last executing test programs: 22m39.443021669s ago: executing program 1 (id=1675): syz_open_procfs$namespace(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0xd, 0x2, 0x0, "f819ebf45608e22e7a4944572ae210d0125a4b55b61c5deb3eb574c486d27eb2"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = gettid() syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="22a6d004fbb13b87d2a8852003020005000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={'sha384\x00'}}) rt_sigqueueinfo(r2, 0x21, &(0x7f00000002c0)={0x8000a, 0x4}) r4 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) syz_open_procfs$namespace(r5, 0x0) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0xe14, @empty}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000100)) listen(r4, 0x8) accept4(r4, 0x0, 0x0, 0x0) 22m37.783889247s ago: executing program 1 (id=1683): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000005240)=""/4121, &(0x7f00000000c0)=0xfffffffffffffdc1) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) open$dir(&(0x7f0000000000)='./file0/file1\x00', 0x43f00, 0x5) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host, 0x2}) 22m37.526121137s ago: executing program 1 (id=1685): syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0xfffffffffffffe44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x39) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) 22m35.660564064s ago: executing program 1 (id=1687): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (fail_nth: 4) 22m35.365186052s ago: executing program 1 (id=1689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) mbind(&(0x7f0000bda000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x9, 0xf21, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x4, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x6, 0xfffffffffffffffe}, @cipso={0x86, 0x3f, 0x2, [{0x6, 0xf, "8361371585463cb98ad5e19ea2"}, {0x6, 0x2}, {0x1, 0x4, "f448"}, {0x0, 0x2}, {0x7, 0x8, "f9b51b4fa9e1"}, {0x5, 0x11, "8ff1eb4f8fe11eca3fd1b10e950273"}, {0x0, 0x4, "71e3"}, {0x6, 0x5, "ce42f2"}]}]}}}}}}}, 0x0) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0) mlock(&(0x7f0000bda000/0x4000)=nil, 0x4000) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="94000000000105050000000000000000355800023c0002802c00018014000300ff01000000000000000000000000000114000400ff020000c100000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffff0d00000900074000000001"], 0x94}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x11, 0x11cfa, 0x8, 0x8000008, 0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x221, 0x100, 0x7e, 0x5}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x4040000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "0000000800000c000000000014000808"}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'rose0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0xf4, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x74}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xf4}, 0x1, 0x0, 0x0, 0x44009}, 0x8000) lseek(r3, 0x10001, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) ioctl$COMEDI_POLL(r3, 0x640f) 22m34.697255591s ago: executing program 1 (id=1691): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x1}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x10) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="c4be7e50382c0cdddee0a6ac7a336221359277b0ddb6f51d22b8cb3cfb53f86872af41233a43afa0ddd546247ebeba1592c136e1360961998b8d4e16f6012ecea98e64b0bb1beabfefdfc2727095e5fc43657dafe31d7b3aaf7904f07d513399dc0fd4b694c3c54e988f3904d3ee6950febb73023da71f93780fb54837043b5c8370362f6589af2858128ed0c4aba8277b555db9ee990a9195fd7bad5f", 0x9d, r3) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000400)=0x7) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000440)='trusted\x00', &(0x7f0000000480)='/dev/vhost-net\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000004c0)={"9d29d979815ac24eb845f9781c64d64b", 0x0, 0x0, {0x40, 0x1}, {0x9, 0x9}, 0x2000000, [0xebf, 0x6, 0x81, 0xb, 0x6, 0x9, 0xfffffffffffffffd, 0x3, 0xcc, 0x1, 0xe, 0x6, 0x8000000000000001, 0x0, 0x100, 0x1]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000005c0)={"c817725d4132ffe1378c60c1c2602634", 0x0, 0x0, {0x5, 0x1b5}, {0xab0f, 0x5}, 0xfa, [0x100000, 0x100, 0xd3, 0x7, 0x10, 0x6, 0x7, 0x6, 0x5, 0x8, 0x7, 0x5, 0x7, 0xffffffffffffffff, 0x1, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000006c0)={"dacd3337f49b43f5524963f949ef1378", r4, r5, {0xc0, 0x3}, {0x6, 0xc}, 0x7ff, [0x2, 0x4, 0x37, 0xfffffffffffffffb, 0x5, 0x6, 0x0, 0x7fffffff, 0x4, 0xd1, 0x5, 0x0, 0xfffffffffffffffb, 0x3, 0xaaa, 0x5]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={0xffffffffffffffff, 0x0, 0xe1, 0x1000, &(0x7f00000007c0)="5b6453ba9aa4f56c47e6a79e48b8cd7890764dbf83327a149b34775624eb82f17ad82457a7cd9893b97d2e5c7c3f40dc94c4d1f33d789290fc2982ae782c4a1280a801d00b7bbbaf5b9a38e87914f641ddec8072004d4efd93f68931f171dce8139d92f08ed5b347d5b3b41ffa7a43885e7a0cd012651d0d519a872c6ab24c61c764fd3b582735d5a6ea9f07bb9549662cff2628b5018aae285e429c8418454206e28a0093882013acdee197466630d8dd7255e30cb5e93b7acd90cb6bee4e0ea1c4a564bef12e19b14cf3646c23a9e8146b70320bea4d49d168358d7332578ae1", &(0x7f00000008c0)=""/4096, 