last executing test programs: 13.919768494s ago: executing program 4 (id=5): open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 13.853136818s ago: executing program 3 (id=6): openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x54) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000001c0)={'veth1_to_bond\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x0, 0x8, 0x29, 0x0, @remote, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty}}}}) 12.725622574s ago: executing program 4 (id=7): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @aes256, 0x0, @desc2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200), 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={r2, &(0x7f00000001c0)=')\x00', 0x0, &(0x7f0000000200)={@align=0x3a, {0x101, 0x4, 0x3, 0x26b}}, 0x6, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000300)=0x5}) write$UHID_INPUT(r3, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x14, r6, 0x1, 0x0, 0xffffffff, {0x54}}, 0x14}}, 0x0) close(0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) 12.543555276s ago: executing program 3 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0xa8242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 12.379941401s ago: executing program 0 (id=1): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) accept4(r0, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x16) 12.260190117s ago: executing program 1 (id=2): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) 12.183519777s ago: executing program 3 (id=9): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r4, 0x0, 0x0, 0x80800) 10.789215834s ago: executing program 4 (id=10): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x4, 0x8009, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x5, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x8, 0xf6, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0xfffffffe, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x5, 0x59eb, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x10000, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffb, 0x3, 0x4, 0x2000, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x2], [0x8, 0x7, 0xffffffff, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x6, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) listen(r1, 0x90004) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000fddbdf251700000008000300", @ANYRES32=r6, @ANYBLOB="3800308014000400403a050c5baee2004ef2b6d713459a7a180001800800010003865bdd36c8e216c53b320000000c000500000000000600"], 0x54}}, 0x0) r7 = msgget(0x1, 0x101) msgrcv(r7, &(0x7f00000001c0)={0x0, ""/143}, 0x97, 0x2, 0x1800) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) 10.613048908s ago: executing program 3 (id=11): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9300c004a5630348e0800f8ff180b0400feff0200c97c65f04bbe0f8657"], 0x11) 10.576570416s ago: executing program 2 (id=3): openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto(r1, &(0x7f0000000300), 0x0, 0x48000, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) sendmsg$nl_xfrm(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=ANY=[], 0x120}}, 0x0) r4 = msgget$private(0x0, 0x31) msgsnd(r4, &(0x7f00000035c0)=ANY=[@ANYBLOB], 0x1b, 0x5f005e4c1fdd0237) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd601d20000044"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) listen(0xffffffffffffffff, 0x7f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 10.273787603s ago: executing program 0 (id=12): openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004500090000000000000100f102000000080002"], 0x1c}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r5}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) gettid() getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000b80)) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, 0x80}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000bc0)) 10.273574105s ago: executing program 1 (id=13): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 10.213810523s ago: executing program 3 (id=14): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x4, 0x8009, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x5, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x8, 0xf6, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0xfffffffe, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x5, 0x59eb, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x10000, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffb, 0x3, 0x4, 0x2000, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x2], [0x8, 0x7, 0xffffffff, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x6, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e130100c900", @ANYRESHEX], 0x16) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000fddbdf251700000008000300", @ANYRES32=r5, @ANYBLOB="3800308014000400403a050c5baee2004ef2b6d713459a7a180001800800010003865bdd36c8e216c53b320000000c000500000000000600"], 0x54}}, 0x0) r6 = msgget(0x1, 0x101) msgrcv(r6, &(0x7f00000001c0)={0x0, ""/143}, 0x97, 0x2, 0x1800) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) 8.60421706s ago: executing program 0 (id=15): socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000640)=0x1, 0x4) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x20000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) write$tun(r5, 0x0, 0x3db) accept4(r2, 0x0, 0x0, 0x80000) 2.807235271s ago: executing program 1 (id=16): socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r6, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r6, 0x1) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x68, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) 2.601695385s ago: executing program 2 (id=17): write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000003, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x4000, 0x200}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020}, 