last executing test programs: 2m3.289859952s ago: executing program 0 (id=642): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000002c0)={&(0x7f0000000040)=[{0x2, 0x8011, 0x0, 0x0}], 0x1}) 2m1.511180807s ago: executing program 0 (id=649): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x1}, 0x8) 2m1.262637194s ago: executing program 0 (id=651): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0a00000018000000", @ANYRES32, @ANYRES32, @ANYBLOB="e8e72ceb49722e31616478d8dc6e4715d9fdd216b2ae584ed37c9df35b0209a98f67271514c311de69"], 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000340)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x10, 0x1}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 1m58.555982431s ago: executing program 0 (id=654): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f00000002c0)='attr/prev\x00') syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x0, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) 1m54.623973537s ago: executing program 0 (id=661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1m51.911916793s ago: executing program 0 (id=668): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x8c, 0x0) r3 = syz_io_uring_setup(0x3af6, &(0x7f0000001400)={0x0, 0xd9b2, 0x1000, 0x0, 0x23b}, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000000)) kcmp(r0, r0, 0x4, r2, r3) io_setup(0x3, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m35.915618058s ago: executing program 32 (id=668): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x8c, 0x0) r3 = syz_io_uring_setup(0x3af6, &(0x7f0000001400)={0x0, 0xd9b2, 0x1000, 0x0, 0x23b}, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000000)) kcmp(r0, r0, 0x4, r2, r3) io_setup(0x3, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 16.584476s ago: executing program 3 (id=1074): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="02048e250e000000000000000000000005000600000000000a00000000000000fc0200000000000000000000000000000000000000000000020001000000000000000d000000000005000500000000000a"], 0x70}, 0x1, 0x7}, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket(0x18, 0x1, 0x2) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300), 0x111}}, 0x20) 14.471979978s ago: executing program 3 (id=1080): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs(r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0xc0105500, &(0x7f0000000000)=ANY=[]) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r5, 0x0, 0x7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3e01ffc4240c4d8f2a1c67b6a0731cccfd"], 0x1c}}, 0x20000000) recvmmsg$unix(r7, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000140)=""/126, 0x7e}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0x2, {0x2, 0xc}}, 0x0, &(0x7f00000007c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0) 14.403289574s ago: executing program 4 (id=1083): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 14.120583573s ago: executing program 4 (id=1087): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 13.049841919s ago: executing program 4 (id=1096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 10.84739673s ago: executing program 1 (id=1098): r0 = gettid() timer_create(0x7, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 9.628965975s ago: executing program 3 (id=1101): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x3, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a8064", 0xc}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 9.627728745s ago: executing program 4 (id=1102): socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0x3e8, 0x300, 0x300, 0x1f0, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = getpgid(r0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 9.413528149s ago: executing program 3 (id=1105): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a87", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000020000000c001500c405000070000000fd"], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x8, 0xfa04, 0x108, 0x6c02, 0x230, 0x194, 0x194, 0x230, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0x108, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x2], 0x0, 0x0, 0x7a}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0xfffffffc, 0x2b0, 'pptp\x00', 'syz1\x00', {0x47c}}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@cpu={{0x28}, {0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}]}, 0x38}}, 0x0) setns(r2, 0x24020000) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x2000ca6, 0x0) r8 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) unshare(0x480) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 8.218693755s ago: executing program 3 (id=1111): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs(r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0xc0105500, &(0x7f0000000000)=ANY=[]) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r5, 0x0, 0x7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3e01ffc4240c4d8f2a1c67b6a0731cccfd"], 0x1c}}, 0x20000000) recvmmsg$unix(r7, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000140)=""/126, 0x7e}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0x2, {0x2, 0xc}}, 0x0, &(0x7f00000007c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0) 7.073824722s ago: executing program 2 (id=1114): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000040)=[{0x2, 0x8011, 0x0, 0x0}], 0x1}) 6.499608877s ago: executing program 1 (id=1115): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x3, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a8064", 0xc}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 6.399313234s ago: executing program 5 (id=1117): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0xe}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) 6.371449344s ago: executing program 1 (id=1118): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e64000000", @ANYRES16=r0], 0x44}}, 0x8000) 6.225506618s ago: executing program 1 (id=1119): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM(0x23, 0x1, &(0x7f000018a000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.176007904s ago: executing program 5 (id=1120): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="02048e250e000000000000000000000005000600000000000a00000000000000fc0200000000000000000000000000000000000000000000020001000000000000000d000000000005000500000000000a"], 0x70}, 0x1, 0x7}, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket(0x18, 0x1, 0x2) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300), 0x111}}, 0x20) 6.101890768s ago: executing program 2 (id=1121): r0 = socket$netlink(0x10, 0x3, 0x2) syz_genetlink_get_family_id$batadv(0x0, r0) close_range(r0, 0xffffffffffffffff, 0x0) 5.950671533s ago: executing program 2 (id=1122): sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x40144) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x4, 0x9, 0x0, 0x0, 0xf590bbea2b5f2603}) 5.867627477s ago: executing program 4 (id=1123): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.867114408s ago: executing program 5 (id=1124): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000180), &(0x7f0000000040)=0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla', 0x5) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c, 0x0}}], 0x1, 0x24044000) recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb30}], 0x1, 0x40002042, 0x0) 5.136457255s ago: executing program 5 (id=1125): r0 = gettid() timer_create(0x7, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 5.007777951s ago: executing program 1 (id=1126): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.742730718s ago: executing program 4 (id=1127): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) setresgid(0xee00, 0xee01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) listen(0xffffffffffffffff, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) socket$nl_audit(0x10, 0x3, 0x9) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 3.839448474s ago: executing program 2 (id=1128): r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000780)=""/4096, 0x1000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) 2.655875s ago: executing program 2 (id=1129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x44, 0x20}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x6, r3}, 0x38) 2.617662954s ago: executing program 3 (id=1130): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1.43983534s ago: executing program 2 (id=1131): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, 0x0) 1.268048203s ago: executing program 1 (id=1132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000280)=0x420a, 0x4) recvmmsg(r2, &(0x7f00000005c0), 0x6a, 0x12141, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r3, 0x400, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 1.267385742s ago: executing program 5 (id=1133): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75", 0xd2}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f9376b9bd08ff4733feb589ca70432b1fed0632fa8a295da47135911f", 0x38}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7c6012b802872041cfe8c0cd3e0dc1df76772f74d964ff31e481f3c5b96de5d57b25b5e6da0643aa88c693acfefe376af4bc577a451f8000a542b421fbfdeda", 0x86}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{0x0}, {&(0x7f0000001080)="746db052af41b2750b2361b7bde26b61", 0x10}], 0x2, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x92}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x90}}, {{&(0x7f0000001240)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000001100)=[{0x0}, {&(0x7f00000023c0)="8a8648be4c0f4e1cba8b1840619b9a0923cbf9c9e8a72617e2e504549abe818ced0c93477f15975b6b27fd195a3a4401a378a1e5a709e9f341a8797020aab580ac75b83133bec3d80165bf352ecc7504f9962251f1a561761625a5a45301d2a88a2be2aeab736f41076e8646a5cff93e5b8fa1ef1430850968d743e3c547f8bbc45b04d88a8bb63ced695e762ad7b9", 0x8f}, {&(0x7f0000002480)="b5ab91163db3105215e366eb45664eb92ee14d8deb8cdfac670763e8882a6a6071042aaadc599c6f2232e1b6ea1db7c3e1b6748ff9527e3783f0007c9732084afa53b5f37f201a173b301cbfaa0c37ae7b866fc6285623c35b2071998f277f88a12fa1", 