last executing test programs: 15m28.087194452s ago: executing program 32 (id=398): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r4 = syz_usb_connect$midi(0x2, 0x3e, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x4159, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0xb2, 0x20, 0x1f, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x6, [], [{{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x1, 0xff, 0x81, {0x4}}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0xd7, 0x9, 0xc, {0x4}}}]}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x31, 0x4, 0x8, 0x20, 0x3}, 0x1a, &(0x7f0000000180)={0x5, 0xf, 0xfffffffffffffcc8, 0x2}, 0x1555555555555505}) syz_usb_ep_read(r4, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000900)=0x15) ioctl(r3, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xf9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000c10)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000c20)=0x3f) 14m18.34860463s ago: executing program 33 (id=613): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) r0 = syz_open_dev$video(&(0x7f0000000800), 0x14, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000840)={0x3, 0x48574653, 0x3, @discrete={0x0, 0x2841}}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000200000000000008fe", 0x1e) ioctl(r1, 0xc138fd02, &(0x7f0000000000)="0400000000000000") 13m25.823972328s ago: executing program 34 (id=744): chdir(&(0x7f0000000640)='./cgroup\x00') r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statfs(&(0x7f0000000040)='./file0\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) close(r0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r4, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @mcast2, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x8}, 0x3400c8d4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r7, 0x4004743c, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 11m1.121110044s ago: executing program 35 (id=1171): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000040)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3e, 0x0) write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r8, 0x0, 0x80, 0xe) write$cgroup_devices(r8, 0x0, 0x9) write(r6, 0x0, 0x0) 10m19.868247601s ago: executing program 36 (id=1301): syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001"], 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0xb9, 0x0, 0x7, 0x0, 0x10000, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfd, 0x0, 0x8}) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) 9m37.944757253s ago: executing program 37 (id=1434): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x8, 0xb) 8m34.374346567s ago: executing program 38 (id=1594): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="203205000000050451278675753f1293ed9b16e341bf807444c2e6af5fa74afd517d204c9f98bab7768a47f56187ec078a4e11cb5391d20f8f61667eeb6fe0363b661eae9cccd72174f5b349c44b10848582141bc77cdd5621158262c73ffa39c511b471a345b7e80d8ccf3a55507e44573f644e3cf6e5fd72fa03a06343b475650c3e2ca6da28b2df7c53af7007a33c68bb"], &(0x7f0000000580)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "744a6200a5c6f7ebacdd82d611a75b4b174def9c5a41a72fd46e74047a5f9901d594e1c6e818076b91d85d53f7767641eb77b48fffe618a2e3bc65c767336a2ab9848e4de64f9eb23d538a92a9a239a78806690e48f9b59960fcf72ca95ed79993cd9e25827e1e0b487ad96f1ac520d62070058329472026955dcb2fa8a5a9e775a459500076bf4eca854ef330421fdc537e3e254eb3acbac0dcfd6f57f7352e3078569bf97cca6e2bc5958fca020014c169ed10a84bc9cdfb6d15b97a7180d37d1505c7a27350085767cc84f5ac2e80e8545b032c7ef719af45"}}}, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x20, 0x11, 0x24, "6f839cc595194996699c0fba06dabf8bfaa53c8a6a0bae0472900a45f8070db7490bd8f1"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000200)={0xc0, 0x5, 0x5, "7033d9b8fe"}, &(0x7f0000000240)={0x40, 0x5, 0x6, "030002462e51"}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e1f, @remote}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3ffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}, 0x94) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000380)={0x100000, 0x0, 0x0, 0x0, 0x3}) 8m27.332468277s ago: executing program 39 (id=1612): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x801, 0x9c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r3, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000400)=""/157, 0x9d}], 0x2) io_setup(0x501, &(0x7f0000000100)=0x0) ioctl$sock_proto_private(r1, 0xf9d2, &(0x7f0000000140)="84f85c63be8af9a17b031916eaba810c1174229be28e6b040027904d4bf7ddd3bae091fbda761c2a561b111bf853ba839d384f2b38b8769131adc04cb360e704c8d6d7afc02e3f8f50bb7429fbe8") r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x80805) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000780)="aa1d4846243103000000f7c28bfcd111fbdf23ea32db0e8f21ddbc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}], 0x1) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x8, r1, &(0x7f0000000000)='hy', 0x2, 0x310d, 0x0, 0x0, r1}]) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d000100000c00000000000007000000", @ANYRES32=0x0, @ANYBLOB="40f49104"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 6m53.812821871s ago: executing program 40 (id=1837): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_normal', 0x161a82, 0x149) (async) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r1, @ANYRES64=r1], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) (async) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000300)='./file1\x00', 0x26000010) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600040000010000000000000003003e00ebffffff940200000200000040000000000000000000000000000000000000002d8f38000100feff0200070003000000970f000008000000000000000d000000000000000000000000000000e5"], 0xed) (async) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 6m24.563883506s ago: executing program 41 (id=1914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002f00090024bd7000000000000500000014000a"], 0x28}}, 0x84) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="e62cc9d6d55bb059db7429b90ead76c7bc6f991535cb33d98700799414c63bfed5d7ecaa1c408f574b9ec1dd7309d2fa0f1089578c4b0efe00"/69, 0x45}], 0x1, &(0x7f0000002380)=[@assoc={0x18, 0x117, 0x4, 0xfffff9ff}, @iv={0xc8, 0x117, 0x2, 0xaf, "59c885933c568ac2b5489390c2ce107ccdf6426c8255458f061cd832c1051322fa48211e255783fdbfe67c234391fe4ae89eef9b44e54911da9fc0972c157eff731acff8c695888e153c52ddd481b6e1453a31fa3c77fd457a12771e8ca3f98cd302302b6b446c4a2f93f689f61011ba76f7c3880205441fc56d06c14d4bf89e4d1058e246df02a175bf4c0e712bbe0045a79a0cb8f32ca54f303a8bcf8af998c3429a4362cc595e297c3ac92ebf46"}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xa8, 0x117, 0x2, 0x90, "09bf75d86234e4ddd7f0c185ef690b1627647d42446f518af13fb0883a7944359a8b9ec6a6193a53ed364b71db3286af54ec67ab91c79dfd1f8b358d0ae0e610082f5545eb73a27c9377f5c1dc751fbf954e7ee3d7e75d46080d5006641a1105185d0bb0ea3f6ab8f273217678fa03db80de7dc26ca5824f2bac9c7ad6a1952bb7233d55b170ce3fd37cffff42a6cd76"}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0xc8, 0x117, 0x2, 0xb4, "a47265708d43fa51ddd53abd32ed2eb22e39a140341703a5376f90002cc001c1327ae116b9c557aaf60f9c1715a56d9899dc80b0f828143d20e198b6c90106b604d0fb084f0c2af8cb64f544f5e9868da6ef80719fc9cb3a837b627c427c249c8ed89fae4d28d8b7ce85fc015e1049fc4ad73bd05fece3d8a999c7fc9287217def5e53780c6305a579725e0a3ce3608e2298f18da49168a56386844b8de0ef1a498e76266b847336a9bde664e0ae21609c5c8a40"}, @assoc={0x18, 0x117, 0x4, 0xbe86}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x69, "57a381a66f8bd2f46f46f29361d22bf3c82c174b5919030a3183f1fed16337f4d187e0586bcd2ec1d2d293f9627f48fad7b3f8377064d3799a8ef0360ba4c8d0745957031b16c8967afbd256a478339b26762fcf10f6eac6a4632873f799a46f6c7f37ced7b6738da5"}], 0x360, 0x8800}], 0x1, 0x20000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000f00)="2e552f5d9fd8b0d962894980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa198d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a0f33e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5b0988789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0d9e816f0c06d65df84cb1569bd76b6e0b4f2b33f1cf876f22f7fe41c1e0e7a4052782e2f0b633378898e234b461403919507d2591bb489409dd60de96cabf5a0cbb9e5bd46c9e524b0a2982890d88acb7bd6249792b76a9590c0f88e32439d1ec202f68e209f9217ffa70efd30010f66619560064d9a3bcc756bc36929f8cd1dcd0d376a9c60652cc4e9e94d072320d6c579da677df2828ba7acb9524781569c7321c3509117468f668627148c6c763310a9ad45b79e11a83282d943748ab7013232a6d151a9ed7c70540df22ee08aec4c722abe6289842d64645ba2f0d21e23d4018893dcb5bb9e2f28ab957ec2609a87c0772b2f2083c2c9a641b0f550f522c024", 0x1ea, 0x20008086, 0x0, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="20082cbd7000fedbdf25700000000c0099000010ce006f2a5ee9"], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x2001) 5m11.127144231s ago: executing program 42 (id=2129): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$vhost_msg(r0, &(0x7f0000000680)={0x1, {&(0x7f0000000300)=""/17, 0x11, &(0x7f0000000600)=""/71, 0x3, 0x2}}, 0x48) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) read$FUSE(r6, 0x0, 0x0) close(0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0x0, 0x2000}) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(r11, &(0x7f0000000180)='net/vlan/vlan0\x00') ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000240)) setns(0xc9, 0x0) socket(0x9, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x3, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0xf4, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="80e90100591c48341a8329874fad37f4ac52d298d53440751e4a61a6c690f88c549cd2f7bc9bf13dfbebb35d0824a41f9914b0b372c3290bda27cf707eda280161682c55750974993b9c673292f6ef95252b1cf80d2b9eceb7bea301ad5f8c4074c34058a28d3ef4d4b433f5b0e6825ef47b7324a66b312199150be28332c8b5250f5a9edf5a3309f76bf6ccc19ad8ace1fe411e29a3c5e43a11fd9a56799259341d142d59872ff63bc0e50cb0ae0b3b5074f2510858b5b6164bbfa2cdeaea02f9635ceb32dd9f2dbe1efdd018cf199dcdd4383e2fd8ebeec026305824775ada6d37ed6cd3305242924eaf371a", @ANYRES16=r15, @ANYBLOB="200027bd7000fddbdf2511000000080006000300000044000380060007004e2300001400020067656e65766530000000000000000000140002006c6f0000000000000000000000000000050008000800000008000100020000000800050006000000080004008500000008000400050000000800040006000000"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000) io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 4m56.809139724s ago: executing program 43 (id=2128): set_mempolicy(0x3, &(0x7f0000000000)=0x4, 0x9) syz_usbip_server_init(0x3) (async) r0 = syz_usbip_server_init(0x3) r1 = syz_usbip_server_init(0x3) close_range(r1, r0, 0x2) (async) close_range(r1, r0, 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket(0x1, 0x5, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r7, @ANYRESHEX=r8], 0x15) (async) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r7, @ANYRESHEX=r8], 0x15) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x201) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000400)={{0x2, 0x3, 0x1, 0x1, 0x101}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x3, 0x10000001, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x253}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) (async) syz_usbip_server_init(0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) (async) r13 = openat$audio(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) ioctl$SNDCTL_DSP_SPEED(r13, 0xc0045002, &(0x7f0000000040)=0xdfe5) (async) ioctl$SNDCTL_DSP_SPEED(r13, 0xc0045002, &(0x7f0000000040)=0xdfe5) 2m28.535173512s ago: executing program 3 (id=2631): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r2, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) (fail_nth: 1) 2m26.749922399s ago: executing program 3 (id=2634): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) (fail_nth: 1) 2m24.064059203s ago: executing program 3 (id=2644): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000040)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x3a, 0x5, 0x54}, 0x2c) 2m19.35808833s ago: executing program 3 (id=2673): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) umount2(&(0x7f0000000280)='./proc\x00', 0x6) 2m18.8157659s ago: executing program 3 (id=2676): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) 2m18.171452528s ago: executing program 3 (id=2679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0xffff0000}, 0x800) 2m3.037097618s ago: executing program 44 (id=2679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0xffff0000}, 0x800) 1m50.76748585s ago: executing program 4 (id=2810): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 1m49.269662344s ago: executing program 4 (id=2818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m48.059047402s ago: executing program 4 (id=2827): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 1m47.737503536s ago: executing program 4 (id=2829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000050a010200000000000000000100fffb0900030073797a32000000000900010073797a30"], 0x9c}}, 0x0) 1m47.521939477s ago: executing program 4 (id=2831): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x11) 1m47.394412944s ago: executing program 0 (id=2833): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@allocspi={0x1f8, 0x16, 0x1, 0xfffffffe, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x3, 0xa, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@policy={0xac, 0x7, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e23, 0xffff, 0x4e24, 0x0, 0x2, 0x20, 0xa0, 0x3c}, {0x1000, 0x9, 0x0, 0xf56, 0x5b, 0x8, 0x4, 0xe7}, {0xc, 0x8000000000000000, 0x9, 0x6}, 0xd, 0x6e6bbe, 0x2, 0x0, 0x2, 0x2}}, @iptfs_reorder_window={0x6}, @algo_aead={0x4c, 0x12, {{'aegis128l-aesni\x00'}, 0x0, 0x40}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1m47.156525098s ago: executing program 0 (id=2835): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 1m47.07327387s ago: executing program 4 (id=2836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 1m46.838050159s ago: executing program 0 (id=2838): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', &(0x7f0000000180), 0x400) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000300)=""/86, 0x56}], 0x1) 1m46.64186622s ago: executing program 0 (id=2841): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) 1m46.191219805s ago: executing program 0 (id=2844): r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x64, @loopback, 0x87eb}}}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0400, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$pppl2tp(0x18, 0x1, 0x1) openat(0xffffffffffffff9c, 0x0, 0x8442, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x0) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x0, 0x33) mkdirat(0xffffffffffffff9c, 0x0, 0x1f9) mount(0x0, 0x0, &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x10c) lseek(r3, 0x8642, 0x3) 1m45.854654934s ago: executing program 0 (id=2847): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x300}}, 0x20}}, 0x0) 1m44.651235466s ago: executing program 2 (id=2863): r0 = dup(0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x24002094) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0) 1m44.512082341s ago: executing program 2 (id=2865): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1m42.597095341s ago: executing program 2 (id=2871): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x11) 1m42.586062526s ago: executing program 5 (id=2872): setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 1m42.460093002s ago: executing program 5 (id=2873): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1:0', 0x3) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/component_size\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1024', 0x4) 1m42.445957459s ago: executing program 2 (id=2874): socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 1m42.304268285s ago: executing program 2 (id=2875): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup(r0) sendmsg$802154_raw(r0, 0x0, 0x24002094) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) 1m42.300797823s ago: executing program 5 (id=2876): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) 1m42.146046197s ago: executing program 5 (id=2877): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8003}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m41.644180795s ago: executing program 5 (id=2878): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40480923, &(0x7f00000005c0)) 1m41.44540539s ago: executing program 5 (id=2879): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x46c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x440, 0x2, [@TCA_BPF_ACT={0x43c, 0x1, [@m_bpf={0x60, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x114, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xe9, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aa"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xb8, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x7d, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x110, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0xe5, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a67777e4d51dfa578f9f5021013f0c9a057b8f82000000000000000000000000007f81188b2cda51230f1a7c6035500fcba2a0c1e8df61c1a24ebdf1b89f29be8825795496195eb50cd86bf94eb7c2f2f3cd2a74145b5e23908868d084fa1aeb5cf35b1d008b539cc91d0cb1e1304dc65d40df4446cb4725e42a047c2fc7ba3b1e387f5628b3c86a55e4972d016f00000378526b1797e51bbca47fa852a731a6d7b7678b453e7c5c4642b54dcee1032681e6853f7c2f7f8aa5667dceac0f2e9f55d94a322f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m41.375711594s ago: executing program 2 (id=2880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xff}, {0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1m31.572842365s ago: executing program 45 (id=2836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 1m30.109364558s ago: executing program 46 (id=2847): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x300}}, 0x20}}, 0x0) 1m25.984179188s ago: executing program 47 (id=2879): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x46c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x440, 0x2, [@TCA_BPF_ACT={0x43c, 