0xe, 0x0, 0x80, 0x7b, &(0x7f00000018c0)="57947fc56fc30e6bb8beebe018531b7c0905d4b9cd9e4221d59aae84c02feb31163723fcd7decb1eb541c81e825b169debda910d56b3c33b73984e8581863d8f4e3fa5c31e97f50a9b5ddc1c0a039efdc5ec05d23c23ccc2dac26f273e022f096aa7ecf3caadc0c9335d23a716c5747b422b689e1f1f7f5337d9aebf5556af66", &(0x7f0000001940)="089856f73823d4be73f388d4cd5dff52111ab349061ff111609a89044e251f6692d2c4d1ce8d2e72549fcaa96c6775ba3840d2c88c6a21ab17db36ce32c5f7eafa65780d34b598d725bcd78621d24376e99d41bd9953e902227a855fc24a822772fb915f768549c419e2e169acaf6b3d351c4c58e3ece07397d1a9", 0x5}, 0x50) r6 = open_tree(r1, &(0x7f0000001a40)='./file0\x00', 0x800) socket$can_j1939(0x1d, 0x2, 0x7) add_key$user(&(0x7f0000001a80), &(0x7f0000001ac0)={'syz', 0x3}, &(0x7f0000001b00)="7abab1b421e01943311fd6ad631aa21cb26855680eb9421481d122b0568691917037992619dfda83f7601f9ab16f3cf6c7244c025046844764bfa0a5094eb50e2d48babbdeecdea2b2cd4c74e337ab7b9be83cd7542df0fdc4d1b78d3ca15004140d399417e20df0c298b0ee3ae249023099379f0e94a2cf4d893d890c8c8744be62a953a7b8b2d2", 0x88, r3) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000001bc0)={{{@in6=@local, @in6}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000001cc0)=0xe8) ioctl$SG_IO(r6, 0x2285, &(0x7f0000002f00)={0x53, 0xffffffffffffffff, 0x1000, 0x4, @buffer={0x0, 0x9b, &(0x7f0000001d00)=""/155}, &(0x7f0000001dc0)="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", &(0x7f0000002dc0)=""/225, 0x8, 0x5, 0x1, &(0x7f0000002ec0)}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003140)={&(0x7f0000002f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcd, 0xcd, 0x3, [@union={0xb, 0x5, 0x0, 0x5, 0x0, 0xb, [{0x2, 0x1, 0x100}, {0x9, 0x0, 0x80}, {0xd, 0x3, 0x7}, {0x7, 0x2, 0x3}, {0x6, 0x1, 0x6}]}, @enum={0xa, 0xa, 0x0, 0x6, 0x4, [{0x3, 0x69}, {0xa, 0xa68}, {0xe}, {0x1, 0xa4}, {0x3, 0xffffffff}, {0xe, 0x8}, {0x10, 0xfff}, {0xb, 0x14000000}, {0x9, 0x9}, {0xb, 0x8001}]}, @datasec={0x8, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x4, 0x6}], "fe"}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x31, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000003080)=""/179, 0xeb, 0xb3, 0x1, 0x3, 0x10000, @value=r1}, 0x28) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000003180), &(0x7f00000031c0)=0x4) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000003200), 0x10) syz_open_dev$usbfs(&(0x7f0000003240), 0x40, 0x8000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000003280)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003700)=[{&(0x7f00000032c0)="1f8a1074a0d1c2b427dc0d091f9d1de08db8356b8d474a27f023f6b90b513c3f150d03a9fdf281faec294c976b9ceef9b04e902391f8605f22052d418733dbfc2d0235b77883a5a6f40108709665bda2f7ba6751fddbbc8c252e659730f77881c39b84a2452b293102544a8680cde20c9bb5ae0c9dbb9a66579e1e", 0x7b}, {&(0x7f0000003340)="2b0f7a5ccb19530bc21739f445a12c5931b0da3bd7918c58a3382bb2e0485e3f6df77b538c8585bbcb523cb18480bd0886b573a927885b4bf3513f55f62421ed8fc86f26323cf2ffb7f5406abe0e4aaad755b8fa2454dfb493617f9f1152de17155686df7edc8b3b2ea7aa700218965b53b33e7acde9d99edda819fd45acb0d14ce827999c6c2d890ef5cba1d901ed470baa7b21dce0786c21b8f3ebf5a2cebe50248cde49a47eaf0376fa9fea1b3c47a45550826cc3a33455", 0xb9}, {&(0x7f0000003400)="3fd81990404ee6c35b3c81fde665c071fc26089f3869e220f46adbace0527e96078dba16d6a16a8404e96c7e189a3c9f0843dfd31dc5360bee5baad25ea8aac996307036be4aefed5d27f1239094c20f0e99454e4c1ecf855e5c688f4c9834ecb5a12f056d4f40", 0x67}, {&(0x7f0000003480)="3112ee7bb35baff2ab33ee04511d831225", 0x11}, {&(0x7f00000034c0)="4d0da14272ccbbc62601bc8f855a35e8a2e2fa397fe21a74c580e217b3281ddc4ea99f41b42af4b9da54f77c4adc73b715cf5d3f2d23a2f72a0bdedf8d8278b2b49fe2d889802dc5a91a4c236efb2f2bb8778387634f99c51baac7a1a963fbd9b06d9f4c7be46d967d64204602d073aad4734c19326e689e222ec779ca4f1890304eadc4611a5cc1c26460a1b754d9ba3f001a7e03015fa7d542fd3cec1aff9c96b9756e7a8f1a58f3f394943c9d60072f8c9f272ad8f66459a0ef9230b6", 0xbe}, {&(0x7f0000003580)="335814951b1232d33ab4ec4e2ccd4ad2f66102cc5f306f987f10ef1f5282b299ef5196cc204b7921043dd7e00e36419a3d5d4b06eca7640aa879dfecee9e13aa19f2dfe923b4b2a0d6bfc93e4ec945139893221054d9567cd50e594a20c08c86c01ab2f2abf294d191993522764056d0934acc9be5dacef5b1e683d4ee159e6af618bb7f9a1b1e4ab790649a59d5b56338209fe00f36a16fd1a3a86e624d6e81af9ba474f31709eb4de7b9a161593b436f7beaf753392591a2b9fffb95", 0xbd}, {&(0x7f0000003640)="e6c62b3047c4ee7ea00b53b4f8f7c20032664420b5ce9a3c904e393f94fdf2b785adca4f4fea874171ae2ac5fa10cb3d70ba63b6853a967ad0d30d005d5654f3252e6ee57afc8243a244", 0x4a}, {&(0x7f00000036c0)="2d9fa9a74e955b397163b53ffd5820a48945b211cf7a920dad1632f4bb92ed06b743249616593605892d99156e1983c160b5d8a2", 0x34}], 0x8, &(0x7f0000003780)=[@ip_retopts={{0x44, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xd2, 0x0, 0x4, [0x9, 0x2, 0x6, 0x6]}, @ssrr={0x89, 0xb, 0x96, [@multicast2, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x14, 