last executing test programs: 5.027199316s ago: executing program 1 (id=14): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, &(0x7f0000000380)={[{0x2d, 'net_prio'}]}, 0xa) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="ff", 0x1}], 0x1, 0x0, 0x0, 0x20000880}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x80000001, 0x0}, 0x2002) 4.758852889s ago: executing program 1 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.457316669s ago: executing program 1 (id=19): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0xfffffdfe, 0xfffffffe}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071184b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 4.192670332s ago: executing program 4 (id=22): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000780)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 4.135714009s ago: executing program 1 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r0, &(0x7f0000000400), 0x0) write$sysctl(r0, &(0x7f0000000080)='7\x00', 0x2) 3.909931574s ago: executing program 4 (id=26): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2b, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000000677fbacfe1416e000030a83079f03b18000440c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffdab, &(0x7f0000000100)="b9ff03316844268cb89e14f008004c6ce6b18987f7c57ee005000000000002", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.789914183s ago: executing program 1 (id=28): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@private2, 0x29}) shmctl$IPC_RMID(r4, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xffffffffffffffb6) bind$can_j1939(r0, 0x0, 0x0) 3.63510817s ago: executing program 3 (id=29): syz_usb_connect(0x0, 0x39, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000180)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='bfq', 0x3) 3.520561449s ago: executing program 0 (id=31): r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x379, 0x0) writev(r2, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) socket$kcm(0x21, 0x2, 0xa) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8008743f, &(0x7f00000005c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) preadv2(r5, 0x0, 0x0, 0x0, 0x3000, 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) modify_ldt$write(0x1, &(0x7f0000000280)={0x5, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a000000000000000031ffff0000000000000009e500d5ffffff05ffffff03"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.392529697s ago: executing program 5 (id=32): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x61780, 0x10, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.929385356s ago: executing program 5 (id=34): mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)="3d4d47fc95cb331571fce36d73", 0xd) 2.85775911s ago: executing program 3 (id=35): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000500)="7964b4976de7309dc4e60544b713fcdef032c4762e8929f06a49f3d5af1491766ad3020d4b7b2c86e8df094760e6a0f359ceadfa4a144fc9ae957eb77129a6b6a09b54c63b478503f16f526479e57717616673071125ec1c36a415ae15af0de6c4426235af9ab27ea46708564160fadeb5e70a528f6e6684a427883e427ab9d32bd4139c32f7658ebc76b6214183c79be4c8313d01955d2dbd000e5f62b88049cbb71cdec35942606667f7605a", 0x1003, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.686684163s ago: executing program 5 (id=37): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) accept(r0, 0x0, 0x0) 2.490477578s ago: executing program 0 (id=38): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="03000000000010b63a0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2.488983949s ago: executing program 4 (id=39): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) 2.151342673s ago: executing program 4 (id=41): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) 2.150943026s ago: executing program 3 (id=42): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x31) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2.109100037s ago: executing program 0 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%pB \x00'}, 0x20) 1.843587245s ago: executing program 2 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)="3d4d47fc95cb331571fce36d3b", 0xd) 1.791606601s ago: executing program 3 (id=45): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) close(r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) 1.723937093s ago: executing program 0 (id=46): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902600042"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ptrace(0x10, 0x0) ptrace(0x10, r1) landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x30, 0x0) ptrace(0x10, 0x0) ptrace(0x11, 0x0) 1.559123252s ago: executing program 3 (id=47): syz_usb_connect(0x0, 0x39, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000180)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='bfq', 0x3) 1.544887389s ago: executing program 5 (id=48): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) 1.491688441s ago: executing program 2 (id=49): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)=' 294967 95 2\\000 0-00 0\n', 0x18) 1.318829387s ago: executing program 5 (id=50): r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x379, 0x0) writev(r2, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) socket$kcm(0x21, 0x2, 0xa) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8008743f, &(0x7f00000005c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) preadv2(r5, 0x0, 0x0, 0x0, 0x3000, 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) modify_ldt$write(0x1, &(0x7f0000000280)={0x5, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a000000000000000031ffff0000000000000009e500d5ffffff05ffffff03"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.162614666s ago: executing program 2 (id=51): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) accept(r0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 838.168174ms ago: executing program 5 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 722.402213ms ago: executing program 2 (id=53): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x23, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a00000200", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 699.431793ms ago: executing program 3 (id=54): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000200), &(0x7f0000000100)=""/228}, 0x20) 631.738105ms ago: executing program 0 (id=55): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r0}, &(0x7f00000009c0), &(0x7f0000000a00)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) 471.647186ms ago: executing program 1 (id=56): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@ifindex, 0x26, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000ac0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x30, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x5, 0x0, 0x2, '\x00', {0xf, 0x6, '\x00', 0x9, 0x3b, 0xff, @mcast2, @empty}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000580)={&(0x7f0000000500)=""/67, 0x226000, 0x800, 0x401, 0x2}, 0x1c) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x1) fchdir(r5) 