last executing test programs: 11.093135032s ago: executing program 4 (id=25): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'dh\x00', 0x30, 0x0, 0x43}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x25}, {@loopback, 0x4e23, 0x1, 0x4, 0x12d5c, 0x12d5c}}, 0x44) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='./file0\x00', 0x20149c, 0x0, 0x1, 0x0, &(0x7f0000006380)) 10.884811265s ago: executing program 0 (id=26): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x2000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c93010000c00050017e30800061ce4f0dc"], 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000c7a000/0x2000)=nil, &(0x7f0000dad000/0x2000)=nil, 0x2000, 0x3}) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 9.553310555s ago: executing program 4 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4002045) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 6.435263869s ago: executing program 0 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = eventfd2(0x6, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg0\x00', 0x1}) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r2, 0x3, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000040)='K', 0x1, 0x200000000000, 0x0, 0x1, r0}, 0x0, 0x0]) socket(0x400000000010, 0x3, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) 6.433033436s ago: executing program 4 (id=32): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x20, 0x30, 0x8, {0x8, 0x22, "59a1b95388e8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="40fb0a"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x20, 0xe, 0xd, "5879ba6228cc8e9d458b7e26ed"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x3}, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x7}, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) 5.330415762s ago: executing program 2 (id=35): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@noblock_validity}, {@nolazytime}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fa, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 5.204022237s ago: executing program 0 (id=37): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x183802, 0x15) pwrite64(r4, 0x0, 0x0, 0xe7c) 4.808084577s ago: executing program 1 (id=39): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'dh\x00', 0x30, 0x0, 0x43}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x25}, {@loopback, 0x4e23, 0x1, 0x4, 0x12d5c, 0x12d5c}}, 0x44) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='./file0\x00', 0x20149c, 0x0, 0x1, 0x0, &(0x7f0000006380)) 3.680584909s ago: executing program 1 (id=40): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x3ffffffffc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x36}]}, 0x24}, 0x1, 0x0, 0x0, 0x48851}, 0x800) 3.663159236s ago: executing program 0 (id=41): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x2000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000c7a000/0x2000)=nil, &(0x7f0000dad000/0x2000)=nil, 0x2000, 0x3}) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 3.584248587s ago: executing program 2 (id=42): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000), 0x0) 2.931829314s ago: executing program 2 (id=44): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 2.930311584s ago: executing program 1 (id=45): connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e21, [0x0, 0xffffffff, 0x1, 0x3000000], [0xfffffffe], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) 2.885629734s ago: executing program 3 (id=46): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) socket(0x2, 0x3, 0x67) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003a00000003000000000000", @ANYBLOB="000200"/14, @ANYRES32], 0x50) 2.711937343s ago: executing program 1 (id=47): syz_open_dev$usbfs(0x0, 0x76, 0x101341) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x101, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee86", 0x0, 0xf0}, 0x50) r1 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket(0x200000000000011, 0x2, 0xd) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000540)=0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x34f4abb0713c3e09}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4040891}, 0x20004854) close_range(r1, 0xffffffffffffffff, 0x0) 2.675438004s ago: executing program 2 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = eventfd2(0x6, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg0\x00', 0x1}) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r2, 0x3, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000040)='K', 0x1, 0x200000000000, 0x0, 0x1, r0}, 0x0, 0x0]) 1.832828351s ago: executing program 4 (id=49): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000002200000009", @ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x33) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x6400c095}, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4008080) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_emit_ethernet(0x80, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 1.789140982s ago: executing program 3 (id=50): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'dh\x00', 0x30, 0x0, 0x43}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x25}, {@loopback, 0x4e23, 0x1, 0x4, 0x12d5c, 0x12d5c}}, 0x44) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='./file0\x00', 0x20149c, 0x0, 0x1, 0x0, &(0x7f0000006380)) 1.455092824s ago: executing program 2 (id=51): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x183802, 0x15) pwrite64(r4, 0x0, 0x0, 0xe7c) 1.373060692s ago: executing