last executing test programs: 6.855950712s ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x22008051}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 5.823459903s ago: executing program 2 (id=3): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x490f714c138d6daa, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c1}, 0x4004000) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x13, 0x14, '/dev/ttyprintk\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002580), 0xa0100, 0x0) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT], 0x6c}}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x2000000}, 0x28) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000c00)=""/21, 0x15}], 0x1, &(0x7f0000000200)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000740)}], 0x3}}], 0x2, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x20c, 0x2a8, 0x2a8, 0x20c, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xf4, 0x13c, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6, 0x1], 0x5, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x2, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2fc) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) 5.785735105s ago: executing program 0 (id=6): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) io_uring_setup(0x3b69, &(0x7f0000001d80)={0x0, 0x714, 0x2, 0x1, 0x3d7}) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x11) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x10) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) 3.464349684s ago: executing program 0 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="07062dbd7000000000002d0000000c0005000203aaaaaaaaaaaa08002f00000000000c002d000203aaaaaaaaaaaa0c002d000201aaaaaaaaaaaa05002e00010000000c002d000203aaaaaaaaaaaa08000200", @ANYRES64=r3], 0x5c}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, r4, 0x11, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40005) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffff6927ff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006200000040300"/180], 0xfc}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 3.033672893s ago: executing program 2 (id=8): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x20, 0xd, 0x71, {0x71, 0x3a, "0d2780564ae45f9feae9234f893b8c263fea8d75c00764a746a6d21ec7681e96162ca5eea2c066408a0141421242eeac651656873d22c9012ea92c6ce0395fdd4880361944d9401915f97317122236a98284f093eb25fd138f0091373378f15acdf141f12ea4a5112e2487d2d9691f"}}, &(0x7f00000000c0)={0x0, 0x3, 0x29, @string={0x29, 0x3, "8ef29c54f6db2d2320f2cd8646e5c036d5e1d0345970c789ce4d778de0f82ff5f3551e8ecb2634"}}, &(0x7f0000000100)={0x0, 0xf, 0x28, {0x5, 0xf, 0x28, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x44, 0x4, 0x8, 0xf09, 0x5}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x4, 0x0, 0x6, [0xf0, 0xffff00, 0xf]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x6e, 0x7, "7ff265fd", "b1b13db9"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2c, 0x60, 0xb, 0xb, 0x4, 0x48, 0x8}}}, &(0x7f0000000880)={0x84, &(0x7f0000000300)={0x20, 0x17, 0xff, "0fcd0e63ed534f330eeac16801ed7471c684eb1ac0585b0ce30762250bb802a591728ac38ed32f4d5c63b8e11f1d8282b9b2d58cc987cfdbe87702c2b1d259c9975062a64a34d3a8f5bbce5b671c8f9acfd424d60da747aca5a11001fdaf45d235840e79b52ccf1f3805c7355999a7beb44f53db7dd3b8fc44f4039b0c141bfb277b2521044f66d46334a094f2b77f9e1fbacc679e151357c9aaf04172c894eceb1d2c2037839179d787a192037224207da304bacf6dfecca1fb7078cfa6bbcb8b8ef44dea0777157aee7f43748c9048630fe88a14dfb93bd18c720965bc0718c8196fa9a1b9f06dce118d5c081ce4946cdd7918f7e25955e8c2a91921b319"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x200, 0x40}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x10}, &(0x7f0000000500)={0x40, 0x9, 0x1}, &(0x7f0000000540)={0x40, 0xb, 0x2, "a4ea"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000700)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000740)={0x40, 0x19, 0x2, "b2d0"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0xf73}, &(0x7f00000007c0)={0x40, 0x1c, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xaa}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0x6, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x0, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x4, 0x1fc, 0xc5c, 0xfffffff7]}}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="115c7c85cc15ad9bc5979409697658751675c2d3ba952f154f055ba6a8581f2930a0c050b42f"], 0x0, 0x0, 0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) preadv(r2, &(0x7f0000003540)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1, 0xfffffffe, 0xd) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000b00)={0x14, &(0x7f00000009c0)={0x40, 0x4, 0xda, {0xda, 0x9, "3a26b8e16077ce66196738c5c200f250948e6dada0c83997609f1fa97342d7054fab953974402f59407eceeaca0b17aca45580c6bc0a7ff13c8067e795815735d88efb35c25c2cfcae228daa38422047721c28c3bc38128c0c179eb6823659f6307b07011b0cacfe39b3c0b3bb62f034e30453b24fa2c36137d886362c978696aa77d2b543f1f636bc92180122ad76750cde3cca96da75304e53e0d3e9f4b7d77d2b53093fae2cc3b4ddbc546fa14a239c5b9bb122f9cd5e2b540c3fb4e31a0474f3f42eec1654a13a83a86cdf40ae0b875972c6ba95083e"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x1c, &(0x7f0000000b40)={0x40, 0x13, 0x7, "050382447e684a"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x9}}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setlink={0x28, 0x13, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x80, 0x8}, [@IFLA_GSO_MAX_SIZE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x3000c014}, 0x200000d0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.022450826s ago: executing program 0 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) syz_io_uring_setup(0x2287, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 0s ago: executing program 3 (id=4): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000002880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002840)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/81, 0x51}, {&(0x7f0000001340)=""/11, 0xb}], 0x2, &(0x7f00000027c0)=[{&(0x7f00000013c0)=""/125, 