0xe1, 0x1, 0x6, [{@private=0xa010101, 0x9}, {@multicast1, 0xb75b}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_retopts={{0x44, 0x0, 0x7, {[@rr={0x7, 0x13, 0x8, [@rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2]}, @lsrr={0x83, 0x1b, 0xe5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback, @broadcast, @empty, @broadcast]}, @noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x60000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe7}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x39, 0x1, 0x0, [{@private=0xa010102, 0x4}, {@multicast1, 0x101}, {@private=0xa010100, 0x1}, {@rand_addr=0x2, 0x100}, {@rand_addr=0x64010101, 0x74fa}, {@loopback, 0x8}, {@multicast1, 0x7}]}, @timestamp_prespec={0x44, 0xc, 0xb4, 0x3, 0x2, [{@private=0xa010100, 0x4}]}]}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x9c, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x90}, {@private=0xa010100, 0x4}, {@loopback, 0xe0}, {@empty, 0x5}, {@broadcast, 0x7fff}, {@private=0xa010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xe0d}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0xc7, 0x1, 0x6, [{@private=0xa010100, 0x2}, {@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}, {@multicast2, 0x1}, {@private=0xa010100, 0xc}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x200}, {@empty, 0x200}]}, @timestamp={0x44, 0xc, 0xac, 0x0, 0x0, [0x5, 0xfff]}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xaa, 0x0, 0x0, [0x2, 0x2, 0x80000001]}, @timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x8, [{@multicast2, 0xda}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@broadcast, 0x5}]}]}}}], 0x230}}], 0x1, 0x40080) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f0000003a00)={0x4, 0x1, 'client0\x00', 0x0, "1a903b3e685b26c8", "579470a880554a09b1d98977a3b65cbb07d2269e52122ed82c586f41bdf90ace", 0x2, 0x1bb}) flock(r1, 0x0) write$binfmt_misc(r1, &(0x7f0000003ac0)="b9562bf93783bb42e78f36f4405534ffb35f7fa79b4560dae0f608c078d384900a6057515b04b1c8376bacfe095ee8b8767ef0be7bee45e032dae27365ca181f103801fdf3d0c3fb880c8c90a706033db927910e590d51db2693f105ddd8769584e9f765690b66315795f8a05dab93a3c6573f4dec1a2fb289869c7faae0286e58", 0x81) keyctl$reject(0x13, r3, 0x0, 0x8, r3) 22m34.465896316s ago: executing program 32 (id=1691): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x1}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x10) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="c4be7e50382c0cdddee0a6ac7a336221359277b0ddb6f51d22b8cb3cfb53f86872af41233a43afa0ddd546247ebeba1592c136e1360961998b8d4e16f6012ecea98e64b0bb1beabfefdfc2727095e5fc43657dafe31d7b3aaf7904f07d513399dc0fd4b694c3c54e988f3904d3ee6950febb73023da71f93780fb54837043b5c8370362f6589af2858128ed0c4aba8277b555db9ee990a9195fd7bad5f", 0x9d, r3) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000400)=0x7) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000440)='trusted\x00', &(0x7f0000000480)='/dev/vhost-net\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000004c0)={"9d29d979815ac24eb845f9781c64d64b", 0x0, 0x0, {0x40, 0x1}, {0x9, 0x9}, 0x2000000, [0xebf, 0x6, 0x81, 0xb, 0x6, 0x9, 0xfffffffffffffffd, 0x3, 0xcc, 0x1, 0xe, 0x6, 0x8000000000000001, 0x0, 0x100, 0x1]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000005c0)={"c817725d4132ffe1378c60c1c2602634", 0x0, 0x0, {0x5, 0x1b5}, {0xab0f, 0x5}, 0xfa, [0x100000, 0x100, 0xd3, 0x7, 0x10, 0x6, 0x7, 0x6, 0x5, 0x8, 0x7, 0x5, 0x7, 0xffffffffffffffff, 0x1, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000006c0)={"dacd3337f49b43f5524963f949ef1378", r4, r5, {0xc0, 0x3}, {0x6, 0xc}, 0x7ff, [0x2, 0x4, 0x37, 0xfffffffffffffffb, 0x5, 0x6, 0x0, 0x7fffffff, 0x4, 0xd1, 0x5, 0x0, 0xfffffffffffffffb, 0x3, 0xaaa, 0x5]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={0xffffffffffffffff, 0x0, 0xe1, 0x1000, &(0x7f00000007c0)="5b6453ba9aa4f56c47e6a79e48b8cd7890764dbf83327a149b34775624eb82f17ad82457a7cd9893b97d2e5c7c3f40dc94c4d1f33d789290fc2982ae782c4a1280a801d00b7bbbaf5b9a38e87914f641ddec8072004d4efd93f68931f171dce8139d92f08ed5b347d5b3b41ffa7a43885e7a0cd012651d0d519a872c6ab24c61c764fd3b582735d5a6ea9f07bb9549662cff2628b5018aae285e429c8418454206e28a0093882013acdee197466630d8dd7255e30cb5e93b7acd90cb6bee4e0ea1c4a564bef12e19b14cf3646c23a9e8146b70320bea4d49d168358d7332578ae1", &(0x7f00000008c0)=""/4096, 0xe, 0x0, 0x80, 0x7b, &(0x7f00000018c0)="57947fc56fc30e6bb8beebe018531b7c0905d4b9cd9e4221d59aae84c02feb31163723fcd7decb1eb541c81e825b169debda910d56b3c33b73984e8581863d8f4e3fa5c31e97f50a9b5ddc1c0a039efdc5ec05d23c23ccc2dac26f273e022f096aa7ecf3caadc0c9335d23a716c5747b422b689e1f1f7f5337d9aebf5556af66", &(0x7f0000001940)="089856f73823d4be73f388d4cd5dff52111ab349061ff111609a89044e251f6692d2c4d1ce8d2e72549fcaa96c6775ba3840d2c88c6a21ab17db36ce32c5f7eafa65780d34b598d725bcd78621d24376e99d41bd9953e902227a855fc24a822772fb915f768549c419e2e169acaf6b3d351c4c58e3ece07397d1a9", 0x5}, 0x50) r6 = open_tree(r1, &(0x7f0000001a40)='./file0\x00', 0x800) socket$can_j1939(0x1d, 0x2, 