program 3 (id=52): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1.208129574s ago: executing program 1 (id=53): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r1, r1, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) r4 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) lseek(0xffffffffffffffff, 0xfffd, 0x0) r6 = socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1.122742742s ago: executing program 3 (id=54): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000), 0x0) 903.786205ms ago: executing program 0 (id=55): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) tkill(r1, 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0135014010ff"}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') wait4(r1, 0x0, 0x8, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff12000300686173683a6e65742c706f7274007d4904f28ab67a0000"], 0x60}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4) socket$kcm(0x11, 0xa, 0x300) syz_emit_ethernet(0x1e, &(0x7f0000000380)=ANY=[], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x12020, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x7a382dcae6654ac0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r4, &(0x7f0000000880)=[{&(0x7f0000000000)='0', 0x1}, {0x0}, {&(0x7f00000005c0)="d13ad3fd7dbec813b491aa4bac00a17a43ce5a876cc443eb25810cb0c9266d5fe7ae0a33b27b5ac94d56773c47ba8364bb6c0f96bba65c37b4ead8494fd9254e3a9b2482511c8de06bbd0cdf58b9c2ffe78396e59892a0315e4356993e309fe25d35e6dbf9a5b3c18f64e84991df1592df5cc182fdda2fe8d70f340bb7a6082a7aae6693cfe35d1072bc6a43a5808609b3e7320675378aa23e8d", 0x9a}, {0x0}], 0x4, 0x0, 0x0) mlockall(0x4) mmap(&(0x7f0000361000/0x2000)=nil, 0x2000, 0x300000a, 0x769f00b363895638, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x46) r5 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) 457.667137ms ago: executing program 4 (id=56): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xf}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xc}, {0x0, 0xfff1}, {0xfff1}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000811}, 0x4041810) 409.219121ms ago: executing program 3 (id=57): connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e21, [0x0, 0xffffffff, 0x1, 0x3000000], [0xfffffffe], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) 363.286375ms ago: executing program 0 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1800}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r4, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x40008000) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x42000) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r3, r5, 0x0, 0x7ffff004) 303.250683ms ago: executing program 2 (id=59): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x3, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 239.641527ms ago: executing program 3 (id=60): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) socket(0x2, 0x3, 0x67) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003a00000003000000000000", @ANYBLOB="000200"/14, @ANYRES32], 0x50) 122.587774ms ago: executing program 1 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = eventfd2(0x6, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg0\x00', 0x1}) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r2, 0x3, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000040)='K', 0x1, 0x200000000000, 0x0, 0x1, r0}, 0x0, 0x0]) 0s ago: executing program 4 (id=62): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'dh\x00', 0x30, 0x0, 0x43}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x25}, {@loopback, 0x4e23, 0x1, 0x4, 0x12d5c, 0x12d5c}}, 0x44) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='./file0\x00', 0x20149c, 0x0, 0x1, 0x0, &(0x7f0000006380)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 67.148828][ T5817] cgroup: Unknown subsys name 'net' [ 67.257632][ T5817] cgroup: Unknown subsys name 'cpuset' [ 67.266572][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.633367][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.689514][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.698278][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.710384][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.718350][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.732664][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.735603][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.743497][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.747245][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.757314][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.769843][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.777572][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.777858][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.793243][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.802547][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.810425][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.822379][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.831858][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.840886][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.853137][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.872322][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.880771][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.888480][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.897024][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.906807][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.919302][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.344084][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.351326][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.587772][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 