last executing test programs: 8.810894856s ago: executing program 4 (id=5): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffff", 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) (fail_nth: 2) 8.408248282s ago: executing program 4 (id=6): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x100) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x5, {0x6, 0x7fff, 0x9, 0x6}}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000006c0)=@bridge_setlink={0x58, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x20c05}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x6b}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) ptrace(0x10, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9401070b00000083"], 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a880000000a000001340001800c0001007061796c6f616400240002800800014000000009080003400000004f08000440000000370800024000000002240001800a0001007265646972000000141002800800014000000004080002400000000c0900020073797a3200000000140000001100010000000000000000000000000a00"/176], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb70300000000b0ffb704000000000000b50005008200000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400fff8b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.207359564s ago: executing program 3 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0) 8.013613299s ago: executing program 3 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (fail_nth: 2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0) 7.535237221s ago: executing program 3 (id=9): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600000000000000000000721d5874f72c000000000200000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e40, 0x407ff) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x8000}, 0x4) r2 = socket(0x0, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) unshare(0x6020400) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001143f11002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9c653530627fd6245fa47050af6"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) r6 = socket$kcm(0x21, 0x2, 0x2) socket$nl_crypto(0x10, 0x3, 0x15) sched_setaffinity(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRESHEX=r12, @ANYBLOB="010000007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000010000108000000000000200000000000", @ANYRES32=0x0, @ANYBLOB="900000000008000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b000000000099815381194fac573178cd7d2401e5dc4a6cc8919a64429b8860d26538ec5ec68fa643a60720b232aa0a00976eca3551c785ef5cbf00f803d60c2079b9658170ce05a3861398a931b6d9981ee8"], 0x30}}, 0x4000880) sendmsg$inet(r6, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000010010000140000004404000194040100"], 0x14}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 6.966539833s ago: executing program 3 (id=10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000007740)={0x0, 0x0, &(0x7f0000007700)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x90}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000840) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bb0800bbbbbbaaaaaaaaaabb86dd6d042000003f11ff000000000000000052f01b5f815d1dbaff0200000000010000000000000000014f191b5900089078"], 0x42) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x1, 0x20, 0x4, 0x1, {{0x2e, 0x4, 0x2, 0x8, 0xb8, 0x67, 0x0, 0x1, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x39}, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x47, [@remote, @multicast2, @remote, @loopback, @multicast2, @multicast1]}, @timestamp_addr={0x44, 0x3c, 0x22, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x6}, {@rand_addr=0x64010101, 0xe70}, {@broadcast, 0x63}, {@remote, 0x9}, {@broadcast, 0x4}, {@loopback, 0xdc3e}, {@multicast1, 0x7}]}, @end, @rr={0x7, 0x23, 0x6a, [@multicast1, @multicast2, @local, @empty, @remote, @rand_addr=0x64010101, @broadcast, @empty]}, @rr={0x7, 0x17, 0x81, [@remote, @empty, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x1a}]}, @end, @generic={0x94, 0xa, "b1fd622972122e0c"}]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0xa84, 0xfffffffffffffd5a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036c12e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3d) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r5, 0x0, 0xffffffff004) 5.735082675s ago: executing program 3 (id=11): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285ee28f5aa0000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) poll(0x0, 0x0, 0x9e7) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x4) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r6, 0x8008ae9d, &(0x7f0000000100)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0xffff, 0x0, 0x400200cc6, 0x5, 0x7d, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb9, 0x8d], 0xfec00000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) 5.734199855s ago: executing program 4 (id=12): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x1000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f00008fa000/0x4000)=nil, 0x4000, 0x200000e, 0x810, r3, 0xd97de000) r4 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)="8104bb4806a55c89257907b418b56b27d0d9054b32fde224518f35d5a3b2463aab92604cdd5cc6a287cec9becdd6b53e7a6474160c6542035e1bfb946308ff576aa7d0d7f8150b865c63bf6756b06e99757f4e46ae216f061a941f39290412d25959a78965bee21c88074fe0e826f37b11499279733028d11ebf2ef6aff1db0b8b320bab27aa68b2bad1fdfef472210b7cc2485b26f1aafbedf8fa036d30f9ea1859410752843a1a2b22fb73", 0xac}, {&(0x7f0000000300)="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", 0x148}], 0x3, 0x66, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000001c0)={0x80000000, 0x0, &(0x7f0000001640)}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'veth0_to_team\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, 0x0, 0x4e) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f00000000c0)={0x1, @vbi={0x8, 0x9, 0xbb1, 0x3136564e, [0x2, 0x7], [0x3, 0x7], 0x108}}) 5.684188631s ago: executing program 2 (id=13): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3d, 0x20, 0x0, 0x300, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x6, 0x100, @void}}}}}}}, 0x0) 5.426306034s ago: executing program 1 (id=14): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x41, @mcast2, 0x41}, 0x1c, 0x0}}], 0x1, 0x0) 5.367992542s ago: executing program 2 (id=15): munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40086f52, &(0x7f0000000000)={0x4, &(0x7f00000006c0)=[{0x21, '\x00', @st={0x4, [{0x2, @svalue=0x7}, {0x3, @uvalue=0x2}, {0x1, @svalue=0x332a}, {0x1, @uvalue=0x2}]}}]}) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 5.134069981s ago: executing program 2 (id=17): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x40}, 0x1, 0x7}, 0x14) 4.996871162s ago: executing program 1 (id=18): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002740)=@delchain={0x124, 0x65, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xe8, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd8, 0x1, [@m_simple={0xa4, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x76, 0x6, "d35262dd0c45c89a36560c0300000000000000c4e5b36b25696b1c64c4f2c071726e7e7a6f7e44147f5eedb77cb5622cdc82c44a5868091abd00003861db1e4cc0646efeace4fb9c793d09ac8a0e3d23df27c65be7a4dfe2378510c4388c32d2b3a28b7cabe20d55b5f9d190247182b6079e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x30, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x600}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.891552361s ago: executing program 2 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r5, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200004, 0x0, 0x0, 0xfffffffd, 0x8003}}}}]}, 0x4c}}, 0x90) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r7, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) open(0x0, 0x280002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.496501781s ago: executing program 1 (id=20): socket$packet(0x11, 0x2, 0x300) socket(0x8000000010, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r3 = accept4(r2, 0x0, 0x0, 0x80800) write(r3, &(0x7f0000000dc0)="199b92a2315806be84fbb972947bdeead6c43c33bd4808215d71c45e5c169f22c5d895da1d05689b6cf313f72a7adb1d271c332ed8d0b2be2bd1df3e78b200e439d4f2a764ae5e2773a98007f61d", 0x4e) r4 = mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0) mq_notify(r4, 