0x2020) 1.716486098s ago: executing program 3 (id=18): socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$video(0x0, 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x898, 0x30, 0x12f, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x0, 0xfffe, 0x0, 0x98, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x66a, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7883, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x200000, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xdfffffff, 0x7ff, 0x2, 0x9, 0xc, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x3, 0x3, 0x9, 0xffc, 0x401, 0x623, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x1, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x2, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0xc, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x105, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0x4, 0x7, 0x1, 0x7fffffff, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0xe, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x4, 0x6, 0x7, 0x3, 0x1ff, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x1, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x2101, 0x100, 0x7ff, 0x1, 0xf0, 0xa, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x100009, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x1, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0x5, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000100)=0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 0s ago: executing program 2 (id=19): socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000640)=0x1, 0x4) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x20000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0xb1e1}) ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) write$tun(r5, 0x0, 0x3db) accept4(r2, 0x0, 0x0, 0x80000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. [ 80.862357][ T5812] cgroup: Unknown subsys name 'net' [ 81.094791][ T5812] cgroup: Unknown subsys name 'cpuset' [ 81.158582][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.155153][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.742593][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.757215][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.777043][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.820945][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.823274][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.854129][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.857730][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.867490][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.869831][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.871521][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.877074][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.886293][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.888910][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.889345][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.905178][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.907273][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.943158][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.947122][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.965411][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.965835][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.969892][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.975230][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.978554][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.982410][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.983229][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.464134][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 87.496919][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 87.533680][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 87.576041][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 87.662494][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 88.011512][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.012626][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.012848][ T5828] bridge_slave_0: entered allmulticast mode [ 88.015535][ T5828] bridge_slave_0: entered promiscuous mode [ 88.046400][ T5834] Bluetooth: hci1: command tx timeout [ 88.098550][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.098874][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.099449][ T5827] bridge_slave_0: entered allmulticast mode [ 88.101868][ T5827] bridge_slave_0: entered promiscuous mode [ 88.115998][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.117162][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.118444][ T5834] Bluetooth: hci3: command tx timeout [ 88.120769][ T5828] bridge_slave_1: entered allmulticast mode [ 88.132542][ T5828] bridge_slave_1: entered promiscuous mode [ 88.173433][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.173775][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.174060][ T5824] bridge_slave_0: entered allmulticast mode [ 88.176629][ T5824] bridge_slave_0: entered promiscuous mode [ 88.199595][ T5834] Bluetooth: hci4: command tx timeout [ 88.208611][ T5834] Bluetooth: hci0: command tx timeout [ 88.208713][ T5834] Bluetooth: hci2: command tx timeout [ 88.238797][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.239054][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.239534][ T5827] bridge_slave_1: entered allmulticast mode [ 88.242070][ T5827] bridge_slave_1: entered promiscuous mode [ 88.282939][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.283173][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.283370][ T5826] bridge_slave_0: entered allmulticast mode [ 88.285821][ T5826] bridge_slave_0: entered promiscuous mode [ 88.295367][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.296301][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.297076][ T5824] bridge_slave_1: entered allmulticast mode [ 88.316476][ T5824] bridge_slave_1: entered promiscuous mode [ 88.392137][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.392448][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.392630][ T5826] bridge_slave_1: entered allmulticast mode [ 88.394897][ T5826] bridge_slave_1: entered promiscuous mode [ 88.436267][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.436614][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.436829][ T5825] bridge_slave_0: entered allmulticast mode [ 88.454729][ T5825] bridge_slave_0: entered promiscuous mode [ 88.488929][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.541702][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.542068][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.542602][ T5825] bridge_slave_1: entered allmulticast mode [ 88.545203][ T5825] bridge_slave_1: entered promiscuous mode [ 88.575781][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.588467][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.619863][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.653286][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.683776][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.698379][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.763402][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.802947][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.833932][ T5828] team0: Port device team_slave_0 added [ 88.883570][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.887304][ T5827] team0: Port device team_slave_0 added [ 88.904858][ T5828] team0: Port device team_slave_1 added [ 88.930738][ T5824] team0: Port device team_slave_0 added [ 88.958108][ T5827] team0: Port device team_slave_1 added [ 88.983835][ T5826] team0: Port device team_slave_0 added [ 88.987611][ T5824] team0: Port device team_slave_1 added [ 89.054810][ T5826] team0: Port device team_slave_1 added [ 89.084102][ T5825] team0: Port device team_slave_0 added [ 89.107829][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.108007][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.108037][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.189696][ T5825] team0: Port device team_slave_1 added [ 89.191559][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.191569][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.191586][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.194195][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.194204][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.194221][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.303195][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.303212][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.303235][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.355540][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.355551][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.355569][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.409365][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.409403][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.409430][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.427645][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.427687][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.427761][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.964083][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.964097][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.964118][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.018569][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.018581][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.018600][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.073490][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.073502][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.073521][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.119771][ T5839] Bluetooth: hci1: command tx timeout [ 90.198503][ T5839] Bluetooth: hci3: command tx timeout [ 90.232283][ T5828] hsr_slave_0: entered promiscuous mode [ 90.233992][ T5828] hsr_slave_1: entered promiscuous mode [ 90.288081][ T5839] Bluetooth: hci2: command tx timeout [ 90.288111][ T5839] Bluetooth: hci0: command tx timeout [ 90.288132][ T5839] Bluetooth: hci4: command tx timeout [ 90.288851][ T5827] hsr_slave_0: entered promiscuous mode [ 90.290617][ T5827] hsr_slave_1: entered promiscuous mode [ 90.292077][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 90.292150][ T5827] Cannot create hsr debugfs directory [ 90.351732][ T5824] hsr_slave_0: entered promiscuous mode [ 90.353234][ T5824] hsr_slave_1: entered promiscuous mode [ 90.354565][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 90.354590][ T5824] Cannot create hsr debugfs directory [ 90.401154][ T5826] hsr_slave_0: entered promiscuous mode [ 90.402767][ T5826] hsr_slave_1: entered promiscuous mode [ 90.404211][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 90.404238][ T5826] Cannot create hsr debugfs directory [ 90.471429][ T5825] hsr_slave_0: entered promiscuous mode [ 90.473073][ T5825] hsr_slave_1: entered promiscuous mode [ 90.474452][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 90.474474][ T5825] Cannot create hsr debugfs directory [ 91.663458][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.714128][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.725036][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.761980][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.771872][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.806967][ T10] cfg80211: failed to load regulatory.db [ 