last executing test programs: 7.273316862s ago: executing program 1 (id=2): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) 5.698379793s ago: executing program 4 (id=20): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4.520372688s ago: executing program 4 (id=22): getpeername$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000380)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r2, 0x431, 0x70bd28, 0xfffffffd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) socket(0xa, 0x3, 0x3a) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003400)={0x3c, r3, 0x431, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x18004}, 0x0) 4.15624055s ago: executing program 4 (id=23): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840), 0x0, 0x0, 0x0) 3.803060612s ago: executing program 1 (id=26): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x4040) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000006000000000000000000004085000000130000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x97, 0x0, &(0x7f0000000580)="e000000000000000000000000000aa4d1272d882f09e44f08049f7f34294751d6768143d35caf295f9be43049ebd9d9dee19617b76eee219b5415df29184859d6b21249fd019fbcf4777890b77a3fa57f5a71654e78927b6fad3e1e56222092080205146e2ebd18739447e94268a97d2ffefa8c4c73d335797c1333c46222029400ebe02d620bd0ea6a01e9c7d7615f9d0ae383f826ffe", 0x0, 0x1fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x11}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4203}, 0x94) 3.282437294s ago: executing program 1 (id=29): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) clock_gettime(0x0, &(0x7f0000005c40)) recvmmsg(r0, &(0x7f0000005a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003780)=""/17, 0x11}}], 0x1, 0x2000, 0x0) 3.021276382s ago: executing program 0 (id=30): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r2}, &(0x7f0000000340)=0x8) 3.021038161s ago: executing program 3 (id=31): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 2.706710117s ago: executing program 0 (id=33): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x2, 0x8, 0x5, 0x4, 0xd}, {0x86, 0x0, 0x7, 0x5, 0x6, 0x84}, 0x4, 0x80, 0x16c8}}, @TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd11c73e75a38de1e}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.688924561s ago: executing program 3 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r2], 0x24}}, 0x0) 2.328041166s ago: executing program 1 (id=35): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@multicast, @random="48fa4ee40a7b", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xffff7fff, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@dstopts={0x2e}]}}}}}}}, 0x0) 2.304692601s ago: executing program 3 (id=36): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x20, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 2.207744966s ago: executing program 4 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32], 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(r1, 0x0, 0x0) close(r1) 1.889795444s ago: executing program 3 (id=39): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x1}) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="0033c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x41}, @ldst={0x1, 0x3, 0x6, 0x3, 0x8, 0x80}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000002c0)="d48e5858764f755bc34d59badc14", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.884840673s ago: executing program 1 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000002c0)={0x17, 0x14, 0x8000003, 0x12, 0x4, 0x2, 0x3, 0x84, 0x1}) 1.736066688s ago: executing program 2 (id=41): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000001300", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028005000a080100000004000e"], 0x40}}, 0x0) 1.678837655s ago: executing program 4 (id=42): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) 1.573392314s ago: executing program 3 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x5, r1, 0x4}, 0x38) 1.388015934s ago: executing program 2 (id=44): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) close(0xffffffffffffffff) epoll_create1(0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b80), 0x0, 0x20000010) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) mmap(&(0x7f0000574000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) 1.353231218s ago: executing program 0 (id=45): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000013ff0000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000700000007000000bf91000000000000b7020000020000008500000085000000b700000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x60083, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000440)={0x28, 0x5, r5, 0x0, &(0x7f0000000480)='L', 0x1, 0x400000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) 1.258829786s ago: executing program 3 (id=46): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$packet(0x11, 0x2, 0x300) sendmsg(0xffffffffffffffff, 0x0, 0x844) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000004c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) getsockname$packet(r2, 0x0, 0x0) connect$rose(r2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) 1.136092145s ago: executing program 2 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 889.05951ms ago: executing program 0 (id=48): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x8, 0x1, 0x0, 0x0, 0x6], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) 870.727506ms ago: executing program 4 (id=49): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="0dd2e7", 0x3}], 0x1, 0x0) tee(r0, r2, 0xfffffffffffffffd, 0x0) 744.108399ms ago: executing program 2 (id=50): unshare(0x400) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) 605.571397ms ago: executing program 0 (id=51): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xffe) 570.537117ms ago: executing program 2 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32], 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(r1, 0x0, 0x0) close(r1) 53.478145ms ago: executing program 2 (id=53): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x86801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) connect$rds(r2, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x204, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) 0s ago: executing program 0 (id=54): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.238' (ED25519) to the list of known hosts. [ 83.831823][ T5825] cgroup: Unknown subsys name 'net' [ 83.953196][ T5825] cgroup: Unknown subsys name 'cpuset' [ 83.962540][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.636078][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.888723][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.901795][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.919210][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.929577][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.949333][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.045299][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.059179][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.071248][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.086711][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.096979][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.118547][ T5158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.127798][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.135699][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.144328][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.153019][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.161305][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.197399][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.209687][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.210039][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.217801][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.225161][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.232132][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.245095][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.280735][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.288658][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.847151][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 90.900890][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 90.945717][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 91.223191][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.231254][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.239531][ T5836] bridge_slave_0: entered allmulticast mode [ 91.251565][ T5836] bridge_slave_0: entered promiscuous mode [ 91.316877][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.324606][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.332238][ T5848] bridge_slave_0: entered allmulticast mode [ 91.340326][ T5848] bridge_slave_0: entered promiscuous mode [ 91.348107][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.355677][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.362935][ T5836] bridge_slave_1: entered allmulticast mode [ 91.370615][ T5836] bridge_slave_1: entered promiscuous mode [ 91.393816][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 91.406257][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 91.417845][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.425652][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.433459][ T5848] bridge_slave_1: entered allmulticast mode [ 91.440896][ T5848] bridge_slave_1: entered promiscuous mode [ 91.481611][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.488775][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.496423][ T5842] bridge_slave_0: entered allmulticast mode [ 91.503985][ T5842] bridge_slave_0: entered promiscuous mode [ 91.566321][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.573611][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.582380][ T5842] bridge_slave_1: entered allmulticast mode [ 91.590056][ T5842] bridge_slave_1: entered promiscuous mode [ 91.638245][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.695594][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.715420][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.727893][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.764252][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.782112][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.863831][ T5836] team0: Port device team_slave_0 added [ 91.872202][ T5836] team0: Port device team_slave_1 added [ 91.906704][ T5842] team0: Port device team_slave_0 added [ 91.930909][ T5848] team0: Port device team_slave_0 added [ 91.983074][ T5842] team0: Port device team_slave_1 added [ 91.990424][ T51] Bluetooth: hci0: command tx timeout [ 91.991075][ T1542] cfg80211: failed to load regulatory.db [ 92.004024][ T5848] team0: Port device team_slave_1 added [ 92.027423][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.035006][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.042839][ T5844] bridge_slave_0: entered allmulticast mode [ 92.051198][ T5844] bridge_slave_0: entered promiscuous mode [ 92.079794][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.087245][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.097431][ T5847] bridge_slave_0: entered allmulticast mode [ 92.105434][ T5847] bridge_slave_0: entered promiscuous mode [ 92.114858][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.122166][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.129525][ T5847] bridge_slave_1: entered allmulticast mode [ 92.137630][ T5847] bridge_slave_1: entered promiscuous mode [ 92.143648][ T51] Bluetooth: hci1: command tx timeout [ 92.174678][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.182869][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.191060][ T5844] bridge_slave_1: entered allmulticast mode [ 92.198275][ T5844] bridge_slave_1: entered promiscuous mode [ 92.219536][ T51] Bluetooth: hci2: command tx timeout [ 92.227013][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.234420][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.260529][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.277514][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.284554][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.310751][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.321376][ T51] Bluetooth: hci3: command tx timeout [ 92.350051][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.357045][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.383441][ T51] Bluetooth: hci4: command tx timeout [ 