0x0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) lseek(r4, 0x0, 0x4) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB="e6798cc632435b3ab627f8a943883fd3adc6840644b9806232d5a39e5b32abaca3562cb9a359930148a8a2b27b9ab598411b3ea6b16736ae98978367196511fa5bb0912fc58128aa61c67b45a91c0406dba47b4c85702846f1825e865298f97998cce904c6d50711df9f28ee58199c60", @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006ec0)={0x2020, 0x0, 0x0}, 0xc8b) write$FUSE_INIT(r5, &(0x7f0000000000)={0x50, 0x0, r6, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50) chdir(&(0x7f0000000c80)='./file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x13) fgetxattr(0xffffffffffffffff, 0xfffffffffffffffe, &(0x7f0000000340)=""/59, 0x3b) syz_fuse_handle_req(r5, &(0x7f0000002dc0)="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", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0x0, 0xffff, 0x0, 0xf84}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x91042, 0x8) 3.445524157s ago: executing program 1 (id=21): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0xa, {{0xa, 0x4e21, 0x7, @mcast1, 0x9}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0x45080) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xfffffffffffffe84, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r3], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x1, 0x8, 0x77, 0x4, {{0x2f, 0x4, 0x1, 0x28, 0xbc, 0x68, 0x0, 0x9, 0x4, 0x0, @broadcast, @local, {[@timestamp={0x44, 0xc, 0x2d, 0x0, 0x2, [0x56, 0x0]}, @rr={0x7, 0x7, 0xa, [@local]}, @timestamp={0x44, 0x28, 0x67, 0x0, 0x6, [0x7fff, 0x7fffffff, 0xffffffff, 0x10000, 0x9, 0xbdf, 0x96, 0xfffff800, 0x1]}, @generic={0x94, 0x12, "077504d6c27ba04d35dc27ca15c3b3ec"}, @cipso={0x86, 0x58, 0x2, [{0x3, 0xa, "72aaba81abd2f894"}, {0x1, 0xd, "5af89792487d0f44d53f46"}, {0x1, 0x8, "0fe11fc0d659"}, {0x5, 0xd, "b3590656d1c3d5fc835b68"}, {0x2, 0x12, "66300b9048b235a3ee45244340726228"}, {0x1, 0x12, "3d4428d7279c0ca0a2116d57b4a458a1"}, {0x5, 0x2}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x8017, 0x8, 0x1, 0x8, {{0xf, 0x4, 0x0, 0x3f, 0x3c, 0x65, 0x0, 0x6, 0x2f, 0x0, @empty, @local, {[@rr={0x7, 0x27, 0xa3, [@multicast2, @multicast2, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @loopback]}, @noop]}}}}}) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@empty, 0x2, r10}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x8000, 0x40, 0x9, 0x6, {{0x36, 0x4, 0x1, 0x2b, 0xd8, 0x67, 0x0, 0x2, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x44, 0xf8, 0x1, 0x8, [{@local, 0x80000001}, {@broadcast, 0x828}, {@local, 0x5}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff7}, {@broadcast, 0x5}, {@empty, 0xffffffff}, {@rand_addr=0x64010100, 0xffffffff}]}, @noop, @end, @timestamp={0x44, 0xc, 0x7d, 0x0, 0x4, [0x2ac243cf, 0xa]}, @end, @cipso={0x86, 0x30, 0x3, [{0x2, 0x4, "c5d5"}, {0x6, 0x10, "d86aa79f1d2dca3a00fea21091e7"}, {0x6, 0xb, "25099eb6e3492741ef"}, {0x2, 0x2}, {0x2, 0x9, "1c5e6ce58a7124"}]}, @timestamp_prespec={0x44, 0x3c, 0x61, 0x3, 0x3, [{@multicast2, 0x7fff}, {@empty, 0x3}, {@multicast1, 0x1}, {@broadcast, 0x2}, {@multicast1, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1f8e}, {@private=0xa010100, 0x9d99}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x29, 0x7f, 0x4, 0x2, 0x8, @mcast1, @loopback, 0x7800, 0x20, 0x0, 0x6}}) r13 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r13, &(0x7f0000000080)={0x1d, r14}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x7, 0x9, 0x4b, @local, @dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x7800, 0x208d, 0x6}}) r16 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r17, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}]}}]}, 0x58}}, 0x4048000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f0000000840)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x51, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000a80)={0x4c4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r11}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8, 0x1, r18}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x723}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r20}}}]}}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) syz_emit_ethernet(0xd2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60010700009c110000000000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) 2.875262266s ago: executing program 1 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) chdir(&(0x7f0000000540)='./cgroup\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x7fffffff, 0x2) getdents64(r5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206010006000006021c0000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c000280080001400000021c0c0001800800014000000a00080006400000000405000500020000000500010006000000"], 0x6c}}, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x54}, 0x20000004) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x20200, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000090900010073797a30000000000900030073797a300000000094000000060a0104000000000000000001000000087d6ef25c42354db247b7000b40000000006c000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002d0500020007000000340001800c000100626974776973650024000280080002400000000a0800034000000001080006400000000008000140000000020900010073797a300000000014000000110001000000"], 0x108}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r1], 0xc0}, 0x1, 0x0, 0x0, 0x60040004}, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9001600120005"], 0x1b) ioctl$KVM_RUN(r6, 0xae80, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffa]}, 0x8, 0x80800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r8, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x20044000}, 0xc31fe084736598c) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, &(0x7f0000000000)) 2.842880809s ago: executing program 0 (id=23): r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x4040480) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x11, 0x6, @multicast}, 0x4c) 2.749240759s ago: executing program 4 (id=24): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async, rerun: 32) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)}, 0x62c498b2ef6edbe) (async) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.546412464s ago: executing program 0 (id=25): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x74, 0x24, 0x8, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x1ff, 0x4, 0x0, 0x2, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x2000006, 0x8, 0x2, 0xd99d}}]}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x74}}, 0x4004) sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r6, 0x2}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 2.326899203s ago: executing program 4 (id=26): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffffff, 0x0, 0xe05c0, 0x81) close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dvb_demux(0x0, 0x0, 0x101800) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x300000c, 0x10010, r1, 0x8000000) setuid(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) symlinkat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0xc9) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000000000000, &(0x7f0000000100), 0x106}}, 0x20) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000140)={0x7, 0x0, '\x00', {0x0, @bt={0x9, 0x8000, 0x0, 0x1, 0x89, 0x4c, 0x6, 0x80000001, 0xa2f, 0x7d3, 0x8, 0xe292, 0x8, 0x8, 0x0, 0x0, {0x8, 0x9a}, 0x7, 0x80}}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) io_setup(0x20fe, &(0x7f0000000540)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 2.314372405s ago: executing program 0 (id=27): socket$packet(0x11, 0x2, 0x300) unshare(0x4040480) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20004040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) 1.957133843s ago: executing program 0 (id=28): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x1, 0x80000, @loopback={0x200000000000000}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"], 0x18}, 0x1400c0c0) 1.711545567s ago: executing program 0 (id=29): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x38}, 0x1, 0x7}, 0x14) 1.640284253s ago: executing program 3 (id=30): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffffff, 0x0, 0xe05c0, 0x81) close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dvb_demux(0x0, 