71.615581][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 71.742985][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 71.777309][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 71.834959][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 71.955696][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.963094][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.970768][ T5829] bridge_slave_0: entered allmulticast mode [ 71.978573][ T5829] bridge_slave_0: entered promiscuous mode [ 72.026911][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.034357][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.041602][ T5829] bridge_slave_1: entered allmulticast mode [ 72.049445][ T5829] bridge_slave_1: entered promiscuous mode [ 72.062870][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.070309][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.078880][ T5842] bridge_slave_0: entered allmulticast mode [ 72.086569][ T5842] bridge_slave_0: entered promiscuous mode [ 72.141875][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.149522][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.156992][ T5842] bridge_slave_1: entered allmulticast mode [ 72.164720][ T5842] bridge_slave_1: entered promiscuous mode [ 72.233294][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.240708][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.248136][ T5845] bridge_slave_0: entered allmulticast mode [ 72.255519][ T5845] bridge_slave_0: entered promiscuous mode [ 72.268198][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.277630][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.285902][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.293105][ T5837] bridge_slave_0: entered allmulticast mode [ 72.301258][ T5837] bridge_slave_0: entered promiscuous mode [ 72.333093][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.340486][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.348194][ T5845] bridge_slave_1: entered allmulticast mode [ 72.355829][ T5845] bridge_slave_1: entered promiscuous mode [ 72.366198][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.385301][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.392552][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.399881][ T5837] bridge_slave_1: entered allmulticast mode [ 72.407449][ T5837] bridge_slave_1: entered promiscuous mode [ 72.419279][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.432008][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.441489][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.448964][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.456564][ T5830] bridge_slave_0: entered allmulticast mode [ 72.464123][ T5830] bridge_slave_0: entered promiscuous mode [ 72.516186][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.523564][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.531027][ T5830] bridge_slave_1: entered allmulticast mode [ 72.538472][ T5830] bridge_slave_1: entered promiscuous mode [ 72.558164][ T5829] team0: Port device team_slave_0 added [ 72.604206][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.616435][ T5829] team0: Port device team_slave_1 added [ 72.626564][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.638528][ T5842] team0: Port device team_slave_0 added [ 72.658229][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.692717][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.705817][ T5842] team0: Port device team_slave_1 added [ 72.715778][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.774315][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.786938][ T5845] team0: Port device team_slave_0 added [ 72.794827][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.801810][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.828053][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.856101][ T51] Bluetooth: hci2: command tx timeout [ 72.880680][ T5845] team0: Port device team_slave_1 added [ 72.887533][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.894747][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.921079][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.935349][ T5837] team0: Port device team_slave_0 added [ 72.942707][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.950051][ T51] Bluetooth: hci1: command tx timeout [ 72.950059][ T5832] Bluetooth: hci0: command tx timeout [ 72.962183][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.988275][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.014523][ T51] Bluetooth: hci4: command tx timeout [ 73.014563][ T5832] Bluetooth: hci3: command tx timeout [ 73.044089][ T5837] team0: Port device team_slave_1 added [ 73.051424][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.059139][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.085205][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.099131][ T5830] team0: Port device team_slave_0 added [ 73.141693][ T5830] team0: Port device team_slave_1 added [ 