0x7d}, {&(0x7f0000001440)=""/40, 0x28}, {&(0x7f0000001480)=""/215, 0xd7}, {&(0x7f0000001580)=""/175, 0xaf}, {&(0x7f0000001640)=""/189, 0xbd}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/137, 0x89}], 0x7, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents(r9, &(0x7f0000000280)=""/4097, 0x1001) sched_setscheduler(r2, 0x0, &(0x7f00000000c0)=0xae2) r10 = getpid() sched_setscheduler(r10, 0x0, &(0x7f0000002840)=0x501) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0x0, 0x18, 0x0, "5d4ab32550273e161df048896b98443d7b906bd66754fff13c98153df565717542efa26742e8c0f68ac8a2cd8a477255f3b9973e2918b7f5988284d2d9d87b7b9b0b56ab0434a0eb7b5f9d97318fb5d1"}, 0xd8) syz_open_procfs$pagemap(r10, &(0x7f0000000000)) sendto$inet6(r1, &(0x7f0000000200)="18", 0x1, 0x40, &(0x7f0000000240)={0xa, 0x4e21, 0xfffffffb, @local, 0x400000}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) kernel console output (not intermixed with test programs): [ 92.864773][ T31] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. [ 96.305384][ T5827] cgroup: Unknown subsys name 'net' [ 96.563584][ T5827] cgroup: Unknown subsys name 'cpuset' [ 96.638155][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 98.747841][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 101.743564][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.756462][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.777750][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.807881][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.808688][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.998717][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.010501][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.019623][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.021085][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.022619][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.023326][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.024588][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.026761][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.028998][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.030770][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.031579][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.034685][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.035822][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.036144][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.039353][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.045470][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.045724][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.046559][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.070926][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.086526][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.014791][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 103.417601][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 103.465238][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 103.649166][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 103.659828][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 103.880631][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.881642][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.882256][ T5839] bridge_slave_0: entered allmulticast mode [ 103.885836][ T5839] bridge_slave_0: entered promiscuous mode [ 103.898473][ T5853] Bluetooth: hci0: command tx timeout [ 103.968061][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.968207][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.968794][ T5839] bridge_slave_1: entered allmulticast mode [ 103.972179][ T5839] bridge_slave_1: entered promiscuous mode [ 104.057232][ T5853] Bluetooth: hci1: command tx timeout [ 104.137206][ T5853] Bluetooth: hci4: command tx timeout [ 104.217184][ T5853] Bluetooth: hci2: command tx timeout [ 104.217192][ T59] Bluetooth: hci3: command tx timeout [ 104.602611][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.602944][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.603193][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.603395][ T5844] bridge_slave_0: entered allmulticast mode [ 104.606690][ T5844] bridge_slave_0: entered promiscuous mode [ 104.743379][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.743671][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.743839][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.744044][ T5844] bridge_slave_1: entered allmulticast mode [ 104.748496][ T5844] bridge_slave_1: entered promiscuous mode [ 104.941170][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.941331][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.941584][ T5842] bridge_slave_0: entered allmulticast mode [ 104.945087][ T5842] bridge_slave_0: entered promiscuous mode [ 105.284088][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.284259][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.284532][ T5842] bridge_slave_1: entered allmulticast mode [ 105.288988][ T5842] bridge_slave_1: entered promiscuous mode [ 105.506359][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.506540][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.506752][ T5845] bridge_slave_0: entered allmulticast mode [ 105.509875][ T5845] bridge_slave_0: entered promiscuous mode [ 105.534565][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.534727][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.534994][ T5843] bridge_slave_0: entered allmulticast mode [ 105.560429][ T5843] bridge_slave_0: entered promiscuous mode [ 105.653192][ T5839] team0: Port device team_slave_0 added [ 105.656071][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.656249][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.656403][ T5845] bridge_slave_1: entered allmulticast mode [ 105.660203][ T5845] bridge_slave_1: entered promiscuous mode [ 105.671162][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.672139][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.672277][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.672462][ T5843] bridge_slave_1: entered allmulticast mode [ 105.675171][ T5843] bridge_slave_1: entered promiscuous mode [ 105.782097][ T5839] team0: Port device team_slave_1 added [ 105.861801][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.946130][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.977190][ T59] Bluetooth: hci0: command tx timeout [ 106.137269][ T59] Bluetooth: hci1: command tx timeout [ 106.217226][ T59] Bluetooth: hci4: command tx timeout [ 106.247339][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.297276][ T59] Bluetooth: hci2: command tx timeout [ 106.297319][ T59] Bluetooth: hci3: command tx timeout [ 106.345263][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.435370][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.661810][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.661831][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.661861][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.668928][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.679516][ T5844] team0: Port device team_slave_0 added [ 106.685957][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.770579][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.770600][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.770628][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.862042][ T5844] team0: Port device team_slave_1 added [ 106.951578][ T5842] team0: Port device team_slave_0 added [ 107.164793][ T5842] team0: Port device team_slave_1 added [ 107.170998][ T5845] team0: Port device team_slave_0 added [ 107.232705][ T5843] team0: Port device team_slave_0 added [ 107.322863][ T5845] team0: Port device team_slave_1 added [ 107.324308][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.324322][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.324337][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.336312][ T5843] team0: Port device team_slave_1 added [ 107.570036][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.570058][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.570087][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.669834][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.669855][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.669884][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.057175][ T5853] Bluetooth: hci0: command tx timeout [ 108.061057][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.061075][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.061102][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.095046][ T5839] hsr_slave_0: entered promiscuous mode [ 108.099319][ T5839] hsr_slave_1: entered promiscuous mode [ 108.108906][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.108922][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.108944][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.114732][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.114749][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.114772][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.153166][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.153185][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.153208][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.157732][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.157749][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.157773][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.217098][ T5853] Bluetooth: hci1: command tx timeout [ 108.309131][ T5853] Bluetooth: hci4: command tx timeout [ 108.377153][ T5853] Bluetooth: hci3: command tx timeout [ 108.377193][ T5853] Bluetooth: hci2: command tx timeout [ 108.577643][ T5844] hsr_slave_0: entered promiscuous mode [ 108.579280][ T5844] hsr_slave_1: entered promiscuous mode [ 108.580613][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 108.580734][ T5844] Cannot create hsr debugfs directory [ 108.904989][ T5842] hsr_slave_0: entered promiscuous mode [ 108.905970][ T5842] hsr_slave_1: entered promiscuous mode [ 108.906567][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 108.906589][ T5842] Cannot create hsr debugfs directory [ 109.232254][ T5843] hsr_slave_0: entered promiscuous mode [ 109.233237][ T5843] hsr_slave_1: entered promiscuous mode [ 109.233935][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 109.233962][ T5843] Cannot create hsr debugfs directory [ 109.243948][ T5845] hsr_slave_0: entered promiscuous mode [ 109.245346][ T5845] hsr_slave_1: entered promiscuous mode [ 109.246258][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 109.246282][ T5845] Cannot create hsr debugfs directory [ 110.137193][ T59] Bluetooth: hci0: command tx timeout [ 110.297472][ T59] Bluetooth: hci1: command tx timeout [ 110.377119][ T59] Bluetooth: hci4: command tx timeout [ 110.457199][ T59] Bluetooth: hci2: command tx timeout [ 110.457240][ T59] Bluetooth: hci3: command tx timeout [ 111.019473][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.058630][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.099654][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.160635][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.305339][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.356330][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.395251][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.456702][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.615159][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.675787][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.733882][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.797232][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.002225][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.053702][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.114143][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.191433][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.397703][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.456561][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.499411][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.564459][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.564893][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.761390][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.804176][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.828326][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.828475][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.891134][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.891623][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.990938][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.051015][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.070832][ T1359] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.072653][ T1359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.115932][ T1359] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.116091][ T1359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.220567][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.244454][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.304763][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.304976][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.383692][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.384445][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.499349][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.571100][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.590798][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.591060][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.695246][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.696239][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.827235][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.915226][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.916126][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.996083][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.998514][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.109616][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.508731][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.657681][ T5839] veth0_vlan: entered promiscuous mode [ 114.696219][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.764696][ T5839] veth1_vlan: entered promiscuous mode [ 115.180703][ T5839] veth0_macvtap: entered promiscuous mode [ 115.205756][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.213582][ T5843] veth0_vlan: entered promiscuous mode [ 115.276609][ T5839] veth1_macvtap: entered promiscuous mode [ 115.332786][ T5843] veth1_vlan: entered promiscuous mode [ 115.469716][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.528886][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.533761][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.616654][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.641292][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.652823][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.683112][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.791000][ T5843] veth0_macvtap: entered promiscuous mode [ 115.796492][ T5845] veth0_vlan: entered promiscuous mode [ 115.896353][ T5843] veth1_macvtap: entered promiscuous mode [ 115.927426][ T5844] veth0_vlan: entered promiscuous mode [ 116.019150][ T5845] veth1_vlan: entered promiscuous mode [ 116.129995][ T5844] veth1_vlan: entered promiscuous mode [ 116.238758][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.251137][ T1359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.251159][ T1359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.272614][ T5842] veth0_vlan: entered promiscuous mode [ 116.348220][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.413063][ T5842] veth1_vlan: entered promiscuous mode [ 116.430937][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.456507][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.476664][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.486257][ T5135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.486279][ T5135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.521943][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.554658][ T5845] veth0_macvtap: entered promiscuous mode [ 116.654791][ T5844] veth0_macvtap: entered promiscuous mode [ 116.695627][ T5845] veth1_macvtap: entered promiscuous mode [ 116.729153][ T5844] veth1_macvtap: entered promiscuous mode [ 116.915454][ T5842] veth0_macvtap: entered promiscuous mode [ 116.926742][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.066893][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.098172][ T5842] veth1_macvtap: entered promiscuous mode [ 117.102775][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.128721][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.128751][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.172658][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.190190][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.201511][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.216024][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.217531][ T5955] Zero length message leads to an empty skb [ 117.241519][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.292837][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.316873][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.326049][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.335196][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.355468][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.440766][ T3582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.440795][ T3582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.453737][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.722184][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.761772][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.784434][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.866749][ T1359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.073498][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.073531][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.822775][ T5969] netlink: 