91.818679][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.852266][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.875884][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.030991][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.075884][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.079971][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.113768][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.118821][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.152179][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.186120][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.198076][ T5834] Bluetooth: hci1: command tx timeout [ 92.221195][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.289320][ T5834] Bluetooth: hci3: command tx timeout [ 92.358329][ T5839] Bluetooth: hci0: command tx timeout [ 92.358341][ T60] Bluetooth: hci2: command tx timeout [ 92.358427][ T5834] Bluetooth: hci4: command tx timeout [ 92.419631][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.463364][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.466803][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.502562][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.516185][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.544325][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.585714][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.624914][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.795771][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.836295][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.860174][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.893392][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.914246][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.942418][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.974671][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.006366][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.133773][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.183362][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.215920][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.251380][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.293137][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.307311][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.355219][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.370580][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.412976][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.481931][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.549943][ T1510] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.550122][ T1510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.577771][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.649405][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.649552][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.769592][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.823195][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.823441][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.861892][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.904110][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.904259][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.003061][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.037272][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.081927][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.082194][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.178791][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.178928][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.278163][ T5834] Bluetooth: hci1: command tx timeout [ 94.302338][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.358548][ T5834] Bluetooth: hci3: command tx timeout [ 94.414586][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.439029][ T5834] Bluetooth: hci2: command tx timeout [ 94.439059][ T5834] Bluetooth: hci4: command tx timeout [ 94.439078][ T5834] Bluetooth: hci0: command tx timeout [ 94.445568][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.445715][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.526765][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.527537][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.653678][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.737201][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.737456][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.793022][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.824884][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.825050][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.039891][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.539426][ T5828] veth0_vlan: entered promiscuous mode [ 95.594095][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.664527][ T5828] veth1_vlan: entered promiscuous mode [ 95.762229][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.860223][ T5827] veth0_vlan: entered promiscuous mode [ 95.920679][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.950590][ T5828] veth0_macvtap: entered promiscuous mode [ 95.965253][ T5827] veth1_vlan: entered promiscuous mode [ 95.994419][ T5824] veth0_vlan: entered promiscuous mode [ 96.013849][ T5828] veth1_macvtap: entered promiscuous mode [ 96.077372][ T5824] veth1_vlan: entered promiscuous mode [ 96.150942][ T5826] veth0_vlan: entered promiscuous mode [ 96.178980][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.247779][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.265327][ T5827] veth0_macvtap: entered promiscuous mode [ 96.273905][ T5826] veth1_vlan: entered promiscuous mode [ 96.334956][ T85] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.359056][ T5827] veth1_macvtap: entered promiscuous mode [ 96.377793][ T1510] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.389742][ T5825] veth0_vlan: entered promiscuous mode [ 96.395372][ T1510] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.427506][ T1510] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.538836][ T5824] veth0_macvtap: entered promiscuous mode [ 96.567077][ T5825] veth1_vlan: entered promiscuous mode [ 96.655434][ T5824] veth1_macvtap: entered promiscuous mode [ 96.687633][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.866094][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.948146][ T5826] veth0_macvtap: entered promiscuous mode [ 96.956584][ T1510] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.976465][ T1510] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.994051][ T1510] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.012172][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.054687][ T1510] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.066179][ T5826] veth1_macvtap: entered promiscuous mode [ 97.140128][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.241044][ T1510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.241070][ T1510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.343617][ T1532] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.357513][ T5825] veth0_macvtap: entered promiscuous mode [ 97.373752][ T1532] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.393500][ T1532] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.627548][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.638297][ T1532] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.714573][ T5825] veth1_macvtap: entered promiscuous mode [ 97.759314][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.759336][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.770575][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.953642][ T162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.957550][ T1532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.957569][ T1532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.996061][ T162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.040217][ T162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.066130][ T162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.271605][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.401767][ T1510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.401786][ T1510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.482817][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.843988][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.844009][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.996365][ T1178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.011738][ T1178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.123546][ T1178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.125614][ T1178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.570627][ T5949] ======================================================= [ 99.570627][ T5949] WARNING: The mand mount option has been deprecated and [ 99.570627][ T5949] and is ignored by this kernel. Remove the mand [ 99.570627][ T5949] option from the mount to silence this warning. [ 99.570627][ T5949] ======================================================= [ 100.382162][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.382229][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.377924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.702961][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.702983][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.061750][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.061770][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.468867][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.468889][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.984879][ T1510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.984900][ T1510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.066444][ T5964] overlayfs: missing 'workdir' [ 106.522556][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10'. [ 107.329935][ T5995] Zero length message leads to an empty skb [ 109.558860][ T5987] nbd: socks must be embedded in a SOCK_ITEM attr [ 113.643979][ T6012] netlink: 'syz.0.15': attribute type 2 has an invalid length. [ 116.082843][ T6027] process 'syz.3.18' launched './file1' with NULL argv: empty string added [ 116.437916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.938457][ C0] [ 116.938471][ C0] ====================================================== [ 116.938480][ C0] WARNING: possible circular locking dependency detected [ 116.938510][ C0] syzkaller #0 Not tainted [ 116.938522][ C0] ------------------------------------------------------ [ 116.938530][ C0] kworker/0:0/9 is trying to acquire lock: [ 116.938541][ C0] ffff88803fa748a0 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 116.938616][ C0] [ 116.938616][ C0] but task is already holding lock: [ 116.938624][ C0] ffff88803fa75a20 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 116.938684][ C0] [ 116.938684][ C0] which lock already depends on the new lock. [ 116.938684][ C0] [ 116.938692][ C0] [ 116.938692][ C0] the existing dependency chain (in reverse order) is: [ 116.938699][ C0] [ 116.938699][ C0] -> #1 (slock-AF_PHONET){+...