0x1, [@m_bpf={0x60, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x114, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xe9, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aa"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xb8, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x7d, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x110, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0xe5, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a67777e4d51dfa578f9f5021013f0c9a057b8f82000000000000000000000000007f81188b2cda51230f1a7c6035500fcba2a0c1e8df61c1a24ebdf1b89f29be8825795496195eb50cd86bf94eb7c2f2f3cd2a74145b5e23908868d084fa1aeb5cf35b1d008b539cc91d0cb1e1304dc65d40df4446cb4725e42a047c2fc7ba3b1e387f5628b3c86a55e4972d016f00000378526b1797e51bbca47fa852a731a6d7b7678b453e7c5c4642b54dcee1032681e6853f7c2f7f8aa5667dceac0f2e9f55d94a322f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m25.788907673s ago: executing program 48 (id=2880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xff}, {0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 23.794231047s ago: executing program 6 (id=2909): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup(r0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24002094) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) 22.323128527s ago: executing program 6 (id=2914): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) r1 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80, 0x0) fadvise64(r3, 0x4, 0x3, 0x5) preadv(r3, 0x0, 0x0, 0x0, 0x1) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xa13e) syz_usb_connect$midi(0x3, 0xbb, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x1, 0x1, 0x3, 0x0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x4, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x1, 0x4e}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x10, 0x5}, @midi_out_jack={0xb, 0x24, 0x3, 0x1, 0x6, 0x2, [{0xa, 0x6}, {0x7, 0xb}], 0x1}, @midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x7, 0x1, [{0x8}], 0x3}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x3, 0x1, [{0xbb, 0xf7}], 0x1}, @midi_out_jack={0x9, 0x24, 0x3, 0x0, 0x3, 0x1, [{0x4, 0x1}], 0xd}, @midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x0, 0x0, [], 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x9, 0x5}], [{{0x9, 0x5, 0x5, 0x8, 0x10, 0x0, 0x0, 0x66, {0x4}}}, {{0x9, 0x5, 0xc, 0x10, 0x4b8e5216c5fbd24a, 0x89, 0xc7, 0x1, {0xb, 0x25, 0x1, 0x7, "455e80b7ee7869"}}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x2, 0x1, {0x5, 0x25, 0x1, 0x1, "e9"}}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x9, 0x7, 0x80, {0x7, 0x25, 0x1, 0x3, "e18cfe"}}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x81, 0x3, {0x10, 0x25, 0x1, 0xc, "66bfc32179a03407c351f470"}}}]}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x9, 0x3, 0x4, 0x8, 0xe}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x809}}, {0xb8, &(0x7f0000000440)=ANY=[@ANYBLOB="b80363cb6ab5744b9a9b1ebb9880b0b7d65ba1cf1caf0ee9df98e0ad00a54155d5d2e247c1102918c324e25546be52a6af4756df05b6dea651594f10fc0d66eddd1e2dc694d66905305753a37705d3cc19f7b602f76f6cb0a721ad2cc02c7dc6bc816ffce14c360ec604be60d58fd94a3d2eee8b0821e91eb064ce05f87a9a6b94f8d951ecd0cd803a8778feb10bc81a27dbbad2aa9e2800000000000000000000000000000000ba5cf8e5101e3cb173ec75f3ca7682fdb9e892ab2b2115dbbe4643831fd12e9c826a92caa615413f17b293c151002c92ed71e8000000000000"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2b1927e20537b650}}, {0x7c, &(0x7f0000000580)=@string={0x7c, 0x3, "3083b1ddb9fc847a801a8bccfaa42223d1fb9167a63b099c7da26b81537add2b3392506ec410fdabbf3c7dded5fac97887a3d0bd709ab6e79353ba4a225aa0cb70ed383b28d18acf33eead125a43f3e9efb6b6470e2aa5f76e9ae304a0f0d7e170b0191f8f690a1dc46f988738e6cb28e1db8f9fad0b9944800c"}}, {0x2, &(0x7f00000006c0)=@string={0x2}}]}) 21.549833021s ago: executing program 8 (id=2915): socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 20.99942875s ago: executing program 8 (id=2917): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) 20.819962664s ago: executing program 6 (id=2918): r0 = fsopen(&(0x7f00000010c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x2000745) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 20.492477202s ago: executing program 8 (id=2920): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008002000800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090) 20.09505736s ago: executing program 7 (id=2922): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) close(0x3) 20.034979193s ago: executing program 6 (id=2923): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4008800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read(r1, &(0x7f0000000240)=""/254, 0xfe) 19.711585065s ago: executing program 6 (id=2924): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x2, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 19.711348444s ago: executing program 8 (id=2925): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) flistxattr(r0, &(0x7f0000000040)=""/40, 0x28) 19.709445652s ago: executing program 7 (id=2926): socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 19.690035914s ago: executing program 1 (id=2927): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000009000000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {}, {0x4, 0xffff}}}, 0x24}}, 0x24040084) r0 = socket(0xa, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x8}, &(0x7f0000000140)=0x90) 19.405645569s ago: executing program 6 (id=2928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001400b59500000000000002000a402200", @ANYRES32, @ANYBLOB="14000200"/14], 0x40}}, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x4) 19.405107518s ago: executing program 8 (id=2930): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) 19.368616656s ago: executing program 1 (id=2931): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x7005}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) 19.186630134s ago: executing program 7 (id=2932): r0 = fsopen(&(0x7f00000010c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x2000745) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 19.13765518s ago: executing program 8 (id=2933): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x2000, 0x1) getdents(r3, 0x0, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x43348, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240440d1}, 0x40000) 18.917581239s ago: executing program 1 (id=2934): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x2000) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 18.727880779s ago: executing program 1 (id=2935): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x2, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2140, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, 0x0, 0x0) write(r0, &(0x7f0000000280)='1.0', 0x3) read(r0, 0x0, 0x0) 18.587788048s ago: executing program 7 (id=2936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x2, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 18.329794165s ago: executing program 1 (id=2938): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='10 ', 0x3) 18.267472077s ago: executing program 7 (id=2939): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)=@reiserfs_4={0x10, 0x4, {0x1, 0x3, 0x1, 0x6}}, &(0x7f0000000080), 0x0) 17.945726708s ago: executing program 7 (id=2941): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0x601, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x6}}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 17.811285831s ago: executing program 1 (id=2942): socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 17.522877974s ago: executing program 9 (id=2944): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x80084, 0x6, 0x11, 0x9, "0060730000efbc8901000000008de190faf600"}) 17.355854084s ago: executing program 9 (id=2945): r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x0) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x0, 0x33) lseek(r1, 0x8642, 0x3) 17.195808957s ago: executing program 9 (id=2946): r0 = fsopen(&(0x7f00000010c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x2000745) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 17.017212837s ago: executing program 9 (id=2947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)={0x18, 0x3, 0x1, 0x5, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) 16.822851729s ago: executing program 9 (id=2948): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup(r0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24002094) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) 15.924746242s ago: executing program 9 (id=2949): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000580)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x50bd2e, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x4, 0x10, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x3c}}, 0x20024090) 4.028537515s ago: executing program 49 (id=2928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001400b59500000000000002000a402200", @ANYRES32, @ANYBLOB="14000200"/14], 0x40}}, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x4) 3.986450574s ago: executing program 50 (id=2933): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x2000, 0x1) getdents(r3, 0x0, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x43348, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240440d1}, 0x40000) 2.483915955s ago: executing program 51 (id=2942): socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 2.375048932s ago: executing program 52 (id=2941): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0x601, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x6}}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 0s ago: executing program 53 (id=2949): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000580)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x50bd2e, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x4, 0x10, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x3c}}, 0x20024090) kernel console output (not intermixed with test programs): 984.533973][T17002] ? clear_bhb_loop+0x70/0xc0 [ 984.533985][T17002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.533995][T17002] RIP: 0033:0x7fbf7ea9e98e [ 984.534006][T17002] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 984.534015][T17002] RSP: 002b:00007fbf7ccb1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 984.534027][T17002] RAX: ffffffffffffffda RBX: 00007fbf7ccb26c0 RCX: 00007fbf7ea9e98e [ 984.534034][T17002] RDX: 000000000000000f RSI: 00007fbf7ccb20a0 RDI: 0000000000000007 [ 984.534041][T17002] RBP: 00007fbf7ccb2090 R08: 0000000000000000 R09: 0000000000000000 [ 984.534047][T17002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.534053][T17002] R13: 00007fbf7ed663f8 R14: 00007fbf7ed66360 R15: 00007ffe64002248 [ 984.534069][T17002] [ 985.062201][T17011] FAULT_INJECTION: forcing a failure. [ 985.062201][T17011] name failslab, interval 1, probability 1, space 0, times 0 [ 985.062226][T17011] CPU: 0 UID: 0 PID: 17011 Comm: syz.2.2593 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 985.062240][T17011] Tainted: [L]=SOFTLOCKUP [ 985.062244][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 985.062251][T17011] Call Trace: [ 985.062256][T17011] [ 985.062260][T17011] dump_stack_lvl+0xe8/0x150 [ 985.062281][T17011] should_fail_ex+0x46b/0x600 [ 985.062296][T17011] should_failslab+0xa8/0x100 [ 985.062312][T17011] kmem_cache_alloc_node_noprof+0xac/0x660 [ 985.062325][T17011] ? __alloc_skb+0x1db/0x7a0 [ 985.062337][T17011] ? __alloc_skb+0x1db/0x7a0 [ 985.062352][T17011] __alloc_skb+0x1db/0x7a0 [ 985.062366][T17011] __ip6_append_data+0x2ec4/0x40c0 [ 985.062459][T17011] ? __pfx_raw6_getfrag+0x10/0x10 [ 985.062522][T17011] ? lock_acquire+0x115/0x350 [ 985.062540][T17011] ? ip6_mtu+0x7d/0x490 [ 985.062577][T17011] ? __pfx___ip6_append_data+0x10/0x10 [ 985.062591][T17011] ? ip6_setup_cork+0x547/0xf60 [ 985.062605][T17011] ? ip6_append_data+0x1a6/0x270 [ 985.062627][T17011] ip6_append_data+0x108/0x270 [ 985.062641][T17011] ? __pfx_raw6_getfrag+0x10/0x10 [ 985.062658][T17011] rawv6_sendmsg+0x1298/0x18c0 [ 985.062680][T17011] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 985.062693][T17011] ? lock_acquire+0x115/0x350 [ 985.062708][T17011] ? smack_socket_sendmsg+0x1a9/0x5a0 [ 985.062722][T17011] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 985.062742][T17011] ? sock_rps_record_flow+0x19/0x350 [ 985.062800][T17011] ? inet_sendmsg+0x298/0x320 [ 985.062812][T17011] ? unwind_get_return_address+0x4d/0x90 [ 985.062826][T17011] ? __pfx_inet_sendmsg+0x10/0x10 [ 985.062839][T17011] sock_sendmsg_nosec+0x10e/0x180 [ 985.062851][T17011] sock_write_iter+0x2e4/0x3f0 [ 985.062869][T17011] ? __pfx_sock_write_iter+0x10/0x10 [ 985.062893][T17011] do_iter_readv_writev+0x624/0x8d0 [ 985.062908][T17011] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 985.062922][T17011] ? bpf_lsm_file_permission+0x9/0x20 [ 985.062932][T17011] ? security_file_permission+0x75/0x260 [ 985.062944][T17011] ? rw_verify_area+0x209/0x4d0 [ 985.062956][T17011] vfs_writev+0x34c/0x990 [ 985.062972][T17011] ? do_raw_spin_lock+0x12b/0x2f0 [ 985.062984][T17011] ? __pfx_vfs_writev+0x10/0x10 [ 985.063005][T17011] ? __fget_files+0x2a/0x420 [ 985.063016][T17011] ? __fget_files+0x3a8/0x420 [ 985.063025][T17011] ? __fget_files+0x2a/0x420 [ 985.063039][T17011] do_writev+0x15a/0x2e0 [ 985.063054][T17011] ? __pfx_do_writev+0x10/0x10 [ 985.063073][T17011] do_syscall_64+0x166/0x520 [ 985.063085][T17011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.063096][T17011] ? clear_bhb_loop+0x70/0xc0 [ 985.063108][T17011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.063118][T17011] RIP: 0033:0x7f1f1c7ee159 [ 985.063129][T17011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.063138][T17011] RSP: 002b:00007f1f1aa25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 985.063150][T17011] RAX: ffffffffffffffda RBX: 00007f1f1ca76090 RCX: 00007f1f1c7ee159 [ 985.063157][T17011] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 985.063163][T17011] RBP: 00007f1f1aa25090 R08: 0000000000000000 R09: 0000000000000000 [ 985.063169][T17011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.063175][T17011] R13: 00007f1f1ca76128 R14: 00007f1f1ca76090 R15: 00007ffe1d124158 [ 985.063191][T17011] [ 985.113159][T10620] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 985.262685][T10620] usb 5-1: Using ep0 maxpacket: 8 [ 985.263264][T10620] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 985.264162][T10620] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 985.264176][T10620] usb 5-1: config 0 has no interface number 0 [ 985.264199][T10620] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 985.264211][T10620] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 985.264223][T10620] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 985.264236][T10620] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 985.264258][T10620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.273434][T10620] usb 5-1: config 0 descriptor?? [ 985.389689][T10620] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 985.490097][T10620] usb 5-1: USB disconnect, device number 49 [ 985.490147][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 985.523169][T10620] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 985.937340][T17020] FAULT_INJECTION: forcing a failure. [ 985.937340][T17020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.937363][T17020] CPU: 0 UID: 0 PID: 17020 Comm: syz.0.2597 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 985.937377][T17020] Tainted: [L]=SOFTLOCKUP [ 985.937381][T17020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 985.937387][T17020] Call Trace: [ 985.937392][T17020] [ 985.937397][T17020] dump_stack_lvl+0xe8/0x150 [ 985.937416][T17020] should_fail_ex+0x46b/0x600 [ 985.937432][T17020] _copy_to_user+0x31/0xb0 [ 985.937446][T17020] simple_read_from_buffer+0xe1/0x170 [ 985.937460][T17020] proc_fail_nth_read+0x1be/0x230 [ 985.937474][T17020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 985.937487][T17020] ? rw_verify_area+0x250/0x4d0 [ 985.937499][T17020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 985.937509][T17020] vfs_read+0x219/0xa90 [ 985.937524][T17020] ? __pfx_vfs_read+0x10/0x10 [ 985.937536][T17020] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 985.937549][T17020] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 985.937560][T17020] ? mutex_lock_nested+0x152/0x1d0 [ 985.937573][T17020] ? fdget_pos+0x252/0x320 [ 985.937596][T17020] ksys_read+0x156/0x270 [ 985.937608][T17020] ? __pfx_ksys_read+0x10/0x10 [ 985.937625][T17020] do_syscall_64+0x166/0x520 [ 985.937636][T17020] ? trace_irq_disable+0x3b/0x140 [ 985.937648][T17020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.937659][T17020] ? clear_bhb_loop+0x70/0xc0 [ 985.937671][T17020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.937681][T17020] RIP: 0033:0x7fbf7ea9e98e [ 985.937692][T17020] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 985.937701][T17020] RSP: 002b:00007fbf7cd14fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 985.937713][T17020] RAX: ffffffffffffffda RBX: 00007fbf7cd156c0 RCX: 00007fbf7ea9e98e [ 985.937720][T17020] RDX: 000000000000000f RSI: 00007fbf7cd150a0 RDI: 000000000000000c [ 985.937727][T17020] RBP: 00007fbf7cd15090 R08: 0000000000000000 R09: 0000000000000000 [ 985.937733][T17020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.937739][T17020] R13: 00007fbf7ed66128 R14: 00007fbf7ed66090 R15: 00007ffe64002248 [ 985.937755][T17020] [ 986.006041][T16712] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 986.084055][T16712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 986.092752][T16712] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 986.104237][T16712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 986.106683][T16712] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 986.127706][T16712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 986.134939][T16712] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 986.159821][T16712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 986.677997][T16712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.783139][T16712] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.908709][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.928541][ T6176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.941822][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.941896][ T6176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.590466][ T66] IPVS: starting estimator thread 0... [ 