0x63}, {&(0x7f0000002500)="5aa9d040d6305795a3115a8a0bb4e7a5c3fc05e2c40575e5d7c818ab6793f3fede473ea54b4b6d5d29db4f46680c135b90008b4307a794fa9fd2c0a6d72a9f8a894cf52bf63e2ae96390cd0b3b08ff524984bf724eeace9bc6e9caebbe045ec695487633a2de1f2545ab0c2d74525d1f588287e966201492b03dab0326afab06d75a0f0b15d5f05d0f1b28f5fa5920a0d71394fbf1698230518b2e942b3499af46ce1a7c9b9f19068d7a306f6d08ce5d938524164854ad3322b0f7b3", 0xbc}], 0x4}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 5 (id=1134): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) open_by_handle_at(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\f'], 0x232040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. [ 77.713380][ T5780] cgroup: Unknown subsys name 'net' [ 77.954533][ T5780] cgroup: Unknown subsys name 'cpuset' [ 77.990199][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.603617][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.454301][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.457232][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.481902][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.491398][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.492164][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.492910][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.493500][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.495614][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.496822][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.498948][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.500867][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.502015][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.502446][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.504552][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.504987][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.505702][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.507391][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.508437][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.511853][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.514127][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.520353][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.526361][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.538090][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.584571][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.585694][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.310033][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 84.443057][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 84.554804][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 84.610844][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 84.640348][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 84.666483][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.667552][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.667773][ T5798] bridge_slave_0: entered allmulticast mode [ 84.669430][ T5798] bridge_slave_0: entered promiscuous mode [ 84.719498][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.719962][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.720136][ T5798] bridge_slave_1: entered allmulticast mode [ 84.722492][ T5798] bridge_slave_1: entered promiscuous mode [ 84.851536][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.851723][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.851921][ T5796] bridge_slave_0: entered allmulticast mode [ 84.853458][ T5796] bridge_slave_0: entered promiscuous mode [ 84.867049][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.899717][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.899855][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.900036][ T5796] bridge_slave_1: entered allmulticast mode [ 84.901409][ T5796] bridge_slave_1: entered promiscuous mode [ 84.915900][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.979051][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.979176][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.979278][ T5795] bridge_slave_0: entered allmulticast mode [ 84.982152][ T5795] bridge_slave_0: entered promiscuous mode [ 85.041544][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.041673][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.042263][ T5795] bridge_slave_1: entered allmulticast mode [ 85.043638][ T5795] bridge_slave_1: entered promiscuous mode [ 85.085542][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.085778][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.085875][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.086018][ T5794] bridge_slave_0: entered allmulticast mode [ 85.088057][ T5794] bridge_slave_0: entered promiscuous mode [ 85.093965][ T5798] team0: Port device team_slave_0 added [ 85.119973][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.120085][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.120302][ T5797] bridge_slave_0: entered allmulticast mode [ 85.122794][ T5797] bridge_slave_0: entered promiscuous mode [ 85.131205][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.133737][ T5798] team0: Port device team_slave_1 added [ 85.154393][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.154524][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.154705][ T5797] bridge_slave_1: entered allmulticast mode [ 85.157003][ T5797] bridge_slave_1: entered promiscuous mode [ 85.403036][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.444145][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.444255][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.444411][ T5794] bridge_slave_1: entered allmulticast mode [ 85.446295][ T5794] bridge_slave_1: entered promiscuous mode [ 85.451229][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.473917][ T5796] team0: Port device team_slave_0 added [ 85.476042][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.476057][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.476081][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.520714][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.524114][ T5796] team0: Port device team_slave_1 added [ 85.524839][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.524851][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.524874][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.552519][ T60] Bluetooth: hci4: command tx timeout [ 85.568091][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.603980][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.607462][ T5795] team0: Port device team_slave_0 added [ 85.629879][ T60] Bluetooth: hci0: command tx timeout [ 85.630046][ T60] Bluetooth: hci3: command tx timeout [ 85.630121][ T60] Bluetooth: hci1: command tx timeout [ 85.630189][ T60] Bluetooth: hci2: command tx timeout [ 85.656262][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.658648][ T5795] team0: Port device team_slave_1 added [ 85.679883][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.679899][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.679924][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.734837][ T5797] team0: Port device team_slave_0 added [ 85.735581][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.735594][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.735625][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.792551][ T5797] team0: Port device team_slave_1 added [ 85.810251][ T5798] hsr_slave_0: entered promiscuous mode [ 85.811197][ T5798] hsr_slave_1: entered promiscuous mode [ 85.813683][ T5794] team0: Port device team_slave_0 added [ 85.814422][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.814434][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.814457][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.840627][ T5794] team0: Port device team_slave_1 added [ 85.841566][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.841578][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.841603][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.895208][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.895224][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.895247][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.956459][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.956474][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.956498][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.005580][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.005597][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.005620][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.017292][ T5796] hsr_slave_0: entered promiscuous mode [ 86.018474][ T5796] hsr_slave_1: entered promiscuous mode [ 86.019512][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 86.021515][ T5796] Cannot create hsr debugfs directory [ 86.058757][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.058773][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.058797][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.117097][ T5795] hsr_slave_0: entered promiscuous mode [ 86.118267][ T5795] hsr_slave_1: entered promiscuous mode [ 86.119171][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 86.119194][ T5795] Cannot create hsr debugfs directory [ 86.216709][ T5797] hsr_slave_0: entered promiscuous mode [ 86.217491][ T5797] hsr_slave_1: entered promiscuous mode [ 86.217993][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 86.218010][ T5797] Cannot create hsr debugfs directory [ 86.302343][ T5794] hsr_slave_0: entered promiscuous mode [ 86.303140][ T5794] hsr_slave_1: entered promiscuous mode [ 86.303653][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 86.303671][ T5794] Cannot create hsr debugfs directory [ 86.842167][ T9] cfg80211: failed to load regulatory.db [ 87.228878][ T5798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.287599][ T5798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.305693][ T5798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.356895][ T5798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.451330][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.488484][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.506587][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.557510][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.640992][ T5809] Bluetooth: hci4: command tx timeout [ 87.659762][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.686162][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.709803][ T5809] Bluetooth: hci2: command tx timeout [ 87.709833][ T5809] Bluetooth: hci1: command tx timeout [ 87.709850][ T5809] Bluetooth: hci3: command tx timeout [ 87.709867][ T5809] Bluetooth: hci0: command tx timeout [ 87.764383][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.821177][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.924842][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.957717][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.998109][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.053855][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.185213][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.224057][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.257214][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.297994][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.347262][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.428674][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.444904][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.469510][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.471224][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.502963][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.503293][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.538213][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.555043][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.578998][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.579144][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.613956][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.614079][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.672330][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.675432][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.713727][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.713801][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.746796][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.746914][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.790462][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.833738][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.873403][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.873644][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.918678][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.918805][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.977872][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.016402][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.016612][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.076173][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.076336][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.280729][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.513806][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.691618][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.719747][ T60] Bluetooth: hci4: command tx timeout [ 89.789406][ T5796] veth0_vlan: entered promiscuous mode [ 89.790208][ T60] Bluetooth: hci0: command tx timeout [ 89.790233][ T60] Bluetooth: hci3: command tx timeout [ 89.790253][ T60] Bluetooth: hci1: command tx timeout [ 89.790271][ T60] Bluetooth: hci2: command tx timeout [ 89.887089][ T5796] veth1_vlan: entered promiscuous mode [ 89.923923][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.968784][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.982239][ T5795] veth0_vlan: entered promiscuous mode [ 90.024130][ T5795] veth1_vlan: entered promiscuous mode [ 90.046323][ T5796] veth0_macvtap: entered promiscuous mode [ 90.073348][ T5796] veth1_macvtap: entered promiscuous mode [ 90.117932][ T5798] veth0_vlan: entered promiscuous mode [ 90.129362][ T5797] veth0_vlan: entered promiscuous mode [ 90.159280][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.178192][ T5798] veth1_vlan: entered promiscuous mode [ 90.184001][ T5794] veth0_vlan: entered promiscuous mode [ 90.194793][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.195330][ T5797] veth1_vlan: entered promiscuous mode [ 90.198893][ T5795] veth0_macvtap: entered promiscuous mode [ 90.248573][ T5795] veth1_macvtap: entered promiscuous mode [ 90.256438][ T3525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.275144][ T3525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.277785][ T5794] veth1_vlan: entered promiscuous mode [ 90.289971][ T3525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.301260][ T3525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.415075][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.492651][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.495499][ T5798] veth0_macvtap: entered promiscuous mode [ 90.522233][ T5797] veth0_macvtap: entered promiscuous mode [ 90.547093][ T5798] veth1_macvtap: entered promiscuous mode [ 90.558026][ T97] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.559072][ T5797] veth1_macvtap: entered promiscuous mode [ 90.592291][ T97] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.611749][ T97] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.617257][ T5794] veth0_macvtap: entered promiscuous mode [ 90.618355][ T97] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.650946][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.650970][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.706790][ T5794] veth1_macvtap: entered promiscuous mode [ 90.764384][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.800941][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.845636][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.886633][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.897692][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.897712][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.950935][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.954393][ T3525] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.977881][ T3525] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.992651][ T3525] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.004941][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.007391][ T3525] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.009744][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.009761][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.016366][ T3525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.017223][ T3525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.019404][ T3525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.026500][ T3525] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.117824][ T3525] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.135085][ T3525] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.138421][ T3525] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.148460][ T3525] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.314804][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.314823][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.114664][ T5809] Bluetooth: hci4: command tx timeout [ 92.114699][ T5809] Bluetooth: hci2: command tx timeout [ 92.114719][ T5809] Bluetooth: hci1: command tx timeout [ 92.114739][ T5809] Bluetooth: hci3: command tx timeout [ 92.114759][ T5809] Bluetooth: hci0: command tx timeout [ 92.399725][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.399744][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.582867][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 92.591587][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.591607][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.698313][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.698333][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.765417][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.765436][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.881934][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.881955][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.117633][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.117654][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.847135][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 93.849121][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.185479][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.307750][ T5940] input: syz0 as /devices/virtual/input/input7 [ 95.675424][ T5950] input: syz0 as /devices/virtual/input/input8 [ 96.987482][ T5965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.987499][ T5965] IPv6: NLM_F_CREATE should be set when creating new route [ 97.304188][ T5972] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.322534][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.324043][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.807813][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.821481][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.849729][ T97] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.859785][ T97] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.901208][ T97] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.909000][ T97] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.974253][ T6017] input: syz0 as /devices/virtual/input/input9 [ 107.182556][ T6044] syz.0.40 (6044) used greatest stack depth: 17248 bytes left [ 111.764416][ T6082] syz.1.53 uses obsolete (PF_INET,SOCK_PACKET) [ 113.807524][ T6103] input: syz0 as /devices/virtual/input/input10 [ 114.446772][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.63'. [ 114.456182][ T6117] netlink: 'syz.3.64': attribute type 30 has an invalid length. [ 114.456202][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 114.467473][ T6117] bond0: option arp_missed_max: invalid value (0) [ 114.467497][ T6117] bond0: option arp_missed_max: allowed values 1 - 255 [ 114.573072][ T6115] bond1 (unregistering): Released all slaves [ 115.016315][ T6124] trusted_key: syz.4.66 sent an empty control message without MSG_MORE. [ 115.501395][ T6140] Illegal XDP return value 4294964480 on prog (id 8) dev syz_tun, expect packet loss! [ 115.753783][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77'. [ 115.823032][ T6145] bond1 (unregistering): Released all slaves [ 117.769529][ T6177] lo speed is unknown, defaulting to 1000 [ 117.780746][ T6177] lo speed is unknown, defaulting to 1000 [ 117.810170][ T6177] lo speed is unknown, defaulting to 1000 [ 117.920901][ T6177] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 118.360322][ T6177] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 119.212059][ T6195] TCP: TCP_TX_DELAY enabled [ 119.373553][ T6177] lo speed is unknown, defaulting to 1000 [ 119.405806][ T6177] lo speed is unknown, defaulting to 1000 [ 119.417605][ T6199] netlink: 'syz.4.90': attribute type 1 has an invalid length. [ 119.451434][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 119.451488][ T6199] netlink: 'syz.4.90': attribute type 1 has an invalid length. [ 119.451573][ T6177] lo speed is unknown, defaulting to 1000 [ 119.493035][ T6199] vxlan0: entered promiscuous mode [ 119.503073][ T6177] lo speed is unknown, defaulting to 1000 [ 119.505708][ T6177] lo speed is unknown, defaulting to 1000 [ 119.509482][ T6177] lo speed is unknown, defaulting to 1000 [ 120.023721][ T6214] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.505755][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 121.735153][ T6232] netlink: 'syz.3.103': attribute type 1 has an invalid length. [ 121.796490][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 121.937820][ T6232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.854943][ T6244] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.105'. [ 125.162571][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.114'. [ 125.162775][ T6266] veth0_macvtap: left promiscuous mode [ 125.508038][ T6270] netlink: 'syz.4.116': attribute type 1 has an invalid length. [ 125.518106][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.116'. [ 127.660883][ T6285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.122'. [ 127.661925][ T6285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.122'. [ 127.825091][ T6287] input: syz0 as /devices/virtual/input/input14 [ 128.134907][ T6298] netlink: 'syz.3.127': attribute type 1 has an invalid length. [ 128.161650][ T6303] netlink: 'syz.0.129': attribute type 6 has an invalid length. [ 128.161671][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 128.274168][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 128.313578][ T6298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.902312][ T6325] netlink: 'syz.3.137': attribute type 30 has an invalid length. [ 130.902333][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 130.902357][ T6325] bond0: option arp_missed_max: invalid value (0) [ 130.902374][ T6325] bond0: option arp_missed_max: allowed values 1 - 255 [ 132.924970][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.925062][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.269613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.580413][ T6354] lo speed is unknown, defaulting to 1000 [ 133.580476][ T6354] lo speed is unknown, defaulting to 1000 [ 133.581198][ T6354] lo speed is unknown, defaulting to 1000 [ 133.724331][ T6354] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 133.743335][ T6356] netlink: 'syz.1.149': attribute type 27 has an invalid length. [ 133.743356][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 133.743378][ T6356] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 133.873305][ T6354] lo speed is unknown, defaulting to 1000 [ 133.876033][ T6354] lo speed is unknown, defaulting to 1000 [ 133.878685][ T6354] lo speed is unknown, defaulting to 1000 [ 133.948194][ T6354] lo speed is unknown, defaulting to 1000 [ 133.980786][ T6354] lo speed is unknown, defaulting to 1000 [ 136.917523][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 136.918713][ T6384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.817422][ T6384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.285215][ T6394] netlink: 'syz.2.163': attribute type 27 has an invalid length. [ 138.285235][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 138.369836][ T6394] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 138.471150][ T6400] syzkaller0: entered promiscuous mode [ 138.471175][ T6400] syzkaller0: entered allmulticast mode [ 138.629193][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 138.629226][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 139.907955][ T6419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.174'. [ 139.907995][ T6419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.174'. [ 140.736987][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'. [ 142.051489][ T5909] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 142.604254][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 143.904472][ T6502] trusted_key: encrypted_key: insufficient parameters specified [ 145.859623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.869627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.879625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.889623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.899640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.909625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.919624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.929629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.939622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 146.552318][ T5909] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.589687][ T5909] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 146.589723][ T5909] usb 1-1: can't read configurations, error -71 [ 147.669719][ T5909] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 147.822181][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 147.822217][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1544, setting to 1024 [ 147.822255][ T5909] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0b, bcdDevice= 0.00 [ 147.822275][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.907093][ T5909] usb 1-1: config 0 descriptor?? [ 147.914672][ T6518] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.234535][ T5909] corsair-psu 0003:1B1C:1C0B.0001: unknown main item tag 0x0 [ 149.234576][ T5909] corsair-psu 0003:1B1C:1C0B.0001: unknown main item tag 0x0 [ 149.234601][ T5909] corsair-psu 0003:1B1C:1C0B.0001: unknown main item tag 0x0 [ 149.234626][ T5909] corsair-psu 0003:1B1C:1C0B.0001: unknown main item tag 0x0 [ 149.234650][ T5909] corsair-psu 0003:1B1C:1C0B.0001: unknown main item tag 0x0 [ 149.234674][ T5909] corsair-psu 0003:1B1C:1C0B.0001: unknown main item tag 0x0 [ 149.234698][ T5909] corsair-psu 0003:1B1C:1C0B.0001: unknown main item tag 0x0 [ 149.234723][ T5909] corsair-psu 0003:1B1C:1C0B.0001: unknown main item tag 0x0 [ 149.234747][ T5909] corsair-psu 0003:1B1C:1C0B.0001: unknown main item tag 0x0 [ 149.234771][ T5909] corsair-psu 0003:1B1C:1C0B.0001: unknown main item tag 0x0 [ 150.260934][ T5909] corsair-psu 0003:1B1C:1C0B.0001: hidraw0: USB HID v7f.fd Device [HID 1b1c:1c0b] on usb-dummy_hcd.0-1/input0 [ 150.399506][ T5909] corsair-psu 0003:1B1C:1C0B.0001: unable to initialize device (-71) [ 150.472486][ T5909] corsair-psu 0003:1B1C:1C0B.0001: probe with driver corsair-psu failed with error -71 [ 150.516721][ T5909] usb 1-1: USB disconnect, device number 3 [ 150.836262][ T6540] fido_id[6540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 153.895836][ T6595] siw: device registration error -23 [ 156.012737][ T6599] syzkaller0: entered promiscuous mode [ 156.012765][ T6599] syzkaller0: entered allmulticast mode [ 157.041094][ T6616] netlink: 'syz.1.212': attribute type 27 has an invalid length. [ 157.041115][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 157.041139][ T6616] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 158.105898][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'. [ 158.131668][ T6627] siw: device registration error -23 [ 161.944276][ T6662] netlink: 'syz.1.226': attribute type 27 has an invalid length. [ 161.944297][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'. [ 161.944319][ T6662] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 162.136454][ T6666] siw: device registration error -23 [ 162.689849][ T5806] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 163.579660][ T5806] usb 5-1: Using ep0 maxpacket: 16 [ 163.582294][ T5806] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.582319][ T5806] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.594392][ T5806] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.594419][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.594436][ T5806] usb 5-1: Product: syz [ 163.594447][ T5806] usb 5-1: Manufacturer: syz [ 163.594459][ T5806] usb 5-1: SerialNumber: syz [ 163.878110][ T5806] usb 5-1: 0:2 : does not exist [ 163.907901][ T5806] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 163.980231][ T6689] netlink: 'syz.0.239': attribute type 30 has an invalid length. [ 163.980251][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 163.980274][ T6689] bond0: option arp_missed_max: invalid value (0) [ 163.980291][ T6689] bond0: option arp_missed_max: allowed values 1 - 255 [ 164.047317][ T5806] usb 5-1: USB disconnect, device number 2 [ 164.150331][ T6237] udevd[6237]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.689713][ T5856] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 164.848359][ T5856] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.848385][ T5856] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 164.848426][ T5856] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.875058][ T5856] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.875087][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.875105][ T5856] usb 1-1: Product: syz [ 164.875118][ T5856] usb 1-1: Manufacturer: syz [ 164.875131][ T5856] usb 1-1: SerialNumber: syz [ 165.599307][ T5856] usb 1-1: USB disconnect, device number 4 [ 170.079761][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 170.229741][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 170.232560][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.232583][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.235616][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.235643][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.235661][ T10] usb 4-1: Product: syz [ 170.235674][ T10] usb 4-1: Manufacturer: syz [ 170.235687][ T10] usb 4-1: SerialNumber: syz [ 170.560682][ T10] usb 4-1: 0:2 : does not exist [ 170.580384][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 170.715582][ T10] usb 4-1: USB disconnect, device number 2 [ 170.825864][ T6237] udevd[6237]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.651480][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 172.698968][ T6791] siw: device registration error -23 [ 174.015921][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.278'. [ 174.033701][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 177.548352][ T6848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.291'. [ 177.548705][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 178.018757][ T6861] siw: device registration error -23 [ 178.408971][ T6873] IPVS: Scheduler module ip_vs_sip not found [ 181.623773][ T6953] netlink: 'syz.1.317': attribute type 27 has an invalid length. [ 181.623794][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 181.623817][ T6953] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 182.634610][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.321'. [ 182.655958][ T6975] siw: device registration error -23 [ 182.684822][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 182.889893][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 182.889918][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 183.051837][ T6990] netlink: 'syz.3.328': attribute type 30 has an invalid length. [ 183.051857][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 183.051881][ T6990] bond0: option arp_missed_max: invalid value (0) [ 183.051897][ T6990] bond0: option arp_missed_max: allowed values 1 - 255 [ 183.484690][ T7002] siw: device registration error -23 [ 183.556318][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.336'. [ 183.556890][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.336'. [ 183.639788][ T60] block nbd0: Receive control failed (result -32) [ 184.150951][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 184.150983][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 184.375068][ T7024] netlink: 'syz.3.342': attribute type 30 has an invalid length. [ 184.375089][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 184.375114][ T7024] bond0: option arp_missed_max: invalid value (0) [ 184.375130][ T7024] bond0: option arp_missed_max: allowed values 1 - 255 [ 184.683753][ T7033] siw: device registration error -23 [ 184.835354][ T7038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.769683][ T3208] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 185.919747][ T3208] usb 1-1: Using ep0 maxpacket: 16 [ 185.941670][ T3208] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 185.941698][ T3208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.941716][ T3208] usb 1-1: Product: syz [ 185.941728][ T3208] usb 1-1: Manufacturer: syz [ 185.941741][ T3208] usb 1-1: SerialNumber: syz [ 186.029536][ T3208] usb 1-1: config 0 descriptor?? [ 186.066569][ T7086] netlink: 'syz.1.355': attribute type 27 has an invalid length. [ 186.066598][ T7086] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 186.580723][ T3208] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 186.648244][ T3208] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 186.668010][ T3208] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 186.668219][ T3208] usb 1-1: media controller created [ 186.716037][ T3208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.329287][ T3208] zl10353_read_register: readreg error (reg=127, ret==0) [ 187.329351][ T3208] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 187.329368][ T3208] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 187.329484][ T7059] dtv5100: wlen = 0, aborting. [ 187.381623][ T3208] usb 1-1: USB disconnect, device number 5 [ 187.447895][ T3208] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 188.051169][ T7127] ======================================================= [ 188.051169][ T7127] WARNING: The mand mount option has been deprecated and [ 188.051169][ T7127] and is ignored by this kernel. Remove the mand [ 188.051169][ T7127] option from the mount to silence this warning. [ 188.051169][ T7127] ======================================================= [ 188.055848][ T7127] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 188.198545][ T7133] siw: device registration error -23 [ 188.918496][ T7161] __nla_validate_parse: 4 callbacks suppressed [ 188.918519][ T7161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.377'. [ 188.919102][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 190.949766][ T7193] overlayfs: failed to clone lowerpath [ 191.970149][ T7213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.388'. [ 191.973293][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 192.802870][ T7228] Zero length message leads to an empty skb [ 193.834955][ T7234] siw: device registration error -23 [ 194.647468][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.658751][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.215946][ T7267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.401'. [ 195.216381][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 196.823901][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 196.872353][ T7287] netlink: 48 bytes leftover after parsing attributes in process `syz.2.411'. [ 198.730172][ T7303] netlink: 64 bytes leftover after parsing attributes in process `syz.2.414'. [ 198.732210][ T7302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.415'. [ 198.732598][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 201.393982][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 201.464684][ T7330] netlink: 48 bytes leftover after parsing attributes in process `syz.1.422'. [ 201.732207][ T7339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.428'. [ 201.734125][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 203.224717][ T7372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.440'. [ 203.225072][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 205.385228][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 205.433188][ T7397] macvtap1: entered promiscuous mode [ 205.433210][ T7397] erspan0: entered promiscuous mode [ 205.433371][ T7397] macvtap1: entered allmulticast mode [ 205.433384][ T7397] erspan0: entered allmulticast mode [ 205.645771][ T7400] netlink: 112 bytes leftover after parsing attributes in process `syz.1.452'. [ 206.681428][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 206.681482][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 207.082019][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 207.102616][ T5802] Bluetooth: hci3: command 0x0406 tx timeout [ 207.102658][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 207.102704][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 207.180604][ T7430] macvtap2: entered promiscuous mode [ 207.180803][ T7430] macvtap2: entered allmulticast mode [ 213.280432][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.484'. [ 213.303067][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 213.303102][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 214.277791][ T7508] bridge2: port 1(bond1) entered blocking state [ 214.278009][ T7508] bridge2: port 1(bond1) entered disabled state [ 214.278220][ T7508] bond1: entered allmulticast mode [ 214.281375][ T7508] bond1: entered promiscuous mode [ 216.300177][ T7549] netlink: 120 bytes leftover after parsing attributes in process `syz.4.492'. [ 219.018038][ T7594] netlink: 'syz.0.505': attribute type 30 has an invalid length. [ 219.018057][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 219.153795][ T7594] bond0: option arp_missed_max: invalid value (0) [ 219.153820][ T7594] bond0: option arp_missed_max: allowed values 1 - 255 [ 219.669318][ T7600] netlink: 120 bytes leftover after parsing attributes in process `syz.3.507'. [ 221.929527][ T7638] netlink: 'syz.0.521': attribute type 30 has an invalid length. [ 221.929546][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 221.929685][ T7638] bond0: option arp_missed_max: invalid value (0) [ 221.929702][ T7638] bond0: option arp_missed_max: allowed values 1 - 255 [ 223.605942][ T7666] siw: device registration error -23 [ 224.862466][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.537'. [ 224.946439][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 225.546196][ T7684] bridge3: port 1(bond1) entered blocking state [ 225.546339][ T7684] bridge3: port 1(bond1) entered disabled state [ 225.546554][ T7684] bond1: entered allmulticast mode [ 225.579154][ T7684] bond1: entered promiscuous mode [ 227.651075][ T7730] IPVS: Scheduler module ip_vs_sip not found [ 235.677747][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.583'. [ 235.788808][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 236.680583][ T7853] bridge2: port 1(bond1) entered blocking state [ 236.680710][ T7853] bridge2: port 1(bond1) entered disabled state [ 236.680965][ T7853] bond1: entered allmulticast mode [ 236.694443][ T7853] bond1: entered promiscuous mode [ 237.094403][ T7864] siw: device registration error -23 [ 239.837073][ T7892] netlink: 32 bytes leftover after parsing attributes in process `syz.3.597'. [ 240.589919][ T5855] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 