92.386978][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.442691][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.453089][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.460729][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.487666][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.500812][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.507797][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.534635][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.547518][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.555038][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.581369][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.595220][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.608722][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.637153][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.706091][ T5836] hsr_slave_0: entered promiscuous mode [ 92.712763][ T5836] hsr_slave_1: entered promiscuous mode [ 92.783760][ T5844] team0: Port device team_slave_0 added [ 92.805045][ T5847] team0: Port device team_slave_0 added [ 92.814749][ T5847] team0: Port device team_slave_1 added [ 92.826171][ T5848] hsr_slave_0: entered promiscuous mode [ 92.833344][ T5848] hsr_slave_1: entered promiscuous mode [ 92.840040][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.848335][ T5848] Cannot create hsr debugfs directory [ 92.877839][ T5844] team0: Port device team_slave_1 added [ 93.015134][ T5842] hsr_slave_0: entered promiscuous mode [ 93.023064][ T5842] hsr_slave_1: entered promiscuous mode [ 93.029656][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.037340][ T5842] Cannot create hsr debugfs directory [ 93.056069][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.063499][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.090213][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.114504][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.121968][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.148445][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.170243][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.177254][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.203506][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.233513][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.240553][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.267065][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.470861][ T5844] hsr_slave_0: entered promiscuous mode [ 93.477180][ T5844] hsr_slave_1: entered promiscuous mode [ 93.483659][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.491359][ T5844] Cannot create hsr debugfs directory [ 93.538102][ T5847] hsr_slave_0: entered promiscuous mode [ 93.544578][ T5847] hsr_slave_1: entered promiscuous mode [ 93.551662][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.559346][ T5847] Cannot create hsr debugfs directory [ 93.890018][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.903261][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.972523][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.007637][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.059408][ T51] Bluetooth: hci0: command tx timeout [ 94.101775][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.136733][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.161042][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.173070][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.220403][ T51] Bluetooth: hci1: command tx timeout [ 94.246758][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.274766][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.286471][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.299494][ T51] Bluetooth: hci2: command tx timeout [ 94.314601][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.380212][ T51] Bluetooth: hci3: command tx timeout [ 94.460845][ T51] Bluetooth: hci4: command tx timeout [ 94.467508][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.477910][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.504666][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.515221][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.607988][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.627272][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.650100][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.671343][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.706038][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.727994][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.784251][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.827948][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.835408][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.847883][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.883308][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.890506][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.933037][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.944392][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.951725][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.976349][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.983593][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.017773][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.083894][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.091237][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.125171][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.132408][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.236705][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.375607][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.405464][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.412676][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.504372][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.556416][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.563689][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.665693][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.722833][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.732604][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.739860][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.822003][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.829321][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.924417][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.075837][ T5836] veth0_vlan: entered promiscuous mode [ 96.132118][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.146401][ T51] Bluetooth: hci0: command tx timeout [ 96.173231][ T5836] veth1_vlan: entered promiscuous mode [ 96.286301][ T5848] veth0_vlan: entered promiscuous mode [ 96.300462][ T51] Bluetooth: hci1: command tx timeout [ 96.366178][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.377276][ T5848] veth1_vlan: entered promiscuous mode [ 96.394960][ T51] Bluetooth: hci2: command tx timeout [ 96.451258][ T5836] veth0_macvtap: entered promiscuous mode [ 96.465526][ T51] Bluetooth: hci3: command tx timeout [ 96.540659][ T51] Bluetooth: hci4: command tx timeout [ 96.565304][ T5836] veth1_macvtap: entered promiscuous mode [ 96.616817][ T5848] veth0_macvtap: entered promiscuous mode [ 96.634894][ T5844] veth0_vlan: entered promiscuous mode [ 96.653359][ T5848] veth1_macvtap: entered promiscuous mode [ 96.713553][ T5844] veth1_vlan: entered promiscuous mode [ 96.756244][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.780562][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.804625][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.824503][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.841231][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.874735][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.885004][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.894817][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.904655][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.925598][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.935446][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.945073][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.954332][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.006736][ T5844] veth0_macvtap: entered promiscuous mode [ 97.043967][ T5844] veth1_macvtap: entered promiscuous mode [ 97.124249][ T5847] veth0_vlan: entered promiscuous mode [ 97.163250][ T5842] veth0_vlan: entered promiscuous mode [ 97.193978][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.206309][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.227352][ T5847] veth1_vlan: entered promiscuous mode [ 97.238199][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.293901][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.308537][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.318756][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.327649][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.336833][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.348719][ T5842] veth1_vlan: entered promiscuous mode [ 97.388762][ T5847] veth0_macvtap: entered promiscuous mode [ 97.411101][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.427001][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.444879][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.452130][ T5847] veth1_macvtap: entered promiscuous mode [ 97.463307][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.530592][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.558291][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.599655][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.607618][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.633435][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.721345][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.749791][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.763716][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.773158][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.795000][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.805998][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.832306][ T5842] veth0_macvtap: entered promiscuous mode [ 97.879453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.889331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.981340][ T5842] veth1_macvtap: entered promiscuous mode [ 98.248976][ T51] Bluetooth: hci0: command tx timeout [ 98.379873][ T51] Bluetooth: hci1: command tx timeout [ 98.459871][ T51] Bluetooth: hci2: command tx timeout [ 98.540082][ T51] Bluetooth: hci3: command tx timeout [ 98.619821][ T51] Bluetooth: hci4: command tx timeout [ 98.929794][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.029306][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.213765][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.264896][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.309052][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.320440][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.436198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.480151][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.524136][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.570780][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.599145][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.654209][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.707484][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.199482][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.244817][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.360390][ T5978] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.487828][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.547934][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.230733][ T5992] fuse: Bad value for 'fd' [ 101.529587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.539412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.548538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 101.569645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.579317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.587557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.596585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.430812][ T6005] random: crng reseeded on system resumption [ 102.625930][ T6012] syz.3.21 uses obsolete (PF_INET,SOCK_PACKET) [ 104.479536][ T6038] sctp: [Deprecated]: syz.0.30 (pid 6038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.479536][ T6038] Use struct sctp_sack_info instead [ 104.833257][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.900447][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.053614][ T6048] tipc: Started in network mode [ 105.059938][ T6048] tipc: Node identity aabf679b7711, cluster identity 