, [@multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x11}, @local, @rand_addr=0x64010101, @rand_addr=0x64010101, @multicast2]}, @generic={0x82, 0xb, "6303a37eebaf58a031"}]}}}}}) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x20}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x2}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000900)={&(0x7f0000000280)={0x1d, r2}, 0x10, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="05003f171dbf00c189000000211adcdc386079b83eba5ac72f87d1bcb5fd3f58ab3a472d58d1662bd7c33b20f6317f49c872f98d87227d3f7760070cbae1b278f65dfd598515e0f726e776d00280b7bd57974a8f92bbdbae59cd79020f3865b49654413d2c3e6f5dd418df4022b3470697f0197d4cadbe", @ANYRES32=r4, @ANYRES32=r5/1000+10000, @ANYRES32=r6, @ANYRES32=r7/1000+60000, @ANYBLOB="0300002001000000040000e003030000c1d1f3bc1dde9ace"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40400b4) socket$nl_rdma(0x10, 0x3, 0x14) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000280)={0xf0f022}) 1.568366768s ago: executing program 0 (id=138): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 1.53142724s ago: executing program 0 (id=139): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}) 1.470810817s ago: executing program 0 (id=140): r0 = socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f00000000c0)=0xd, 0x4) 1.350839718s ago: executing program 0 (id=141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800, 0x0, 0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x3b}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2}}}}}}, 0x6e) 102.992615ms ago: executing program 0 (id=142): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x8800) 0s ago: executing program 0 (id=143): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x0, &(0x7f0000000040)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0xa, 0x0}}, {0x6, @remote}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 'veth1_vlan\x00'}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b40000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200a08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000008e05d878ee9941a87b134b7d51fe00000004000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000bf6b6e0001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff800, 0x1, 0xa, 0x8, 0x3, 0x504, 0xb, 0x9, 0x40, 0xffffffff, 0x2}) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x1, 0x40) process_madvise(r8, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0203000900060000000e0002000000e0000009000000000000000002000100000000000000002b3b9d2f0200000000030004000000000000000000e000000100000000000000001a0015004e200000010014000300"/100], 0x60}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. [ 73.581959][ T5594] cgroup: Unknown subsys name 'net' [ 73.822434][ T5594] cgroup: Unknown subsys name 'cpuset' [ 73.878778][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.604461][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.041547][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.066869][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.074981][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.092814][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.102294][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.104538][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.105969][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.106513][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.107740][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.110326][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.113560][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.113976][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.115272][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.115988][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.121772][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.122640][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.125294][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.136965][ T4923] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.163533][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.164961][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.121384][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.122179][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.122373][ T5609] bridge_slave_0: entered allmulticast mode [ 80.124313][ T5609] bridge_slave_0: entered promiscuous mode [ 80.153259][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.153527][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.153763][ T5608] bridge_slave_0: entered allmulticast mode [ 80.157045][ T5608] bridge_slave_0: entered promiscuous mode [ 80.169117][ T5613] Bluetooth: hci2: command tx timeout [ 80.188815][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.189057][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.189323][ T5609] bridge_slave_1: entered allmulticast mode [ 80.191253][ T5609] bridge_slave_1: entered promiscuous mode [ 80.201913][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.202188][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.202496][ T5608] bridge_slave_1: entered allmulticast mode [ 80.205657][ T5608] bridge_slave_1: entered promiscuous mode [ 80.329333][ T5623] Bluetooth: hci3: command tx timeout [ 80.331809][ T5616] Bluetooth: hci0: command tx timeout [ 80.332015][ T5613] Bluetooth: hci1: command tx timeout [ 80.356759][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.385558][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.385941][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.386300][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.386546][ T5607] bridge_slave_0: entered allmulticast mode [ 80.389578][ T5607] bridge_slave_0: entered promiscuous mode [ 80.397788][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.399918][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.400191][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.400735][ T5610] bridge_slave_0: entered allmulticast mode [ 80.404948][ T5610] bridge_slave_0: entered promiscuous mode [ 80.422590][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.423264][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.423553][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.423783][ T5607] bridge_slave_1: entered allmulticast mode [ 80.426884][ T5607] bridge_slave_1: entered promiscuous mode [ 80.453900][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.454232][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.454760][ T5610] bridge_slave_1: entered allmulticast mode [ 80.461464][ T5610] bridge_slave_1: entered promiscuous mode [ 80.580925][ T5609] team0: Port device team_slave_0 added [ 80.600143][ T5608] team0: Port device team_slave_0 added [ 80.752841][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.755443][ T5609] team0: Port device team_slave_1 added [ 80.760594][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.771430][ T5608] team0: Port device team_slave_1 added [ 80.779647][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.803540][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.902411][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.902422][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.902437][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.926374][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.926392][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.926415][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.936482][ T5607] team0: Port device team_slave_0 added [ 80.942823][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.942838][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.942861][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.949353][ T5610] team0: Port device team_slave_0 added [ 80.953207][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.953221][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.953243][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.960760][ T5607] team0: Port device team_slave_1 added [ 80.987156][ T5610] team0: Port device team_slave_1 added [ 81.153187][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.153198][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.153212][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.155215][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.155225][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.155238][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.216298][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.216314][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.216337][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.220672][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.220686][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.220709][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.256427][ T5609] hsr_slave_0: entered promiscuous mode [ 81.259078][ T5609] hsr_slave_1: entered promiscuous mode [ 81.300949][ T5608] hsr_slave_0: entered promiscuous mode [ 81.302838][ T5608] hsr_slave_1: entered promiscuous mode [ 81.304526][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 81.304636][ T5608] Cannot create hsr debugfs directory [ 81.470755][ T5607] hsr_slave_0: entered promiscuous mode [ 81.471896][ T5607] hsr_slave_1: entered promiscuous mode [ 81.472819][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 81.472840][ T5607] Cannot create hsr debugfs directory [ 81.503562][ T5610] hsr_slave_0: entered promiscuous mode [ 81.505549][ T5610] hsr_slave_1: entered promiscuous mode [ 81.507152][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 81.507173][ T5610] Cannot create hsr debugfs directory [ 82.248240][ T5613] Bluetooth: hci2: command tx timeout [ 82.409277][ T5616] Bluetooth: hci0: command tx timeout [ 82.409359][ T5623] Bluetooth: hci3: command tx timeout [ 82.409425][ T5613] Bluetooth: hci1: command tx timeout [ 82.514760][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.585158][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.592630][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.634121][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.638720][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.674798][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.695137][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.734236][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.850723][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.893090][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.896850][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.933389][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.937112][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.976442][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.003248][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.038776][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.180904][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.216258][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.234529][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.261020][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.277310][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.303688][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.333096][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.361505][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.476421][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.504491][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.529526][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.563025][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.580657][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.624508][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.633243][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.663043][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.724346][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.832419][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.878870][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.879261][ T3082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.909928][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.957593][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.974984][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.064712][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.115286][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.115459][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.139896][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.175063][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.175212][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.312441][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.329431][ T5613] Bluetooth: hci2: command tx timeout [ 84.390475][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.411098][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.411385][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.471752][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.471843][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.489985][ T5616] Bluetooth: hci0: command tx timeout [ 84.490072][ T5623] Bluetooth: hci3: command tx timeout [ 84.490138][ T5613] Bluetooth: hci1: command tx timeout [ 84.586760][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.635201][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.635443][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.687167][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.687411][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.485206][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.870546][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.967012][ T5609] veth0_vlan: entered promiscuous mode [ 86.040341][ T5609] veth1_vlan: entered promiscuous mode [ 86.129745][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.163658][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.230925][ T5608] veth0_vlan: entered promiscuous mode [ 86.267418][ T5609] veth0_macvtap: entered promiscuous mode [ 86.289095][ T5608] veth1_vlan: entered promiscuous mode [ 86.302652][ T5609] veth1_macvtap: entered promiscuous mode [ 86.380585][ T5607] veth0_vlan: entered promiscuous mode [ 86.404336][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.408128][ T5613] Bluetooth: hci2: command tx timeout [ 86.435591][ T5610] veth0_vlan: entered promiscuous mode [ 86.455518][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.463548][ T5607] veth1_vlan: entered promiscuous mode [ 86.519024][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.523815][ T5608] veth0_macvtap: entered promiscuous mode [ 86.533452][ T5610] veth1_vlan: entered promiscuous mode [ 86.561361][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.565268][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.568570][ T5623] Bluetooth: hci3: command tx timeout [ 86.568595][ T5623] Bluetooth: hci0: command tx timeout [ 86.568644][ T5613] Bluetooth: hci1: command tx timeout [ 86.604984][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.612934][ T5608] veth1_macvtap: entered promiscuous mode [ 86.748903][ T10] cfg80211: failed to load regulatory.db [ 86.857582][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.989130][ T5607] veth0_macvtap: entered promiscuous mode [ 87.020534][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.084526][ T5607] veth1_macvtap: entered promiscuous mode [ 87.097764][ T5610] veth0_macvtap: entered promiscuous mode [ 87.113074][ T2961] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.117683][ T2961] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.134049][ T2961] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.179818][ T2961] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.195390][ T5610] veth1_macvtap: entered promiscuous mode [ 87.246307][ T3064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.246328][ T3064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.319303][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.455100][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.457697][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.613892][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.613910][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.657409][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.690793][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.697102][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.736484][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.752682][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.755750][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.755931][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.755946][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.770549][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.803197][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.908390][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.340841][ T3082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.340860][ T3082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.770227][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.770245][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.033962][ T3082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.033980][ T3082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.105945][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.105961][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.313985][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.314004][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.346530][ T5775] raw_sendmsg: syz.2.8 forgot to set AF_INET. Fix it! [ 89.670873][ T5782] trusted_key: encrypted_key: master key parameter 'trusted' is invalid [ 90.153482][ T5790] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.735778][ T5799] syz.3.14 uses obsolete (PF_INET,SOCK_PACKET) [ 96.008553][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'. [ 96.225603][ T5958] syz.0.85 (5958) used greatest stack depth: 19416 bytes left [ 97.175833][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'. [ 98.509335][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'. [ 98.594018][ T3082] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.829960][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.856679][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.874379][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.908293][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.915498][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.510922][ T3082] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.599538][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.603728][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.604547][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.605751][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.606415][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.291127][ T3082] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.653183][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 100.787563][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.833272][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.844241][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.862611][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.865496][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.932896][ T3082] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.051078][ T5613] Bluetooth: hci1: command tx timeout [ 101.690069][ T5613] Bluetooth: hci0: command tx timeout [ 102.005421][ T3082] bridge_slave_1: left allmulticast mode [ 102.005501][ T3082] bridge_slave_1: left promiscuous mode [ 102.012772][ T3082] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.152167][ T3082] bridge_slave_0: left allmulticast mode [ 102.152192][ T3082] bridge_slave_0: left promiscuous mode [ 102.152360][ T3082] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.958641][ T3082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.968508][ T5613] Bluetooth: hci2: command tx timeout [ 103.038640][ T3082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.062228][ T3082] bond0 (unregistering): Released all slaves [ 103.139786][ T5613] Bluetooth: hci1: command tx timeout [ 103.768346][ T5613] Bluetooth: hci0: command tx timeout [ 103.830769][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.018507][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 104.042636][ T32] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 104.042690][ T32] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 104.042716][ T32] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.042741][ T32] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 104.045384][ T32] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 104.045410][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.045428][ T32] usb 1-1: Product: syz [ 104.045442][ T32] usb 1-1: Manufacturer: syz [ 104.045455][ T32] usb 1-1: SerialNumber: syz [ 104.198538][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 104.229919][ T32] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input5 [ 104.429741][ T32] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 104.429761][ T32] (id 0x00) [ 104.613677][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.616373][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.616713][ T6026] bridge_slave_0: entered allmulticast mode [ 104.620864][ T32] rc_core: IR keymap rc-imon-pad not found [ 104.620881][ T32] Registered IR keymap rc-empty [ 104.621089][ T32] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 104.621106][ T32] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 104.671843][ T32] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 104.691249][ T6026] bridge_slave_0: entered promiscuous mode [ 104.711658][ T32] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input6 [ 104.920641][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.920920][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.921184][ T6026] bridge_slave_1: entered allmulticast mode [ 104.947710][ T32] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:2> initialized [ 104.960647][ T6026] bridge_slave_1: entered promiscuous mode [ 105.049657][ T5613] Bluetooth: hci2: command tx timeout [ 105.073459][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 105.211302][ T5613] Bluetooth: hci1: command tx timeout [ 105.228341][ T5726] usb 1-1: USB disconnect, device number 2 [ 105.321124][ T6026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.801593][ T6026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.848439][ T5613] Bluetooth: hci0: command tx timeout [ 105.988308][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 105.988844][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.989202][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.989915][ T6040] bridge_slave_0: entered allmulticast mode [ 105.993239][ T6040] bridge_slave_0: entered promiscuous mode [ 106.108478][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.108662][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.108888][ T6040] bridge_slave_1: entered allmulticast mode [ 106.110769][ T6040] bridge_slave_1: entered promiscuous mode [ 106.114838][ T6026] team0: Port device team_slave_0 added [ 106.188796][ T6026] team0: Port device team_slave_1 added [ 106.352391][ T3082] hsr_slave_0: left promiscuous mode [ 106.372495][ T3082] hsr_slave_1: left promiscuous mode [ 106.380049][ T3082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.380128][ T3082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.419953][ T3082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.419973][ T3082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.481173][ T3082] veth1_macvtap: left promiscuous mode [ 106.481320][ T3082] veth0_macvtap: left promiscuous mode [ 106.481509][ T3082] veth1_vlan: left promiscuous mode [ 106.481690][ T3082] veth0_vlan: left promiscuous mode [ 107.130552][ T5613] Bluetooth: hci2: command tx timeout [ 107.288067][ T5613] Bluetooth: hci1: command tx timeout [ 107.338607][ T3082] team0 (unregistering): Port device team_slave_1 removed [ 107.378878][ T3082] team0 (unregistering): Port device team_slave_0 removed [ 107.635271][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.762108][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.928176][ T5613] Bluetooth: hci0: command tx timeout [ 107.982631][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.982647][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.982671][ T6026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.116607][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.116622][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.116645][ T6026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.275886][ T6040] team0: Port device team_slave_0 added [ 108.395961][ T6040] team0: Port device team_slave_1 added [ 108.514290][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.514630][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.514878][ T6061] bridge_slave_0: entered allmulticast mode [ 108.524942][ T6061] bridge_slave_0: entered promiscuous mode [ 108.660950][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.661222][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.661506][ T6061] bridge_slave_1: entered allmulticast mode [ 108.670033][ T6061] bridge_slave_1: entered promiscuous mode [ 108.904223][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.904234][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.904248][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.959729][ T6026] hsr_slave_0: entered promiscuous mode [ 108.961052][ T6026] hsr_slave_1: entered promiscuous mode [ 108.966736][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 108.972970][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.972986][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.973010][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.046255][ T6061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.046472][ T6061] ------------[ cut here ]------------ [ 109.046480][ T6061] task_rq(p) != rq [ 109.046488][ T6061] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#0: syz-executor/6061 [ 109.046518][ T6061] Modules linked in: [ 109.046542][ T6061] CPU: 0 UID: 0 PID: 6061 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.046558][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.046568][ T6061] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 109.046588][ T6061] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 109.046605][ T6061] RSP: 0018:ffffc900042b75e0 EFLAGS: 00010087 [ 109.046617][ T6061] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197d8ae [ 109.046627][ T6061] RDX: 0000000000000000 RSI: ffff88802e821f00 RDI: ffff8880b863ba40 [ 109.046637][ T6061] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 109.046647][ T6061] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 109.046657][ T6061] R13: 1ffff110170c78d6 R14: ffff88802e821f00 R15: ffffffff8dc257d8 [ 109.046667][ T6061] FS: 00005555948e2500(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 109.046680][ T6061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.046690][ T6061] CR2: 000000110c36f9d7 CR3: 000000003c8a4000 CR4: 00000000003526f0 [ 109.046702][ T6061] Call Trace: [ 109.046711][ T6061] [ 109.046719][ T6061] set_next_task_fair+0xa68/0xce0 [ 109.046741][ T6061] __schedule+0x3e03/0x5550 [ 109.046775][ T6061] ? __pfx___schedule+0x10/0x10 [ 109.046792][ T6061] ? lockdep_hardirqs_on+0x7a/0x110 [ 109.046809][ T6061] ? irqentry_exit+0x218/0x8c0 [ 109.046831][ T6061] ? preempt_schedule_thunk+0x16/0x40 [ 109.046854][ T6061] preempt_schedule_common+0x82/0xd0 [ 109.046871][ T6061] preempt_schedule_thunk+0x16/0x40 [ 109.046896][ T6061] _raw_spin_unlock_irqrestore+0x74/0x80 [ 109.046915][ T6061] debug_check_no_obj_freed+0x451/0x470 [ 109.046949][ T6061] kfree+0x13e/0x6c0 [ 109.046969][ T6061] ? skb_release_data+0x828/0xa60 [ 109.046989][ T6061] skb_release_data+0x828/0xa60 [ 109.047013][ T6061] __kfree_skb+0x5d/0x210 [ 109.047030][ T6061] netlink_unicast+0x788/0x920 [ 109.047053][ T6061] netlink_sendmsg+0x813/0xb40 [ 109.047077][ T6061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.047096][ T6061] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 109.047119][ T6061] ? aa_sock_msg_perm+0x122/0x200 [ 109.047134][ T6061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.047151][ T6061] sock_sendmsg_nosec+0x13a/0x180 [ 109.047175][ T6061] __sys_sendto+0x41a/0x5a0 [ 109.047188][ T6061] ? __pfx___sys_sendto+0x10/0x10 [ 109.047198][ T6061] ? lockdep_hardirqs_on+0x7a/0x110 [ 109.047215][ T6061] ? fput_close_sync+0x11f/0x240 [ 109.047226][ T6061] ? kmem_cache_free+0x526/0x6c0 [ 109.047241][ T6061] ? __pfx_fput_close_sync+0x10/0x10 [ 109.047255][ T6061] __x64_sys_sendto+0xde/0x100 [ 109.047266][ T6061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.047277][ T6061] do_syscall_64+0x174/0x580 [ 109.047290][ T6061] ? clear_bhb_loop+0x40/0x90 [ 109.047302][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.047312][ T6061] RIP: 0033:0x7f588b27d68e [ 109.047326][ T6061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.047334][ T6061] RSP: 002b:00007ffca7875b58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 109.047345][ T6061] RAX: ffffffffffffffda RBX: 00005555948e2500 RCX: 00007f588b27d68e [ 109.047351][ T6061] RDX: 0000000000000028 RSI: 00007f588c064670 RDI: 0000000000000003 [ 109.047358][ T6061] RBP: 0000000000000001 R08: 00007ffca7875bd4 R09: 000000000000000c [ 109.047364][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 109.047369][ T6061] R13: 0000000000000000 R14: 00007f588c064670 R15: 0000000000000000 [ 109.047383][ T6061] [ 109.047389][ T6061] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.047396][ T6061] CPU: 0 UID: 0 PID: 6061 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.047407][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.047413][ T6061] Call Trace: [ 109.047416][ T6061] [ 109.047420][ T6061] vpanic+0x56c/0xa60 [ 109.047436][ T6061] ? __pfx__printk+0x10/0x10 [ 109.047446][ T6061] ? __pfx_vpanic+0x10/0x10 [ 109.047459][ T6061] ? is_bpf_text_address+0x292/0x2b0 [ 109.047474][ T6061] ? is_bpf_text_address+0x26/0x2b0 [ 109.047492][ T6061] panic+0xc5/0xd0 [ 109.047506][ T6061] ? __pfx_panic+0x10/0x10 [ 109.047527][ T6061] __warn+0x315/0x4c0 [ 109.047541][ T6061] ? hrtick_start_fair+0x196/0x1f0 [ 109.047555][ T6061] ? hrtick_start_fair+0x196/0x1f0 [ 109.047568][ T6061] __report_bug+0x339/0x540 [ 109.047585][ T6061] ? hrtick_start_fair+0x196/0x1f0 [ 109.047604][ T6061] ? __pfx___report_bug+0x10/0x10 [ 109.047617][ T6061] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 109.047635][ T6061] ? hrtick_start_fair+0x196/0x1f0 [ 109.047648][ T6061] report_bug+0x16a/0x220 [ 109.047660][ T6061] ? hrtick_start_fair+0x196/0x1f0 [ 109.047673][ T6061] ? hrtick_start_fair+0x198/0x1f0 [ 109.047685][ T6061] handle_bug+0x9c/0x200 [ 109.047700][ T6061] exc_invalid_op+0x1a/0x50 [ 109.047714][ T6061] asm_exc_invalid_op+0x1a/0x20 [ 109.047724][ T6061] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 109.047738][ T6061] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 109.047745][ T6061] RSP: 0018:ffffc900042b75e0 EFLAGS: 00010087 [ 109.047754][ T6061] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197d8ae [ 109.047761][ T6061] RDX: 0000000000000000 RSI: ffff88802e821f00 RDI: ffff8880b863ba40 [ 109.047768][ T6061] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 109.047775][ T6061] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 109.047782][ T6061] R13: 1ffff110170c78d6 R14: ffff88802e821f00 R15: ffffffff8dc257d8 [ 109.047808][ T6061] ? set_next_task_fair+0xa4e/0xce0 [ 109.047823][ T6061] set_next_task_fair+0xa68/0xce0 [ 109.047837][ T6061] __schedule+0x3e03/0x5550 [ 109.047870][ T6061] ? __pfx___schedule+0x10/0x10 [ 109.047883][ T6061] ? lockdep_hardirqs_on+0x7a/0x110 [ 109.047895][ T6061] ? irqentry_exit+0x218/0x8c0 [ 109.047910][ T6061] ? preempt_schedule_thunk+0x16/0x40 [ 109.047927][ T6061] preempt_schedule_common+0x82/0xd0 [ 109.047939][ T6061] preempt_schedule_thunk+0x16/0x40 [ 109.047957][ T6061] _raw_spin_unlock_irqrestore+0x74/0x80 [ 109.047970][ T6061] debug_check_no_obj_freed+0x451/0x470 [ 109.047993][ T6061] kfree+0x13e/0x6c0 [ 109.048007][ T6061] ? skb_release_data+0x828/0xa60 [ 109.048022][ T6061] skb_release_data+0x828/0xa60 [ 109.048038][ T6061] __kfree_skb+0x5d/0x210 [ 109.048051][ T6061] netlink_unicast+0x788/0x920 [ 109.048066][ T6061] netlink_sendmsg+0x813/0xb40 [ 109.048083][ T6061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.048098][ T6061] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 109.048115][ T6061] ? aa_sock_msg_perm+0x122/0x200 [ 109.048126][ T6061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.048138][ T6061] sock_sendmsg_nosec+0x13a/0x180 [ 109.048155][ T6061] __sys_sendto+0x41a/0x5a0 [ 109.048167][ T6061] ? __pfx___sys_sendto+0x10/0x10 [ 109.048177][ T6061] ? lockdep_hardirqs_on+0x7a/0x110 [ 109.048194][ T6061] ? fput_close_sync+0x11f/0x240 [ 109.048204][ T6061] ? kmem_cache_free+0x526/0x6c0 [ 109.048219][ T6061] ? __pfx_fput_close_sync+0x10/0x10 [ 109.048233][ T6061] __x64_sys_sendto+0xde/0x100 [ 109.048245][ T6061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.048256][ T6061] do_syscall_64+0x174/0x580 [ 109.048269][ T6061] ? clear_bhb_loop+0x40/0x90 [ 109.048281][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.048291][ T6061] RIP: 0033:0x7f588b27d68e [ 109.048299][ T6061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.048307][ T6061] RSP: 002b:00007ffca7875b58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 109.048317][ T6061] RAX: ffffffffffffffda RBX: 00005555948e2500 RCX: 00007f588b27d68e [ 109.048324][ T6061] RDX: 0000000000000028 RSI: 00007f588c064670 RDI: 0000000000000003 [ 109.048330][ T6061] RBP: 0000000000000001 R08: 00007ffca7875bd4 R09: 000000000000000c [ 109.048336][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 109.048342][ T6061] R13: 0000000000000000 R14: 00007f588c064670 R15: 0000000000000000 [ 109.048356][ T6061] [ 110.121537][ T6061] Shutting down cpus with NMI [ 110.121868][ T6061] Kernel Offset: disabled