}-{3:3}: [ 116.938726][ C0] rt_spin_lock+0x83/0x400 [ 116.938746][ C0] __sk_receive_skb+0x1f1/0x9e0 [ 116.938770][ C0] phonet_rcv+0x781/0xc40 [ 116.938794][ C0] process_backlog+0x5e1/0xc60 [ 116.938819][ C0] __napi_poll+0xab/0x550 [ 116.938842][ C0] net_rx_action+0x696/0xe00 [ 116.938867][ C0] handle_softirqs+0x1de/0x6d0 [ 116.938888][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 116.938909][ C0] netif_rx+0xb9/0xf0 [ 116.938925][ C0] pn_send+0x62a/0x8e0 [ 116.938941][ C0] pn_skb_send+0x218/0x530 [ 116.938958][ C0] pipe_snd_status+0x1f1/0x320 [ 116.938978][ C0] pipe_do_rcv+0xf15/0x16a0 [ 116.938999][ C0] __sk_receive_skb+0x962/0x9e0 [ 116.939023][ C0] pep_do_rcv+0x685/0xaa0 [ 116.939043][ C0] __release_sock+0x2a9/0x3d0 [ 116.939063][ C0] release_sock+0x1be/0x290 [ 116.939085][ C0] pep_sock_accept+0xd47/0x11e0 [ 116.939104][ C0] pn_socket_accept+0xc1/0x310 [ 116.939131][ C0] do_accept+0x6ca/0x930 [ 116.939156][ C0] __sys_accept4+0x139/0x230 [ 116.939182][ C0] __x64_sys_accept4+0x9a/0xb0 [ 116.939209][ C0] do_syscall_64+0x15f/0xf80 [ 116.939235][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.939256][ C0] [ 116.939256][ C0] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 116.939291][ C0] __lock_acquire+0x15a5/0x2cf0 [ 116.939318][ C0] lock_acquire+0x106/0x350 [ 116.939342][ C0] rt_spin_lock_nested+0x81/0x3f0 [ 116.939362][ C0] __sk_receive_skb+0x1bf/0x9e0 [ 116.939386][ C0] pep_do_rcv+0x685/0xaa0 [ 116.939406][ C0] __sk_receive_skb+0x962/0x9e0 [ 116.939430][ C0] phonet_rcv+0x781/0xc40 [ 116.939447][ C0] process_backlog+0x5e1/0xc60 [ 116.939472][ C0] __napi_poll+0xab/0x550 [ 116.939493][ C0] net_rx_action+0x696/0xe00 [ 116.939517][ C0] handle_softirqs+0x1de/0x6d0 [ 116.939537][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 116.939558][ C0] wg_socket_send_skb_to_peer+0x199/0x200 [ 116.939593][ C0] wg_packet_tx_worker+0x1c8/0x7c0 [ 116.939625][ C0] process_one_work+0x9a3/0x1710 [ 116.939644][ C0] worker_thread+0xba8/0x11e0 [ 116.939673][ C0] kthread+0x388/0x470 [ 116.939705][ C0] ret_from_fork+0x514/0xb70 [ 116.939728][ C0] ret_from_fork_asm+0x1a/0x30 [ 116.939754][ C0] [ 116.939754][ C0] other info that might help us debug this: [ 116.939754][ C0] [ 116.939761][ C0] Possible unsafe locking scenario: [ 116.939761][ C0] [ 116.939768][ C0] CPU0 CPU1 [ 116.939774][ C0] ---- ---- [ 116.939780][ C0] lock(slock-AF_PHONET); [ 116.939797][ C0] lock(slock-AF_PHONET/1); [ 116.939818][ C0] lock(slock-AF_PHONET); [ 116.939834][ C0] lock(slock-AF_PHONET/1); [ 116.939853][ C0] [ 116.939853][ C0] *** DEADLOCK *** [ 116.939853][ C0] [ 116.939858][ C0] 7 locks held by kworker/0:0/9: [ 116.939870][ C0] #0: ffff888061ee8d38 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 116.939924][ C0] #1: ffffc900000e7c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 116.939976][ C0] #2: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 116.940028][ C0] #3: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 116.940084][ C0] #4: ffff88803fa75a20 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 116.940140][ C0] #5: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 116.940190][ C0] #6: ffff88803fa75ad8 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40 [ 116.940239][ C0] [ 116.940239][ C0] stack backtrace: [ 116.940273][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.940299][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.940314][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 116.940358][ C0] Call Trace: [ 116.940371][ C0] [ 116.940380][ C0] dump_stack_lvl+0xe8/0x150 [ 116.940406][ C0] print_circular_bug+0x2e1/0x300 [ 116.940445][ C0] check_noncircular+0x12e/0x150 [ 116.940484][ C0] __lock_acquire+0x15a5/0x2cf0 [ 116.940516][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 116.940550][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 116.940577][ C0] lock_acquire+0x106/0x350 [ 116.940605][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 116.940633][ C0] ? sk_filter_trim_cap+0x8f1/0xce0 [ 116.940666][ C0] rt_spin_lock_nested+0x81/0x3f0 [ 116.940689][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 116.940716][ C0] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 116.940738][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 116.940771][ C0] ? __pfx_rt_spin_lock_nested+0x10/0x10 [ 116.940795][ C0] ? rt_spin_lock+0x1e0/0x400 [ 116.940820][ C0] __sk_receive_skb+0x1bf/0x9e0 [ 116.940852][ C0] pep_do_rcv+0x685/0xaa0 [ 116.940877][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 116.940909][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 116.940932][ C0] ? phonet_rcv+0x781/0xc40 [ 116.940951][ C0] __sk_receive_skb+0x962/0x9e0 [ 116.940983][ C0] phonet_rcv+0x781/0xc40 [ 116.941002][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 116.941038][ C0] ? __pfx_phonet_rcv+0x10/0x10 [ 116.941059][ C0] ? process_backlog+0x271/0xc60 [ 116.941087][ C0] ? process_backlog+0x271/0xc60 [ 116.941113][ C0] ? __pfx_phonet_rcv+0x10/0x10 [ 116.941133][ C0] process_backlog+0x5e1/0xc60 [ 116.941162][ C0] ? ip6_finish_output2+0xbe6/0x1430 [ 116.941189][ C0] ? __asan_memcpy+0x40/0x70 [ 116.941221][ C0] __napi_poll+0xab/0x550 [ 116.941248][ C0] net_rx_action+0x696/0xe00 [ 116.941274][ C0] ? ip6_output+0x408/0x550 [ 116.941317][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 116.941343][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 116.941376][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 116.941409][ C0] ? send6+0x694/0x910 [ 116.941451][ C0] handle_softirqs+0x1de/0x6d0 [ 116.941480][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 116.941503][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 116.941539][ C0] wg_socket_send_skb_to_peer+0x199/0x200 [ 116.941578][ C0] wg_packet_tx_worker+0x1c8/0x7c0 [ 116.941611][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 116.941648][ C0] ? process_one_work+0x8b7/0x1710 [ 116.941674][ C0] process_one_work+0x9a3/0x1710 [ 116.941707][ C0] ? __pfx_process_one_work+0x10/0x10 [ 116.941728][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 116.941761][ C0] worker_thread+0xba8/0x11e0 [ 116.941798][ C0] kthread+0x388/0x470 [ 116.941827][ C0] ? __pfx_worker_thread+0x10/0x10 [ 116.941849][ C0] ? __pfx_kthread+0x10/0x10 [ 116.941878][ C0] ret_from_fork+0x514/0xb70 [ 116.941904][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 116.941928][ C0] ? __switch_to+0xc79/0x1410 [ 116.941963][ C0] ? __pfx_kthread+0x10/0x10 [ 116.941992][ C0] ret_from_fork_asm+0x1a/0x30 [ 116.942028][ C0] [ 117.464822][ T5882] udevd[5882]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 117.662188][ T6011] udevd[6011]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 118.678126][ T5834] Bluetooth: hci4: command 0x0405 tx timeout