987.685751][T17060] IPVS: using max 15 ests per chain, 36000 per kthread [ 987.782388][T17067] FAULT_INJECTION: forcing a failure. [ 987.782388][T17067] name failslab, interval 1, probability 1, space 0, times 0 [ 987.782412][T17067] CPU: 0 UID: 0 PID: 17067 Comm: syz.0.2608 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 987.782427][T17067] Tainted: [L]=SOFTLOCKUP [ 987.782431][T17067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 987.782437][T17067] Call Trace: [ 987.782442][T17067] [ 987.782447][T17067] dump_stack_lvl+0xe8/0x150 [ 987.782467][T17067] should_fail_ex+0x46b/0x600 [ 987.782482][T17067] should_failslab+0xa8/0x100 [ 987.782497][T17067] ? vm_area_alloc+0x24/0x140 [ 987.782511][T17067] kmem_cache_alloc_noprof+0x9e/0x690 [ 987.782524][T17067] ? vm_area_alloc+0x24/0x140 [ 987.782540][T17067] vm_area_alloc+0x24/0x140 [ 987.782553][T17067] mmap_region+0x12d7/0x2240 [ 987.782575][T17067] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 987.782589][T17067] ? __pfx_mmap_region+0x10/0x10 [ 987.782603][T17067] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 987.782620][T17067] ? __lock_acquire+0x6df/0x2e40 [ 987.782643][T17067] ? __lock_acquire+0x6df/0x2e40 [ 987.782690][T17067] ? mt_find+0x186/0x630 [ 987.782776][T17067] ? rcu_is_watching+0x16/0xb0 [ 987.782791][T17067] ? cap_capable+0x123/0x460 [ 987.782801][T17067] ? safesetid_security_capable+0xa9/0x1a0 [ 987.782813][T17067] ? bpf_lsm_capable+0x9/0x20 [ 987.782825][T17067] ? security_capable+0x7e/0x2c0 [ 987.782840][T17067] do_mmap+0xe0e/0x1310 [ 987.782856][T17067] ? __pfx_do_mmap+0x10/0x10 [ 987.782871][T17067] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 987.782884][T17067] ? rwbase_write_lock+0x550/0x720 [ 987.782902][T17067] vm_mmap_pgoff+0x275/0x4e0 [ 987.782916][T17067] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 987.782925][T17067] ? ksys_write+0x248/0x270 [ 987.782937][T17067] ? __pfx_ksys_write+0x10/0x10 [ 987.782951][T17067] ? __x64_sys_mmap+0x7f/0x140 [ 987.782964][T17067] do_syscall_64+0x166/0x520 [ 987.782975][T17067] ? trace_irq_disable+0x3b/0x140 [ 987.782987][T17067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.782997][T17067] ? clear_bhb_loop+0x70/0xc0 [ 987.783009][T17067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.783019][T17067] RIP: 0033:0x7fbf7eade159 [ 987.783029][T17067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.783038][T17067] RSP: 002b:00007fbf7cd36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 987.783050][T17067] RAX: ffffffffffffffda RBX: 00007fbf7ed65fa0 RCX: 00007fbf7eade159 [ 987.783057][T17067] RDX: 0000000003000001 RSI: 0000000000000007 RDI: 00007fffffffb000 [ 987.783064][T17067] RBP: 00007fbf7cd36090 R08: ffffffffffffffff R09: 0000000008000000 [ 987.783070][T17067] R10: bd4c341840b03bf2 R11: 0000000000000246 R12: 0000000000000001 [ 987.783077][T17067] R13: 00007fbf7ed66038 R14: 00007fbf7ed65fa0 R15: 00007ffe64002248 [ 987.783093][T17067] [ 988.414551][ T974] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 988.414649][T10620] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 988.569628][T10620] usb 4-1: Using ep0 maxpacket: 32 [ 988.570129][T10620] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 988.571481][T10620] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 988.571495][T10620] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 988.571506][T10620] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 988.571533][T10620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 988.571544][T10620] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 988.571556][T10620] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 988.571578][T10620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.576416][T10620] usb 4-1: config 0 descriptor?? [ 988.578972][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 988.580490][ T974] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 988.581991][ T974] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 988.582005][ T974] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 988.582015][ T974] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 988.582044][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 988.582055][ T974] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 988.582067][ T974] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 988.582089][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.584940][ T974] usb 1-1: config 0 descriptor?? [ 988.823376][ T974] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 988.827460][T10620] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 989.471764][T17072] FAULT_INJECTION: forcing a failure. [ 989.471764][T17072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 989.472153][T17072] CPU: 0 UID: 0 PID: 17072 Comm: syz.0.2609 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 989.472170][T17072] Tainted: [L]=SOFTLOCKUP [ 989.472174][T17072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 989.472181][T17072] Call Trace: [ 989.472185][T17072] [ 989.472191][T17072] dump_stack_lvl+0xe8/0x150 [ 989.472218][T17072] should_fail_ex+0x46b/0x600 [ 989.472233][T17072] _copy_from_user+0x2d/0xb0 [ 989.472246][T17072] copy_from_sockptr+0x5e/0x90 [ 989.472336][T17072] packet_setsockopt+0xbeb/0x1510 [ 989.472348][T17072] ? __pfx_packet_setsockopt+0x10/0x10 [ 989.472362][T17072] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 989.472378][T17072] ? lock_acquire+0x115/0x350 [ 989.472395][T17072] ? __fget_files+0x2a/0x420 [ 989.472407][T17072] ? __fget_files+0x2a/0x420 [ 989.472416][T17072] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 989.472431][T17072] ? __pfx_packet_setsockopt+0x10/0x10 [ 989.472442][T17072] do_sock_setsockopt+0x17c/0x1b0 [ 989.472459][T17072] __x64_sys_setsockopt+0x143/0x1b0 [ 989.472475][T17072] do_syscall_64+0x166/0x520 [ 989.472486][T17072] ? trace_irq_disable+0x3b/0x140 [ 989.472498][T17072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.472508][T17072] ? clear_bhb_loop+0x70/0xc0 [ 989.472521][T17072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.472530][T17072] RIP: 0033:0x7fbf7eade159 [ 989.472541][T17072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.472550][T17072] RSP: 002b:00007fbf7cd36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 989.472562][T17072] RAX: ffffffffffffffda RBX: 00007fbf7ed65fa0 RCX: 00007fbf7eade159 [ 989.472570][T17072] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000009 [ 989.472576][T17072] RBP: 00007fbf7cd36090 R08: 0000000000000004 R09: 0000000000000000 [ 989.472582][T17072] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 989.472588][T17072] R13: 00007fbf7ed66038 R14: 00007fbf7ed65fa0 R15: 00007ffe64002248 [ 989.472604][T17072] [ 989.656861][T16712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.925951][T15318] usb 4-1: USB disconnect, device number 24 [ 990.054988][T15318] usblp1: removed [ 990.072604][T15153] usb 1-1: USB disconnect, device number 30 [ 990.137884][T15153] usblp0: removed [ 990.724759][T16712] veth0_vlan: entered promiscuous mode [ 990.774340][T16712] veth1_vlan: entered promiscuous mode [ 990.938297][T16712] veth0_macvtap: entered promiscuous mode [ 990.960845][T16712] veth1_macvtap: entered promiscuous mode [ 991.068272][T16712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.069036][T15318] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 991.086348][T16712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.119508][T10620] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 991.228249][ T6176] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.245633][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.246097][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.246330][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.282478][T10620] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 991.284292][T10620] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 991.284310][T10620] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 991.284322][T10620] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 991.284332][T10620] usb 5-1: config 0 has no interface number 0 [ 991.284363][T10620] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 991.284375][T10620] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 65535, setting to 64 [ 991.284388][T10620] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 991.284411][T10620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.292245][T15318] usb 4-1: Using ep0 maxpacket: 8 [ 991.292814][T15318] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 991.293798][T15318] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 991.293811][T15318] usb 4-1: config 0 has no interface number 0 [ 991.293834][T15318] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 991.293846][T15318] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 991.293858][T15318] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 991.293871][T15318] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 991.293892][T15318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.300171][T10620] usb 5-1: config 0 descriptor?? [ 991.308069][T17113] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 991.312034][T15318] usb 4-1: config 0 descriptor?? [ 991.382673][T15318] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 991.412569][T10620] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 992.162012][T15318] usb 4-1: USB disconnect, device number 25 [ 992.162102][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 992.613713][T15318] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 992.722361][T17129] batadv_slave_1: entered promiscuous mode [ 992.813188][T15153] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 992.940796][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.940835][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.994567][T15153] usb 1-1: Using ep0 maxpacket: 32 [ 993.047367][T15153] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 993.048318][T15153] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 993.048333][T15153] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 993.048344][T15153] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 993.048378][T15153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 993.048389][T15153] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 993.048402][T15153] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 993.048423][T15153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.057355][T17111] batadv_slave_1: left promiscuous mode [ 993.062000][ T984] usb 5-1: Failed to submit usb control message: -110 [ 993.062021][ T984] usb 5-1: unable to send the bmi data to the device: -110 [ 993.062030][ T984] usb 5-1: unable to get target info from device [ 993.062040][ T984] usb 5-1: could not get target info (-110) [ 993.062122][ T984] usb 5-1: could not probe fw (-110) [ 993.062185][T16712] ieee80211 phy76: Selected rate control algorithm 'minstrel_ht' [ 993.072785][T15153] usb 1-1: config 0 descriptor?? [ 993.411109][T15153] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 993.813979][T17141] overlay: ./file0 is not a directory [ 994.402484][ T5718] usb 5-1: USB disconnect, device number 50 [ 994.693770][T10620] usb 1-1: USB disconnect, device number 31 [ 994.817915][ T6176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.817930][ T6176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.894125][T10620] usblp0: removed [ 995.000135][T16712] ieee80211 phy77: Selected rate control algorithm 'minstrel_ht' [ 995.424945][ T7969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.424959][ T7969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.609347][ T5718] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 995.779887][ T5718] usb 5-1: Using ep0 maxpacket: 16 [ 995.780402][ T5718] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 995.781350][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 995.781370][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.798611][ T5718] usb 5-1: config 0 descriptor?? [ 995.831166][T17165] Context (ID=0x0) not attached to queue pair (handle=0x2:0x2) [ 996.205121][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 996.205135][ T37] audit: type=1326 audit(1788465925.216:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17172 comm="syz.5.2531" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08cd6e159 code=0x7ffc0000 [ 996.205167][ T37] audit: type=1326 audit(1788465925.216:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17172 comm="syz.5.2531" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08cd6e159 code=0x7ffc0000 [ 996.215752][ T5718] usbhid 5-1:0.0: can't add hid device: -71 [ 996.215829][ T5718] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 996.304601][ T37] audit: type=1326 audit(1788465925.256:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17172 comm="syz.5.2531" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc08cd6e159 code=0x7ffc0000 [ 996.304633][ T37] audit: type=1326 audit(1788465925.266:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17172 comm="syz.5.2531" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08cd6e159 code=0x7ffc0000 [ 996.304656][ T37] audit: type=1326 audit(1788465925.266:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17172 comm="syz.5.2531" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08cd6e159 code=0x7ffc0000 [ 996.304683][ T37] audit: type=1326 audit(1788465925.296:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17172 comm="syz.5.2531" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc08cd6e159 code=0x7ffc0000 [ 996.304707][ T37] audit: type=1326 audit(1788465925.296:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17172 comm="syz.5.2531" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08cd6e159 code=0x7ffc0000 [ 996.304729][ T37] audit: type=1326 audit(1788465925.296:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17172 comm="syz.5.2531" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08cd6e159 code=0x7ffc0000 [ 996.304755][ T37] audit: type=1326 audit(1788465925.296:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17172 comm="syz.5.2531" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc08cd6e159 code=0x7ffc0000 [ 996.304776][ T37] audit: type=1326 audit(1788465925.296:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17172 comm="syz.5.2531" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08cd6e159 code=0x7ffc0000 [ 996.371301][ T5718] usb 5-1: USB disconnect, device number 51 [ 996.528944][ T974] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 996.679668][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 996.683639][ T974] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 996.686849][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.686864][ T974] usb 3-1: Product: syz [ 996.686871][ T974] usb 3-1: Manufacturer: syz [ 996.686879][ T974] usb 3-1: SerialNumber: syz [ 996.703194][ T974] usb 3-1: config 0 descriptor?? [ 996.720922][ T974] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 996.993690][ T974] ssu100 3-1:0.0: probe with driver ssu100 failed with error -32 [ 997.437818][ T974] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 999.530141][ T974] usb 5-1: Using ep0 maxpacket: 8 [ 999.550979][ T974] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 999.553765][ T974] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 999.553781][ T974] usb 5-1: config 0 has no interface number 0 [ 999.553804][ T974] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 999.553817][ T974] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 999.553829][ T974] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 999.553842][ T974] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 999.553864][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.574108][ T974] usb 5-1: config 0 descriptor?? [ 999.581733][ T5718] usb 3-1: USB disconnect, device number 31 [ 999.761152][ T974] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 999.846758][ T974] usb 5-1: USB disconnect, device number 52 [ 999.934163][T10620] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1000.113368][ T974] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1000.119428][T10620] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1000.120340][T10620] usb 6-1: config index 0 descriptor too short (expected 63186, got 210) [ 1000.120354][T10620] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 1000.120365][T10620] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1000.120375][T10620] usb 6-1: config 0 has no interface number 0 [ 1000.120398][T10620] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1000.120410][T10620] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 65535, setting to 64 [ 1000.120423][T10620] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1000.120444][T10620] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.121504][T17207] overlay: ./file0 is not a directory [ 1000.225346][T10620] usb 6-1: config 0 descriptor?? [ 1000.232877][T17202] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1000.311419][T10620] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1001.493510][T17202] batadv_slave_1: entered promiscuous mode [ 1001.495529][T17201] batadv_slave_1: left promiscuous mode [ 1001.825273][ T7967] usb 6-1: Failed to submit usb control message: -110 [ 1001.825295][ T7967] usb 6-1: unable to send the bmi data to the device: -110 [ 1001.825305][ T7967] usb 6-1: unable to get target info from device [ 1001.825314][ T7967] usb 6-1: could not get target info (-110) [ 1001.825406][ T7967] usb 6-1: could not probe fw (-110) [ 1002.009828][ T5719] usb 6-1: USB disconnect, device number 3 [ 1002.985293][T17230] FAULT_INJECTION: forcing a failure. [ 1002.985293][T17230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1002.985324][T17230] CPU: 0 UID: 0 PID: 17230 Comm: syz.3.2631 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1002.985338][T17230] Tainted: [L]=SOFTLOCKUP [ 1002.985342][T17230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1002.985349][T17230] Call Trace: [ 1002.985353][T17230] [ 1002.985358][T17230] dump_stack_lvl+0xe8/0x150 [ 1002.985378][T17230] should_fail_ex+0x46b/0x600 [ 1002.985392][T17230] _copy_from_user+0x2d/0xb0 [ 1002.985405][T17230] ___sys_sendmsg+0x1c6/0x360 [ 