0x7) add_key$user(&(0x7f0000001a80), &(0x7f0000001ac0)={'syz', 0x3}, &(0x7f0000001b00)="7abab1b421e01943311fd6ad631aa21cb26855680eb9421481d122b0568691917037992619dfda83f7601f9ab16f3cf6c7244c025046844764bfa0a5094eb50e2d48babbdeecdea2b2cd4c74e337ab7b9be83cd7542df0fdc4d1b78d3ca15004140d399417e20df0c298b0ee3ae249023099379f0e94a2cf4d893d890c8c8744be62a953a7b8b2d2", 0x88, r3) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000001bc0)={{{@in6=@local, @in6}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000001cc0)=0xe8) ioctl$SG_IO(r6, 0x2285, &(0x7f0000002f00)={0x53, 0xffffffffffffffff, 0x1000, 0x4, @buffer={0x0, 0x9b, &(0x7f0000001d00)=""/155}, &(0x7f0000001dc0)="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", &(0x7f0000002dc0)=""/225, 0x8, 0x5, 0x1, &(0x7f0000002ec0)}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003140)={&(0x7f0000002f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcd, 0xcd, 0x3, [@union={0xb, 0x5, 0x0, 0x5, 0x0, 0xb, [{0x2, 0x1, 0x100}, {0x9, 0x0, 0x80}, {0xd, 0x3, 0x7}, {0x7, 0x2, 0x3}, {0x6, 0x1, 0x6}]}, @enum={0xa, 0xa, 0x0, 0x6, 0x4, [{0x3, 0x69}, {0xa, 0xa68}, {0xe}, {0x1, 0xa4}, {0x3, 0xffffffff}, {0xe, 0x8}, {0x10, 0xfff}, {0xb, 0x14000000}, {0x9, 0x9}, {0xb, 0x8001}]}, @datasec={0x8, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x4, 0x6}], "fe"}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x31, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000003080)=""/179, 0xeb, 0xb3, 0x1, 0x3, 0x10000, @value=r1}, 0x28) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000003180), &(0x7f00000031c0)=0x4) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000003200), 0x10) syz_open_dev$usbfs(&(0x7f0000003240), 0x40, 0x8000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000003280)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003700)=[{&(0x7f00000032c0)="1f8a1074a0d1c2b427dc0d091f9d1de08db8356b8d474a27f023f6b90b513c3f150d03a9fdf281faec294c976b9ceef9b04e902391f8605f22052d418733dbfc2d0235b77883a5a6f40108709665bda2f7ba6751fddbbc8c252e659730f77881c39b84a2452b293102544a8680cde20c9bb5ae0c9dbb9a66579e1e", 0x7b}, {&(0x7f0000003340)="2b0f7a5ccb19530bc21739f445a12c5931b0da3bd7918c58a3382bb2e0485e3f6df77b538c8585bbcb523cb18480bd0886b573a927885b4bf3513f55f62421ed8fc86f26323cf2ffb7f5406abe0e4aaad755b8fa2454dfb493617f9f1152de17155686df7edc8b3b2ea7aa700218965b53b33e7acde9d99edda819fd45acb0d14ce827999c6c2d890ef5cba1d901ed470baa7b21dce0786c21b8f3ebf5a2cebe50248cde49a47eaf0376fa9fea1b3c47a45550826cc3a33455", 0xb9}, {&(0x7f0000003400)="3fd81990404ee6c35b3c81fde665c071fc26089f3869e220f46adbace0527e96078dba16d6a16a8404e96c7e189a3c9f0843dfd31dc5360bee5baad25ea8aac996307036be4aefed5d27f1239094c20f0e99454e4c1ecf855e5c688f4c9834ecb5a12f056d4f40", 0x67}, {&(0x7f0000003480)="3112ee7bb35baff2ab33ee04511d831225", 0x11}, {&(0x7f00000034c0)="4d0da14272ccbbc62601bc8f855a35e8a2e2fa397fe21a74c580e217b3281ddc4ea99f41b42af4b9da54f77c4adc73b715cf5d3f2d23a2f72a0bdedf8d8278b2b49fe2d889802dc5a91a4c236efb2f2bb8778387634f99c51baac7a1a963fbd9b06d9f4c7be46d967d64204602d073aad4734c19326e689e222ec779ca4f1890304eadc4611a5cc1c26460a1b754d9ba3f001a7e03015fa7d542fd3cec1aff9c96b9756e7a8f1a58f3f394943c9d60072f8c9f272ad8f66459a0ef9230b6", 0xbe}, {&(0x7f0000003580)="335814951b1232d33ab4ec4e2ccd4ad2f66102cc5f306f987f10ef1f5282b299ef5196cc204b7921043dd7e00e36419a3d5d4b06eca7640aa879dfecee9e13aa19f2dfe923b4b2a0d6bfc93e4ec945139893221054d9567cd50e594a20c08c86c01ab2f2abf294d191993522764056d0934acc9be5dacef5b1e683d4ee159e6af618bb7f9a1b1e4ab790649a59d5b56338209fe00f36a16fd1a3a86e624d6e81af9ba474f31709eb4de7b9a161593b436f7beaf753392591a2b9fffb95", 0xbd}, {&(0x7f0000003640)="e6c62b3047c4ee7ea00b53b4f8f7c20032664420b5ce9a3c904e393f94fdf2b785adca4f4fea874171ae2ac5fa10cb3d70ba63b6853a967ad0d30d005d5654f3252e6ee57afc8243a244", 0x4a}, {&(0x7f00000036c0)="2d9fa9a74e955b397163b53ffd5820a48945b211cf7a920dad1632f4bb92ed06b743249616593605892d99156e1983c160b5d8a2", 0x34}], 0x8, &(0x7f0000003780)=[@ip_retopts={{0x44, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xd2, 0x0, 0x4, [0x9, 0x2, 0x6, 0x6]}, @ssrr={0x89, 0xb, 0x96, [@multicast2, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x14, 0xe1, 0x1, 0x6, [{@private=0xa010101, 0x9}, {@multicast1, 0xb75b}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_retopts={{0x44, 0x0, 0x7, {[@rr={0x7, 0x13, 0x8, [@rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2]}, @lsrr={0x83, 0x1b, 0xe5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback, @broadcast, @empty, @broadcast]}, @noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x60000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe7}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x39, 0x1, 0x0, [{@private=0xa010102, 0x4}, {@multicast1, 0x101}, {@private=0xa010100, 0x1}, {@rand_addr=0x2, 0x100}, {@rand_addr=0x64010101, 0x74fa}, {@loopback, 0x8}, {@multicast1, 0x7}]}, @timestamp_prespec={0x44, 0xc, 0xb4, 0x3, 0x2, [{@private=0xa010100, 0x4}]}]}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x9c, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x90}, {@private=0xa010100, 