240.871779][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.871828][ T5855] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 240.871850][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.876994][ T5855] usb 5-1: config 0 descriptor?? [ 244.263880][ T5855] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 244.296484][ T5855] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input16 [ 245.405435][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 245.513429][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 247.103185][ T5855] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 247.111277][ T5855] usb 5-1: USB disconnect, device number 3 [ 248.023839][ T7983] fido_id[7983]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 248.293442][ T7990] lo speed is unknown, defaulting to 1000 [ 248.479843][ T5951] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 248.658243][ T5951] usb 4-1: config 0 has no interfaces? [ 248.673854][ T5951] usb 4-1: config 0 has no interfaces? [ 248.679048][ T5951] usb 4-1: config 0 has no interfaces? [ 248.702389][ T5951] usb 4-1: string descriptor 0 read error: -22 [ 248.702528][ T5951] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 248.702550][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.773314][ T5951] usb 4-1: config 0 descriptor?? [ 249.707633][ T5855] usb 4-1: USB disconnect, device number 3 [ 255.960654][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.960720][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.573057][ T8132] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 265.719776][ T5855] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 265.883932][ T5855] usb 5-1: Using ep0 maxpacket: 16 [ 265.903030][ T5855] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.903056][ T5855] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.960029][ T5855] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.960059][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.960078][ T5855] usb 5-1: Product: syz [ 265.960092][ T5855] usb 5-1: Manufacturer: syz [ 265.960105][ T5855] usb 5-1: SerialNumber: syz [ 266.354799][ T5855] usb 5-1: 0:2 : does not exist [ 266.365228][ T5855] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 267.419451][ T5855] usb 5-1: USB disconnect, device number 4 [ 267.458102][ T5810] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 267.458147][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 267.458170][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 267.458182][ T5810] Workqueue: hci2 hci_rx_work [ 267.458226][ T5810] Call Trace: [ 267.458239][ T5810] [ 267.458248][ T5810] dump_stack_lvl+0xe8/0x150 [ 267.458281][ T5810] sysfs_create_dir_ns+0x271/0x2a0 [ 267.458305][ T5810] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 267.458333][ T5810] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 267.458357][ T5810] ? rt_spin_unlock+0x160/0x200 [ 267.458384][ T5810] kobject_add_internal+0x631/0xd10 [ 267.458411][ T5810] kobject_add+0x163/0x240 [ 267.458434][ T5810] ? __pfx_kobject_add+0x10/0x10 [ 267.458458][ T5810] ? get_device_parent+0x370/0x3a0 [ 267.458482][ T5810] device_add+0x408/0xb80 [ 267.458503][ T5810] hci_conn_add_sysfs+0xd5/0x210 [ 267.458530][ T5810] le_conn_complete_evt+0x10e6/0x16b0 [ 267.458557][ T5810] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 267.458576][ T5810] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 267.458593][ T5810] ? lockdep_hardirqs_on+0x7a/0x110 [ 267.458611][ T5810] ? skb_pull_data+0xfb/0x200 [ 267.458635][ T5810] hci_le_conn_complete_evt+0x187/0x470 [ 267.458660][ T5810] hci_event_packet+0x659/0xef0 [ 267.458689][ T5810] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 267.458710][ T5810] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 267.458727][ T5810] ? __pfx_hci_event_packet+0x10/0x10 [ 267.458750][ T5810] ? rt_spin_unlock+0x14f/0x200 [ 267.458778][ T5810] ? hci_send_to_monitor+0xe2/0x590 [ 267.458801][ T5810] hci_rx_work+0x3ee/0x1030 [ 267.458821][ T5810] ? process_scheduled_works+0xa8d/0x18c0 [ 267.458846][ T5810] process_scheduled_works+0xb6e/0x18c0 [ 267.458893][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.458920][ T5810] ? assign_work+0x3d5/0x5e0 [ 267.458945][ T5810] worker_thread+0xa53/0xfc0 [ 267.458989][ T5810] kthread+0x388/0x470 [ 267.459006][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 267.459026][ T5810] ? __pfx_kthread+0x10/0x10 [ 267.459043][ T5810] ret_from_fork+0x51e/0xb90 [ 267.459077][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 267.459098][ T5810] ? __switch_to+0xc7d/0x1450 [ 267.459122][ T5810] ? __pfx_kthread+0x10/0x10 [ 267.459140][ T5810] ret_from_fork_asm+0x1a/0x30 [ 267.459169][ T5810] [ 267.459204][ T5810] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 267.459243][ T5810] Bluetooth: hci2: failed to register connection device [ 268.568124][ T7843] udevd[7843]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.680776][ T8161] netlink: 88 bytes leftover after parsing attributes in process `syz.4.683'. [ 268.680816][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.683'. [ 268.680830][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 270.288399][ T8176] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.689'. [ 281.007091][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.028460][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.039859][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.077064][ T8276] lo speed is unknown, defaulting to 1000 [ 281.119908][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.240548][ T5112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.433269][ T8273] lo speed is unknown, defaulting to 1000 [ 283.309861][ T5813] Bluetooth: hci5: command tx timeout [ 284.333468][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 284.333491][ T8320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.738'. [ 284.333669][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 284.333683][ T8320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.738'. [ 285.867901][ T5813] Bluetooth: hci5: command tx timeout [ 286.155122][ T8273] chnl_net:caif_netlink_parms(): no params data found [ 287.301968][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 287.301989][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.748'. [ 287.302235][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 287.302250][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.748'. [ 287.345582][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.345783][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.345996][ T8273] bridge_slave_0: entered allmulticast mode [ 287.348386][ T8273] bridge_slave_0: entered promiscuous mode [ 287.352713][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.352895][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.353071][ T8273] bridge_slave_1: entered allmulticast mode [ 287.355798][ T8273] bridge_slave_1: entered promiscuous mode [ 287.611795][ T8273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.615495][ T8273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.685126][ T8273] team0: Port device team_slave_0 added [ 287.688848][ T8273] team0: Port device team_slave_1 added [ 287.768749][ T8273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.768762][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.768775][ T8273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.770935][ T8273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.770950][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.770973][ T8273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.869719][ T5813] Bluetooth: hci5: command tx timeout [ 288.877626][ T8377] siw: device registration error -23 [ 289.078161][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'. [ 289.078184][ T8386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.759'. [ 289.949795][ T5813] Bluetooth: hci5: command tx timeout [ 290.221374][ T8273] hsr_slave_0: entered promiscuous mode [ 290.222730][ T8273] hsr_slave_1: entered promiscuous mode [ 290.223568][ T8273] debugfs: 'hsr0' already exists in 'hsr' [ 290.223590][ T8273] Cannot create hsr debugfs directory [ 291.835782][ T8273] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 291.896077][ T8273] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 291.984685][ T8273] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 292.057447][ T8273] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 292.650549][ T8273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.744483][ T8273] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.785232][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.785828][ T6492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.870332][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.870464][ T6486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.094695][ T8273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.167980][ T8273] veth0_vlan: entered promiscuous mode [ 300.200447][ T8273] veth1_vlan: entered promiscuous mode [ 300.325521][ T8273] veth0_macvtap: entered promiscuous mode [ 301.141639][ T8273] veth1_macvtap: entered promiscuous mode [ 301.275362][ T8273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.341846][ T8273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.370421][ T2999] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.371382][ T2999] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.371597][ T2999] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.372117][ T2999] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.036448][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.036470][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.148163][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.148184][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.103206][ T8553] sctp: [Deprecated]: syz.3.810 (pid 8553) Use of int in max_burst socket option. [ 304.103206][ T8553] Use struct sctp_assoc_value instead [ 304.146314][ T8545] syz.5.807 (8545) used greatest stack depth: 17024 bytes left [ 304.312233][ T8565] syzkaller0: entered promiscuous mode [ 304.312257][ T8565] syzkaller0: entered allmulticast mode [ 304.450824][ T8574] fuse: Bad value for 'fd' [ 306.337604][ T8603] __nla_validate_parse: 2 callbacks suppressed [ 306.337628][ T8603] netlink: 240 bytes leftover after parsing attributes in process `syz.5.829'. [ 312.739180][ T5951] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 312.917586][ T5951] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 312.917614][ T5951] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.917632][ T5951] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 312.917652][ T5951] usb 5-1: config 1 has no interface number 1 [ 312.917693][ T5951] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 312.917731][ T5951] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.986265][ T5951] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.986295][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.986314][ T5951] usb 5-1: Product: syz [ 312.986328][ T5951] usb 5-1: Manufacturer: syz [ 312.986341][ T5951] usb 5-1: SerialNumber: syz [ 313.283681][ T5951] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 313.283749][ T5951] usb 5-1: MIDIStreaming interface descriptor not found [ 313.701541][ T5951] usb 5-1: USB disconnect, device number 5 [ 314.249375][ T8709] udevd[8709]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.242156][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.242223][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.790059][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.879'. [ 321.994237][ T8812] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.894'. [ 328.150880][ T8850] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 329.007119][ T8850] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 329.007732][ T8850] overlayfs: failed to look up (tracing) for ino (-66) [ 329.291326][ T8853] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.908'. [ 335.809068][ T8927] netlink: 36 bytes leftover after parsing attributes in process `syz.3.934'. [ 337.716882][ T8960] sctp: [Deprecated]: syz.4.946 (pid 8960) Use of int in max_burst socket option. [ 337.716882][ T8960] Use struct sctp_assoc_value instead [ 339.839762][ T5856] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 340.029343][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 340.038003][ T5856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.038028][ T5856] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 340.066368][ T5856] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 340.066397][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.066413][ T5856] usb 5-1: Product: syz [ 340.066425][ T5856] usb 5-1: Manufacturer: syz [ 340.066437][ T5856] usb 5-1: SerialNumber: syz [ 340.084115][ T5856] usb 5-1: config 0 descriptor?? [ 342.435409][ T9037] sctp: [Deprecated]: syz.5.975 (pid 9037) Use of int in max_burst socket option. [ 342.435409][ T9037] Use struct sctp_assoc_value instead [ 342.509702][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 342.673801][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.673827][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 342.673873][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.717317][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.717347][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.717366][ T10] usb 4-1: Product: syz [ 342.717379][ T10] usb 4-1: Manufacturer: syz [ 342.717392][ T10] usb 4-1: SerialNumber: syz [ 342.813618][ T5855] usb 5-1: USB disconnect, device number 6 [ 344.849453][ T10] usb 4-1: USB disconnect, device number 4 [ 350.179743][ T37] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 350.347418][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 350.347470][ T37] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 350.347492][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.371576][ T37] usb 4-1: config 0 descriptor?? [ 350.382590][ T9140] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 351.535251][ T37] hid_parser_main: 222 callbacks suppressed [ 351.535278][ T37] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 351.535309][ T37] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 351.535336][ T37] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 351.535362][ T37] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 351.535388][ T37] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 351.535414][ T37] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 351.535441][ T37] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 351.535467][ T37] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 351.535493][ T37] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 351.535519][ T37] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 351.672608][ T37] logitech-djreceiver 0003:046D:C71F.0003: collection stack underflow [ 351.672640][ T37] logitech-djreceiver 0003:046D:C71F.0003: item 0 1 0 12 parsing failed [ 351.673397][ T37] logitech-djreceiver 0003:046D:C71F.0003: logi_dj_probe: parse failed [ 351.673479][ T37] logitech-djreceiver 0003:046D:C71F.0003: probe with driver logitech-djreceiver failed with error -22 [ 351.842823][ T37] usb 4-1: USB disconnect, device number 5 [ 352.291696][ T9172] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1025'. [ 362.194259][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1084'. [ 362.219807][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 362.371982][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.372034][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 362.372056][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.429087][ T10] usb 4-1: config 0 descriptor?? [ 366.617734][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 366.617851][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 366.664398][ T10] usb 4-1: USB disconnect, device number 6 [ 366.889191][ T9379] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1101'. [ 367.155758][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1105'. [ 369.651580][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 369.802257][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.802308][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 369.802330][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.861370][ T9] usb 4-1: config 0 descriptor?? [ 369.905089][ T9414] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1115'. [ 370.059249][ T9417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1118'. [ 372.610803][ T5813] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 372.610828][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 372.610852][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 372.610867][ T5813] Workqueue: hci4 hci_rx_work [ 372.610904][ T5813] Call Trace: [ 372.610925][ T5813] [ 372.610934][ T5813] dump_stack_lvl+0xe8/0x150 [ 372.610966][ T5813] sysfs_create_dir_ns+0x271/0x2a0 [ 372.610987][ T5813] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 372.611013][ T5813] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 372.611035][ T5813] ? rt_spin_unlock+0x160/0x200 [ 372.611060][ T5813] kobject_add_internal+0x631/0xd10 [ 372.611088][ T5813] kobject_add+0x163/0x240 [ 372.611112][ T5813] ? __pfx_kobject_add+0x10/0x10 [ 372.611138][ T5813] ? get_device_parent+0x370/0x3a0 [ 372.611161][ T5813] device_add+0x408/0xb80 [ 372.611183][ T5813] hci_conn_add_sysfs+0xd5/0x210 [ 372.611209][ T5813] le_conn_complete_evt+0x10e6/0x16b0 [ 372.611237][ T5813] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 372.611258][ T5813] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 372.611276][ T5813] ? lockdep_hardirqs_on+0x7a/0x110 [ 372.611294][ T5813] ? skb_pull_data+0xfb/0x200 [ 372.611318][ T5813] hci_le_conn_complete_evt+0x187/0x470 [ 372.611350][ T5813] hci_event_packet+0x659/0xef0 [ 372.611379][ T5813] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 372.611400][ T5813] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 372.611418][ T5813] ? __pfx_hci_event_packet+0x10/0x10 [ 372.611443][ T5813] ? rt_spin_unlock+0x14f/0x200 [ 372.611472][ T5813] ? hci_send_to_monitor+0xe2/0x590 [ 372.611495][ T5813] hci_rx_work+0x3ee/0x1030 [ 372.611516][ T5813] ? process_scheduled_works+0xa8d/0x18c0 [ 372.611540][ T5813] process_scheduled_works+0xb6e/0x18c0 [ 372.611586][ T5813] ? __pfx_process_scheduled_works+0x10/0x10 [ 372.611613][ T5813] ? assign_work+0x3d5/0x5e0 [ 372.611639][ T5813] worker_thread+0xa53/0xfc0 [ 372.611689][ T5813] kthread+0x388/0x470 [ 372.611707][ T5813] ? __pfx_worker_thread+0x10/0x10 [ 372.611729][ T5813] ? __pfx_kthread+0x10/0x10 [ 372.611747][ T5813] ret_from_fork+0x51e/0xb90 [ 372.611774][ T5813] ? __pfx_ret_from_fork+0x10/0x10 [ 372.611796][ T5813] ? __switch_to+0xc7d/0x1450 [ 372.611819][ T5813] ? __pfx_kthread+0x10/0x10 [ 372.611836][ T5813] ret_from_fork_asm+0x1a/0x30 [ 372.611865][ T5813] [ 372.614969][ T5813] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 372.615015][ T5813] Bluetooth: hci4: failed to register connection device [ 372.848056][ T9445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1127'. [ 374.990510][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 374.990628][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 376.367463][ T9] usb 4-1: USB disconnect, device number 7[ 376.367463][ T9] usb 4-1: USB disconnect, device number 7 [ 376.373834][ T9445] ------------[ cut here ]------------ [ 376.373845][ T9445] !rwb [ 376.373854][ T9445] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x18a/0x220, CPU#1: syz.4.1127/9445 [ 376.373879][ T9445] Modules linked in: [ 376.373890][ T9445] CPU: 1 UID: 0 PID: 9445 Comm: syz.4.1127 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.373902][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 376.373908][ T9445] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 376.373921][ T9445] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 6d ad 33 fd eb 18 e8 66 ad 33 fd eb 0d e8 5f ad 33 fd 4c 89 ff e8 b7 ec 8d fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 