73.149081][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.156536][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.182752][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.219515][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.226536][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.252582][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.276188][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.283145][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.309236][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.344505][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.351463][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.377667][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.413563][ T5829] hsr_slave_0: entered promiscuous mode [ 73.420427][ T5829] hsr_slave_1: entered promiscuous mode [ 73.448997][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.456029][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.482227][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.502361][ T5842] hsr_slave_0: entered promiscuous mode [ 73.509226][ T5842] hsr_slave_1: entered promiscuous mode [ 73.516073][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 73.521887][ T5842] Cannot create hsr debugfs directory [ 73.532293][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.539304][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.565876][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.684244][ T5845] hsr_slave_0: entered promiscuous mode [ 73.691214][ T5845] hsr_slave_1: entered promiscuous mode [ 73.697899][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 73.703647][ T5845] Cannot create hsr debugfs directory [ 73.725287][ T5837] hsr_slave_0: entered promiscuous mode [ 73.732121][ T5837] hsr_slave_1: entered promiscuous mode [ 73.739118][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 73.745100][ T5837] Cannot create hsr debugfs directory [ 73.856000][ T5830] hsr_slave_0: entered promiscuous mode [ 73.862916][ T5830] hsr_slave_1: entered promiscuous mode [ 73.869638][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 73.875443][ T5830] Cannot create hsr debugfs directory [ 74.474545][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.503442][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.516111][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.536014][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.587978][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.606396][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.619702][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.647999][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.730639][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.743040][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.769890][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.782016][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.900268][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.931879][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.936377][ T5832] Bluetooth: hci2: command tx timeout [ 74.950158][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.979863][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.014750][ T5832] Bluetooth: hci1: command tx timeout [ 75.020518][ T51] Bluetooth: hci0: command tx timeout [ 75.075188][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.088162][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.094345][ T51] Bluetooth: hci4: command tx timeout [ 75.100776][ T5832] Bluetooth: hci3: command tx timeout [ 75.126349][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.138355][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.173758][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.237562][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.272606][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.303786][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.311486][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.336566][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.343705][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.403460][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.453109][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.511562][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.522426][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.529613][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.558358][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.587505][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.594687][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.606568][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.613790][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.661672][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.668832][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.742081][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.792089][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.799290][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.828557][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.840721][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.847959][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.948712][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.041599][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.048834][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.130009][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.137251][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.230157][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.335625][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.482974][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.581428][ T5829] veth0_vlan: entered promiscuous mode [ 76.629730][ T5829] veth1_vlan: entered promiscuous mode [ 