469.588177ms ago: executing program 4 (id=57): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') statx(0xffffffffffffffff, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0xb19, &(0x7f0000000600)) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r2 = socket(0x40000000015, 0x5, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 375.832472ms ago: executing program 2 (id=58): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 336.792566ms ago: executing program 0 (id=59): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 149.278044ms ago: executing program 4 (id=60): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) accept(r0, 0x0, 0x0) 0s ago: executing program 2 (id=61): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 76.168902][ T5603] cgroup: Unknown subsys name 'net' [ 76.286822][ T5603] cgroup: Unknown subsys name 'cpuset' [ 76.295906][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.787132][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.744128][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.753674][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.757666][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.769030][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.777625][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.783634][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.785145][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.793344][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.801054][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.806353][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.820663][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.825685][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.837151][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.846512][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.857098][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.864698][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.882266][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.896865][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.904899][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.913184][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.943949][ T4933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.947407][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.963927][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.972349][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.980362][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.990225][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.999077][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.008503][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.021059][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.028966][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.915348][ T5628] Bluetooth: hci2: command tx timeout [ 83.915478][ T50] Bluetooth: hci0: command tx timeout [ 83.928074][ T5623] Bluetooth: hci1: command tx timeout [ 83.992304][ T5623] Bluetooth: hci3: command tx timeout [ 84.004201][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.011403][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.019618][ T5616] bridge_slave_0: entered allmulticast mode [ 84.027327][ T5616] bridge_slave_0: entered promiscuous mode [ 84.072298][ T50] Bluetooth: hci5: command tx timeout [ 84.072313][ T5628] Bluetooth: hci4: command tx timeout [ 84.075630][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.090427][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.097716][ T5616] bridge_slave_1: entered allmulticast mode [ 84.105225][ T5616] bridge_slave_1: entered promiscuous mode [ 84.263910][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.280260][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.400563][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.408295][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.415976][ T5629] bridge_slave_0: entered allmulticast mode [ 84.424856][ T5629] bridge_slave_0: entered promiscuous mode [ 84.433793][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.441838][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.449177][ T5617] bridge_slave_0: entered allmulticast mode [ 84.456633][ T5617] bridge_slave_0: entered promiscuous mode [ 84.489721][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.498421][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.505972][ T5629] bridge_slave_1: entered allmulticast mode [ 84.514810][ T5629] bridge_slave_1: entered promiscuous mode [ 84.533498][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.540665][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.548216][ T5617] bridge_slave_1: entered allmulticast mode [ 84.555706][ T5617] bridge_slave_1: entered promiscuous mode [ 84.565124][ T5616] team0: Port device team_slave_0 added [ 84.633026][ T5616] team0: Port device team_slave_1 added [ 84.688841][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.762758][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.774881][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.792162][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.799158][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.825204][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.837192][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.844891][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.852269][ T5630] bridge_slave_0: entered allmulticast mode [ 84.859817][ T5630] bridge_slave_0: entered promiscuous mode [ 84.890613][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.908299][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.915410][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.941570][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.953781][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.960995][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.968650][ T5630] bridge_slave_1: entered allmulticast mode [ 84.976474][ T5630] bridge_slave_1: entered promiscuous mode [ 85.052396][ T5629] team0: Port device team_slave_0 added [ 85.112920][ T5629] team0: Port device team_slave_1 added [ 85.120602][ T5617] team0: Port device team_slave_0 added [ 85.139068][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.146652][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.154264][ T5634] bridge_slave_0: entered allmulticast mode [ 85.161749][ T5634] bridge_slave_0: entered promiscuous mode [ 85.172404][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.209111][ T5617] team0: Port device team_slave_1 added [ 85.227540][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.234966][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.242613][ T5634] bridge_slave_1: entered allmulticast mode [ 85.250068][ T5634] bridge_slave_1: entered promiscuous mode [ 85.259622][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.268898][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.276275][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.283857][ T5622] bridge_slave_0: entered allmulticast mode [ 85.291360][ T5622] bridge_slave_0: entered promiscuous mode [ 85.359721][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.367117][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.374557][ T5622] bridge_slave_1: entered allmulticast mode [ 85.382242][ T5622] bridge_slave_1: entered promiscuous mode [ 85.389763][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.396774][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.423002][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.455018][ T5616] hsr_slave_0: entered promiscuous mode [ 85.461749][ T5616] hsr_slave_1: entered promiscuous mode [ 85.504848][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.512090][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.538428][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.550305][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.557617][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.583827][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.596997][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.604330][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.630296][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.650912][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.664166][ T5630] team0: Port device team_slave_0 added [ 85.725050][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.736315][ T5630] team0: Port device team_slave_1 added [ 85.756903][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.803608][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.863775][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.870804][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.897260][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.941291][ T5629] hsr_slave_0: entered promiscuous mode [ 85.948079][ T5629] hsr_slave_1: entered promiscuous mode [ 85.954471][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 85.960236][ T5629] Cannot create hsr debugfs directory [ 85.976133][ T5634] team0: Port device team_slave_0 added [ 85.982536][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.989575][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.016002][ T5623] Bluetooth: hci0: command tx timeout [ 86.016505][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.021540][ T50] Bluetooth: hci1: command tx timeout [ 86.032966][ T5623] Bluetooth: hci2: command tx timeout [ 86.072074][ T5623] Bluetooth: hci3: command tx timeout [ 86.084218][ T5634] team0: Port device team_slave_1 added [ 86.102568][ T5622] team0: Port device team_slave_0 added [ 86.111663][ T5622] team0: Port device team_slave_1 added [ 86.125999][ T5617] hsr_slave_0: entered promiscuous mode [ 86.133025][ T5617] hsr_slave_1: entered promiscuous mode [ 86.139401][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 86.145549][ T5617] Cannot create hsr debugfs directory [ 86.152251][ T5623] Bluetooth: hci5: command tx timeout [ 86.157734][ T50] Bluetooth: hci4: command tx timeout [ 86.443433][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.450735][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.477367][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.489223][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.496454][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.522910][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.561940][ T5630] hsr_slave_0: entered promiscuous mode [ 86.568374][ T5630] hsr_slave_1: entered promiscuous mode [ 86.575004][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 86.580753][ T5630] Cannot create hsr debugfs directory [ 86.587186][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.594177][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.620498][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.633152][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.640114][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.666242][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.833440][ T5634] hsr_slave_0: entered promiscuous mode [ 86.839898][ T5634] hsr_slave_1: entered promiscuous mode [ 86.846484][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 86.852629][ T5634] Cannot create hsr debugfs directory [ 87.013689][ T5622] hsr_slave_0: entered promiscuous mode [ 87.020154][ T5622] hsr_slave_1: entered promiscuous mode [ 87.026749][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 87.033154][ T5622] Cannot create hsr debugfs directory [ 87.265077][ T5616] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.278740][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.287006][ T5616] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.299364][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.338473][ T5616] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.348989][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.386987][ T5616] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.398319][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.546037][ T5629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.558139][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.588702][ T5629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.599137][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.607698][ T5629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.617256][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.647818][ T5629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.657101][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.758451][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.769057][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.778288][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.789109][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.797298][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.807206][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.815295][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.825014][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.924479][ T5630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.940166][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.948495][ T5630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.958650][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.976653][ T5630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.986757][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.995189][ T5630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.006844][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.072456][ T5623] Bluetooth: hci1: command tx timeout [ 88.072909][ T50] Bluetooth: hci0: command tx timeout [ 88.078168][ T5628] Bluetooth: hci2: command tx timeout [ 88.118935][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.152267][ T5623] Bluetooth: hci3: command tx timeout [ 88.171652][ T5634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.181758][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.203287][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.210217][ T5634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.220490][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.229682][ T5634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.232455][ T5623] Bluetooth: hci4: command tx timeout [ 88.236654][ T5628] Bluetooth: hci5: command tx timeout [ 88.251264][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.259517][ T5634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.269395][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.329242][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.357499][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.364872][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.411793][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.425077][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.437529][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.444706][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.464762][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.475231][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.483381][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.495055][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.508719][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.517801][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.529905][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.541127][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.584084][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.591191][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.650835][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.657971][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.674401][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.724409][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.731605][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.758913][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.766058][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.795410][ T5616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.830169][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.971242][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.004035][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.011191][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.031840][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.080167][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.087347][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.140632][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.177853][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.185195][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.199189][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.231542][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.238782][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.381461][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.468156][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.475387][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.535309][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.542519][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.133014][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.155602][ T5628] Bluetooth: hci1: command tx timeout [ 90.156156][ T50] Bluetooth: hci0: command tx timeout [ 90.168893][ T5623] Bluetooth: hci2: command tx timeout [ 90.243295][ T5623] Bluetooth: hci3: command tx timeout [ 90.316561][ T5623] Bluetooth: hci5: command tx timeout [ 90.322196][ T50] Bluetooth: hci4: command tx timeout [ 90.585328][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.654930][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.863097][ T5617] veth0_vlan: entered promiscuous mode [ 90.945684][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.993193][ T5617] veth1_vlan: entered promiscuous mode [ 91.029140][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.118969][ T9] cfg80211: failed to load regulatory.db [ 91.259700][ T5616] veth0_vlan: entered promiscuous mode [ 91.282119][ T5617] veth0_macvtap: entered promiscuous mode [ 91.326025][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.333874][ T5634] veth0_vlan: entered promiscuous mode [ 91.348531][ T5617] veth1_macvtap: entered promiscuous mode [ 91.379774][ T5634] veth1_vlan: entered promiscuous mode [ 91.397346][ T5616] veth1_vlan: entered promiscuous mode [ 91.414090][ T5630] veth0_vlan: entered promiscuous mode [ 91.445249][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.469913][ T5630] veth1_vlan: entered promiscuous mode [ 91.500122][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.555411][ T5629] veth0_vlan: entered promiscuous mode [ 91.571655][ T5616] veth0_macvtap: entered promiscuous mode [ 91.603741][ T153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.625372][ T5616] veth1_macvtap: entered promiscuous mode [ 91.639444][ T5622] veth0_vlan: entered promiscuous mode [ 91.649403][ T5634] veth0_macvtap: entered promiscuous mode [ 91.661447][ T5629] veth1_vlan: entered promiscuous mode [ 91.686816][ T5634] veth1_macvtap: entered promiscuous mode [ 91.707660][ T5630] veth0_macvtap: entered promiscuous mode [ 91.730898][ T5622] veth1_vlan: entered promiscuous mode [ 91.771413][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.780656][ T5630] veth1_macvtap: entered promiscuous mode [ 91.819669][ T5806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.837930][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.845245][ T5806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.874668][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.884519][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.923919][ T5806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.975235][ T5629] veth0_macvtap: entered promiscuous mode [ 91.988225][ T5806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.997067][ T5806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.001003][ T5622] veth0_macvtap: entered promiscuous mode [ 92.017208][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.041409][ T5629] veth1_macvtap: entered promiscuous mode [ 92.062960][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.071103][ T5622] veth1_macvtap: entered promiscuous mode [ 92.162979][ T5617] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.227631][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.308207][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.323910][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.342763][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.353707][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.427538][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.440090][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.448449][ T153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.467826][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.531744][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.552958][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.585266][ T153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.586250][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.605665][ T153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.612662][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.715869][ T5799] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.768490][ T5799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.791540][ T5799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.812466][ T139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.974728][ T139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.030109][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.038778][ T5799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.059027][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.201539][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.203837][ T132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.251805][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.253678][ T132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.333042][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.424277][ T5799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.436340][ T5876] Zero length message leads to an empty skb [ 93.455784][ T5799] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.525518][ T139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.536270][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.567102][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.609947][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.644901][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.668616][ T5876] process 'syz.3.13' launched '/dev/fd/3' with NULL argv: empty string added [ 93.703893][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.742434][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.753668][ T139] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.768539][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.906609][ T132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.932027][ T132] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.083193][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.135238][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.239101][ T5806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.314930][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.369458][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.414532][ T5903] zram0: detected capacity change from 0 to 8 [ 96.364777][ T5946] zram: Cannot change disksize for initialized device [ 96.643408][ T5766] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.844283][ T5766] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.884469][ T5766] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 96.923367][ T5766] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 96.974599][ T5766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.123997][ T5766] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 97.162705][ T804] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.186608][ T5766] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 97.295125][ T5766] usb 5-1: USB disconnect, device number 2 [ 97.394478][ T5766] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 97.424092][ T5766] spcp8x5 5-1:1.0: device disconnected [ 97.439913][ T5971] netlink: 36 bytes leftover after parsing attributes in process `syz.2.51'. [ 97.477269][ T5971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 97.508349][ T5971] netlink: 36 bytes leftover after parsing attributes in process `syz.2.51'. [ 98.261720][ T5984] overlayfs: missing 'lowerdir' [ 98.353457][ T5991] [ 98.356165][ T5991] ============================= [ 98.361027][ T5991] WARNING: suspicious RCU usage [ 98.366056][ T5991] syzkaller #0 Not tainted [ 98.370482][ T5991] ----------------------------- [ 98.375421][ T5991] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 98.384081][ T5991] [ 98.384081][ T5991] other info that might help us debug this: [ 98.384081][ T5991] [ 98.394682][ T5991] [ 98.394682][ T5991] rcu_scheduler_active = 2, debug_locks = 1 [ 98.402986][ T5991] 1 lock held by syz.0.59/5991: [ 98.407819][ T5991] #0: ffffffff8eb59e58 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 98.419399][ T5991] [ 98.419399][ T5991] stack backtrace: [ 98.425851][ T5991] CPU: 1 UID: 0 PID: 5991 Comm: syz.0.59 Not tainted syzkaller #0 PREEMPT(full) [ 98.425882][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.425897][ T5991] Call Trace: [ 98.425906][ T5991] [ 98.425916][ T5991] dump_stack_lvl+0xe8/0x150 [ 98.425961][ T5991] lockdep_rcu_suspicious+0x13f/0x1d0 [ 98.426007][ T5991] get_callchain_entry+0x2b6/0x3c0 [ 98.426051][ T5991] get_perf_callchain+0xd5/0x880 [ 98.426098][ T5991] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.426131][ T5991] ? __pfx_get_perf_callchain+0x10/0x10 [ 98.426173][ T5991] ? __schedule+0x17ef/0x56c0 [ 98.426211][ T5991] __bpf_get_stack+0x3e9/0xa70 [ 98.426260][ T5991] ? __pfx___bpf_get_stack+0x10/0x10 [ 98.426302][ T5991] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.426330][ T5991] ? __lock_acquire+0x683/0x2cf0 [ 98.426371][ T5991] bpf_get_stack+0x33/0x50 [ 98.426405][ T5991] ? bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 98.426430][ T5991] bpf_get_stack_raw_tp+0x1a4/0x210 [ 98.426468][ T5991] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 98.426493][ T5991] bpf_prog_run_pin_on_cpu+0x3b4/0x470 [ 98.426535][ T5991] bpf_prog_test_run_syscall+0x324/0x4c0 [ 98.426572][ T5991] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 98.426605][ T5991] ? __fget_files+0x2a/0x420 [ 98.426647][ T5991] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 98.426681][ T5991] bpf_prog_test_run+0x2c5/0x340 [ 98.426723][ T5991] __sys_bpf+0xa22/0xd90 [ 98.426765][ T5991] ? do_raw_spin_lock+0x30/0x2f0 [ 98.426794][ T5991] ? __pfx___sys_bpf+0x10/0x10 [ 98.426832][ T5991] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.426861][ T5991] ? do_futex+0x458/0x4e0 [ 98.426919][ T5991] ? rcu_is_watching+0x15/0xb0 [ 98.426944][ T5991] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.426980][ T5991] __x64_sys_bpf+0xba/0xd0 [ 98.427012][ T5991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.427040][ T5991] do_syscall_64+0x174/0x580 [ 98.427070][ T5991] ? trace_irq_disable+0x3b/0x140 [ 98.427117][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.427141][ T5991] RIP: 0033:0x7fb8f4d9e019 [ 98.427164][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.427183][ T5991] RSP: 002b:00007fb8f5c11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.427207][ T5991] RAX: ffffffffffffffda RBX: 00007fb8f5025fa0 RCX: 00007fb8f4d9e019 [ 98.427225][ T5991] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 98.427240][ T5991] RBP: 00007fb8f4e3500c R08: 0000000000000000 R09: 0000000000000000 [ 98.427255][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.427269][ T5991] R13: 00007fb8f5026038 R14: 00007fb8f5025fa0 R15: 00007ffe7d16c478 [ 98.427308][ T5991] [ 98.818919][ T5984] netlink: 'syz.1.56': attribute type 2 has an invalid length. [ 99.598203][ T5984] : entered promiscuous mode