376.373931][ T9445] RSP: 0018:ffffc9001d23ee50 EFLAGS: 00010286 [ 376.373940][ T9445] RAX: 4e515081c6895000 RBX: 1ffff11006f6e604 RCX: 0000000000000046 [ 376.373948][ T9445] RDX: 0000000000000006 RSI: ffffffff8d564e3e RDI: ffffffff8ba67680 [ 376.373955][ T9445] RBP: dffffc0000000000 R08: ffffffff8f6a6db7 R09: 1ffffffff1ed4db6 [ 376.373962][ T9445] R10: dffffc0000000000 R11: fffffbfff1ed4db7 R12: ffff888037b73020 [ 376.373969][ T9445] R13: 0000000000000000 R14: ffff88805e03e000 R15: ffff888037b73000 [ 376.373976][ T9445] FS: 00007f285a1c56c0(0000) GS:ffff888126435000(0000) knlGS:0000000000000000 [ 376.373984][ T9445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.373991][ T9445] CR2: 000020000000f030 CR3: 00000000383bc000 CR4: 00000000003526f0 [ 376.374001][ T9445] Call Trace: [ 376.374006][ T9445] [ 376.374013][ T9445] blk_register_queue+0x382/0x430 [ 376.374036][ T9445] __add_disk+0x677/0xd50 [ 376.374058][ T9445] add_disk_fwnode+0xfb/0x480 [ 376.374078][ T9445] nbd_dev_add+0x72c/0xb50 [ 376.374090][ T9445] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.374107][ T9445] ? __pfx_nbd_dev_add+0x10/0x10 [ 376.374136][ T9445] nbd_genl_connect+0x965/0x1c80 [ 376.374149][ T9445] ? __pfx___nla_validate_parse+0x10/0x10 [ 376.374175][ T9445] ? rcu_is_watching+0x15/0xb0 [ 376.374189][ T9445] ? __pfx_nbd_genl_connect+0x10/0x10 [ 376.374204][ T9445] ? rcu_is_watching+0x15/0xb0 [ 376.374216][ T9445] ? trace_kmalloc+0x2a/0x110 [ 376.374237][ T9445] ? __nla_parse+0x40/0x60 [ 376.374254][ T9445] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 376.374271][ T9445] genl_family_rcv_msg_doit+0x22a/0x330 [ 376.374293][ T9445] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 376.374325][ T9445] ? lockdep_hardirqs_on+0x7a/0x110 [ 376.374349][ T9445] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 376.374379][ T9445] genl_rcv_msg+0x61c/0x7a0 [ 376.374407][ T9445] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.374425][ T9445] ? __pfx_nbd_genl_connect+0x10/0x10 [ 376.374438][ T9445] ? __lock_acquire+0x6b5/0x2cf0 [ 376.374452][ T9445] netlink_rcv_skb+0x232/0x4b0 [ 376.374468][ T9445] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.374480][ T9445] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.374502][ T9445] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.374516][ T9445] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.374532][ T9445] genl_rcv+0x28/0x40 [ 376.374542][ T9445] netlink_unicast+0x831/0x9f0 [ 376.374574][ T9445] ? __pfx_netlink_unicast+0x10/0x10 [ 376.374590][ T9445] ? netlink_sendmsg+0x650/0xb40 [ 376.374604][ T9445] ? skb_put+0x11b/0x210 [ 376.374617][ T9445] netlink_sendmsg+0x813/0xb40 [ 376.374637][ T9445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.374656][ T9445] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.374675][ T9445] ____sys_sendmsg+0x94c/0x9c0 [ 376.374691][ T9445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.374707][ T9445] ? import_iovec+0x73/0xa0 [ 376.374725][ T9445] ___sys_sendmsg+0x2a5/0x360 [ 376.374739][ T9445] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.374754][ T9445] ? futex_wait+0x29a/0x380 [ 376.374785][ T9445] ? __fget_files+0x2a/0x420 [ 376.374798][ T9445] ? __fget_files+0x3a6/0x420 [ 376.374816][ T9445] __x64_sys_sendmsg+0x1c3/0x2a0 [ 376.374829][ T9445] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.374846][ T9445] ? rcu_is_watching+0x15/0xb0 [ 376.374864][ T9445] do_syscall_64+0x14d/0xf80 [ 376.374875][ T9445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.374887][ T9445] ? clear_bhb_loop+0x40/0x90 [ 376.374899][ T9445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.374910][ T9445] RIP: 0033:0x7f285bf8c819 [ 376.374927][ T9445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.374936][ T9445] RSP: 002b:00007f285a1c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.374947][ T9445] RAX: ffffffffffffffda RBX: 00007f285c206090 RCX: 00007f285bf8c819 [ 376.374955][ T9445] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000005 [ 376.374961][ T9445] RBP: 00007f285c022c91 R08: 0000000000000000 R09: 0000000000000000 [ 376.374968][ T9445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.374974][ T9445] R13: 00007f285c206128 R14: 00007f285c206090 R15: 00007fffea8f4438 [ 376.374990][ T9445] [ 376.374999][ T9445] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 376.375008][ T9445] CPU: 1 UID: 0 PID: 9445 Comm: syz.4.1127 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.375019][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 376.375026][ T9445] Call Trace: [ 376.375030][ T9445] [ 376.375034][ T9445] vpanic+0x56c/0xa60 [ 376.375051][ T9445] ? __pfx__printk+0x10/0x10 [ 376.375062][ T9445] ? __pfx_vpanic+0x10/0x10 [ 376.375076][ T9445] ? is_bpf_text_address+0x292/0x2b0 [ 376.375091][ T9445] ? is_bpf_text_address+0x26/0x2b0 [ 376.375110][ T9445] panic+0xc5/0xd0 [ 376.375125][ T9445] ? __pfx_panic+0x10/0x10 [ 376.375149][ T9445] __warn+0x315/0x4f0 [ 376.375169][ T9445] ? wbt_init_enable_default+0x18a/0x220 [ 376.375182][ T9445] ? wbt_init_enable_default+0x18a/0x220 [ 376.375194][ T9445] __report_bug+0x29a/0x540 [ 376.375204][ T9445] ? netlink_rcv_skb+0x232/0x4b0 [ 376.375218][ T9445] ? genl_rcv+0x28/0x40 [ 376.375227][ T9445] ? netlink_unicast+0x831/0x9f0 [ 376.375242][ T9445] ? wbt_init_enable_default+0x18a/0x220 [ 376.375253][ T9445] ? __pfx___report_bug+0x10/0x10 [ 376.375272][ T9445] ? wbt_init_enable_default+0x18a/0x220 [ 376.375287][ T9445] report_bug+0x16a/0x220 [ 376.375307][ T9445] ? wbt_init_enable_default+0x18a/0x220 [ 376.375325][ T9445] ? wbt_init_enable_default+0x18c/0x220 [ 376.375345][ T9445] handle_bug+0x9c/0x200 [ 376.375370][ T9445] exc_invalid_op+0x1a/0x50 [ 376.375392][ T9445] asm_exc_invalid_op+0x1a/0x20 [ 376.375411][ T9445] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 376.375433][ T9445] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 6d ad 33 fd eb 18 e8 66 ad 33 fd eb 0d e8 5f ad 33 fd 4c 89 ff e8 b7 ec 8d fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 376.375449][ T9445] RSP: 0018:ffffc9001d23ee50 EFLAGS: 00010286 [ 376.375465][ T9445] RAX: 4e515081c6895000 RBX: 1ffff11006f6e604 RCX: 0000000000000046 [ 376.375479][ T9445] RDX: 0000000000000006 RSI: ffffffff8d564e3e RDI: ffffffff8ba67680 [ 376.375493][ T9445] RBP: dffffc0000000000 R08: ffffffff8f6a6db7 R09: 1ffffffff1ed4db6 [ 376.375507][ T9445] R10: dffffc0000000000 R11: fffffbfff1ed4db7 R12: ffff888037b73020 [ 376.375522][ T9445] R13: 0000000000000000 R14: ffff88805e03e000 R15: ffff888037b73000 [ 376.375557][ T9445] blk_register_queue+0x382/0x430 [ 376.375595][ T9445] __add_disk+0x677/0xd50 [ 376.375636][ T9445] add_disk_fwnode+0xfb/0x480 [ 376.375672][ T9445] nbd_dev_add+0x72c/0xb50 [ 376.375694][ T9445] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.375724][ T9445] ? __pfx_nbd_dev_add+0x10/0x10 [ 376.375776][ T9445] nbd_genl_connect+0x965/0x1c80 [ 376.375800][ T9445] ? __pfx___nla_validate_parse+0x10/0x10 [ 376.375831][ T9445] ? rcu_is_watching+0x15/0xb0 [ 376.375854][ T9445] ? __pfx_nbd_genl_connect+0x10/0x10 [ 376.375882][ T9445] ? rcu_is_watching+0x15/0xb0 [ 376.375904][ T9445] ? trace_kmalloc+0x2a/0x110 [ 376.375940][ T9445] ? __nla_parse+0x40/0x60 [ 376.375977][ T9445] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 376.376009][ T9445] genl_family_rcv_msg_doit+0x22a/0x330 [ 376.376039][ T9445] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 376.376072][ T9445] ? lockdep_hardirqs_on+0x7a/0x110 [ 376.376093][ T9445] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 376.376122][ T9445] genl_rcv_msg+0x61c/0x7a0 [ 376.376150][ T9445] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.376176][ T9445] ? __pfx_nbd_genl_connect+0x10/0x10 [ 376.376200][ T9445] ? __lock_acquire+0x6b5/0x2cf0 [ 376.376227][ T9445] netlink_rcv_skb+0x232/0x4b0 [ 376.376257][ T9445] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.376279][ T9445] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.376320][ T9445] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.376348][ T9445] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.376380][ T9445] genl_rcv+0x28/0x40 [ 376.376399][ T9445] netlink_unicast+0x831/0x9f0 [ 376.376432][ T9445] ? __pfx_netlink_unicast+0x10/0x10 [ 376.376459][ T9445] ? netlink_sendmsg+0x650/0xb40 [ 376.376485][ T9445] ? skb_put+0x11b/0x210 [ 376.376509][ T9445] netlink_sendmsg+0x813/0xb40 [ 376.376547][ T9445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.376584][ T9445] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.376617][ T9445] ____sys_sendmsg+0x94c/0x9c0 [ 376.376645][ T9445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.376675][ T9445] ? import_iovec+0x73/0xa0 [ 376.376709][ T9445] ___sys_sendmsg+0x2a5/0x360 [ 376.376737][ T9445] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.376765][ T9445] ? futex_wait+0x29a/0x380 [ 376.376815][ T9445] ? __fget_files+0x2a/0x420 [ 376.376839][ T9445] ? __fget_files+0x3a6/0x420 [ 376.376873][ T9445] __x64_sys_sendmsg+0x1c3/0x2a0 [ 376.376897][ T9445] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.376928][ T9445] ? rcu_is_watching+0x15/0xb0 [ 376.376962][ T9445] do_syscall_64+0x14d/0xf80 [ 376.376982][ T9445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.377002][ T9445] ? clear_bhb_loop+0x40/0x90 [ 376.377026][ T9445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.377045][ T9445] RIP: 0033:0x7f285bf8c819 [ 376.377063][ T9445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.377078][ T9445] RSP: 002b:00007f285a1c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.377095][ T9445] RAX: ffffffffffffffda RBX: 00007f285c206090 RCX: 00007f285bf8c819 [ 376.377109][ T9445] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000005 [ 376.377121][ T9445] RBP: 00007f285c022c91 R08: 0000000000000000 R09: 0000000000000000 [ 376.377133][ T9445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.377144][ T9445] R13: 00007f285c206128 R14: 00007f285c206090 R15: 00007fffea8f4438 [ 376.377182][ T9445] [ 376.377555][ T9445] Kernel Offset: disabled