76.695339][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.850530][ T5845] veth0_vlan: entered promiscuous mode [ 76.862803][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.889995][ T5829] veth0_macvtap: entered promiscuous mode [ 76.928734][ T5845] veth1_vlan: entered promiscuous mode [ 76.945600][ T5829] veth1_macvtap: entered promiscuous mode [ 77.017412][ T5832] Bluetooth: hci2: command tx timeout [ 77.037739][ T5837] veth0_vlan: entered promiscuous mode [ 77.044282][ T5842] veth0_vlan: entered promiscuous mode [ 77.054445][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.090467][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.098369][ T5832] Bluetooth: hci0: command tx timeout [ 77.098421][ T5832] Bluetooth: hci1: command tx timeout [ 77.134491][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.144640][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.170512][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.175112][ T51] Bluetooth: hci3: command tx timeout [ 77.180293][ T5832] Bluetooth: hci4: command tx timeout [ 77.190405][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.220417][ T5842] veth1_vlan: entered promiscuous mode [ 77.228256][ T5837] veth1_vlan: entered promiscuous mode [ 77.291843][ T5845] veth0_macvtap: entered promiscuous mode [ 77.325294][ T5830] veth0_vlan: entered promiscuous mode [ 77.351534][ T5845] veth1_macvtap: entered promiscuous mode [ 77.392179][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.413252][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.434724][ T5830] veth1_vlan: entered promiscuous mode [ 77.478499][ T5837] veth0_macvtap: entered promiscuous mode [ 77.495670][ T5842] veth0_macvtap: entered promiscuous mode [ 77.507476][ T5837] veth1_macvtap: entered promiscuous mode [ 77.519967][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.529185][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.543673][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.555276][ T5842] veth1_macvtap: entered promiscuous mode [ 77.616036][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.642461][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.646415][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.689681][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.706984][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.715205][ T139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.735336][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.766594][ T5830] veth0_macvtap: entered promiscuous mode [ 77.789040][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.800351][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.810730][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.823323][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.833823][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.843201][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.943070][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.969784][ T5830] veth1_macvtap: entered promiscuous mode [ 77.996897][ T5831] IPVS: starting estimator thread 0... [ 78.032891][ T139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.068221][ T139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.083529][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.095297][ T5951] IPVS: using max 33 ests per chain, 79200 per kthread [ 78.098346][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.111890][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.122504][ T139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.132402][ T139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.162562][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.242407][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.243238][ T1004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.250704][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.269000][ T1004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.290559][ T1004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.321364][ T1004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.364247][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.372542][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.438688][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.449352][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.537297][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.545593][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.720160][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.759067][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.036201][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.094849][ T5832] Bluetooth: hci2: command tx timeout [ 79.186144][ T5832] Bluetooth: hci1: command tx timeout [ 79.193092][ T5832] Bluetooth: hci0: command tx timeout [ 79.206112][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.255005][ T51] Bluetooth: hci3: command tx timeout [ 79.274489][ T51] Bluetooth: hci4: command tx timeout [ 79.649785][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.684160][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.939539][ T5973] syzkaller0: entered promiscuous mode [ 79.965539][ T5973] syzkaller0: entered allmulticast mode [ 80.363726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.373270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.455255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.466096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.475842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.568556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.577853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.670490][ T5976] ======================================================= [ 80.670490][ T5976] WARNING: The mand mount option has been deprecated and [ 80.670490][ T5976] and is ignored by this kernel. Remove the mand [ 80.670490][ T5976] option from the mount to silence this warning. [ 80.670490][ T5976] ======================================================= [ 80.670914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.709368][ T5976] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 80.714799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.772732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.773320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.034928][ T5985] trusted_key: encrypted_key: insufficient parameters specified [ 83.212038][ T5989] loop3: detected capacity change from 0 to 40427 [ 83.372799][ T5989] F2FS-fs (loop3): build fault injection rate: 771 [ 83.385865][ T5989] F2FS-fs (loop3): invalid crc value [ 83.834581][ T5943] IPVS: starting estimator thread 0... [ 84.112704][ T5989] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 84.127017][ T5989] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.274743][ T5995] IPVS: using max 31 ests per chain, 74400 per kthread [ 84.678489][ T6000] loop1: detected capacity change from 0 to 512 [ 85.049104][ T6010] fuse: Invalid rootmode [ 85.551422][ T6010] loop0: detected capacity change from 0 to 512 [ 85.576956][ T6010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.061405][ T6010] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 86.189330][ T6010] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.16: invalid indirect mapped block 2683928664 (level 1) [ 86.205376][ T6010] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 86.215894][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 86.232679][ C1] EXT4-fs (loop0): initial error at time 1773213205: ext4_free_branches:1023: inode 11 [ 86.242382][ C1] EXT4-fs (loop0): last error at time 1773213205: ext4_free_branches:1023: inode 11 [ 86.368689][ T6010] EXT4-fs (loop0): Remounting filesystem read-only [ 86.403285][ T6010] EXT4-fs (loop0): 1 truncate cleaned up [ 86.450144][ T6010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.513390][ T6010] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #2: comm syz.0.16: directory missing '.' [ 86.837349][ T988] cfg80211: failed to load regulatory.db [ 87.117203][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.197548][ T803] IPVS: starting estimator thread 0... [ 91.364444][ T6054] IPVS: using max 32 ests per chain, 76800 per kthread [ 91.457819][ T6063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.29'. [ 92.820294][ T6067] loop3: detected capacity change from 0 to 40427 [ 92.864985][ T6067] F2FS-fs (loop3): build fault injection rate: 771 [ 92.876409][ T6067] F2FS-fs (loop3): invalid crc value [ 94.215270][ T6067] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 94.255068][ T6067] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.436415][ T804] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.631798][ T6090] loop2: detected capacity change from 0 to 1024 [ 95.653098][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.689087][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.708073][ T6090] EXT4-fs: inline encryption not supported [ 95.759306][ T804] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 95.794350][ T6090] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.810725][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.833174][ T6092] loop0: detected capacity change from 0 to 2048 [ 95.917758][ T6092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.937768][ T804] usb 5-1: config 0 descriptor?? [ 95.981455][ T6090] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.35: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.041313][ T6090] loop2: lost filesystem error report for type 5 error -117 [ 96.043988][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 96.057862][ C0] EXT4-fs (loop2): initial error at time 1773213215: ext4_free_blocks:6724 [ 96.066593][ C0] EXT4-fs (loop2): last error at time 1773213215: ext4_free_blocks:6724 [ 96.095666][ T6090] EXT4-fs (loop2): Remounting filesystem read-only [ 96.113174][ T6090] EXT4-fs (loop2): 1 orphan inode deleted [ 96.125564][ T6090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.930122][ T1004] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 97.057740][ T1004] Quota error (device loop2): write_blk: dquota write failed [ 97.065614][ T1004] Quota error (device loop2): remove_free_dqentry: Can't write block (2) with free entries [ 97.076780][ T1004] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 97.091889][ T1004] Quota error (device loop2): write_blk: dquota write failed [ 97.116661][ T1004] Quota error (device loop2): free_dqentry: Can't move quota data block (2) to free list [ 97.177011][ T1004] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 97.230750][ T1004] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 97.261445][ T804] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x2 [ 97.281922][ T804] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 97.311461][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.943688][ T804] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 97.980739][ T804] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 98.030626][ T804] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -71 [ 98.037831][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.44'. [ 