1002.985419][T17230] ? __lock_acquire+0x6df/0x2e40 [ 1002.985434][T17230] ? __pfx____sys_sendmsg+0x10/0x10 [ 1002.985464][T17230] ? __fget_files+0x2a/0x420 [ 1002.985475][T17230] ? __fget_files+0x3a8/0x420 [ 1002.985490][T17230] __x64_sys_sendmsg+0x1b7/0x290 [ 1002.985504][T17230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1002.985527][T17230] do_syscall_64+0x166/0x520 [ 1002.985539][T17230] ? trace_irq_disable+0x3b/0x140 [ 1002.985551][T17230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.985561][T17230] ? clear_bhb_loop+0x70/0xc0 [ 1002.985573][T17230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.985583][T17230] RIP: 0033:0x7f4802dee159 [ 1002.985593][T17230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.985602][T17230] RSP: 002b:00007f4801025028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1002.985614][T17230] RAX: ffffffffffffffda RBX: 00007f4803076090 RCX: 00007f4802dee159 [ 1002.985622][T17230] RDX: 0000000000000000 RSI: 0000200000004340 RDI: 0000000000000005 [ 1002.985628][T17230] RBP: 00007f4801025090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.985635][T17230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.985640][T17230] R13: 00007f4803076128 R14: 00007f4803076090 R15: 00007fff95249478 [ 1002.985656][T17230] [ 1003.890217][T17236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2633'. [ 1004.972997][T17245] FAULT_INJECTION: forcing a failure. [ 1004.972997][T17245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.973020][T17245] CPU: 0 UID: 0 PID: 17245 Comm: syz.3.2634 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1004.973036][T17245] Tainted: [L]=SOFTLOCKUP [ 1004.973040][T17245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1004.973046][T17245] Call Trace: [ 1004.973051][T17245] [ 1004.973056][T17245] dump_stack_lvl+0xe8/0x150 [ 1004.973076][T17245] should_fail_ex+0x46b/0x600 [ 1004.973090][T17245] _copy_from_user+0x2d/0xb0 [ 1004.973104][T17245] copy_from_sockptr+0x5e/0x90 [ 1004.973128][T17245] packet_setsockopt+0xa2a/0x1510 [ 1004.973141][T17245] ? __pfx_packet_setsockopt+0x10/0x10 [ 1004.973159][T17245] ? lock_acquire+0x115/0x350 [ 1004.973177][T17245] ? __fget_files+0x2a/0x420 [ 1004.973189][T17245] ? __fget_files+0x2a/0x420 [ 1004.973197][T17245] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1004.973213][T17245] ? __pfx_packet_setsockopt+0x10/0x10 [ 1004.973224][T17245] do_sock_setsockopt+0x17c/0x1b0 [ 1004.973241][T17245] __x64_sys_setsockopt+0x143/0x1b0 [ 1004.973256][T17245] do_syscall_64+0x166/0x520 [ 1004.973268][T17245] ? trace_irq_disable+0x3b/0x140 [ 1004.973280][T17245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.973290][T17245] ? clear_bhb_loop+0x70/0xc0 [ 1004.973302][T17245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.973311][T17245] RIP: 0033:0x7f4802dee159 [ 1004.973324][T17245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.973333][T17245] RSP: 002b:00007f4801046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1004.973344][T17245] RAX: ffffffffffffffda RBX: 00007f4803075fa0 RCX: 00007f4802dee159 [ 1004.973352][T17245] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000003 [ 1004.973358][T17245] RBP: 00007f4801046090 R08: 000000000000001c R09: 0000000000000000 [ 1004.973364][T17245] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1004.973370][T17245] R13: 00007f4803076038 R14: 00007f4803075fa0 R15: 00007fff95249478 [ 1004.973387][T17245] [ 1005.264011][T17254] FAULT_INJECTION: forcing a failure. [ 1005.264011][T17254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.264033][T17254] CPU: 0 UID: 0 PID: 17254 Comm: syz.0.2637 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1005.264048][T17254] Tainted: [L]=SOFTLOCKUP [ 1005.264052][T17254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1005.264058][T17254] Call Trace: [ 1005.264063][T17254] [ 1005.264068][T17254] dump_stack_lvl+0xe8/0x150 [ 1005.264088][T17254] should_fail_ex+0x46b/0x600 [ 1005.264103][T17254] _copy_from_user+0x2d/0xb0 [ 1005.264116][T17254] do_tcp_setsockopt+0x504/0x1f80 [ 1005.264203][T17254] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1005.264219][T17254] ? __fget_files+0x2a/0x420 [ 1005.264230][T17254] ? sock_common_setsockopt+0x36/0xc0 [ 1005.264241][T17254] ? tcp_setsockopt+0x3d/0xe0 [ 1005.264252][T17254] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1005.264263][T17254] do_sock_setsockopt+0x17c/0x1b0 [ 1005.264279][T17254] __x64_sys_setsockopt+0x143/0x1b0 [ 1005.264295][T17254] do_syscall_64+0x166/0x520 [ 1005.264307][T17254] ? trace_irq_disable+0x3b/0x140 [ 1005.264319][T17254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.264329][T17254] ? clear_bhb_loop+0x70/0xc0 [ 1005.264341][T17254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.264351][T17254] RIP: 0033:0x7fbf7eade159 [ 1005.264362][T17254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.264371][T17254] RSP: 002b:00007fbf7cd36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1005.264383][T17254] RAX: ffffffffffffffda RBX: 00007fbf7ed65fa0 RCX: 00007fbf7eade159 [ 1005.264391][T17254] RDX: 000000000000000c RSI: 0000000000000006 RDI: 0000000000000003 [ 1005.264397][T17254] RBP: 00007fbf7cd36090 R08: 0000000000000004 R09: 0000000000000000 [ 1005.264403][T17254] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 1005.264409][T17254] R13: 00007fbf7ed66038 R14: 00007fbf7ed65fa0 R15: 00007ffe64002248 [ 1005.264425][T17254] [ 1007.372363][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1007.372376][ T37] audit: type=1800 audit(1788465936.396:2283): pid=17289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2647" name="use" dev="configfs" ino=102856 res=0 errno=0 [ 1007.646496][T17295] syzkaller0: entered promiscuous mode [ 1007.646513][T17295] syzkaller0: entered allmulticast mode [ 1007.744407][T17295] tipc: Started in network mode [ 1007.744439][T17295] tipc: Node identity 8e182b982f7c, cluster identity 4711 [ 1007.744963][T17295] tipc: Enabled bearer , priority 0 [ 1007.783235][T17295] tipc: Resetting bearer [ 1008.254314][T17292] tipc: Resetting bearer [ 1008.689727][T17308] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1008.901006][T17292] tipc: Disabling bearer [ 1009.021567][T15318] tipc: Node number set to 2707696536 [ 1009.545047][T17333] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2661'. [ 1009.980477][T17337] FAULT_INJECTION: forcing a failure. [ 1009.980477][T17337] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1009.980502][T17337] CPU: 0 UID: 0 PID: 17337 Comm: syz.4.2662 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1009.980517][T17337] Tainted: [L]=SOFTLOCKUP [ 1009.980522][T17337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1009.980529][T17337] Call Trace: [ 1009.980534][T17337] [ 1009.980540][T17337] dump_stack_lvl+0xe8/0x150 [ 1009.980560][T17337] should_fail_ex+0x46b/0x600 [ 1009.980575][T17337] get_futex_key+0x1b4/0x1580 [ 1009.980591][T17337] ? __lock_acquire+0x6df/0x2e40 [ 1009.980607][T17337] ? kasan_save_track+0x3e/0x80 [ 1009.980619][T17337] ? __kasan_slab_free+0x5c/0x80 [ 1009.980631][T17337] ? kmem_cache_free+0x187/0x6d0 [ 1009.980647][T17337] ? __pfx_get_futex_key+0x10/0x10 [ 1009.980666][T17337] futex_wake+0x119/0x600 [ 1009.980681][T17337] ? __pfx_futex_wake+0x10/0x10 [ 1009.980701][T17337] do_futex+0x458/0x4e0 [ 1009.980718][T17337] ? __pfx_do_futex+0x10/0x10 [ 1009.980732][T17337] ? kmem_cache_free+0x187/0x6d0 [ 1009.980744][T17337] ? do_sys_openat2+0x14e/0x200 [ 1009.980761][T17337] __se_sys_futex+0x3a8/0x450 [ 1009.980779][T17337] ? __pfx___se_sys_futex+0x10/0x10 [ 1009.980793][T17337] ? rcu_is_watching+0x16/0xb0 [ 1009.980810][T17337] ? __x64_sys_futex+0x21/0xf0 [ 1009.980825][T17337] do_syscall_64+0x166/0x520 [ 1009.980837][T17337] ? trace_irq_disable+0x3b/0x140 [ 1009.980849][T17337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.980859][T17337] ? clear_bhb_loop+0x70/0xc0 [ 1009.980870][T17337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.980881][T17337] RIP: 0033:0x7f2602aae159 [ 1009.980892][T17337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.980901][T17337] RSP: 002b:00007f2600d060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1009.980913][T17337] RAX: ffffffffffffffda RBX: 00007f2602d35fa8 RCX: 00007f2602aae159 [ 1009.980920][T17337] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2602d35fac [ 1009.980926][T17337] RBP: 00007f2602d35fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1009.980933][T17337] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1009.980939][T17337] R13: 00007f2602d36038 R14: 00007fff5f38f0b0 R15: 00007fff5f38f198 [ 1009.980954][T17337] [ 1010.819817][T17349] bonding: bond0 is being deleted... [ 1011.946548][T17378] random: crng reseeded on system resumption [ 1012.658426][T17378] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1012.658451][T17378] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1012.658465][T17378] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1012.658474][T17378] PM: hibernation: Basic memory bitmaps created [ 1013.001633][T17377] PM: hibernation: Basic memory bitmaps freed [ 1013.503313][T10642] input: syz0 as /devices/virtual/misc/uhid/0018:0B05:0101.000A/input/input23 [ 1013.937230][T17349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.425398][T17349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.666704][T17349] bond0 (unregistering): Released all slaves [ 1014.950026][T17410] tipc: Started in network mode [ 1014.950045][T17410] tipc: Node identity 1208e3f9208a, cluster identity 4711 [ 1014.950152][T17410] tipc: Enabled bearer , priority 0 [ 1014.950523][T17395] syzkaller0: entered promiscuous mode [ 1014.950536][T17395] syzkaller0: entered allmulticast mode [ 1014.986349][T17421] geneve2: entered promiscuous mode [ 1014.986365][T17421] geneve2: entered allmulticast mode [ 1015.178404][T17392] tipc: Resetting bearer [ 1015.336940][T10642] asus 0018:0B05:0101.000A: input,hidraw0: I2C HID v0.00 Mouse [syz0] on syz1 [ 1015.337069][T10642] asus 0018:0B05:0101.000A: Asus failed to start multitouch: -5 [ 1015.741959][T17392] tipc: Disabling bearer [ 1016.122914][T10642] asus 0018:0B05:0101.000A: probe with driver asus failed with error -5 [ 1018.075889][T17474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2697'. [ 1018.826405][T17494] FAULT_INJECTION: forcing a failure. [ 1018.826405][T17494] name failslab, interval 1, probability 1, space 0, times 0 [ 1018.826430][T17494] CPU: 0 UID: 0 PID: 17494 Comm: syz.0.2704 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1018.826444][T17494] Tainted: [L]=SOFTLOCKUP [ 1018.826448][T17494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1018.826455][T17494] Call Trace: [ 1018.826459][T17494] [ 1018.826464][T17494] dump_stack_lvl+0xe8/0x150 [ 1018.826488][T17494] should_fail_ex+0x46b/0x600 [ 1018.826502][T17494] ? __d_alloc+0x37/0x6f0 [ 1018.826514][T17494] should_failslab+0xa8/0x100 [ 1018.826530][T17494] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1018.826544][T17494] ? __d_alloc+0x37/0x6f0 [ 1018.826558][T17494] __d_alloc+0x37/0x6f0 [ 1018.826571][T17494] d_alloc_pseudo+0x21/0xc0 [ 1018.826583][T17494] alloc_path_pseudo+0x107/0x220 [ 1018.826599][T17494] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 1018.826612][T17494] ? rt_spin_lock+0x1e2/0x400 [ 1018.826632][T17494] alloc_file_pseudo+0xa8/0x1e0 [ 1018.826646][T17494] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1018.826662][T17494] ? alloc_fd+0x654/0x6d0 [ 1018.826680][T17494] sock_alloc_file+0xb8/0x2f0 [ 1018.826690][T17494] ? __sys_socket+0x12b/0x1b0 [ 1018.826702][T17494] __sys_socket+0x13f/0x1b0 [ 1018.826714][T17494] __x64_sys_socket+0x7a/0x90 [ 1018.826726][T17494] do_syscall_64+0x166/0x520 [ 1018.826737][T17494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.826747][T17494] ? clear_bhb_loop+0x70/0xc0 [ 1018.826759][T17494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.826769][T17494] RIP: 0033:0x7fbf7eade159 [ 1018.826779][T17494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.826787][T17494] RSP: 002b:00007fbf7cd36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1018.826799][T17494] RAX: ffffffffffffffda RBX: 00007fbf7ed65fa0 RCX: 00007fbf7eade159 [ 1018.826807][T17494] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000018 [ 1018.826813][T17494] RBP: 00007fbf7eb75024 R08: 0000000000000000 R09: 0000000000000000 [ 1018.826819][T17494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.826825][T17494] R13: 00007fbf7ed66038 R14: 00007fbf7ed65fa0 R15: 00007ffe64002248 [ 1018.826849][T17494] [ 1018.855378][T17491] bridge1: entered promiscuous mode [ 1018.855395][T17491] bridge1: entered allmulticast mode [ 1018.881447][T17491] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1021.270239][T17532] ieee802154 phy0 wpan0: encryption failed: -22 [ 1021.614357][T17539] FAULT_INJECTION: forcing a failure. [ 1021.614357][T17539] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1021.614382][T17539] CPU: 0 UID: 0 PID: 17539 Comm: syz.4.2717 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1021.614397][T17539] Tainted: [L]=SOFTLOCKUP [ 1021.614401][T17539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1021.614408][T17539] Call Trace: [ 1021.614412][T17539] [ 1021.614418][T17539] dump_stack_lvl+0xe8/0x150 [ 1021.614440][T17539] should_fail_ex+0x46b/0x600 [ 1021.614455][T17539] prepare_alloc_pages+0x223/0x650 [ 1021.614473][T17539] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 1021.614490][T17539] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1021.614512][T17539] ? __pfx_policy_nodemask+0x10/0x10 [ 1021.614533][T17539] alloc_pages_mpol+0xd4/0x280 [ 1021.614551][T17539] alloc_pages_noprof+0xd2/0x2f0 [ 1021.614569][T17539] __pud_alloc+0x3a/0x460 [ 1021.614585][T17539] handle_mm_fault+0x2131/0x28c0 [ 1021.614599][T17539] ? handle_mm_fault+0xeb/0x28c0 [ 1021.614609][T17539] ? mt_find+0x186/0x630 [ 1021.614622][T17539] ? __pfx_mt_find+0x10/0x10 [ 1021.614637][T17539] ? __pfx_handle_mm_fault+0x10/0x10 [ 1021.614661][T17539] __get_user_pages+0x1676/0x2650 [ 1021.614689][T17539] get_user_pages_remote+0x307/0xb10 [ 1021.614702][T17539] ? __pfx_down_read+0x10/0x10 [ 1021.614716][T17539] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1021.614729][T17539] ? mmap_read_lock_maybe_expand+0xd7/0x3b0 [ 1021.614745][T17539] copy_string_kernel+0x2f9/0x5f0 [ 1021.614762][T17539] ? __pfx_copy_string_kernel+0x10/0x10 [ 1021.614773][T17539] ? rt_spin_unlock+0x165/0x200 [ 1021.614788][T17539] ? alloc_bprm+0x588/0x640 [ 1021.614800][T17539] do_execveat_common+0x373/0x670 [ 1021.614816][T17539] __x64_sys_execve+0x97/0xc0 [ 1021.614828][T17539] do_syscall_64+0x166/0x520 [ 1021.614839][T17539] ? trace_irq_disable+0x3b/0x140 [ 1021.614851][T17539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.614861][T17539] ? clear_bhb_loop+0x70/0xc0 [ 1021.614873][T17539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.614889][T17539] RIP: 0033:0x7f2602aae159 [ 1021.614900][T17539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.614910][T17539] RSP: 002b:00007f2600d06028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1021.614922][T17539] RAX: ffffffffffffffda RBX: 00007f2602d35fa0 RCX: 00007f2602aae159 [ 1021.614930][T17539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 1021.614937][T17539] RBP: 00007f2602b45024 R08: 0000000000000000 R09: 0000000000000000 [ 1021.614944][T17539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1021.614950][T17539] R13: 00007f2602d36038 R14: 00007f2602d35fa0 R15: 00007fff5f38f198 [ 1021.614967][T17539] [ 1022.904094][T17560] 9p: Bad value for 'wfdno' [ 1023.235744][T17572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2726'. [ 1023.308168][T17576] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2727'. [ 1024.463301][T17584] FAULT_INJECTION: forcing a failure. [ 1024.463301][T17584] name failslab, interval 1, probability 1, space 0, times 0 [ 1024.463327][T17584] CPU: 0 UID: 0 PID: 17584 Comm: syz.4.2730 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1024.463342][T17584] Tainted: [L]=SOFTLOCKUP [ 1024.463346][T17584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1024.463353][T17584] Call Trace: [ 1024.463359][T17584] [ 1024.463363][T17584] dump_stack_lvl+0xe8/0x150 [ 1024.463385][T17584] should_fail_ex+0x46b/0x600 [ 1024.463401][T17584] should_failslab+0xa8/0x100 [ 1024.463418][T17584] ? radix_tree_node_alloc+0xd0/0x400 [ 1024.463430][T17584] kmem_cache_alloc_noprof+0x9e/0x690 [ 1024.463442][T17584] ? radix_tree_node_alloc+0xd0/0x400 [ 1024.463452][T17584] ? radix_tree_node_alloc+0xd0/0x400 [ 1024.463465][T17584] radix_tree_node_alloc+0xd0/0x400 [ 1024.463474][T17584] ? __lock_acquire+0x6df/0x2e40 [ 1024.463491][T17584] idr_get_free+0x295/0xa20 [ 1024.463508][T17584] idr_alloc_u32+0x190/0x340 [ 1024.463527][T17584] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1024.463540][T17584] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1024.463551][T17584] ? mutex_lock_nested+0x152/0x1d0 [ 1024.463564][T17584] ? tcf_idr_check_alloc+0x603/0x7f0 [ 1024.463653][T17584] tcf_idr_check_alloc+0x623/0x7f0 [ 1024.463664][T17584] ? tcf_idr_check_alloc+0xc8/0x7f0 [ 1024.463676][T17584] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 1024.463688][T17584] ? __nla_parse+0x40/0x60 [ 1024.463703][T17584] tcf_mpls_init+0x2fd/0x1330 [ 1024.463746][T17584] ? __pfx_tcf_mpls_init+0x10/0x10 [ 1024.463761][T17584] ? __kasan_kmalloc+0x93/0xb0 [ 1024.463777][T17584] ? nla_memcpy+0x5b/0xc0 [ 1024.463794][T17584] tcf_action_init_1+0x4ba/0x740 [ 1024.463809][T17584] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1024.463830][T17584] ? tc_action_load_ops+0x247/0x540 [ 1024.463853][T17584] ? __nla_parse+0x40/0x60 [ 1024.463867][T17584] tcf_action_init+0x30e/0xb10 [ 1024.463884][T17584] ? __pfx_tcf_action_init+0x10/0x10 [ 1024.463910][T17584] ? __lock_acquire+0x6df/0x2e40 [ 1024.463923][T17584] ? __pfx___nla_validate_parse+0x10/0x10 [ 1024.463955][T17584] tc_ctl_action+0x43b/0xc70 [ 1024.463973][T17584] ? __pfx_tc_ctl_action+0x10/0x10 [ 1024.463990][T17584] ? rt_mutex_slowlock+0x424/0x780 [ 1024.464025][T17584] ? __pfx_tc_ctl_action+0x10/0x10 [ 1024.464036][T17584] rtnetlink_rcv_msg+0x7b9/0xc00 [ 1024.464088][T17584] ? kmem_cache_alloc_node_noprof+0x3fc/0x660 [ 1024.464103][T17584] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1024.464114][T17584] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1024.464127][T17584] ? __lock_acquire+0x6df/0x2e40 [ 1024.464146][T17584] netlink_rcv_skb+0x226/0x4a0 [ 1024.464163][T17584] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1024.464175][T17584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1024.464196][T17584] ? netlink_deliver_tap+0x2e/0x1b0 [ 1024.464210][T17584] ? netlink_deliver_tap+0x2e/0x1b0 [ 1024.464226][T17584] netlink_unicast+0x7f5/0x990 [ 1024.464245][T17584] netlink_sendmsg+0x813/0xb40 [ 1024.464264][T17584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1024.464279][T17584] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1024.464297][T17584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1024.464311][T17584] sock_sendmsg_nosec+0x13a/0x180 [ 1024.464323][T17584] ____sys_sendmsg+0x565/0x870 [ 1024.464341][T17584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1024.464359][T17584] ? import_iovec+0x73/0xa0 [ 1024.464373][T17584] ___sys_sendmsg+0x2a5/0x360 [ 1024.464386][T17584] ? __lock_acquire+0x6df/0x2e40 [ 1024.464399][T17584] ? __pfx____sys_sendmsg+0x10/0x10 [ 1024.464415][T17584] ? futex_wait+0x2a2/0x390 [ 1024.464442][T17584] ? __fget_files+0x2a/0x420 [ 1024.464451][T17584] ? __fget_files+0x3a8/0x420 [ 1024.464466][T17584] __x64_sys_sendmsg+0x1b7/0x290 [ 1024.464481][T17584] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1024.464509][T17584] do_syscall_64+0x166/0x520 [ 1024.464520][T17584] ? trace_irq_disable+0x3b/0x140 [ 1024.464533][T17584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.464543][T17584] ? clear_bhb_loop+0x70/0xc0 [ 1024.464556][T17584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.464566][T17584] RIP: 0033:0x7f2602aae159 [ 1024.464577][T17584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.464586][T17584] RSP: 002b:00007f2600d06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1024.464600][T17584] RAX: ffffffffffffffda RBX: 00007f2602d35fa0 RCX: 00007f2602aae159 [ 1024.464609][T17584] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1024.464616][T17584] RBP: 00007f2602b45024 R08: 0000000000000000 R09: 0000000000000000 [ 1024.464622][T17584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1024.464629][T17584] R13: 00007f2602d36038 R14: 00007f2602d35fa0 R15: 00007fff5f38f198 [ 1024.464645][T17584] [ 1025.768980][T17611] batadv1: entered promiscuous mode [ 1025.768999][T17611] batadv1: entered allmulticast mode [ 1026.194367][T17625] tipc: Enabling of bearer rejected, failed to enable media [ 1028.555406][T17680] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1028.603423][T17680] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1028.618478][T17680] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1028.620646][T17680] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1028.653500][T17680] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1028.783776][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1029.424386][T17685] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2753'. [ 1030.085460][T17703] tipc: Started in network mode [ 1030.085479][T17703] tipc: Node identity 32c7e3f7b08f, cluster identity 4711 [ 1030.085593][T17703] tipc: Enabled bearer , priority 0 [ 1030.088127][T17694] tipc: Resetting bearer [ 1030.089186][T17699] syzkaller0: entered promiscuous mode [ 1030.089200][T17699] syzkaller0: entered allmulticast mode [ 1030.109172][T17691] tipc: Resetting bearer [ 1030.172528][T17717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2757'. [ 1030.172543][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2757'. [ 1030.493061][T17725] ieee802154 phy0 wpan0: encryption failed: -22 [ 1030.754538][T17390] Set syz0 is full, maxelem 65536 reached [ 1031.026669][T12701] Bluetooth: hci5: command tx timeout [ 1031.228542][T17691] tipc: Disabling bearer [ 1031.252644][T10620] tipc: Node number set to 2185815031 [ 1031.411545][T17736] netlink: 'syz.0.2762': attribute type 10 has an invalid length. [ 1031.604329][T17736] team0: Device wg2 is of different type [ 1032.314448][T17755] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1033.017943][T17773] ieee802154 phy0 wpan0: encryption failed: -22 [ 1033.099298][T12701] Bluetooth: hci5: command tx timeout [ 1033.109518][T17775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2774'. [ 1035.179006][T12701] Bluetooth: hci5: command tx timeout [ 1036.422348][ T984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.736034][T17843] bridge0: port 3(syz_tun) entered blocking state [ 1036.736097][T17843] bridge0: port 3(syz_tun) entered disabled state [ 1036.736211][T17843] syz_tun: entered allmulticast mode [ 1036.818399][T17843] syz_tun: entered promiscuous mode [ 1036.830190][T17846] netlink: 'syz.4.2794': attribute type 49 has an invalid length. [ 1037.258975][T12701] Bluetooth: hci5: command tx timeout [ 1038.015209][ T984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.486350][ T984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.715997][ T984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.046370][T17910] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2810'. [ 1041.369118][T17938] digital: digital_start_poll: Unknown protocol [ 1041.489426][T17940] syzkaller0: entered promiscuous mode [ 1041.489444][T17940] syzkaller0: entered allmulticast mode [ 1041.660844][T17940] tipc: Enabled bearer , priority 0 [ 1041.725211][T17940] tipc: Resetting bearer [ 1041.994233][T17939] tipc: Resetting bearer [ 1042.326991][T17939] tipc: Disabling bearer [ 1042.350376][T17963] program syz.0.2824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1042.557864][T17962] syzkaller1: entered promiscuous mode [ 1042.557881][T17962] syzkaller1: entered allmulticast mode [ 1042.870111][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2829'. [ 1044.871634][T18007] syzkaller0: entered promiscuous mode [ 1044.871652][T18007] syzkaller0: entered allmulticast mode [ 1046.432188][T18086] size and base must be multiples of 4 kiB [ 1046.432205][T18086] CPU: 0 UID: 0 PID: 18086 Comm: syz.5.2867 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1046.432220][T18086] Tainted: [L]=SOFTLOCKUP [ 1046.432224][T18086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1046.432231][T18086] Call Trace: [ 1046.432236][T18086] [ 1046.432241][T18086] dump_stack_lvl+0xe8/0x150 [ 1046.432263][T18086] mtrr_add+0xd5/0x100 [ 1046.432280][T18086] mtrr_ioctl+0xca4/0x13c0 [ 1046.432293][T18086] ? smk_tskacc+0x2fb/0x370 [ 1046.432310][T18086] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1046.432323][T18086] ? smack_file_ioctl+0x265/0x370 [ 1046.432345][T18086] ? __fget_files+0x2a/0x420 [ 1046.432355][T18086] ? __fget_files+0x3a8/0x420 [ 1046.432364][T18086] ? __fget_files+0x2a/0x420 [ 1046.432373][T18086] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1046.432387][T18086] proc_reg_unlocked_ioctl+0x1df/0x2d0 [ 1046.432401][T18086] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1046.432413][T18086] __se_sys_ioctl+0xff/0x170 [ 1046.432427][T18086] do_syscall_64+0x166/0x520 [ 1046.432440][T18086] ? trace_irq_disable+0x3b/0x140 [ 1046.432453][T18086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.432464][T18086] ? clear_bhb_loop+0x70/0xc0 [ 1046.432477][T18086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.432493][T18086] RIP: 0033:0x7fc08cd6e159 [ 1046.432505][T18086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.432514][T18086] RSP: 002b:00007fc08afc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1046.432530][T18086] RAX: ffffffffffffffda RBX: 00007fc08cff5fa0 RCX: 00007fc08cd6e159 [ 1046.432540][T18086] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000003 [ 1046.432547][T18086] RBP: 00007fc08ce05024 R08: 0000000000000000 R09: 0000000000000000 [ 1046.432553][T18086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.432560][T18086] R13: 00007fc08cff6038 R14: 00007fc08cff5fa0 R15: 00007ffd303f2318 [ 1046.432578][T18086] [ 1048.300335][T18105] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.404163][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.404205][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.177198][T17680] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1059.270305][T17680] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1059.276125][T17680] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1059.277214][T17680] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1059.277609][T17680] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1060.656420][T17680] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1060.740781][T17680] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1060.743167][T17680] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1060.743902][T17680] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1060.744669][T17680] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1061.507510][T12701] Bluetooth: hci2: command tx timeout [ 1062.939278][T12701] Bluetooth: hci7: command tx timeout [ 1063.586152][T12701] Bluetooth: hci2: command tx timeout [ 1064.579031][T17671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.580367][T17671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.580493][T17671] bridge_slave_0: entered allmulticast mode [ 1064.598592][T17671] bridge_slave_0: entered promiscuous mode [ 1064.668607][T17671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.668682][T17671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.670901][T17671] bridge_slave_1: entered allmulticast mode [ 1064.686928][T17671] bridge_slave_1: entered promiscuous mode [ 1065.094652][T12701] Bluetooth: hci7: command tx timeout [ 1065.505936][T17680] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1065.552380][T17680] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1065.683907][T17680] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1065.683971][T17680] Bluetooth: hci2: command tx timeout [ 1065.849752][T18150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1065.947003][T18150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1065.951014][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1065.951389][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1065.954258][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1065.954671][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1065.956090][T17680] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1066.410596][T18043] syz_tun (unregistering): left allmulticast mode [ 1066.454435][T17671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.680399][T18005] syz_tun (unregistering): left allmulticast mode [ 1066.680422][T18005] syz_tun (unregistering): left promiscuous mode [ 1066.680549][T18005] bridge0: port 3(syz_tun) entered disabled state [ 1067.104376][T12701] Bluetooth: hci7: command tx timeout [ 1067.185587][ T984] bridge_slave_1: left allmulticast mode [ 1067.185610][ T984] bridge_slave_1: left promiscuous mode [ 1067.185761][ T984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.187825][ T984] bridge_slave_0: left allmulticast mode [ 1067.187860][ T984] bridge_slave_0: left promiscuous mode [ 1067.188008][ T984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.673798][ T984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.676244][ T984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.677968][ T984] bond0 (unregistering): Released all slaves [ 1067.685776][T17671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.835860][T12701] Bluetooth: hci2: command tx timeout [ 1068.074731][T17671] team0: Port device team_slave_0 added [ 1068.235994][T12701] Bluetooth: hci1: command tx timeout [ 1068.393118][T17671] team0: Port device team_slave_1 added [ 1068.396318][T12701] Bluetooth: hci3: command tx timeout [ 1068.680536][T17671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1068.680549][T17671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.680563][T17671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1068.725754][T17671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1068.725767][T17671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.725781][T17671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.093366][ T984] hsr_slave_0: left promiscuous mode [ 1069.093890][ T984] hsr_slave_1: left promiscuous mode [ 1069.095114][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1069.095132][ T984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.095763][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.095777][ T984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.182576][T12701] Bluetooth: hci7: command tx timeout [ 1069.195240][ T984] veth1_macvtap: left promiscuous mode [ 1069.195280][ T984] veth0_macvtap: left promiscuous mode [ 1069.195376][ T984] veth1_vlan: left promiscuous mode [ 1069.195450][ T984] veth0_vlan: left promiscuous mode [ 1069.705010][ T984] team0 (unregistering): Port device team_slave_1 removed [ 1069.718475][ T984] team0 (unregistering): Port device team_slave_0 removed [ 1070.091158][T17671] hsr_slave_0: entered promiscuous mode [ 1070.096271][T17671] hsr_slave_1: entered promiscuous mode [ 1070.096819][T17671] debugfs: 'hsr0' already exists in 'hsr' [ 1070.096834][T17671] Cannot create hsr debugfs directory [ 1070.309139][T12701] Bluetooth: hci1: command tx timeout [ 1070.470978][T12701] Bluetooth: hci3: command tx timeout [ 1070.947099][ T984] IPVS: stop unused estimator thread 0... [ 1072.384191][T12701] Bluetooth: hci1: command tx timeout [ 1072.539100][T12701] Bluetooth: hci3: command tx timeout [ 1072.581745][T18124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.581816][T18124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.581948][T18124] bridge_slave_0: entered allmulticast mode [ 1072.583740][T18124] bridge_slave_0: entered promiscuous mode [ 1072.612762][T18130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.612834][T18130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.612963][T18130] bridge_slave_0: entered allmulticast mode [ 1072.614478][T18130] bridge_slave_0: entered promiscuous mode [ 1072.673911][T18124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.673980][T18124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.674079][T18124] bridge_slave_1: entered allmulticast mode [ 1072.675515][T18124] bridge_slave_1: entered promiscuous mode [ 1073.141072][T18130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.141153][T18130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.141297][T18130] bridge_slave_1: entered allmulticast mode [ 1073.142721][T18130] bridge_slave_1: entered promiscuous mode [ 1073.316461][ T984] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.404003][ T5247] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1074.063223][T18124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.112520][T18130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.145383][T18124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1074.167035][T18130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1074.343557][ T984] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.435275][ T5247] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1074.459811][T12701] Bluetooth: hci1: command tx timeout [ 1074.619029][T12701] Bluetooth: hci3: command tx timeout [ 1074.673204][T18144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.673332][T18144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.673472][T18144] bridge_slave_0: entered allmulticast mode [ 1074.674951][T18144] bridge_slave_0: entered promiscuous mode [ 1074.731130][T18145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.731205][T18145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.731326][T18145] bridge_slave_0: entered allmulticast mode [ 1074.744017][T18145] bridge_slave_0: entered promiscuous mode [ 1074.796333][T18144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.796403][T18144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.796503][T18144] bridge_slave_1: entered allmulticast mode [ 1074.797996][T18144] bridge_slave_1: entered promiscuous mode [ 1075.081917][ T984] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.104843][T18124] team0: Port device team_slave_0 added [ 1075.105016][T18145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.105080][T18145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.105174][T18145] bridge_slave_1: entered allmulticast mode [ 1075.106587][T18145] bridge_slave_1: entered promiscuous mode [ 1075.111391][T18130] team0: Port device team_slave_0 added [ 1075.317687][T18124] team0: Port device team_slave_1 added [ 1075.320634][T18130] team0: Port device team_slave_1 added [ 1075.339600][ T5247] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1075.448717][T18144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.679603][ T984] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.751699][T18145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.755320][T18144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.756085][T18124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.756094][T18124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.756108][T18124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.757489][T18130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.757497][T18130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.757511][T18130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.806360][T18124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.806373][T18124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.806388][T18124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.807335][T18130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.807344][T18130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.807357][T18130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.814197][T18145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.088005][T18144] team0: Port device team_slave_0 added [ 1076.126074][T18144] team0: Port device team_slave_1 added [ 1076.127836][T18145] team0: Port device team_slave_0 added [ 1076.198528][T18145] team0: Port device team_slave_1 added [ 1076.374792][T18130] hsr_slave_0: entered promiscuous mode [ 1076.375580][T18130] hsr_slave_1: entered promiscuous mode [ 1076.376826][T18130] debugfs: 'hsr0' already exists in 'hsr' [ 1076.376842][T18130] Cannot create hsr debugfs directory [ 