0x4}, {@loopback, 0xe0}, {@empty, 0x5}, {@broadcast, 0x7fff}, {@private=0xa010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xe0d}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0xc7, 0x1, 0x6, [{@private=0xa010100, 0x2}, {@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}, {@multicast2, 0x1}, {@private=0xa010100, 0xc}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x200}, {@empty, 0x200}]}, @timestamp={0x44, 0xc, 0xac, 0x0, 0x0, [0x5, 0xfff]}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xaa, 0x0, 0x0, [0x2, 0x2, 0x80000001]}, @timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x8, [{@multicast2, 0xda}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@broadcast, 0x5}]}]}}}], 0x230}}], 0x1, 0x40080) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f0000003a00)={0x4, 0x1, 'client0\x00', 0x0, "1a903b3e685b26c8", "579470a880554a09b1d98977a3b65cbb07d2269e52122ed82c586f41bdf90ace", 0x2, 0x1bb}) flock(r1, 0x0) write$binfmt_misc(r1, &(0x7f0000003ac0)="b9562bf93783bb42e78f36f4405534ffb35f7fa79b4560dae0f608c078d384900a6057515b04b1c8376bacfe095ee8b8767ef0be7bee45e032dae27365ca181f103801fdf3d0c3fb880c8c90a706033db927910e590d51db2693f105ddd8769584e9f765690b66315795f8a05dab93a3c6573f4dec1a2fb289869c7faae0286e58", 0x81) keyctl$reject(0x13, r3, 0x0, 0x8, r3) 21m18.952678444s ago: executing program 33 (id=1876): capset(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r5 = fanotify_init(0xf00, 0x2) fanotify_mark(r5, 0x105, 0x8971, r4, 0x0) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000200), 0x3c}], 0x4c) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') 17m44.597633916s ago: executing program 0 (id=2291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x3, &(0x7f0000000240)=0xfffffc01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x1, 0x4}, 0x50) mount$9p_rdma(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x30428, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$kcm(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 17m43.079411781s ago: executing program 0 (id=2293): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x174, 0x17, 0x400, 0x0, 0x0, {{@in6=@private0, 0x4d6}, @in6=@mcast2, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa}, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x0, @in=@multicast2}]}]}, 0x174}}, 0x2004c0c0) 17m42.852389066s ago: executing program 0 (id=2294): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f460cd20110710029f3b01020301090224"], 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000002180), &(0x7f00000021c0)=0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sg(&(0x7f0000000180), 0x8000100000000, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffe, 0x2, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00', 0xfffffffffffffffd, 0x80000800, 0x16, 0x0, 0x0}) 17m39.111621273s ago: executing program 0 (id=2297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17m38.976899226s ago: executing program 0 (id=2298): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = dup(r0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000280)={{0xeb8, 0x5}, {0xeb8, 0x673ec22f}, 0x1001, 0x5}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3fea21dd39c231a4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) mmap(&(0x7f0000a62000/0x4000)=nil, 0x4000, 0x1000007, 0x8010, 0xffffffffffffffff, 0x1000) r4 = syz_open_dev$video(&(0x7f0000000400), 0x8000000000000d, 0x0) r5 = syz_usb_connect(0x3, 0x1b, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xbd, 0x1a, 0xbd, 0x8, 0x19d2, 0x167, 0xbc89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x8, 0x10}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) connect$unix(r6, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) syz_usb_control_io$printer(r5, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x40, 0xb, 0x39, "be1407571a044bf8bfee5983f2b765b03de7a2f8065624488e038839106bf9726a265f7f87cce90f4dc3d9803b72370ae42e998b3d4bb54d05"}, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000280)={0x20, 0x0, 0x1c, {0x1a, "d9a880f8f3530705a75205efde6701ca300bf12a91cc34c453b6"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0xa}}) syz_usb_control_io(r5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000440)={0x0, 0x1, 0x6, 0x5}) creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x7f, &(0x7f0000000100)) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0x1000, 0x3, 0x1, {0x8, @sdr={0x50313459, 0x55c}}, 0xfffffff7}) syz_open_dev$loop(&(0x7f0000000000), 0xb, 0x80) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f0000002a00)=""/4096) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x6, &(0x7f0000000300)=ANY=[@ANYRESDEC=r4, @ANYRES64=r3, @ANYRES16=r4, @ANYRESHEX=r4, @ANYRES16=r7], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) 17m38.346157168s ago: executing program 0 (id=2299): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xeffb, "66c5aff8a6eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 