4711 [ 105.079409][ T6048] tipc: Enabled bearer , priority 0 [ 105.140357][ T6048] syzkaller0: entered promiscuous mode [ 105.146000][ T6048] syzkaller0: entered allmulticast mode [ 105.239456][ T6054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.291595][ T6048] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 105.309428][ T6049] fido_id[6049]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.385895][ T6052] tipc: Resetting bearer [ 105.531008][ T6045] tipc: Resetting bearer [ 105.719706][ T6045] tipc: Disabling bearer [ 106.274735][ T6075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.477680][ T6101] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 107.506420][ T6101] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 6101, name: syz.0.54 [ 107.523131][ T6101] 3 locks held by syz.0.54/6101: [ 107.528316][ T6101] #0: ffff88814ca939d8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_sendmsg+0xb97/0x2810 [ 107.541205][ T6101] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: sctp_v6_xmit+0x60f/0x12f0 [ 107.551156][ T6101] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 107.564986][ T6101] CPU: 1 UID: 0 PID: 6101 Comm: syz.0.54 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 107.565013][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.565025][ T6101] Call Trace: [ 107.565033][ T6101] [ 107.565042][ T6101] dump_stack_lvl+0x189/0x250 [ 107.565074][ T6101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.565106][ T6101] ? print_lock_name+0xde/0x100 [ 107.565140][ T6101] __cant_migrate+0x238/0x2e0 [ 107.565169][ T6101] ? __pfx___cant_migrate+0x10/0x10 [ 107.565198][ T6101] ? ip6table_mangle_hook+0x2a2/0x6c0 [ 107.565233][ T6101] ? nf_nat_ipv6_fn+0xe7/0x2d0 [ 107.565263][ T6101] nf_hook_run_bpf+0x8f/0x1f0 [ 107.565284][ T6101] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 107.565314][ T6101] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 107.565340][ T6101] ? nf_nat_ipv6_out+0x21d/0x380 [ 107.565364][ T6101] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 107.565386][ T6101] nf_hook_slow+0xc5/0x220 [ 107.565421][ T6101] nf_hook+0x217/0x380 [ 107.565455][ T6101] ? nf_hook+0x9d/0x380 [ 107.565484][ T6101] ? __pfx_nf_hook+0x10/0x10 [ 107.565510][ T6101] ? nf_hook+0x2f2/0x380 [ 107.565543][ T6101] ? __pfx_ip6_finish_output+0x10/0x10 [ 107.565570][ T6101] ? nf_hook+0x9d/0x380 [ 107.565598][ T6101] ? __pfx_nf_hook+0x10/0x10 [ 107.565635][ T6101] ip6_output+0x27d/0x3e0 [ 107.565660][ T6101] ? __pfx_ip6_finish_output+0x10/0x10 [ 107.565696][ T6101] ip6_xmit+0x107a/0x1840 [ 107.565738][ T6101] ? __pfx_ip6_xmit+0x10/0x10 [ 107.565774][ T6101] ? sctp_v6_xmit+0x60f/0x12f0 [ 107.565814][ T6101] ? sctp_v6_xmit+0x60f/0x12f0 [ 107.565841][ T6101] sctp_v6_xmit+0xa22/0x12f0 [ 107.565889][ T6101] ? __pfx_sctp_v6_xmit+0x10/0x10 [ 107.565916][ T6101] ? kasan_quarantine_put+0xdd/0x220 [ 107.565947][ T6101] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.565987][ T6101] ? kmem_cache_free+0x18f/0x400 [ 107.566022][ T6101] sctp_packet_transmit+0x2581/0x2bb0 [ 107.566096][ T6101] sctp_packet_singleton+0x233/0x330 [ 107.566124][ T6101] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 107.566160][ T6101] ? sctp_outq_select_transport+0x462/0x570 [ 107.566184][ T6101] ? sctp_transport_burst_limited+0x19c/0x280 [ 107.566215][ T6101] sctp_outq_flush+0x4f0/0x3140 [ 107.566237][ T6101] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 107.566278][ T6101] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 107.566312][ T6101] ? rcu_is_watching+0x15/0xb0 [ 107.566340][ T6101] ? __pfx_sctp_outq_flush+0x10/0x10 [ 107.566372][ T6101] ? sctp_outq_tail+0x612/0x8c0 [ 107.566392][ T6101] ? sctp_outq_uncork+0x4d/0xa0 [ 107.566415][ T6101] sctp_do_sm+0x5332/0x5a20 [ 107.566446][ T6101] ? sctp_stream_init_ext+0x57/0x180 [ 107.566465][ T6101] ? sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 107.566493][ T6101] ? sctp_sendmsg+0x1941/0x2810 [ 107.566519][ T6101] ? __sock_sendmsg+0x19c/0x270 [ 107.566551][ T6101] ? __pfx_sctp_do_sm+0x10/0x10 [ 107.566624][ T6101] ? __sk_mem_raise_allocated+0xaa9/0x1240 [ 107.566656][ T6101] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 107.566693][ T6101] sctp_sendmsg_to_asoc+0x102d/0x1810 [ 107.566741][ T6101] ? __asan_memcpy+0x40/0x70 [ 107.566779][ T6101] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 107.566829][ T6101] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 107.566859][ T6101] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 107.566887][ T6101] ? __local_bh_enable_ip+0x12d/0x1c0 [ 107.566919][ T6101] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 107.566941][ T6101] ? security_sctp_bind_connect+0x7e/0x2e0 [ 107.566970][ T6101] sctp_sendmsg+0x1941/0x2810 [ 107.567024][ T6101] ? __pfx_sctp_sendmsg+0x10/0x10 [ 107.567054][ T6101] ? __lock_acquire+0xab9/0xd20 [ 107.567097][ T6101] ? sock_rps_record_flow+0x19/0x410 [ 107.567125][ T6101] ? inet_sendmsg+0x2f4/0x370 [ 107.567153][ T6101] __sock_sendmsg+0x19c/0x270 [ 107.567182][ T6101] __sys_sendto+0x3bd/0x520 [ 107.567215][ T6101] ? __pfx___sys_sendto+0x10/0x10 [ 107.567240][ T6101] ? do_futex+0x333/0x420 [ 107.567310][ T6101] ? rcu_is_watching+0x15/0xb0 [ 107.567339][ T6101] __x64_sys_sendto+0xde/0x100 [ 107.567373][ T6101] do_syscall_64+0xfa/0x3b0 [ 107.567396][ T6101] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.567416][ T6101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.567436][ T6101] ? clear_bhb_loop+0x60/0xb0 [ 107.567462][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.567481][ T6101] RIP: 0033:0x7f8d2cb8ebe9 [ 107.567501][ T6101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.567518][ T6101] RSP: 002b:00007f8d2da7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 107.567541][ T6101] RAX: ffffffffffffffda RBX: 00007f8d2cdb5fa0 RCX: 00007f8d2cb8ebe9 [ 107.567556][ T6101] RDX: 000000000000fee4 RSI: 0000200000847fff RDI: 0000000000000005 [ 107.567570][ T6101] RBP: 00007f8d2cc11e19 R08: 000020000005ffe4 R09: 000000000000001c [ 107.567583][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.567595][ T6101] R13: 00007f8d2cdb6038 R14: 00007f8d2cdb5fa0 R15: 00007ffd581e7ff8 [ 107.567632][ T6101] [ 108.772018][ T6105] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.887100][ T6105] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98