1076.377444][T18144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.377452][T18144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.377465][T18144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.394418][T18124] hsr_slave_0: entered promiscuous mode [ 1076.395198][T18124] hsr_slave_1: entered promiscuous mode [ 1076.395696][T18124] debugfs: 'hsr0' already exists in 'hsr' [ 1076.395711][T18124] Cannot create hsr debugfs directory [ 1076.438592][ T5247] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1076.443621][T18144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.443632][T18144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.443646][T18144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.744343][T18145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.744355][T18145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.744369][T18145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.784967][T18145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.784980][T18145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.784994][T18145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.084443][T18144] hsr_slave_0: entered promiscuous mode [ 1077.085190][T18144] hsr_slave_1: entered promiscuous mode [ 1077.085687][T18144] debugfs: 'hsr0' already exists in 'hsr' [ 1077.085702][T18144] Cannot create hsr debugfs directory [ 1077.203012][T18145] hsr_slave_0: entered promiscuous mode [ 1077.203768][T18145] hsr_slave_1: entered promiscuous mode [ 1077.204350][T18145] debugfs: 'hsr0' already exists in 'hsr' [ 1077.204365][T18145] Cannot create hsr debugfs directory [ 1077.318179][T17671] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1077.323162][T17671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1077.397183][T17671] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1077.402157][T17671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1077.516033][T17671] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1077.527382][T17671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1077.575408][T17671] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1077.590659][T17671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1077.805084][ T984] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.186742][ T984] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.672225][ T984] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.968465][ T984] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.346345][T17671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.051478][T17671] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.059208][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.059296][ T9433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.079281][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.079354][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.911467][T17671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.497083][T18144] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.612477][T18144] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.017423][T18144] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.455739][T18144] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.507106][T17671] veth0_vlan: entered promiscuous mode [ 1086.687441][ T984] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.737560][T17671] veth1_vlan: entered promiscuous mode [ 1087.015079][T17671] veth0_macvtap: entered promiscuous mode [ 1087.036311][T17671] veth1_macvtap: entered promiscuous mode [ 1087.399552][ T984] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.473655][T17671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.640979][T17671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.828152][ T984] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.156760][ T984] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.449566][ T999] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.449606][ T999] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.449625][ T999] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.449643][ T999] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.234622][T18150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1089.277563][T18150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1089.287879][T18150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1089.309193][T18150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1089.335977][T18150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1090.595583][ T984] bridge_slave_1: left allmulticast mode [ 1090.595608][ T984] bridge_slave_1: left promiscuous mode [ 1090.595757][ T984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.597570][ T984] bridge_slave_0: left allmulticast mode [ 1090.597590][ T984] bridge_slave_0: left promiscuous mode [ 1090.597735][ T984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.624043][ T984] bridge_slave_1: left allmulticast mode [ 1090.624067][ T984] bridge_slave_1: left promiscuous mode [ 1090.624219][ T984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.626381][ T984] bridge_slave_0: left allmulticast mode [ 1090.626401][ T984] bridge_slave_0: left promiscuous mode [ 1090.626537][ T984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.636679][ T984] bridge_slave_1: left allmulticast mode [ 1090.636700][ T984] bridge_slave_1: left promiscuous mode [ 1090.636849][ T984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.638555][ T984] bridge_slave_0: left allmulticast mode [ 1090.638572][ T984] bridge_slave_0: left promiscuous mode [ 1090.638690][ T984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.654455][ T984] bridge_slave_1: left allmulticast mode [ 1090.654480][ T984] bridge_slave_1: left promiscuous mode [ 1090.654633][ T984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.656396][ T984] bridge_slave_0: left allmulticast mode [ 1090.656422][ T984] bridge_slave_0: left promiscuous mode [ 1090.656552][ T984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.146972][ T984] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1091.157607][ T984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.160243][ T984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.161997][ T984] bond0 (unregistering): Released all slaves [ 1091.167881][ T984] bond1 (unregistering): Released all slaves [ 1091.429339][T18150] Bluetooth: hci4: command tx timeout [ 1091.507955][ T984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.516664][ T984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.518337][ T984] bond0 (unregistering): Released all slaves [ 1091.914244][ T984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.915559][ T984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.916170][ T984] bond0 (unregistering): Released all slaves [ 1092.715131][ T984] tipc: Left network mode [ 1092.725322][ T984] tipc: Left network mode [ 1092.774121][ T984] tipc: Left network mode [ 1092.904647][T18124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1092.921881][T18124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1092.970519][T18124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1093.135764][T18124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1093.268638][T18124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1093.274769][T18124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1093.403447][T18124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1093.407541][T18124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1093.510853][T18150] Bluetooth: hci4: command tx timeout [ 1095.229958][T18130] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1095.295495][T18130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1095.472483][T18130] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1095.475093][T18130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1095.509420][T18130] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1095.552762][T18130] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1095.621404][T18150] Bluetooth: hci4: command tx timeout [ 1095.695532][T18130] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1095.767693][T18130] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1096.195032][T18407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.195105][T18407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.195242][T18407] bridge_slave_0: entered allmulticast mode [ 1096.196696][T18407] bridge_slave_0: entered promiscuous mode [ 1096.214125][T18407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.214195][T18407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.214296][T18407] bridge_slave_1: entered allmulticast mode [ 1096.215765][T18407] bridge_slave_1: entered promiscuous mode [ 1097.028511][T18407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.165912][T18407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.353669][T18144] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1097.385839][T18144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1097.553128][T18144] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1097.599786][T18144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1097.603962][T18407] team0: Port device team_slave_0 added [ 1097.607341][T18144] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1097.614870][T18144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1097.616912][T18407] team0: Port device team_slave_1 added [ 1097.621783][T18144] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1097.625173][T18144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1097.719647][ T984] hsr_slave_0: left promiscuous mode [ 1097.720119][ T984] hsr_slave_1: left promiscuous mode [ 1097.720724][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.720739][ T984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.721283][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.721295][ T984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.724450][ T984] hsr_slave_0: left promiscuous mode [ 1097.725691][ T984] hsr_slave_1: left promiscuous mode [ 1097.726328][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.726342][ T984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.726891][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.726903][ T984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.758446][T18150] Bluetooth: hci4: command tx timeout [ 1097.806094][ T984] hsr_slave_0: left promiscuous mode [ 1097.806599][ T984] hsr_slave_1: left promiscuous mode [ 1097.807168][ T984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.807618][ T984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.822018][ T984] hsr_slave_0: left promiscuous mode [ 1097.824076][ T984] hsr_slave_1: left promiscuous mode [ 1097.824703][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.824718][ T984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.826783][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.826798][ T984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.182408][ T984] veth1_macvtap: left promiscuous mode [ 1098.182451][ T984] veth0_macvtap: left promiscuous mode [ 1098.182548][ T984] veth1_vlan: left promiscuous mode [ 1098.182623][ T984] veth0_vlan: left promiscuous mode [ 1098.184268][ T984] veth1_macvtap: left promiscuous mode [ 1098.184302][ T984] veth0_macvtap: left promiscuous mode [ 1098.184394][ T984] veth1_vlan: left promiscuous mode [ 1098.184466][ T984] veth0_vlan: left promiscuous mode [ 1098.185562][ T984] veth1_macvtap: left promiscuous mode [ 1098.185592][ T984] veth0_macvtap: left promiscuous mode [ 1098.185698][ T984] veth1_vlan: left promiscuous mode [ 1099.551255][ T984] team0 (unregistering): Port device team_slave_1 removed [ 1099.567586][ T984] team0 (unregistering): Port device team_slave_0 removed [ 1100.096722][ T984] team0 (unregistering): Port device team_slave_1 removed [ 1100.110683][ T984] team0 (unregistering): Port device team_slave_0 removed [ 1100.548611][ T984] team0 (unregistering): Port device team_slave_1 removed [ 1100.561585][ T984] team0 (unregistering): Port device team_slave_0 removed [ 1100.996859][ T984] team0 (unregistering): Port device team_slave_1 removed [ 1101.007283][ T984] team0 (unregistering): Port device team_slave_0 removed [ 1101.336726][T18407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.336739][T18407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.336753][T18407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.396412][T18407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.396424][T18407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.396438][T18407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.547721][T18407] hsr_slave_0: entered promiscuous mode [ 1102.548453][T18407] hsr_slave_1: entered promiscuous mode [ 1102.577815][T18124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.457965][T18145] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1103.466846][T18145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1103.494460][T18145] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1103.559579][T18145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1103.561962][T18124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.687433][T18145] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1103.704647][T18145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1103.744815][T18145] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1103.761051][T18145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1103.894839][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.894915][ T6176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.952875][T18130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.954466][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.954542][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.226513][T18130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.833438][T18407] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.868173][T18144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.922466][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.922542][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.998484][ T984] IPVS: stop unused estimator thread 0... [ 1105.182127][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.182204][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.558372][T18407] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.777462][T18144] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.884466][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.884544][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.897253][ T7969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.897327][ T7969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.517001][T18407] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.963854][T18145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.449046][T18407] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.528179][T18145] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.559449][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.559525][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.576705][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.576789][ T6176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.373818][ T984] bridge_slave_1: left allmulticast mode [ 1108.373854][ T984] bridge_slave_1: left promiscuous mode [ 1108.374008][ T984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.401578][ T984] bridge_slave_0: left allmulticast mode [ 1108.401603][ T984] bridge_slave_0: left promiscuous mode [ 1108.401756][ T984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.388694][ T984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.392772][ T984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1109.394688][ T984] bond0 (unregistering): Released all slaves [ 1109.767887][T18124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.892745][T18130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.856393][ T984] hsr_slave_0: left promiscuous mode [ 1110.856886][ T984] hsr_slave_1: left promiscuous mode [ 1110.857480][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.857495][ T984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.858105][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.858118][ T984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.934547][ T984] veth1_macvtap: left promiscuous mode [ 1110.934587][ T984] veth0_macvtap: left promiscuous mode [ 1110.934695][ T984] veth1_vlan: left promiscuous mode [ 1110.982635][ T984] veth0_vlan: left promiscuous mode [ 1111.453672][ T984] team0 (unregistering): Port device team_slave_1 removed [ 1111.465157][ T984] team0 (unregistering): Port device team_slave_0 removed [ 1112.034057][T18124] veth0_vlan: entered promiscuous mode [ 1112.499011][T18124] veth1_vlan: entered promiscuous mode [ 1112.523228][T18145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.848365][T18407] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1112.857633][T18407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1112.886720][T18407] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1112.892773][T18407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1112.905969][T18407] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1112.914711][T18407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1112.930520][T18144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.008973][T18130] veth0_vlan: entered promiscuous mode [ 1113.011490][T18407] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1113.019894][T18407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1113.115094][T18130] veth1_vlan: entered promiscuous mode [ 1113.195729][T18124] veth0_macvtap: entered promiscuous mode [ 1113.212693][T18124] veth1_macvtap: entered promiscuous mode [ 1113.465054][T18130] veth0_macvtap: entered promiscuous mode [ 1113.467314][T18124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.522698][T18124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.526988][T18130] veth1_macvtap: entered promiscuous mode [ 1113.907323][ T5247] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1113.912967][T18407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.299543][T18130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.299703][T18124] ieee80211 phy79: Selected rate control algorithm 'minstrel_ht' [ 