17m22.993418844s ago: executing program 34 (id=2299): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xeffb, "66c5aff8a6eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 8m52.868734459s ago: executing program 35 (id=3643): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x20008800) 7m48.492209146s ago: executing program 2 (id=3945): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000001380)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, r1, 0x0, 0xa, 0xffd9, &(0x7f0000000180)="d3929d732e4f4959c54874fe90d5a2c28a", 0x4}) 7m48.275740766s ago: executing program 2 (id=3946): socket$netlink(0x10, 0x3, 0x8000000004) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) pwrite64(r0, 0x0, 0x0, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) userfaultfd(0x80801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000004a80)={0xd, @output={0x0, 0x1, {0x0, 0x2}, 0x101, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xc82c2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='( \x00\x00', @ANYRES16=r5, @ANYBLOB="0100fcfffffffadbdf250100000004000180100002800c0001800400010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000c050) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) 7m48.27515489s ago: executing program 3 (id=3947): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000d00)="bc4d47a357967967c1", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="406d276c47022c86a4d252b3c1a2c9f25bff83ff36a8b11be47eeadfae8bcad0fb6870d49cc2d0903cf69831d5c3102f944cdb6ad74ed3f95a70b5d7d433ff0c9075a3f394b079377d4c572235171b27bbd7691b50fc26e082f32301384876b1962f851ad52827273450a6056b6a55585c57", 0x72}, {&(0x7f0000000040)="a9", 0x1}, {&(0x7f0000000200)="9170ec2510235346724608a462af6f60572498b20127624ba391c9584c781f969fbf783db5f77b1685ed488d669b6a71c218ca132c4bf37da88336a52e756e6802d34c6d32c8af0e6930c6b559d07126064788f06708def51618cfc7f4d01a0cf6343c18e8c785ef62cd5665d8ef02d6b362c1ff13ce906fea160f264bfd", 0x7e}, {&(0x7f00000010c0)="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", 0xcd9}], 0x4, &(0x7f0000000580)=[{0xc8, 0x107, 0x9, "7087f0b23718636304cfae036d823195fa36d746cb5e6e876c4c125f1259a6051ad5b39f65bbf372481175e3088a0d279b0bbc271843d44e4d9e38d853dc74a663510578e64bb3fe64a77308138a011fb4afd85dd5d9a4ae43c94e3bd7d2bf95b56c014968c9afb7f37e0bbfb04def4698ca6c3f5c97ab9f46a530af795c0020c5c39bb88fe9ab2b1610306c92edf2986864648b9a090f5bd43f920c83e3804f351e65c5c31b8d67db66d0743bf223898bd9aad6"}], 0xc8}}], 0x2, 0x60000040) 7m47.860910311s ago: executing program 3 (id=3949): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$nci(r0, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x1, 0x1}, 0x4) 7m47.757257196s ago: executing program 2 (id=3950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a60000000060a0b0400000000000000000200000034000480300001800a0001006d6174636800000020000280080002400000000009000100647363700000000007000300000055000900010073797a30000000000900020073"], 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 7m47.570120113s ago: executing program 3 (id=3951): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7fff}, @broadcast, @broadcast, @random="d5ab49a0e558", {0x4, 0x10}}, 0x39, @val={0x8c, 0x10, {0x970, "ef4ee3adcba4", @short="0a3b85e4b34fa514"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x7, 0x1000]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xac, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "042f2e7380a2b634bdd2dc9cfbdeccdc"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f560bf047e356b6b0984c8e157a8d935"}, @NL80211_ATTR_PMK={0x14, 0xfe, "92b5852f998566907a36f93b6ea92e04"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "f46700000000000000076f2df3cd01cc"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cefc07058c87e86fdc8993f71fa23ecc"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e695bf7a5d0de8ba3d39ea3eabb1600d"}]}, 0xac}}, 0x4) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x142b23) r2 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af75010203010902b8c001080910030904180202b41d3f0109050e03ff050207cc26f22042a1ed0929e5"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) accept4(r2, 0x0, 0x0, 0x800) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/disk', 0x8a883, 0x12) socket$nl_route(0x10, 0x3, 0x0) 7m45.972012151s ago: executing program 2 (id=3956): socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 7m45.705705933s ago: executing program 2 (id=3958): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x84, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 7m45.062255639s ago: executing program 3 (id=3960): socket$netlink(0x10, 0x3, 0x8000000004) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) pwrite64(r0, 0x0, 0x0, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) userfaultfd(0x80801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000004a80)={0xd, @output={0x0, 0x1, {0x0, 0x2}, 