'syz.2.3': attribute type 11 has an invalid length. [ 119.822934][ T5969] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3'. [ 120.997216][ T5975] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7'. [ 121.802558][ T5131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.802583][ T5131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.029507][ T3582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.029534][ T3582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.137218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.227080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.287177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.507185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.598056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.718586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.777261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.218030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.229570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.297519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.577443][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.577471][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.725889][ T5904] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.518020][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 124.884995][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 124.885038][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 124.918279][ T5977] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 124.918303][ T5977] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 5977, name: syz.2.8 [ 124.918326][ T5977] preempt_count: 0, expected: 0 [ 124.918336][ T5977] RCU nest depth: 0, expected: 0 [ 124.918345][ T5977] 1 lock held by syz.2.8/5977: [ 124.918356][ T5977] #0: ffff888145354058 (&dum_hcd->dum->lock){+.+.}-{3:3}, at: dummy_dequeue+0x164/0x480 [ 124.918416][ T5977] irq event stamp: 2704 [ 124.918423][ T5977] hardirqs last enabled at (2703): [] _raw_spin_unlock_irq+0x23/0x50 [ 124.918462][ T5977] hardirqs last disabled at (2704): [] dummy_dequeue+0x151/0x480 [ 124.918486][ T5977] softirqs last enabled at (0): [] copy_process+0x979/0x3ae0 [ 124.918515][ T5977] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 124.918540][ T5977] CPU: 0 UID: 0 PID: 5977 Comm: syz.2.8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.918562][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.918574][ T5977] Call Trace: [ 124.918582][ T5977] [ 124.918590][ T5977] dump_stack_lvl+0x189/0x250 [ 124.918623][ T5977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.918658][ T5977] ? print_lock_name+0xde/0x100 [ 124.918686][ T5977] __might_resched+0x44b/0x5d0 [ 124.918715][ T5977] ? __pfx___might_resched+0x10/0x10 [ 124.918735][ T5977] ? dummy_dequeue+0x164/0x480 [ 124.918770][ T5977] rt_spin_lock+0xc7/0x2c0 [ 124.918788][ T5977] ? _raw_spin_unlock_irq+0x23/0x50 [ 124.918815][ T5977] ? __pfx_rt_spin_lock+0x10/0x10 [ 124.918839][ T5977] ? rcu_is_watching+0x15/0xb0 [ 124.918870][ T5977] dummy_dequeue+0x164/0x480 [ 124.918896][ T5977] ? __pfx_dummy_dequeue+0x10/0x10 [ 124.918913][ T5977] ? __pfx_schedule_timeout+0x10/0x10 [ 124.918933][ T5977] ? __pfx___wait_for_common+0x10/0x10 [ 124.918969][ T5977] usb_ep_dequeue+0x66/0x250 [ 124.918993][ T5977] raw_process_ep0_io+0x435/0x980 [ 124.919024][ T5977] raw_ioctl+0x22f6/0x3ba0 [ 124.919047][ T5977] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 124.919071][ T5977] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 124.919094][ T5977] ? do_vfs_ioctl+0xbeb/0x1440 [ 124.919119][ T5977] ? __pfx_raw_ioctl+0x10/0x10 [ 124.919139][ T5977] ? __pfx_smack_log+0x10/0x10 [ 124.919165][ T5977] ? smk_access+0x14c/0x4e0 [ 124.919196][ T5977] ? smk_tskacc+0x2fc/0x370 [ 124.919228][ T5977] ? smack_file_ioctl+0x24d/0x340 [ 124.919250][ T5977] ? __pfx_smack_file_ioctl+0x10/0x10 [ 124.919279][ T5977] ? __fget_files+0x2a/0x420 [ 124.919302][ T5977] ? __fget_files+0x3a6/0x420 [ 124.919325][ T5977] ? __fget_files+0x2a/0x420 [ 124.919353][ T5977] ? bpf_lsm_file_ioctl+0x9/0x20 [ 124.919374][ T5977] ? __pfx_raw_ioctl+0x10/0x10 [ 124.919394][ T5977] __se_sys_ioctl+0xfc/0x170 [ 124.919417][ T5977] do_syscall_64+0xfa/0x3b0 [ 124.919450][ T5977] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.919472][ T5977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.919490][ T5977] ? clear_bhb_loop+0x60/0xb0 [ 124.919513][ T5977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.919555][ T5977] RIP: 0033:0x7fc52387e7eb [ 124.919573][ T5977] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 124.919589][ T5977] RSP: 002b:00007fc521ae3f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.919610][ T5977] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc52387e7eb [ 124.919624][ T5977] RDX: 00007fc521ae3fd0 RSI: 0000000040085503 RDI: 0000000000000003 [ 124.919636][ T5977] RBP: 00007fc521ae4fe0 R08: 0000000000000080 R09: 00007fc521ae3fd8 [ 124.919649][ T5977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 124.919662][ T5977] R13: 0000000800000000 R14: 0000000000000008 R15: 00007fc52390d391 [ 124.919695][ T5977] [ 125.638394][ T5904] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 125.638420][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.663841][ T5135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.663866][ T5135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.911938][ T5904] usb 3-1: config 0 descriptor?? [ 125.958098][ T5904] usb 3-1: can't set config #0, error -71 [ 126.047490][ T5904] usb 3-1: USB disconnect, device number 2 [ 126.217303][ T758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.217330][ T758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 Stopping sshd: stopped /usr/sbin/sshd (pid 5598) OK Stopping crond: stopped /usr/sbin/crond (pid 5581) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5500) Stopping network: OK Stopping iptables: modprobe: can't change directory to 'syzkaller': No such file or directory iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. FAIL