98.107950][ T804] usb 5-1: USB disconnect, device number 2 [ 99.367137][ T6140] trusted_key: encrypted_key: insufficient parameters specified [ 99.546730][ T6151] loop2: detected capacity change from 0 to 2048 [ 99.656871][ T6151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.385152][ T6167] @ÿ: renamed from bond_slave_0 (while UP) [ 100.785589][ T6180] netlink: 'syz.2.59': attribute type 3 has an invalid length. [ 100.793199][ T6180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.59'. [ 100.911619][ T6180] ------------[ cut here ]------------ [ 100.917939][ T6180] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 100.931475][ T6180] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1da0/0x2720, CPU#0: syz.2.59/6180 [ 100.941317][ T6180] Modules linked in: [ 100.946227][ T6180] CPU: 0 UID: 0 PID: 6180 Comm: syz.2.59 Not tainted syzkaller #0 PREEMPT(full) [ 100.957401][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 100.968085][ T6180] RIP: 0010:u32_change+0x1daf/0x2720 [ 100.974204][ T6180] Code: 3d 78 06 40 06 01 75 33 e8 8e 81 0a f8 eb 50 e8 87 81 0a f8 48 8d 3d f0 69 65 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 60 d6 e2 8c <67> 48 0f b9 3a e9 af ee ff ff e8 62 81 0a f8 eb 24 e8 5b 81 0a f8 [ 100.994426][ T6180] RSP: 0018:ffffc90004da6f80 EFLAGS: 00010283 [ 101.000853][ T6180] RAX: ffffffff89bc1179 RBX: ffff8880568c3400 RCX: 0000000000000010 [ 101.009154][ T6180] RDX: ffffffff8ce2d660 RSI: 0000000000000020 RDI: ffffffff90217b70 [ 101.017846][ T6180] RBP: ffffc90004da7138 R08: 0000000000000dc0 R09: 00000000ffffffff [ 101.026359][ T6180] R10: dffffc0000000000 R11: fffffbfff20247df R12: ffff88805693f0e8 [ 101.034731][ T6180] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 101.042709][ T6180] FS: 00007fc1da7e26c0(0000) GS:ffff888125441000(0000) knlGS:0000000000000000 [ 101.052420][ T6180] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.059253][ T6180] CR2: 000000110c309ec1 CR3: 000000007bdfe000 CR4: 00000000003526f0 [ 101.067264][ T6180] Call Trace: [ 101.070586][ T6180] [ 101.073528][ T6180] ? __pfx_u32_change+0x10/0x10 [ 101.078412][ T6180] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 101.084161][ T6180] tc_new_tfilter+0xff8/0x1780 [ 101.089065][ T6180] ? __pfx_tc_new_tfilter+0x10/0x10 [ 101.094340][ T6180] ? __pfx_tc_new_tfilter+0x10/0x10 [ 101.099542][ T6180] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 101.104547][ T6180] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 101.109667][ T6180] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.115205][ T6180] ? netlink_sendmsg+0x813/0xb40 [ 101.120154][ T6180] ? sock_sendmsg_nosec+0x112/0x150 [ 101.125387][ T6180] ? ____sys_sendmsg+0x589/0x8c0 [ 101.130323][ T6180] ? ___sys_sendmsg+0x2a5/0x360 [ 101.135632][ T6180] ? __sys_sendmmsg+0x27c/0x4e0 [ 101.140578][ T6180] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 101.145668][ T6180] ? do_syscall_64+0x14d/0xf80 [ 101.150631][ T6180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.156880][ T6180] netlink_rcv_skb+0x232/0x4b0 [ 101.161666][ T6180] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.167173][ T6180] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.172485][ T6180] netlink_unicast+0x80f/0x9b0 [ 101.177305][ T6180] ? __pfx_netlink_unicast+0x10/0x10 [ 101.182598][ T6180] ? netlink_sendmsg+0x650/0xb40 [ 101.187659][ T6180] ? skb_put+0x11b/0x210 [ 101.191916][ T6180] netlink_sendmsg+0x813/0xb40 [ 101.196719][ T6180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.202010][ T6180] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 101.208466][ T6180] ? rcu_is_watching+0x15/0xb0 [ 101.213321][ T6180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.218649][ T6180] sock_sendmsg_nosec+0x112/0x150 [ 101.223686][ T6180] ____sys_sendmsg+0x589/0x8c0 [ 101.228480][ T6180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.233778][ T6180] ? import_iovec+0x73/0xa0 [ 101.238321][ T6180] ___sys_sendmsg+0x2a5/0x360 [ 101.243007][ T6180] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.248250][ T6180] ? preempt_schedule_common+0x82/0xd0 [ 101.254172][ T6180] ? preempt_schedule_thunk+0x16/0x30 [ 101.259586][ T6180] ? __fget_files+0x2a/0x420 [ 101.264373][ T6180] ? __fget_files+0x3a0/0x420 [ 101.269073][ T6180] __sys_sendmmsg+0x27c/0x4e0 [ 101.273760][ T6180] ? __pfx___sys_sendmmsg+0x10/0x10 [ 101.279015][ T6180] ? do_futex+0x395/0x420 [ 101.283378][ T6180] ? rcu_is_watching+0x15/0xb0 [ 101.288190][ T6180] __x64_sys_sendmmsg+0xa0/0xc0 [ 101.293045][ T6180] do_syscall_64+0x14d/0xf80 [ 101.297659][ T6180] ? trace_irq_disable+0x3b/0x150 [ 101.302686][ T6180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.308778][ T6180] ? clear_bhb_loop+0x40/0x90 [ 101.313818][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.319743][ T6180] RIP: 0033:0x7fc1d999c799 [ 101.324217][ T6180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.344316][ T6180] RSP: 002b:00007fc1da7e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 101.352738][ T6180] RAX: ffffffffffffffda RBX: 00007fc1d9c15fa0 RCX: 00007fc1d999c799 [ 101.360980][ T6180] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 101.369129][ T6180] RBP: 00007fc1d9a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 101.377171][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.385172][ T6180] R13: 00007fc1d9c16038 R14: 00007fc1d9c15fa0 R15: 00007ffec4fe4368 [ 101.393163][ T6180] [ 101.396203][ T6180] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 101.403480][ T6180] CPU: 0 UID: 