0x0, 0x101800) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x300000c, 0x10010, r1, 0x8000000) setuid(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) symlinkat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0xc9) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000000000000, &(0x7f0000000100), 0x106}}, 0x20) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000140)={0x7, 0x0, '\x00', {0x0, @bt={0x9, 0x8000, 0x0, 0x1, 0x89, 0x4c, 0x6, 0x80000001, 0xa2f, 0x7d3, 0x8, 0xe292, 0x8, 0x8, 0x0, 0x0, {0x8, 0x9a}, 0x7, 0x80}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) io_setup(0x20fe, &(0x7f0000000540)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 1.37964426s ago: executing program 0 (id=31): r0 = socket$inet6(0xa, 0xc00, 0x80000000) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x103e41, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x400000c, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x40000, 0xf) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b00010100000009040022120206000005240f"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x8, 0x7ff, 0x0, 0x0, 0xe, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "82daff00", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x1, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x1400c0c0) 658.564882ms ago: executing program 2 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}]]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (fail_nth: 7) 239.280238ms ago: executing program 1 (id=33): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4b564d05, 0x0, 0x168}]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791000000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) syslog(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 0s ago: executing program 2 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x4c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (fail_nth: 7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. [ 80.708266][ T5617] cgroup: Unknown subsys name 'net' [ 80.818836][ T5617] cgroup: Unknown subsys name 'cpuset' [ 80.827983][ T5617] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.484136][ T5617] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.952316][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.964456][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.973615][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.992775][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.002684][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.012286][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.013305][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.019969][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.033514][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.037755][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.050333][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.057702][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.067974][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.079338][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.087331][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.095370][ T4946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.103456][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.104919][ T4946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.119880][ T4946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.138341][ T4946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.169715][ T4946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.178148][ T4946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.190110][ T4946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.199191][ T4946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.212860][ T4946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.262918][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.270347][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.277804][ T5648] bridge_slave_0: entered allmulticast mode [ 86.285410][ T5648] bridge_slave_0: entered promiscuous mode [ 86.305690][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.312865][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.320695][ T5648] bridge_slave_1: entered allmulticast mode [ 86.328267][ T5648] bridge_slave_1: entered promiscuous mode [ 86.452408][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.460680][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.468182][ T5652] bridge_slave_0: entered allmulticast mode [ 86.475606][ T5652] bridge_slave_0: entered promiscuous mode [ 86.499484][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.511851][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.528279][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.536621][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.544147][ T5652] bridge_slave_1: entered allmulticast mode [ 86.551366][ T5652] bridge_slave_1: entered promiscuous mode [ 86.663478][ T5650] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.670897][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.678761][ T5650] bridge_slave_0: entered allmulticast mode [ 86.686141][ T5650] bridge_slave_0: entered promiscuous mode [ 86.707148][ T5648] team0: Port device team_slave_0 added [ 86.713117][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.720396][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.728032][ T5651] bridge_slave_0: entered allmulticast mode [ 86.736162][ T5651] bridge_slave_0: entered promiscuous mode [ 86.747505][ T5652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.757388][ T5650] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.764754][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.772181][ T5650] bridge_slave_1: entered allmulticast mode [ 86.779789][ T5650] bridge_slave_1: entered promiscuous mode [ 86.787172][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.794802][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.801973][ T5649] bridge_slave_0: entered allmulticast mode [ 86.809605][ T5649] bridge_slave_0: entered promiscuous mode [ 86.820445][ T5648] team0: Port device team_slave_1 added [ 86.836896][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.849270][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.856909][ T5651] bridge_slave_1: entered allmulticast mode [ 86.865119][ T5651] bridge_slave_1: entered promiscuous mode [ 86.894604][ T5652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.933449][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.943997][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.951559][ T5649] bridge_slave_1: entered allmulticast mode [ 86.959635][ T5649] bridge_slave_1: entered promiscuous mode [ 87.097066][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.109586][ T5652] team0: Port device team_slave_0 added [ 87.119781][ T5652] team0: Port device team_slave_1 added [ 87.130469][ T5650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.141603][ T4946] Bluetooth: hci0: command tx timeout [ 87.156355][ T5650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.172071][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.182305][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.190526][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.216596][ T4946] Bluetooth: hci1: command tx timeout [ 87.223714][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.234453][ T4946] Bluetooth: hci2: command tx timeout [ 87.240659][ T50] Bluetooth: hci3: command tx timeout [ 87.252874][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.292161][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.301968][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.309101][ T50] Bluetooth: hci4: command tx timeout [ 87.314616][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.340730][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.412883][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.420056][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.446301][ T5652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.460134][ T5650] team0: Port device team_slave_0 added [ 87.486331][ T5649] team0: Port device team_slave_0 added [ 87.496103][ T5649] team0: Port device team_slave_1 added [ 87.503598][ T5651] team0: Port device team_slave_0 