1114.338428][T18130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.455401][T18145] veth0_vlan: entered promiscuous mode [ 1114.576113][T18407] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.631557][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.631571][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.709058][T18145] veth1_vlan: entered promiscuous mode [ 1114.951855][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.951933][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.986391][T18124] ieee80211 phy80: Selected rate control algorithm 'minstrel_ht' [ 1115.182421][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.182512][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.694580][T18144] veth0_vlan: entered promiscuous mode [ 1115.706319][T18130] ieee80211 phy81: Selected rate control algorithm 'minstrel_ht' [ 1115.708540][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.708553][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.833574][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.833615][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.982499][T18144] veth1_vlan: entered promiscuous mode [ 1116.028962][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.028976][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.237963][T18130] ieee80211 phy82: Selected rate control algorithm 'minstrel_ht' [ 1116.253016][T18145] veth0_macvtap: entered promiscuous mode [ 1116.426418][T18145] veth1_macvtap: entered promiscuous mode [ 1116.551821][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.551835][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.677123][T18144] veth0_macvtap: entered promiscuous mode [ 1116.691195][T18145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.704851][T18144] veth1_macvtap: entered promiscuous mode [ 1116.733474][T18145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.832607][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1116.984565][T18144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1117.210839][T18144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1118.010121][T18145] ieee80211 phy83: Selected rate control algorithm 'minstrel_ht' [ 1118.060104][ T7969] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.060373][ T7969] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.224925][ T9433] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.226104][ T66] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.226387][ T66] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.228193][ T9432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.228319][ T9432] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.228429][ T9432] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.228530][ T9432] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.228631][ T9432] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.228732][ T9432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.229162][ T9432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.229329][ T9432] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.229465][ T9432] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.229578][ T9432] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.229677][ T9432] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.832550][ T9433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.832565][ T9433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.990311][T18145] ieee80211 phy84: Selected rate control algorithm 'minstrel_ht' [ 1119.353852][T18144] ieee80211 phy85: Selected rate control algorithm 'minstrel_ht' [ 1119.361971][T18719] FAULT_INJECTION: forcing a failure. [ 1119.361971][T18719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1119.361995][T18719] CPU: 0 UID: 0 PID: 18719 Comm: syz.6.2888 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1119.362011][T18719] Tainted: [L]=SOFTLOCKUP [ 1119.362015][T18719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1119.362022][T18719] Call Trace: [ 1119.362027][T18719] [ 1119.362032][T18719] dump_stack_lvl+0xe8/0x150 [ 1119.362053][T18719] should_fail_ex+0x46b/0x600 [ 1119.362069][T18719] _copy_from_user+0x2d/0xb0 [ 1119.362083][T18719] __se_sys_rt_sigprocmask+0xff/0x2a0 [ 1119.362101][T18719] ? __pfx___se_sys_rt_sigprocmask+0x10/0x10 [ 1119.362118][T18719] ? rcu_is_watching+0x16/0xb0 [ 1119.362139][T18719] do_syscall_64+0x166/0x520 [ 1119.362150][T18719] ? trace_irq_disable+0x3b/0x140 [ 1119.362163][T18719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.362174][T18719] ? clear_bhb_loop+0x70/0xc0 [ 1119.362186][T18719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.362197][T18719] RIP: 0033:0x7f64ca73e159 [ 1119.362208][T18719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.362217][T18719] RSP: 002b:00007f64c8996028 EFLAGS: 00000246 ORIG_RAX: 000000000000000e [ 1119.362229][T18719] RAX: ffffffffffffffda RBX: 00007f64ca9c5fa0 RCX: 00007f64ca73e159 [ 1119.362237][T18719] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1119.362243][T18719] RBP: 00007f64ca7d5024 R08: 0000000000000000 R09: 0000000000000000 [ 1119.362249][T18719] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 1119.362255][T18719] R13: 00007f64ca9c6038 R14: 00007f64ca9c5fa0 R15: 00007fffcf17a868 [ 1119.362271][T18719] [ 1119.406312][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.406325][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.681787][T18724] ieee802154 phy0 wpan0: encryption failed: -22 [ 1119.938945][ T7969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.938958][ T7969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.024130][T18144] ieee80211 phy86: Selected rate control algorithm 'minstrel_ht' [ 1120.422999][ T9433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.423016][ T9433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.215750][T18745] loop7: detected capacity change from 0 to 16384 [ 1121.259570][T18741] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1121.266016][ T5247] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1121.317988][T18407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.396376][T18407] veth0_vlan: entered promiscuous mode [ 1125.616659][T18407] veth1_vlan: entered promiscuous mode [ 1125.912290][ T5247] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1126.243315][T18407] veth0_macvtap: entered promiscuous mode [ 1126.323763][T18407] veth1_macvtap: entered promiscuous mode [ 1126.576936][T18407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1126.615358][T18407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1126.804889][T18759] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1126.833252][ T984] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.835669][ T984] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.835798][ T984] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.835937][ T984] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.011530][T18819] ieee802154 phy0 wpan0: encryption failed: -22 [ 1128.182117][T18407] ieee80211 phy87: Selected rate control algorithm 'minstrel_ht' [ 1128.922965][T18832] FAULT_INJECTION: forcing a failure. [ 1128.922965][T18832] name failslab, interval 1, probability 1, space 0, times 0 [ 1128.922988][T18832] CPU: 0 UID: 0 PID: 18832 Comm: syz.6.2914 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1128.923004][T18832] Tainted: [L]=SOFTLOCKUP [ 1128.923008][T18832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1128.923014][T18832] Call Trace: [ 1128.923019][T18832] [ 1128.923024][T18832] dump_stack_lvl+0xe8/0x150 [ 1128.923044][T18832] should_fail_ex+0x46b/0x600 [ 1128.923063][T18832] should_failslab+0xa8/0x100 [ 1128.923080][T18832] __kmalloc_cache_noprof+0xa1/0x680 [ 1128.923094][T18832] ? raw_ioctl+0x1bd3/0x40d0 [ 1128.923205][T18832] ? raw_ioctl+0x1bd3/0x40d0 [ 1128.923221][T18832] raw_ioctl+0x1bd3/0x40d0 [ 1128.923237][T18832] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1128.923251][T18832] ? do_vfs_ioctl+0x1184/0x1550 [ 1128.923266][T18832] ? __pfx_raw_ioctl+0x10/0x10 [ 1128.923278][T18832] ? __pfx_smack_log+0x10/0x10 [ 1128.923309][T18832] ? __fget_files+0x2a/0x420 [ 1128.923318][T18832] ? __fget_files+0x3a8/0x420 [ 1128.923327][T18832] ? __fget_files+0x2a/0x420 [ 1128.923338][T18832] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1128.923349][T18832] ? __pfx_raw_ioctl+0x10/0x10 [ 1128.923361][T18832] __se_sys_ioctl+0xff/0x170 [ 1128.923375][T18832] do_syscall_64+0x166/0x520 [ 1128.923386][T18832] ? trace_irq_disable+0x3b/0x140 [ 1128.923398][T18832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.923409][T18832] ? clear_bhb_loop+0x70/0xc0 [ 1128.923420][T18832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.923430][T18832] RIP: 0033:0x7f64ca73ddeb [ 1128.923442][T18832] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1128.923451][T18832] RSP: 002b:00007f64c8993f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1128.923463][T18832] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f64ca73ddeb [ 1128.923470][T18832] RDX: 00007f64c8994fd0 RSI: 0000000041015500 RDI: 0000000000000005 [ 1128.923476][T18832] RBP: 00007f64c8994fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 1128.923482][T18832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64c8993fa0 [ 1128.923488][T18832] R13: 0000200000000000 R14: 0000000000000003 R15: 0000000000000000 [ 1128.923504][T18832] [ 1129.215612][T18833] netlink: 'syz.7.2913': attribute type 12 has an invalid length. [ 1129.215628][T18833] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2913'. [ 1129.407731][ T9432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.407745][ T9432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.639118][T18407] ieee80211 phy88: Selected rate control algorithm 'minstrel_ht' [ 1130.020013][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.020028][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.657613][ T5247] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1130.958183][T18873] FAULT_INJECTION: forcing a failure. [ 1130.958183][T18873] name failslab, interval 1, probability 1, space 0, times 0 [ 1130.958210][T18873] CPU: 0 UID: 0 PID: 18873 Comm: syz.8.2925 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1130.958226][T18873] Tainted: [L]=SOFTLOCKUP [ 1130.958230][T18873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1130.958237][T18873] Call Trace: [ 1130.958242][T18873] [ 1130.958247][T18873] dump_stack_lvl+0xe8/0x150 [ 1130.958268][T18873] should_fail_ex+0x46b/0x600 [ 1130.958284][T18873] should_failslab+0xa8/0x100 [ 1130.958301][T18873] __kvmalloc_node_noprof+0x176/0x890 [ 1130.958317][T18873] ? listxattr+0xb9/0x380 [ 1130.958330][T18873] ? listxattr+0xb9/0x380 [ 1130.958345][T18873] listxattr+0xb9/0x380 [ 1130.958358][T18873] ? __pfx_listxattr+0x10/0x10 [ 1130.958370][T18873] ? __fget_files+0x2a/0x420 [ 1130.958379][T18873] ? __fget_files+0x3a8/0x420 [ 1130.958388][T18873] ? __fget_files+0x2a/0x420 [ 1130.958401][T18873] __x64_sys_flistxattr+0x135/0x1b0 [ 1130.958415][T18873] do_syscall_64+0x166/0x520 [ 1130.958427][T18873] ? trace_irq_disable+0x3b/0x140 [ 1130.958439][T18873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.958450][T18873] ? clear_bhb_loop+0x70/0xc0 [ 1130.958462][T18873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.958473][T18873] RIP: 0033:0x7f7c3fcbe159 [ 1130.958484][T18873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.958493][T18873] RSP: 002b:00007f7c3df16028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 1130.958505][T18873] RAX: ffffffffffffffda RBX: 00007f7c3ff45fa0 RCX: 00007f7c3fcbe159 [ 1130.958512][T18873] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000003 [ 1130.958519][T18873] RBP: 00007f7c3fd55024 R08: 0000000000000000 R09: 0000000000000000 [ 1130.958525][T18873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1130.958531][T18873] R13: 00007f7c3ff46038 R14: 00007f7c3ff45fa0 R15: 00007ffdda753ad8 [ 1130.958547][T18873] [ 1131.203235][T18883] ieee802154 phy0 wpan0: encryption failed: -22 [ 1131.366620][T18884] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2928'. [ 1131.621976][T18894] netlink: 'syz.8.2933': attribute type 1 has an invalid length. [ 1131.755601][T18896] syzkaller0: create flow: hash 711456703 index 1 [ 1133.731389][T18953] ieee802154 phy0 wpan0: encryption failed: -22 [ 1134.859041][ C0] syzkaller0: delete flow: hash 711456703 index 1 [ 1138.246762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1146.878553][T12701] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1146.953597][T12701] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1146.960725][T12701] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1146.961338][T12701] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1146.961765][T12701] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1147.104375][T18150] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1147.147006][T18150] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1147.173195][T18150] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1147.176154][T18150] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1147.176646][T18150] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1148.348016][T12701] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1148.414674][T12701] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1148.416199][T12701] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1148.427549][T12701] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1148.449429][T12701] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1148.775540][T18150] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1148.848100][T18150] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1148.858409][T18150] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1148.867009][T18150] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1148.867410][T18150] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1149.159032][T12701] Bluetooth: hci5: command tx timeout [ 1149.361167][T12701] Bluetooth: hci6: command tx timeout [ 1150.676983][T12701] Bluetooth: hci8: command tx timeout [ 1150.819817][T18150] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1150.901902][T18150] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1150.903393][T18150] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1150.904087][T18150] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1150.904548][T18150] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1151.135030][T18150] Bluetooth: hci9: command tx timeout [ 1151.223701][T18150] Bluetooth: hci5: command tx timeout [ 1151.463060][T18150] Bluetooth: hci6: command tx timeout [ 1152.748234][T18150] Bluetooth: hci8: command tx timeout [ 1153.107982][T18150] Bluetooth: hci10: command tx timeout [ 1153.178920][T18150] Bluetooth: hci9: command tx timeout [ 1153.300667][T18150] Bluetooth: hci5: command tx timeout [ 1153.551296][T18150] Bluetooth: hci6: command tx timeout [ 1154.829617][T18150] Bluetooth: hci8: command tx timeout [ 1155.182811][T18150] Bluetooth: hci10: command tx timeout [ 1155.293909][T18150] Bluetooth: hci9: command tx timeout [ 1155.358873][T18150] Bluetooth: hci5: command tx timeout [ 1155.596289][T18150] Bluetooth: hci6: command tx timeout [ 1156.891281][T18150] Bluetooth: hci8: command tx timeout [ 1157.299474][T18150] Bluetooth: hci10: command tx timeout [ 1157.362779][T18150] Bluetooth: hci9: command tx timeout [ 1158.182538][T18906] bridge1: entered promiscuous mode [ 1158.182555][T18906] bridge1: entered allmulticast mode [ 1158.348935][T18932] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2942'. [ 1159.156745][ T5247] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1159.406297][T18150] Bluetooth: hci10: command tx timeout [ 1161.432086][ T5247] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1162.238657][ T9433] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.337282][ T5247] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1162.906494][ T9433] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.101042][ T9433] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.386573][ T9433] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.258406][ T9433] bridge_slave_1: left allmulticast mode [ 1165.258435][ T9433] bridge_slave_1: left promiscuous mode [ 1165.258587][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.261739][ T9433] bridge_slave_0: left allmulticast mode [ 1165.261759][ T9433] bridge_slave_0: left promiscuous mode [ 1165.261895][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.672570][ T9433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.675007][ T9433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.676668][ T9433] bond0 (unregistering): Released all slaves [ 1165.947021][T19188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.947092][T19188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.947196][T19188] bridge_slave_0: entered allmulticast mode [ 1165.956138][T19188] bridge_slave_0: entered promiscuous mode [ 1166.187601][T19188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.187671][T19188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.187776][T19188] bridge_slave_1: entered allmulticast mode [ 1166.189658][T19188] bridge_slave_1: entered promiscuous mode [ 1166.405554][T19188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.451106][T19188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1166.488146][T19194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.488289][T19194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.488576][T19194] bridge_slave_0: entered allmulticast mode [ 1166.490843][T19194] bridge_slave_0: entered promiscuous mode [ 1166.506128][ T9433] hsr_slave_0: left promiscuous mode [ 1166.506619][ T9433] hsr_slave_1: left promiscuous mode [ 1166.507306][ T9433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1166.507321][ T9433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.507877][ T9433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1166.507888][ T9433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.564279][ T9433] veth1_macvtap: left promiscuous mode [ 1166.564327][ T9433] veth0_macvtap: left promiscuous mode [ 1166.564456][ T9433] veth1_vlan: left promiscuous mode [ 1166.564559][ T9433] veth0_vlan: left promiscuous mode [ 1166.928301][ T9433] team0 (unregistering): Port device team_slave_1 removed [ 1166.940886][ T9433] team0 (unregistering): Port device team_slave_0 removed [ 1167.076249][T19185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.076320][T19185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.076424][T19185] bridge_slave_0: entered allmulticast mode [ 1167.077902][T19185] bridge_slave_0: entered promiscuous mode [ 1167.106219][T19173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.106287][T19173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.106392][T19173] bridge_slave_0: entered allmulticast mode [ 1167.111692][T19173] bridge_slave_0: entered promiscuous mode [ 1167.133784][T19194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.133851][T19194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.133944][T19194] bridge_slave_1: entered allmulticast mode [ 1167.135370][T19194] bridge_slave_1: entered promiscuous mode [ 1167.137078][T19185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.137143][T19185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.137236][T19185] bridge_slave_1: entered allmulticast mode [ 1167.138696][T19185] bridge_slave_1: entered promiscuous mode [ 1167.152198][T19173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.152264][T19173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.152360][T19173] bridge_slave_1: entered allmulticast mode [ 1167.153800][T19173] bridge_slave_1: entered promiscuous mode [ 1167.235053][T19188] team0: Port device team_slave_0 added [ 1167.312061][T19172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.312141][T19172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.312258][T19172] bridge_slave_0: entered allmulticast mode [ 1167.313731][T19172] bridge_slave_0: entered promiscuous mode [ 1167.327884][T19188] team0: Port device team_slave_1 added [ 1167.355530][T19172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.355604][T19172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.355708][T19172] bridge_slave_1: entered allmulticast mode [ 1167.357199][T19172] bridge_slave_1: entered promiscuous mode [ 1167.360698][T19194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.398252][T19194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.404123][T19173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.507602][T19185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.533634][T19173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.544444][T19188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.544456][T19188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.544470][T19188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.547630][T19185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.548247][T19188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.548255][T19188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.548269][T19188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.650442][T19172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.764945][T19172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.768153][T19194] team0: Port device team_slave_0 added [ 1167.872564][T19185] team0: Port device team_slave_0 added [ 1167.874616][T19194] team0: Port device team_slave_1 added [ 1167.907124][T19173] team0: Port device team_slave_0 added [ 1167.942343][T19185] team0: Port device team_slave_1 added [ 1168.016991][T19173] team0: Port device team_slave_1 added [ 1168.079000][T19172] team0: Port device team_slave_0 added [ 1168.430497][ T9433] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.467572][T19188] hsr_slave_0: entered promiscuous mode [ 1168.468379][T19188] hsr_slave_1: entered promiscuous mode [ 1168.469137][T19188] debugfs: 'hsr0' already exists in 'hsr' [ 1168.469154][T19188] Cannot create hsr debugfs directory [ 1168.484460][T19172] team0: Port device team_slave_1 added [ 1168.513518][T19194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1168.513531][T19194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.513544][T19194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.551909][T19185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1168.551924][T19185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.551938][T19185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.554907][T19173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1168.554918][T19173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.554936][T19173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.557263][T19194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.557272][T19194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.557286][T19194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.604498][T19173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.604511][T19173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.604525][T19173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.606181][T19185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.606189][T19185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.606204][T19185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.718010][T19172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1168.718022][T19172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.718036][T19172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.824491][T19172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.824508][T19172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.824522][T19172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.061255][T19194] hsr_slave_0: entered promiscuous mode [ 1169.063538][T19194] hsr_slave_1: entered promiscuous mode [ 1169.065549][T19194] debugfs: 'hsr0' already exists in 'hsr' [ 1169.065567][T19194] Cannot create hsr debugfs directory [ 1169.373815][ T9433] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.411717][T19173] hsr_slave_0: entered promiscuous mode [ 1169.421816][T19173] hsr_slave_1: entered promiscuous mode [ 1169.422391][T19173] debugfs: 'hsr0' already exists in 'hsr' [ 1169.422406][T19173] Cannot create hsr debugfs directory [ 1169.436014][T19185] hsr_slave_0: entered promiscuous mode [ 1169.437205][T19185] hsr_slave_1: entered promiscuous mode [ 1169.437741][T19185] debugfs: 'hsr0' already exists in 'hsr' [ 1169.437755][T19185] Cannot create hsr debugfs directory [ 1169.486435][T19172] hsr_slave_0: entered promiscuous mode [ 1169.487199][T19172] hsr_slave_1: entered promiscuous mode [ 1169.487726][T19172] debugfs: 'hsr0' already exists in 'hsr' [ 1169.487740][T19172] Cannot create hsr debugfs directory [ 1169.597912][ T9433] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.847471][ T9433] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.690669][ T9433] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.212757][ T9433] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.774631][ T5247] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1172.989438][ T9433] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.464980][ T9433] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.554943][ T5247] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1176.381069][ T9433] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.435139][ T5247] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1176.684707][ T9433] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.021700][ T9433] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.299691][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.299736][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.626642][ T9433] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.734517][ T5247] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1179.621302][ T9433] bridge_slave_1: left allmulticast mode [ 1179.621327][ T9433] bridge_slave_1: left promiscuous mode [ 1179.621500][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.623650][ T9433] bridge_slave_0: left allmulticast mode [ 1179.623669][ T9433] bridge_slave_0: left promiscuous mode [ 1179.623801][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.682680][ T9433] bridge_slave_1: left allmulticast mode [ 1179.682704][ T9433] bridge_slave_1: left promiscuous mode [ 1179.682860][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.688032][ T9433] bridge_slave_0: left allmulticast mode [ 1179.688053][ T9433] bridge_slave_0: left promiscuous mode [ 1179.688187][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.698193][ T9433] bridge_slave_1: left allmulticast mode [ 1179.698214][ T9433] bridge_slave_1: left promiscuous mode [ 1179.698344][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.704005][ T9433] bridge_slave_0: left allmulticast mode [ 1179.704024][ T9433] bridge_slave_0: left promiscuous mode [ 1179.704150][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.154603][ T9433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.157497][ T9433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.165981][ T9433] bond0 (unregistering): Released all slaves [ 1180.455613][ T9433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.458084][ T9433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.469585][ T9433] bond0 (unregistering): Released all slaves [ 1180.483195][ T9433] bond1 (unregistering): Released all slaves [ 1180.741168][ T9433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.743529][ T9433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.745209][ T9433] bond0 (unregistering): Released all slaves [ 1181.744261][ T38] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 1181.744281][ T38] Tainted: G L syzkaller #0 [ 1181.744287][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1181.744293][ T38] task:kworker/0:0 state:D stack:21400 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1181.744322][ T38] Workqueue: usb_hub_wq hub_event [ 1181.744422][ T38] Call Trace: [ 1181.744427][ T38] [ 1181.744435][ T38] __schedule+0x16d9/0x5700 [ 1181.744464][ T38] ? __pfx___schedule+0x10/0x10 [ 1181.744473][ T38] ? lock_acquire+0x115/0x350 [ 1181.744492][ T38] ? schedule+0x90/0x2b0 [ 1181.744508][ T38] schedule+0x164/0x2b0 [ 1181.744519][ T38] usb_kill_urb+0x1cf/0x2f0 [ 1181.744557][ T38] ? __pfx_usb_kill_urb+0x10/0x10 [ 1181.744569][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1181.744587][ T38] usb_start_wait_urb+0x22a/0x5b0 [ 1181.744608][ T38] ? rcu_is_watching+0x16/0xb0 [ 1181.744623][ T38] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1181.744634][ T38] ? trace_kmalloc+0x2a/0xf0 [ 1181.744658][ T38] usb_control_msg+0x234/0x3e0 [ 1181.744674][ T38] hub_port_init+0xb0b/0x28b0 [ 1181.744698][ T38] hub_event+0x24e2/0x4cf0 [ 1181.744736][ T38] ? __pfx_hub_event+0x10/0x10 [ 1181.744753][ T38] ? rcu_is_watching+0x16/0xb0 [ 1181.744768][ T38] ? process_scheduled_works+0x97a/0x1630 [ 1181.744782][ T38] process_scheduled_works+0xc3d/0x1630 [ 1181.744812][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1181.744828][ T38] ? assign_work+0x3cf/0x5d0 [ 1181.744844][ T38] worker_thread+0xa47/0xfb0 [ 1181.744871][ T38] kthread+0x38b/0x470 [ 1181.744882][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1181.744895][ T38] ? __pfx_kthread+0x10/0x10 [ 1181.744906][ T38] ret_from_fork+0x514/0xb70 [ 1181.744918][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1181.744928][ T38] ? __switch_to+0xc89/0x1420 [ 1181.744944][ T38] ? __pfx_kthread+0x10/0x10 [ 1181.744955][ T38] ret_from_fork_asm+0x1a/0x30 [ 1181.744973][ T38] [ 1181.745112][ T38] [ 1181.745112][ T38] Showing all locks held in the system: [ 1181.745121][ T38] locks held by kworker/0:0/9: 5, on CPU#0: [ 1181.745129][ T38] #0: ffff88802228e938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1181.745159][ T38] #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1181.745185][ T38] #2: ffff88802b924210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 1181.745211][ T38] #3: ffff88802b904658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20ad/0x4cf0 [ 1181.745236][ T38] #4: ffff88802b2cb258 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20e1/0x4cf0 [ 1181.745271][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 1181.745279][ T38] #0: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1181.745324][ T38] locks held by getty/5344: 2, on CPU#0: [ 1181.745339][ T38] #0: ffff888036f730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1181.745397][ T38] #1: ffffc900044d62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1181.745425][ T38] locks held by kworker/u8:30/9433: 4, on CPU#0: [ 1181.745432][ T38] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1181.745459][ T38] #1: ffffc90006207c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1181.745484][ T38] #2: ffffffff8f5c3460 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1181.745537][ T38] #3: ffffffff8f5d1cb8 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_unregister+0x274/0xb10 [ 1181.745596][ T38] locks held by syz-executor/19172: 11, last CPU#0: [ 1181.745611][ T38] #0: ffff8880361c4510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1181.745647][ T38] #1: ffff88803c68f878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1181.745674][ T38] #2: ffff8880294efa58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1181.745703][ T38] #3: ffffffff8ee42938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1181.746515][ T38] #4: ffff888062ceb160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1181.746570][ T38] #5: ffff888036682310 (&devlink->lock_key#21){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1181.746629][ T38] #6: ffffffff8f5d1cb8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1181.746654][ T38] #7: ffff88805914d060 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5bb/0x2130 [ 1181.746742][ T38] #8: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1181.746770][ T38] #9: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1181.746796][ T38] #10: ffff888044220230 (&sch->root_lock_key#31){+...}-{3:3}, at: dev_deactivate_many+0xaeb/0xdb0 [ 1181.746851][ T38] locks held by syz-executor/19173: 4, on CPU#0: [ 1181.746859][ T38] #0: ffff8880361c4510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1181.746886][ T38] #1: ffff88805f72c878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1181.746914][ T38] #2: ffff8880294efb48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1181.746943][ T38] #3: ffffffff8ee42938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 1181.746968][ T38] locks held by syz-executor/19185: 4, on CPU#0: [ 1181.746976][ T38] #0: ffff8880361c4510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1181.747001][ T38] #1: ffff888056cf2078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1181.747027][ T38] #2: ffff8880294efb48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1181.747055][ T38] #3: ffffffff8ee42938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 1181.747080][ T38] locks held by syz-executor/19188: 4, on CPU#0: [ 1181.747087][ T38] #0: ffff8880361c4510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1181.747112][ T38] #1: ffff88805f616478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1181.747138][ T38] #2: ffff8880294efb48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1181.747167][ T38] #3: ffffffff8ee42938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 1181.747192][ T38] locks held by syz-executor/19194: 4, on CPU#0: [ 1181.747199][ T38] #0: ffff8880361c4510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1181.747238][ T38] #1: ffff88806207f478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1181.747264][ T38] #2: ffff8880294efb48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1181.747293][ T38] #3: ffffffff8ee42938 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 1181.747320][ T38] locks held by dhcpcd-run-hook/19447: 2, last CPU#0: [ 1181.747327][ T38] #0: ffff88805dd17030 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1181.747352][ T38] #1: ffff88803427f810 (&mapping->i_mmap_rwsem){++++}-{4:4}, at: unlink_file_vma_batch_process+0x9f/0x340 [ 1181.747383][ T38] [ 1181.747386][ T38] ============================================= [ 1181.747386][ T38] [ 1181.747392][ T38] NMI backtrace for cpu 0 [ 1181.747403][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1181.747417][ T38] Tainted: [L]=SOFTLOCKUP [ 1181.747421][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1181.747426][ T38] Call Trace: [ 1181.747432][ T38] [ 1181.747436][ T38] dump_stack_lvl+0xe8/0x150 [ 1181.747453][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1181.747469][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1181.747487][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1181.747503][ T38] sys_info+0x135/0x170 [ 1181.747515][ T38] watchdog+0xfd7/0x1030 [ 1181.747531][ T38] ? watchdog+0x1c7/0x1030 [ 1181.747546][ T38] kthread+0x38b/0x470 [ 1181.747557][ T38] ? __pfx_watchdog+0x10/0x10 [ 1181.747573][ T38] ? __pfx_kthread+0x10/0x10 [ 1181.747584][ T38] ret_from_fork+0x514/0xb70 [ 1181.747596][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1181.747612][ T38] ? __switch_to+0xc89/0x1420 [ 1181.747627][ T38] ? __pfx_kthread+0x10/0x10 [ 1181.747638][ T38] ret_from_fork_asm+0x1a/0x30 [ 1181.747654][ T38] [ 1181.747667][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1208.460921][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1208.472094][ T38] Tainted: [L]=SOFTLOCKUP [ 1208.476392][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1208.486424][ T38] Call Trace: [ 1208.489683][ T38] [ 1208.492596][ T38] vpanic+0x56d/0xa60 [ 1208.496561][ T38] ? __pfx_vpanic+0x10/0x10 [ 1208.501040][ T38] ? console_srcu_read_unlock+0x3a/0x60 [ 1208.506567][ T38] panic+0xc5/0xd0 [ 1208.510264][ T38] ? __pfx_panic+0x10/0x10 [ 1208.514655][ T38] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 1208.519750][ T38] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1208.525884][ T38] watchdog+0x1030/0x1030 [ 1208.530197][ T38] ? watchdog+0x1c7/0x1030 [ 1208.534594][ T38] kthread+0x38b/0x470 [ 1208.538643][ T38] ? __pfx_watchdog+0x10/0x10 [ 1208.543295][ T38] ? __pfx_kthread+0x10/0x10 [ 1208.547860][ T38] ret_from_fork+0x514/0xb70 [ 1208.552425][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1208.557511][ T38] ? __switch_to+0xc89/0x1420 [ 1208.562171][ T38] ? __pfx_kthread+0x10/0x10 [ 1208.566740][ T38] ret_from_fork_asm+0x1a/0x30 [ 1208.571505][ T38] [ 1208.574569][ T38] Kernel Offset: disabled [ 1208.578882][ T38] Rebooting in 86400 seconds..