0 PID: 6180 Comm: syz.2.59 Not tainted syzkaller #0 PREEMPT(full) [ 101.412581][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 101.422642][ T6180] Call Trace: [ 101.425928][ T6180] [ 101.428858][ T6180] vpanic+0x56c/0xa60 [ 101.432847][ T6180] ? __pfx__printk+0x10/0x10 [ 101.437439][ T6180] ? __pfx_vpanic+0x10/0x10 [ 101.441958][ T6180] ? is_bpf_text_address+0x292/0x2b0 [ 101.447246][ T6180] ? is_bpf_text_address+0x26/0x2b0 [ 101.452455][ T6180] panic+0xc5/0xd0 [ 101.456182][ T6180] ? __pfx_panic+0x10/0x10 [ 101.460619][ T6180] __warn+0x315/0x4f0 [ 101.464614][ T6180] ? u32_change+0x1da0/0x2720 [ 101.469292][ T6180] ? u32_change+0x1da0/0x2720 [ 101.473974][ T6180] __report_bug+0x29a/0x540 [ 101.478481][ T6180] ? ____sys_sendmsg+0x589/0x8c0 [ 101.483415][ T6180] ? ___sys_sendmsg+0x2a5/0x360 [ 101.488266][ T6180] ? __sys_sendmmsg+0x27c/0x4e0 [ 101.493120][ T6180] ? u32_change+0x1da0/0x2720 [ 101.497823][ T6180] ? __pfx___report_bug+0x10/0x10 [ 101.502875][ T6180] report_bug_entry+0x19a/0x290 [ 101.507733][ T6180] ? u32_change+0x1daf/0x2720 [ 101.512407][ T6180] ? u32_change+0x1db4/0x2720 [ 101.517083][ T6180] handle_bug+0xce/0x200 [ 101.521327][ T6180] exc_invalid_op+0x1a/0x50 [ 101.525828][ T6180] asm_exc_invalid_op+0x1a/0x20 [ 101.530679][ T6180] RIP: 0010:u32_change+0x1daf/0x2720 [ 101.535974][ T6180] Code: 3d 78 06 40 06 01 75 33 e8 8e 81 0a f8 eb 50 e8 87 81 0a f8 48 8d 3d f0 69 65 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 60 d6 e2 8c <67> 48 0f b9 3a e9 af ee ff ff e8 62 81 0a f8 eb 24 e8 5b 81 0a f8 [ 101.555611][ T6180] RSP: 0018:ffffc90004da6f80 EFLAGS: 00010283 [ 101.561690][ T6180] RAX: ffffffff89bc1179 RBX: ffff8880568c3400 RCX: 0000000000000010 [ 101.569663][ T6180] RDX: ffffffff8ce2d660 RSI: 0000000000000020 RDI: ffffffff90217b70 [ 101.577638][ T6180] RBP: ffffc90004da7138 R08: 0000000000000dc0 R09: 00000000ffffffff [ 101.585738][ T6180] R10: dffffc0000000000 R11: fffffbfff20247df R12: ffff88805693f0e8 [ 101.593704][ T6180] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 101.601677][ T6180] ? u32_change+0x1d99/0x2720 [ 101.606387][ T6180] ? __pfx_u32_change+0x10/0x10 [ 101.611255][ T6180] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 101.616926][ T6180] tc_new_tfilter+0xff8/0x1780 [ 101.621744][ T6180] ? __pfx_tc_new_tfilter+0x10/0x10 [ 101.627010][ T6180] ? __pfx_tc_new_tfilter+0x10/0x10 [ 101.632210][ T6180] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 101.637161][ T6180] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 101.642282][ T6180] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.647744][ T6180] ? netlink_sendmsg+0x813/0xb40 [ 101.652685][ T6180] ? sock_sendmsg_nosec+0x112/0x150 [ 101.657884][ T6180] ? ____sys_sendmsg+0x589/0x8c0 [ 101.662819][ T6180] ? ___sys_sendmsg+0x2a5/0x360 [ 101.667678][ T6180] ? __sys_sendmmsg+0x27c/0x4e0 [ 101.672621][ T6180] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 101.677677][ T6180] ? do_syscall_64+0x14d/0xf80 [ 101.682437][ T6180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.688513][ T6180] netlink_rcv_skb+0x232/0x4b0 [ 101.693281][ T6180] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.698748][ T6180] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.704072][ T6180] netlink_unicast+0x80f/0x9b0 [ 101.709033][ T6180] ? __pfx_netlink_unicast+0x10/0x10 [ 101.714357][ T6180] ? netlink_sendmsg+0x650/0xb40 [ 101.719321][ T6180] ? skb_put+0x11b/0x210 [ 101.723582][ T6180] netlink_sendmsg+0x813/0xb40 [ 101.728458][ T6180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.733761][ T6180] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 101.740196][ T6180] ? rcu_is_watching+0x15/0xb0 [ 101.744996][ T6180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.750287][ T6180] sock_sendmsg_nosec+0x112/0x150 [ 101.755317][ T6180] ____sys_sendmsg+0x589/0x8c0 [ 101.760108][ T6180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.765403][ T6180] ? import_iovec+0x73/0xa0 [ 101.769923][ T6180] ___sys_sendmsg+0x2a5/0x360 [ 101.774607][ T6180] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.779813][ T6180] ? preempt_schedule_common+0x82/0xd0 [ 101.785277][ T6180] ? preempt_schedule_thunk+0x16/0x30 [ 101.790759][ T6180] ? __fget_files+0x2a/0x420 [ 101.795355][ T6180] ? __fget_files+0x3a0/0x420 [ 101.800044][ T6180] __sys_sendmmsg+0x27c/0x4e0 [ 101.804812][ T6180] ? __pfx___sys_sendmmsg+0x10/0x10 [ 101.810005][ T6180] ? do_futex+0x395/0x420 [ 101.814355][ T6180] ? rcu_is_watching+0x15/0xb0 [ 101.819126][ T6180] __x64_sys_sendmmsg+0xa0/0xc0 [ 101.823976][ T6180] do_syscall_64+0x14d/0xf80 [ 101.828578][ T6180] ? trace_irq_disable+0x3b/0x150 [ 101.833596][ T6180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.839668][ T6180] ? clear_bhb_loop+0x40/0x90 [ 101.844346][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.850235][ T6180] RIP: 0033:0x7fc1d999c799 [ 101.854649][ T6180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.874261][ T6180] RSP: 002b:00007fc1da7e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 101.882785][ T6180] RAX: ffffffffffffffda RBX: 00007fc1d9c15fa0 RCX: 00007fc1d999c799 [ 101.890755][ T6180] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 101.898733][ T6180] RBP: 00007fc1d9a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 101.906721][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.914721][ T6180] R13: 00007fc1d9c16038 R14: 00007fc1d9c15fa0 R15: 00007ffec4fe4368 [ 101.922725][ T6180] [ 101.926020][ T6180] Kernel Offset: disabled [ 101.930370][ T6180] Rebooting in 86400 seconds..