added [ 87.510299][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.517352][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.543359][ T5652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.556220][ T5650] team0: Port device team_slave_1 added [ 87.585854][ T5651] team0: Port device team_slave_1 added [ 87.667693][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.674889][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.701089][ T5650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.713365][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.720490][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.746788][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.759568][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.766628][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.792698][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.804413][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.811475][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.837648][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.855509][ T5648] hsr_slave_0: entered promiscuous mode [ 87.862156][ T5648] hsr_slave_1: entered promiscuous mode [ 87.869749][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.876892][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.903022][ T5650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.933412][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.940579][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.967385][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.020346][ T5652] hsr_slave_0: entered promiscuous mode [ 88.027088][ T5652] hsr_slave_1: entered promiscuous mode [ 88.033477][ T5652] debugfs: 'hsr0' already exists in 'hsr' [ 88.039405][ T5652] Cannot create hsr debugfs directory [ 88.158768][ T5651] hsr_slave_0: entered promiscuous mode [ 88.165641][ T5651] hsr_slave_1: entered promiscuous mode [ 88.172439][ T5651] debugfs: 'hsr0' already exists in 'hsr' [ 88.178344][ T5651] Cannot create hsr debugfs directory [ 88.210711][ T5649] hsr_slave_0: entered promiscuous mode [ 88.217192][ T5649] hsr_slave_1: entered promiscuous mode [ 88.223389][ T5649] debugfs: 'hsr0' already exists in 'hsr' [ 88.229230][ T5649] Cannot create hsr debugfs directory [ 88.261638][ T5650] hsr_slave_0: entered promiscuous mode [ 88.268406][ T5650] hsr_slave_1: entered promiscuous mode [ 88.274895][ T5650] debugfs: 'hsr0' already exists in 'hsr' [ 88.280646][ T5650] Cannot create hsr debugfs directory [ 88.867515][ T5652] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.885928][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.894323][ T5652] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.907047][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.915347][ T5652] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.926591][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.935034][ T5652] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.945565][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.036613][ T5648] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.050426][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.063300][ T5648] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.076296][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.093423][ T5648] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.105438][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.113618][ T5648] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.126856][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.214868][ T50] Bluetooth: hci0: command tx timeout [ 89.238225][ T5651] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.249178][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.257634][ T5651] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.268449][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.277387][ T5651] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.288148][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.294340][ T50] Bluetooth: hci3: command tx timeout [ 89.295743][ T4946] Bluetooth: hci2: command tx timeout [ 89.300642][ T50] Bluetooth: hci1: command tx timeout [ 89.319524][ T5651] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.331410][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.374244][ T4946] Bluetooth: hci4: command tx timeout [ 89.430235][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.465405][ T5650] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.477111][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.487370][ T5650] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.497616][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.512606][ T5650] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.525568][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.539001][ T5650] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.549162][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.615980][ T5652] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.671055][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.678661][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.699442][ T5649] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.709921][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.720328][ T5649] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.731584][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.739939][ T5649] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.749921][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.767091][ T5649] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.777873][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.789034][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.796184][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.832483][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.930072][ T5648] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.957557][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.968153][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.975397][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.001148][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.008315][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.092666][ T5651] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.129358][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.136570][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.156480][ T5650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.173120][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.180345][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.255034][ T5650] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.265839][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.288624][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.316864][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.324091][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.368309][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.375535][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.395593][ T5649] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.442089][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.449412][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.468759][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.475964][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.489856][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.503257][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.547805][ T5652] veth0_vlan: entered promiscuous mode [ 90.597205][ T5652] veth1_vlan: entered promiscuous mode [ 90.694373][ T5648] veth0_vlan: entered promiscuous mode [ 90.719383][ T5651] veth0_vlan: entered promiscuous mode [ 90.749550][ T5648] veth1_vlan: entered promiscuous mode [ 90.760319][ T5651] veth1_vlan: entered promiscuous mode [ 90.771054][ T5652] veth0_macvtap: entered promiscuous mode [ 90.786183][ T5650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.801289][ T5652] veth1_macvtap: entered promiscuous mode [ 90.872088][ T5651] veth0_macvtap: entered promiscuous mode [ 90.885165][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.900318][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.915200][ T5648] veth0_macvtap: entered promiscuous mode [ 90.938504][ T5651] veth1_macvtap: entered promiscuous mode [ 90.948779][ T5648] veth1_macvtap: entered promiscuous mode [ 90.958590][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.992474][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.005150][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.021111][ T47] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.030548][ T47] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.051363][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.085842][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.101800][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.139683][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.170682][ T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.183642][ T5650] veth0_vlan: entered promiscuous mode [ 91.203050][ T47] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.212258][ T47] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.238227][ T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.250662][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.277821][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.288314][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.297425][ T4946] Bluetooth: hci0: command tx timeout [ 91.325595][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.335636][ T5650] veth1_vlan: entered promiscuous mode [ 91.356538][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.365451][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.379978][ T4946] Bluetooth: hci1: command tx timeout [ 91.380043][ T50] Bluetooth: hci2: command tx timeout [ 91.390962][ T5637] Bluetooth: hci3: command tx timeout [ 91.432828][ T5649] veth0_vlan: entered promiscuous mode [ 91.455610][ T5637] Bluetooth: hci4: command tx timeout [ 91.500620][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.511516][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.546489][ T3307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.555687][ T3307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.572377][ T5649] veth1_vlan: entered promiscuous mode [ 91.643582][ T5650] veth0_macvtap: entered promiscuous mode [ 91.664833][ T5652] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.680475][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.694762][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.731538][ T5650] veth1_macvtap: entered promiscuous mode [ 91.746557][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.763410][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.862734][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.879277][ T5733] FAULT_INJECTION: forcing a failure. [ 91.879277][ T5733] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.898990][ T5649] veth0_macvtap: entered promiscuous mode [ 91.908572][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.917112][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.925572][ T5733] CPU: 0 UID: 0 PID: 5733 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(full) [ 91.925598][ T5733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.925618][ T5733] Call Trace: [ 91.925630][ T5733] [ 91.925639][ T5733] dump_stack_lvl+0xe8/0x150 [ 91.925677][ T5733] should_fail_ex+0x412/0x560 [ 91.925711][ T5733] _copy_to_user+0x31/0xb0 [ 91.925750][ T5733] simple_read_from_buffer+0xe1/0x170 [ 91.925783][ T5733] proc_fail_nth_read+0x1bb/0x230 [ 91.925814][ T5733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.925845][ T5733] ? rw_verify_area+0x2a6/0x4d0 [ 91.925884][ T5733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.925914][ T5733] vfs_read+0x20c/0xa70 [ 91.925955][ T5733] ? __pfx___mutex_lock+0x10/0x10 [ 91.925979][ T5733] ? __pfx_vfs_read+0x10/0x10 [ 91.926014][ T5733] ? __fget_files+0x2a/0x420 [ 91.926044][ T5733] ? __fget_files+0x3a0/0x420 [ 91.926071][ T5733] ? __fget_files+0x2a/0x420 [ 91.926105][ T5733] ksys_read+0x150/0x270 [ 91.926137][ T5733] ? __pfx_ksys_read+0x10/0x10 [ 91.926171][ T5733] ? asm_int80_emulation+0x1a/0x20 [ 91.926197][ T5733] do_int80_emulation+0x181/0x530 [ 91.926217][ T5733] ? trace_irq_disable+0x3b/0x140 [ 91.926246][ T5733] ? asm_int80_emulation+0x1a/0x20 [ 91.926265][ T5733] ? clear_bhb_loop+0x40/0x90 [ 91.926285][ T5733] ? clear_bhb_loop+0x40/0x90 [ 91.926310][ T5733] asm_int80_emulation+0x1a/0x20 [ 91.926330][ T5733] RIP: 0023:0xf71861ab [ 91.926358][ T5733] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 91.926374][ T5733] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 91.926395][ T5733] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54465d0 [ 91.926427][ T5733] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 91.926438][ T5733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.926449][ T5733] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 91.926461][ T5733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.926492][ T5733] [ 91.973402][ T808] cfg80211: failed to load regulatory.db [ 91.985947][ T5649] veth1_macvtap: entered promiscuous mode [ 92.173243][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.269131][ T74] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.301890][ T74] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.327536][ T74] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.367206][ T74] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.416738][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.474204][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.560590][ T74] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.596026][ T74] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.645835][ T74] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.663211][ T74] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.701678][ T5746] FAULT_INJECTION: forcing a failure. [ 92.701678][ T5746] name failslab, interval 1, probability 0, space 0, times 1 [ 92.720152][ T5746] CPU: 0 UID: 0 PID: 5746 Comm: syz.3.8 Not tainted syzkaller #0 PREEMPT(full) [ 92.720180][ T5746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 92.720193][ T5746] Call Trace: [ 92.720201][ T5746] [ 92.720210][ T5746] dump_stack_lvl+0xe8/0x150 [ 92.720239][ T5746] should_fail_ex+0x412/0x560 [ 92.720274][ T5746] should_failslab+0xa8/0x100 [ 92.720308][ T5746] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 92.720338][ T5746] ? __alloc_skb+0x186/0x7d0 [ 92.720367][ T5746] ? __alloc_skb+0x1d0/0x7d0 [ 92.720394][ T5746] ? __local_bh_enable_ip+0xd0/0x130 [ 92.720421][ T5746] __alloc_skb+0x1d0/0x7d0 [ 92.720449][ T5746] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 92.720484][ T5746] netlink_sendmsg+0x5d4/0xb40 [ 92.720514][ T5746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.720560][ T5746] ? aa_sock_msg_perm+0xf1/0x1b0 [ 92.720591][ T5746] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 92.720623][ T5746] ____sys_sendmsg+0x972/0x9f0 [ 92.720652][ T5746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.720689][ T5746] ? kstrtoull+0x12f/0x1d0 [ 92.720722][ T5746] ___sys_sendmsg+0x2a5/0x360 [ 92.720741][ T5746] ? __lock_acquire+0x6b5/0x2cf0 [ 92.720768][ T5746] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.720790][ T5746] ? get_pid_task+0x20/0x1f0 [ 92.720816][ T5746] ? get_pid_task+0x20/0x1f0 [ 92.720839][ T5746] ? get_pid_task+0x20/0x1f0 [ 92.720887][ T5746] ? __fget_files+0x2a/0x420 [ 92.720910][ T5746] ? __fget_files+0x3a0/0x420 [ 92.720945][ T5746] __sys_sendmsg+0x183/0x260 [ 92.720967][ T5746] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.721021][ T5746] __do_fast_syscall_32+0x229/0x6e0 [ 92.721045][ T5746] ? do_fast_syscall_32+0x33/0x70 [ 92.721065][ T5746] ? lockdep_hardirqs_on+0x7a/0x110 [ 92.721084][ T5746] ? asm_int80_emulation+0x1a/0x20 [ 92.721104][ T5746] ? do_int80_emulation+0x286/0x530 [ 92.721125][ T5746] ? trace_irq_disable+0x3b/0x140 [ 92.721160][ T5746] do_fast_syscall_32+0x33/0x70 [ 92.721182][ T5746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.721207][ T5746] RIP: 0023:0xf6fef01c [ 92.721225][ T5746] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 92.721240][ T5746] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 92.721264][ T5746] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 92.721275][ T5746] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.721286][ T5746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.721296][ T5746] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 92.721306][ T5746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.721334][ T5746] [ 92.735499][ T5715] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.944236][ T5702] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.117406][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.126746][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.157369][ T5750] bridge_slave_0: left allmulticast mode [ 93.163088][ T5750] bridge_slave_0: left promiscuous mode [ 93.169357][ T5715] usb 5-1: Using ep0 maxpacket: 16 [ 93.171170][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.183667][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.197850][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.208941][ T5715] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 93.222382][ T5702] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.231754][ T5702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.242992][ T5715] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.248801][ T5750] bridge_slave_1: left allmulticast mode [ 93.258368][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.260654][ T5702] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 93.281147][ T5702] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 93.284806][ T5750] bridge_slave_1: left promiscuous mode [ 93.298852][ T5702] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 93.298902][ T5702] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 93.298930][ T5702] usb 1-1: config 1 interface 1 has no altsetting 0 [ 93.308208][ T5702] usb 1-1: string descriptor 0 read error: -22 [ 93.333352][ T5715] usb 5-1: config 0 descriptor?? [ 93.342659][ T5702] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 93.342688][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.371684][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.387371][ T5637] Bluetooth: hci0: command tx timeout [ 93.412526][ T5750] bond0: (slave bond_slave_0): Releasing backup interface [ 93.433095][ T5750] bond0: (slave bond_slave_1): Releasing backup interface [ 93.454638][ T5637] Bluetooth: hci3: command tx timeout [ 93.454672][ T50] Bluetooth: hci2: command tx timeout [ 93.460237][ T5637] Bluetooth: hci1: command tx timeout [ 93.470821][ T5750] team0: Port device team_slave_0 removed [ 93.486012][ T5750] team0: Port device team_slave_1 removed [ 93.493282][ T5750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.504300][ T5750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.515355][ T5750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.522888][ T5750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.535069][ T5637] Bluetooth: hci4: command tx timeout [ 93.546001][ T5750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.721741][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.741181][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.787009][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.801443][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.849625][ T5715] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 93.874643][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.887306][ T5715] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 93.900582][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.917215][ T5715] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 93.956916][ T5715] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 93.979995][ T5715] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 94.012180][ T5715] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 94.039799][ T5715] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 94.084657][ T5715] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 94.125502][ T5715] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 94.161964][ T5715] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 94.229579][ T5715] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0001/input/input5 [ 94.419514][ T5715] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 94.435203][ T5758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.516152][ T5757] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.565235][ T5715] usb 5-1: USB disconnect, device number 2 [ 94.852737][ T5702] usb 1-1: USB disconnect, device number 2 [ 94.877899][ T5759] fido_id[5759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 95.277742][ T5768] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 95.340870][ T5772] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 95.526484][ T5770] loop5: detected capacity change from 0 to 7 [ 95.852249][ T5770] Dev loop5: unable to read RDB block 7 [ 95.870004][ T5770] loop5: AHDI p1 p2 p3 p4 [ 96.047234][ T5770] loop5: partition table partially beyond EOD, truncated [ 96.100451][ T5770] loop5: p1 start 49598 is beyond EOD, truncated [ 96.144061][ T5770] loop5: p2 start 3956713404 is beyond EOD, truncated [ 96.208457][ T5770] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 96.219467][ T5779] nvme_fabrics: missing parameter 'transport=%s' [ 96.252933][ T5779] nvme_fabrics: missing parameter 'nqn=%s' [ 97.399435][ T5800] netlink: 'syz.1.21': attribute type 6 has an invalid length. [ 97.431014][ T5800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 97.543471][ T5800] sch_fq: defrate 4294967295 ignored. [ 97.914252][ T5805] Zero length message leads to an empty skb [ 98.151436][ T5813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'. [ 98.194657][ T5702] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.364066][ T5702] usb 2-1: Using ep0 maxpacket: 8 [ 98.376875][ T5702] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 98.393433][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.457375][ T5702] pvrusb2: Hardware description: Terratec Grabster AV400 [ 98.482582][ T5702] pvrusb2: ********** [ 98.517874][ T5702] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 98.541532][ T5702] pvrusb2: Important functionality might not be entirely working. [ 98.669606][ T5702] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 98.793235][ T5702] pvrusb2: ********** [ 98.812238][ T5805] netlink: 128 bytes leftover after parsing attributes in process `syz.1.22'. [ 98.955164][ T5822] bridge: RTM_NEWNEIGH with invalid ether address [ 99.028325][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 99.394558][ T2364] pvrusb2: Invalid write control endpoint [ 99.429310][ T5702] usb 2-1: USB disconnect, device number 2 [ 99.563427][ T2364] pvrusb2: Invalid write control endpoint [ 99.583012][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 99.630340][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 99.644027][ T5730] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.656884][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 99.679893][ T2364] pvrusb2: Device being rendered inoperable [ 99.729407][ T2364] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 99.746385][ T2364] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 99.772936][ T2364] pvrusb2: Attached sub-driver cx25840 [ 99.789590][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 99.818777][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 99.848637][ T5730] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.882149][ T5730] usb 1-1: config 1 interface 0 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.956428][ T5730] usb 1-1: config 1 interface 0 has no altsetting 0 [ 99.990681][ T5730] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.021284][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 100.040591][ T5730] usb 1-1: SerialNumber: syz [ 100.094974][ T5730] usb 1-1: No union descriptors [ 100.107354][ T5838] FAULT_INJECTION: forcing a failure. [ 100.107354][ T5838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.136765][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz.2.32 Not tainted syzkaller #0 PREEMPT(full) [ 100.136794][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.136808][ T5838] Call Trace: [ 100.136817][ T5838] [ 100.136826][ T5838] dump_stack_lvl+0xe8/0x150 [ 100.136856][ T5838] should_fail_ex+0x412/0x560 [ 100.136891][ T5838] _copy_from_user+0x2d/0xb0 [ 100.136924][ T5838] kstrtouint_from_user+0xd6/0x180 [ 100.136953][ T5838] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 100.136995][ T5838] proc_fail_nth_write+0x8e/0x210 [ 100.137024][ T5838] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 100.137056][ T5838] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 100.137086][ T5838] vfs_write+0x29a/0xb90 [ 100.137126][ T5838] ? __pfx_vfs_write+0x10/0x10 [ 100.137158][ T5838] ? __fget_files+0x2a/0x420 [ 100.137189][ T5838] ? __fget_files+0x3a0/0x420 [ 100.137213][ T5838] ? __fget_files+0x2a/0x420 [ 100.137249][ T5838] ksys_write+0x150/0x270 [ 100.137281][ T5838] ? __pfx_ksys_write+0x10/0x10 [ 100.137317][ T5838] ? asm_int80_emulation+0x1a/0x20 [ 100.137348][ T5838] do_int80_emulation+0x181/0x530 [ 100.137372][ T5838] ? trace_irq_disable+0x3b/0x140 [ 100.137402][ T5838] ? asm_int80_emulation+0x1a/0x20 [ 100.137421][ T5838] ? clear_bhb_loop+0x40/0x90 [ 100.137442][ T5838] ? clear_bhb_loop+0x40/0x90 [ 100.137467][ T5838] asm_int80_emulation+0x1a/0x20 [ 100.137493][ T5838] RIP: 0023:0xf71a61ab [ 100.137512][ T5838] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 100.137529][ T5838] RSP: 002b:00000000f54454bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 100.137551][ T5838] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54455d0 [ 100.137565][ T5838] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.137576][ T5838] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.137588][ T5838] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 100.137600][ T5838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.137631][ T5838] [ 100.528029][ T5833] loop6: detected capacity change from 0 to 3 [ 100.552348][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.561857][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.607038][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.616340][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.747636][ T5839] [ 100.750026][ T5839] ====================================================== [ 100.757082][ T5839] WARNING: possible circular locking dependency detected [ 100.764118][ T5839] syzkaller #0 Not tainted [ 100.768555][ T5839] ------------------------------------------------------ [ 100.775569][ T5839] syz.0.31/5839 is trying to acquire lock: [ 100.781369][ T5839] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 100.791647][ T5839] [ 100.791647][ T5839] but task is already holding lock: [ 100.799015][ T5839] ffff8880261c4190 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 100.808779][ T5839] [ 100.808779][ T5839] which lock already depends on the new lock. [ 100.808779][ T5839] [ 100.819276][ T5839] [ 100.819276][ T5839] the existing dependency chain (in reverse order) is: [ 100.828312][ T5839] [ 100.828312][ T5839] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 100.836957][ T5839] blk_alloc_queue+0x546/0x680 [ 100.842277][ T5839] __blk_mq_alloc_disk+0x197/0x390 [ 100.847937][ T5839] loop_add+0x482/0xb40 [ 100.852640][ T5839] loop_init+0xd9/0x170 [ 100.857361][ T5839] do_one_initcall+0x250/0x870 [ 100.862657][ T5839] do_initcall_level+0x104/0x190 [ 100.868153][ T5839] do_initcalls+0x59/0xa0 [ 100.873101][ T5839] kernel_init_freeable+0x2a6/0x3e0 [ 100.878830][ T5839] kernel_init+0x1d/0x1d0 [ 100.883700][ T5839] ret_from_fork+0x514/0xb70 [ 100.888860][ T5839] ret_from_fork_asm+0x1a/0x30 [ 100.894172][ T5839] [ 100.894172][ T5839] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 100.901418][ T5839] fs_reclaim_acquire+0x71/0x100 [ 100.906905][ T5839] kmem_cache_alloc_noprof+0x40/0x650 [ 100.912837][ T5839] __kernfs_iattrs+0xdf/0x320 [ 100.918042][ T5839] kernfs_iop_setattr+0xea/0x3f0 [ 100.923508][ T5839] notify_change+0xc1a/0xf40 [ 100.928617][ T5839] do_truncate+0x1c2/0x250 [ 100.933697][ T5839] path_openat+0x2f89/0x3860 [ 100.938878][ T5839] do_file_open+0x23e/0x4a0 [ 100.943919][ T5839] do_sys_openat2+0x113/0x200 [ 100.949122][ T5839] __x64_sys_openat+0x138/0x170 [ 100.954775][ T5839] do_syscall_64+0x15f/0x560 [ 100.959907][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.966342][ T5839] [ 100.966342][ T5839] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 100.974875][ T5839] __lock_acquire+0x15a5/0x2cf0 [ 100.980440][ T5839] lock_acquire+0x106/0x350 [ 100.985495][ T5839] down_read+0x47/0x2e0 [ 100.990214][ T5839] kernfs_iop_getattr+0x9e/0x450 [ 100.995721][ T5839] vfs_getattr_nosec+0x2e1/0x430 [ 101.001203][ T5839] loop_assign_backing_file+0x27a/0x4b0 [ 101.007281][ T5839] lo_ioctl+0x1acb/0x1fb0 [ 101.012215][ T5839] lo_compat_ioctl+0x324/0x3f0 [ 101.017527][ T5839] compat_blkdev_ioctl+0x5ea/0x7c0 [ 101.023173][ T5839] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 101.029170][ T5839] __do_fast_syscall_32+0x229/0x6e0 [ 101.034900][ T5839] do_fast_syscall_32+0x33/0x70 [ 101.040284][ T5839] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.047145][ T5839] [ 101.047145][ T5839] other info that might help us debug this: [ 101.047145][ T5839] [ 101.057376][ T5839] Chain exists of: [ 101.057376][ T5839] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 101.057376][ T5839] [ 101.071821][ T5839] Possible unsafe locking scenario: [ 101.071821][ T5839] [ 101.079277][ T5839] CPU0 CPU1 [ 101.084685][ T5839] ---- ---- [ 101.090170][ T5839] lock(&q->q_usage_counter(io)#23); [ 101.095606][ T5839] lock(fs_reclaim); [ 101.102131][ T5839] lock(&q->q_usage_counter(io)#23); [ 101.110157][ T5839] rlock(&root->kernfs_iattr_rwsem); [ 101.115771][ T5839] [ 101.115771][ T5839] *** DEADLOCK *** [ 101.115771][ T5839] [ 101.124006][ T5839] 3 locks held by syz.0.31/5839: [ 101.128944][ T5839] #0: ffff888026223430 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14c7/0x1fb0 [ 101.138544][ T5839] #1: ffff8880261c4190 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 101.148876][ T5839] #2: ffff8880261c41c8 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 101.159256][ T5839] [ 101.159256][ T5839] stack backtrace: [ 101.165160][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(full) [ 101.165181][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.165191][ T5839] Call Trace: [ 101.165200][ T5839] [ 101.165207][ T5839] dump_stack_lvl+0xe8/0x150 [ 101.165228][ T5839] print_circular_bug+0x2e1/0x300 [ 101.165251][ T5839] check_noncircular+0x12e/0x150 [ 101.165278][ T5839] __lock_acquire+0x15a5/0x2cf0 [ 101.165302][ T5839] ? kernfs_iop_getattr+0x9e/0x450 [ 101.165321][ T5839] lock_acquire+0x106/0x350 [ 101.165336][ T5839] ? kernfs_iop_getattr+0x9e/0x450 [ 101.165359][ T5839] down_read+0x47/0x2e0 [ 101.165376][ T5839] ? kernfs_iop_getattr+0x9e/0x450 [ 101.165395][ T5839] kernfs_iop_getattr+0x9e/0x450 [ 101.165416][ T5839] vfs_getattr_nosec+0x2e1/0x430 [ 101.165434][ T5839] loop_assign_backing_file+0x27a/0x4b0 [ 101.165469][ T5839] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 101.165495][ T5839] lo_ioctl+0x1acb/0x1fb0 [ 101.165520][ T5839] ? __pfx_lo_ioctl+0x10/0x10 [ 101.165560][ T5839] ? __lock_acquire+0x6b5/0x2cf0 [ 101.165584][ T5839] ? __lock_acquire+0x6b5/0x2cf0 [ 101.165600][ T5839] ? __lock_acquire+0x6b5/0x2cf0 [ 101.165619][ T5839] ? unwind_next_frame+0xa6/0x2550 [ 101.165642][ T5839] ? __lock_acquire+0x6b5/0x2cf0 [ 101.165665][ T5839] ? __lock_acquire+0x6b5/0x2cf0 [ 101.165682][ T5839] ? __lock_acquire+0x6b5/0x2cf0 [ 101.165698][ T5839] ? __lock_acquire+0x6b5/0x2cf0 [ 101.165716][ T5839] ? __lock_acquire+0x6b5/0x2cf0 [ 101.165732][ T5839] ? __lock_acquire+0x6b5/0x2cf0 [ 101.165751][ T5839] ? unwind_next_frame+0xa6/0x2550 [ 101.165771][ T5839] ? unwind_next_frame+0xa6/0x2550 [ 101.165789][ T5839] ? is_bpf_text_address+0x26/0x2b0 [ 101.165809][ T5839] ? is_bpf_text_address+0x26/0x2b0 [ 101.165825][ T5839] ? is_bpf_text_address+0x292/0x2b0 [ 101.165839][ T5839] ? is_bpf_text_address+0x26/0x2b0 [ 101.165855][ T5839] ? kernel_text_address+0xa5/0xe0 [ 101.165877][ T5839] ? __kernel_text_address+0xd/0x30 [ 101.165898][ T5839] ? unwind_get_return_address+0x4d/0x90 [ 101.165951][ T5839] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 101.165975][ T5839] ? arch_stack_walk+0xfb/0x150 [ 101.165999][ T5839] ? stack_trace_save+0xa9/0x100 [ 101.166023][ T5839] ? __pfx_stack_trace_save+0x10/0x10 [ 101.166045][ T5839] ? kasan_save_free_info+0x46/0x50 [ 101.166064][ T5839] ? stack_depot_save_flags+0x33/0x810 [ 101.166087][ T5839] ? kasan_save_track+0x4f/0x80 [ 101.166107][ T5839] ? kasan_save_track+0x3e/0x80 [ 101.166126][ T5839] ? kasan_save_free_info+0x46/0x50 [ 101.166142][ T5839] ? __kasan_slab_free+0x5c/0x80 [ 101.166163][ T5839] ? kfree+0x1c5/0x640 [ 101.166180][ T5839] ? tomoyo_path_number_perm+0x501/0x630 [ 101.166206][ T5839] ? security_file_ioctl_compat+0xc3/0x2a0 [ 101.166223][ T5839] ? __ia32_compat_sys_ioctl+0x139/0x950 [ 101.166249][ T5839] ? __asan_memset+0x22/0x50 [ 101.166267][ T5839] ? blk_get_meta_cap+0x16d/0x7a0 [ 101.166292][ T5839] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 101.166319][ T5839] ? blkdev_common_ioctl+0x14b7/0x3240 [ 101.166337][ T5839] lo_compat_ioctl+0x324/0x3f0 [ 101.166361][ T5839] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 101.166385][ T5839] ? kasan_quarantine_put+0xbb/0x1f0 [ 101.166408][ T5839] ? tomoyo_path_number_perm+0x219/0x630 [ 101.166426][ T5839] ? tomoyo_path_number_perm+0x219/0x630 [ 101.166446][ T5839] ? do_vfs_ioctl+0x1166/0x1530 [ 101.166470][ T5839] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 101.166497][ T5839] ? __lock_acquire+0x6b5/0x2cf0 [ 101.166523][ T5839] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 101.166547][ T5839] compat_blkdev_ioctl+0x5ea/0x7c0 [ 101.166568][ T5839] ? __fget_files+0x2a/0x420 [ 101.166588][ T5839] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 101.166604][ T5839] ? __fget_files+0x2a/0x420 [ 101.166623][ T5839] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 101.166655][ T5839] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 101.166681][ T5839] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 101.166706][ T5839] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.166728][ T5839] ? lockdep_hardirqs_on+0x7a/0x110 [ 101.166742][ T5839] ? _raw_spin_unlock_irq+0x2e/0x50 [ 101.166764][ T5839] ? __ia32_compat_sys_rt_sigprocmask+0x2c6/0x340 [ 101.166783][ T5839] ? __pfx___ia32_compat_sys_rt_sigprocmask+0x10/0x10 [ 101.166802][ T5839] ? exc_page_fault+0x6a/0xc0 [ 101.166824][ T5839] __do_fast_syscall_32+0x229/0x6e0 [ 101.166841][ T5839] ? do_fast_syscall_32+0x33/0x70 [ 101.166862][ T5839] ? irqentry_exit+0x10f/0x760 [ 101.166875][ T5839] ? trace_irq_disable+0x3b/0x140 [ 101.166907][ T5839] do_fast_syscall_32+0x33/0x70 [ 101.166923][ T5839] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.166942][ T5839] RIP: 0023:0xf701f01c [ 101.166958][ T5839] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 101.166971][ T5839] RSP: 002b:00000000f53ec50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 101.166987][ T5839] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c06 [ 101.166997][ T5839] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.167005][ T5839] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.167014][ T5839] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 101.167023][ T5839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.167037][ T5839] [ 101.214664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 101.731682][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.740949][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.750796][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.760044][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.774351][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.783830][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.791860][ T5833] ldm_validate_partition_table(): Disk read failed. [ 101.812704][ T5844] FAULT_INJECTION: forcing a failure. [ 101.812704][ T5844] name failslab, interval 1, probability 0, space 0, times 0 [ 101.845210][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.854470][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.871921][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.881199][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.892756][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz.2.34 Not tainted syzkaller #0 PREEMPT(full) [ 101.892787][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.892800][ T5844] Call Trace: [ 101.892809][ T5844] [ 101.892819][ T5844] dump_stack_lvl+0xe8/0x150 [ 101.892849][ T5844] should_fail_ex+0x412/0x560 [ 101.892883][ T5844] should_failslab+0xa8/0x100 [ 101.892920][ T5844] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 101.892952][ T5844] ? rcu_is_watching+0x15/0xb0 [ 101.892980][ T5844] ? __alloc_skb+0x1d0/0x7d0 [ 101.893012][ T5844] ? trace_irq_enable+0x3b/0x140 [ 101.893048][ T5844] __alloc_skb+0x1d0/0x7d0 [ 101.893078][ T5844] ? netlink_ack_tlv_len+0x6c/0x210 [ 101.893114][ T5844] netlink_ack+0x146/0xa50 [ 101.893145][ T5844] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.893170][ T5844] ? ref_tracker_free+0x693/0x840 [ 101.893202][ T5844] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 101.893233][ T5844] ? __pfx_nl80211_post_doit+0x10/0x10 [ 101.893265][ T5844] ? __pfx_ref_tracker_free+0x10/0x10 [ 101.893296][ T5844] ? __asan_memcpy+0x40/0x70 [ 101.893323][ T5844] ? __skb_clone+0x63/0x7a0 [ 101.893348][ T5844] netlink_rcv_skb+0x2b6/0x4b0 [ 101.893383][ T5844] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.893410][ T5844] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.893442][ T5844] ? rcu_is_watching+0x15/0xb0 [ 101.893477][ T5844] ? down_read+0x270/0x2e0 [ 101.893500][ T5844] ? genl_rcv+0xd/0x40 [ 101.893526][ T5844] genl_rcv+0x28/0x40 [ 101.893549][ T5844] netlink_unicast+0x75c/0x8e0 [ 101.893583][ T5844] netlink_sendmsg+0x813/0xb40 [ 101.893608][ T5844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.893643][ T5844] ? aa_sock_msg_perm+0xf1/0x1b0 [ 101.893673][ T5844] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 101.893679][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.893706][ T5844] ____sys_sendmsg+0x972/0x9f0 [ 101.893732][ T5844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.893885][ T5844] ? kstrtoull+0x12f/0x1d0 [ 101.893986][ T5844] ___sys_sendmsg+0x2a5/0x360 [ 101.894038][ T5844] ? get_pid_task+0x20/0x1f0 [ 101.894105][ T5844] ? rcu_is_watching+0x15/0xb0 [ 101.894186][ T5844] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.894244][ T5844] ? lock_release+0x4b/0x3c0 [ 101.894316][ T5844] ? get_pid_task+0x20/0x1f0 [ 101.894412][ T5844] ? get_pid_task+0x20/0x1f0 [ 101.894523][ T5844] ? __fget_files+0x2a/0x420 [ 101.894595][ T5844] ? __fget_files+0x3a0/0x420 [ 101.894674][ T5844] __sys_sendmsg+0x183/0x260 [ 101.894734][ T5844] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.894826][ T5844] ? rcu_is_watching+0x15/0xb0 [ 101.894907][ T5844] __do_fast_syscall_32+0x229/0x6e0 [ 101.894978][ T5844] ? do_fast_syscall_32+0x33/0x70 [ 101.895046][ T5844] ? asm_int80_emulation+0x1a/0x20 [ 101.895105][ T5844] ? do_int80_emulation+0x286/0x530 [ 101.895166][ T5844] ? trace_irq_disable+0x3b/0x140 [ 101.895277][ T5844] do_fast_syscall_32+0x33/0x70 [ 101.895345][ T5844] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.895433][ T5844] RIP: 0023:0xf7fa301c [ 101.895498][ T5844] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 101.895548][ T5844] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 101.895603][ T5844] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000c00 [ 101.895648][ T5844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.895684][ T5844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.895719][ T5844] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 101.895765][ T5844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.895833][ T5844] [ 102.134898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 102.135988][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.275676][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.284896][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.292857][ T5833] Dev loop6: unable to read RDB block 0 [ 102.299630][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.308858][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.318354][ T5833] loop6: unable to read partition table [ 102.325346][ T5833] loop6: partition table beyond EOD, truncated [ 102.345027][ T5839] ldm_validate_partition_table(): Disk read failed. [ 102.347432][ T5833] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 102.388817][ T5839] Dev loop6: unable to read RDB block 0 [ 102.412237][ T5839] loop6: unable to read partition table [ 102.445566][ T5839] loop6: partition table beyond EOD, truncated [ 102.474002][ T5839] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 102.589715][ T29] usb 1-1: USB disconnect, device number 3