0x101, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xc82c2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='( \x00\x00', @ANYRES16=r5, @ANYBLOB="0100fcfffffffadbdf250100000004000180100002800c0001800400010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000c050) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) 7m43.922611181s ago: executing program 2 (id=3963): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x4, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x5, 0x8ca7, 0xfffffffc}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) timerfd_create(0x8, 0x80000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000500)="07a2b4190d55e7c4e96b312cd6db20c074fea209674265a10ac05eace6a74aed9cc0290188eadabee053849efb1596ccf78c5b934d1aab3ba5e594f876a07874d6c1a8f953ca69c6685740c539c7a956991da1c2a435d2bcc70c3e5c5a3f4e75eb3f20c4afa74805ec7d7e66b68bea3a25ff74e07f5f07314d923187f1932a608b5812b64e9f", 0x86}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8011) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 7m43.776123816s ago: executing program 3 (id=3964): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) 7m38.802200417s ago: executing program 3 (id=3968): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1a1001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 7m28.559110798s ago: executing program 36 (id=3963): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x4, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x5, 0x8ca7, 0xfffffffc}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) timerfd_create(0x8, 0x80000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000500)="07a2b4190d55e7c4e96b312cd6db20c074fea209674265a10ac05eace6a74aed9cc0290188eadabee053849efb1596ccf78c5b934d1aab3ba5e594f876a07874d6c1a8f953ca69c6685740c539c7a956991da1c2a435d2bcc70c3e5c5a3f4e75eb3f20c4afa74805ec7d7e66b68bea3a25ff74e07f5f07314d923187f1932a608b5812b64e9f", 0x86}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8011) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 7m23.375998153s ago: executing program 37 (id=3968): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1a1001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 6m14.676587152s ago: executing program 6 (id=4154): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x6, 0x6}]}, 0x10) getresuid(&(0x7f0000000380), &(0x7f00000003c0), 0x0) pwritev2(r3, 0x0, 0x0, 0xffffffff, 0x4, 0x4) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000501, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000000000)) r5 = msgget(0x2, 0x61) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000001c0)) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000300)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x8, 0x5, 0xf, 0x1, 0xa, 0x1, 0x200, 0x9, r0, r0}) 6m12.645465147s ago: executing program 6 (id=4156): syz_usb_connect(0x5, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af75010203010902b8c001080910030904180202b41d3f0109050e03ff050207cc26f22042a1ed0929e5"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) 6m8.353162351s ago: executing program 6 (id=4166): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) memfd_create(0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) 6m6.921636586s ago: executing program 6 (id=4170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x220000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x278040) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) ioctl$int_in(r2, 0x40000000af01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r1}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000380)=0x419, 0x4) connect$pptp(r1, &(0x7f0000000280)={0x18, 0x2, {0x3, @empty}}, 0x1e) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04040a000000000000aa336584"], 0xd) 6m6.754212807s ago: executing program 6 (id=4172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x40090}, 0x4008004) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) 6m5.443532731s ago: executing program 6 (id=4174): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x6, 0x6}]}, 0x10) getresuid(&(0x7f0000000380), &(0x7f00000003c0), 0x0) pwritev2(r3, 0x0, 0x0, 0xffffffff, 0x4, 0x4) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000501, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000000000)) r5 = msgget(0x2, 0x61) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000001c0)) r6 = getegid() msgctl$IPC_SET(r5, 0x1, &(0x7f0000000300)={{0x0, 0xee00, 0x0, 0x0, r6, 0x7}, 0x0, 0x0, 0x8, 0x5, 0xf, 0x1, 0xa, 0x1, 0x200, 0x9, r0, r0}) 5m50.080304767s ago: executing program 38 (id=4174): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x6, 0x6}]}, 0x10) getresuid(&(0x7f0000000380), &(0x7f00000003c0), 0x0) pwritev2(r3, 0x0, 0x0, 0xffffffff, 0x4, 0x4) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000501, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000000000)) r5 = msgget(0x2, 0x61) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000001c0)) r6 = getegid() msgctl$IPC_SET(r5, 0x1, &(0x7f0000000300)={{0x0, 0xee00, 0x0, 0x0, r6, 0x7}, 0x0, 0x0, 0x8, 0x5, 0xf, 0x1, 0xa, 0x1, 0x200, 0x9, r0, r0}) 4m5.849629241s ago: executing program 8 (id=4376): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x20, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r2, 0x0, 0x0) 4m5.657958853s ago: executing program 8 (id=4378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x40000) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) 4m4.627086639s ago: executing program 8 (id=4379): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1a1001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 4m1.375426018s ago: executing program 8 (id=4382): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) times(&(0x7f0000000040)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80140, 0x0) ioctl$COMEDI_SUBDINFO(r1, 0x80486402, &(0x7f00000000c0)) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) ioctl$KVM_RUN(r0, 0xae80, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000180)={0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x7800, 0x7, 0x9, 0x87, {{0x7, 0x4, 0x2, 0x19, 0x1c, 0x64, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010101, {[@ssrr={0x89, 0x7, 0x31, [@multicast2]}, @noop]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x54, 0x66, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0x4}, {0x7, 0x10}, {0xe, 0x4}}, [{0x8, 0xb, 0x81}, {0x8, 0xb, 0xb6a}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xca68}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x228c}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f00000003c0)) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000400)='/sys/fs/smackfs/load\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r4, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000000, 0x6e}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2a}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r6 = syz_clone(0x8000, &(0x7f0000000600)="8428015133cc6966991a4ae9405ee1238fb28f5a69cff6f4db25f9a6f3e8ba41c13da8993c45938efa01972bbb975b1ab721a45e19259e98ab99488ddcd40b7db2eec594afe6bc473ace8d5799802135a5", 0x51, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="e7147e1f837c85a75285025751d4eddb1834f4a8e09d9c31bc8414cd69fd949eb56a3d4c65ff141589c84a606470999e8b1b17b1107c2d924d4524bb0bbb451815eb04167f02f9ead9bca8f2a04978ec8973352f6226bd17846b0db77a5db6faf1dab8661d45531b84d1bc815da4") r7 = accept4$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14, 0x0) sendfile(r7, r1, &(0x7f0000000800)=0x8, 0x79) listxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=""/61, 0x3d) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000008c0)={0x3, 0x1, @raw_data=[0x9, 0xc, 0x6, 0x8, 0x9, 0x7, 0xffff0001, 0xfffffffa, 0x9e, 0x10000, 0x6, 0x3, 0x5, 0xffff, 0x1, 0xd]}) umount2(&(0x7f0000000940)='./file0\x00', 0x5) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000980)=0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) r9 = syz_open_procfs(r6, &(0x7f00000009c0)='uid_map\x00') sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000003080)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003040)={&(0x7f0000000a40)={0x25a8, r4, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x2c}}}}, [@NL80211_ATTR_PROBE_RESP={0x10c, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x12b, 0x80, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x10, 0x7, @device_a, 0x6, @value=@broadcast, 0x1, 0x20000, @device_a, 0x100}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @prep={0x83, 0x1f, {{}, 0xd3, 0xc, @device_a, 0xa5, @void, 0x1, 0x1a, @broadcast, 0x7ff}}, @random_vendor={0xdd, 0xce, "eb7ce4e0dde7c2216da22f5318b7d770e20141abfe0bca97e4dac8a846274e61a877727b660d74ef5f2b8cd5db5f0bba9208509c7499ab2270fe0c12de753e081c62f48b36c680d2fc158c8210109d3b4a8a6245c67dd8ea3ee79cb569812a76e029ea17e98e44474866c1945e6e6a15aeee06dd1b8d93473ba9f0d4a8e6452497503d5747ce4c5d8ed3b09b7ebbb759c93b232a217a325dd797e1fbce3779c30e359fa88ec70e55a1a2db0c57e6af28f63dc4b1fb14a7b29aa2a713cb4256a9fe06e392572cd2a55d07db015ade"}, @chsw_timing={0x68, 0x4, {0x7, 0x81}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0xac, 0xff}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x163, 0x7f, [@supported_rates={0x1, 0x7, [{0x2}, {0x4, 0x1}, {0x30, 0x1}, {0x6, 0x1}, {0x5}, {0x1}, {0x30}]}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x2, 0x8c, @broadcast, 0xa, 0xffffffff, 0x4}}, @prep={0x83, 0x1f, {{}, 0x8, 0x2, @device_b, 0x3, @void, 0x5, 0x80000000, @broadcast, 0x10000}}, @perr={0x84, 0x2f, {0x0, 0x3, [{{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x2a}, {{}, @device_a, 0x1, @void, 0x2c}, {{}, @device_b, 0xfffffff8, @void, 0x3}]}}, @measure_req={0x26, 0xe3, {0x80, 0x9, 0x6, "49235558564b555fa7a860138f4bb3cb1b0ad03690cca1555407e4cafdf7a4aabd755c797d50084d7bea4174e49d29a5d8839d4da392d5ad506a03cde5aaf852e31253e0b8dbe8ab5701598824493e410c1d0a804cd4c4156f95e3c466e1c5ef4985aecc1332b181cd401b4bb25f02ea86644e3c7b45cfb842239b00014212281b8279e9b11c0ec6ab10b0ddc962b4892a4147f72e71b3b32fcec559be696677368aa5fc51c162f4d258ee5bc8a4b3bbf2fcf15bbb181431699102020e742bfab0807df0c065d1f0a1f3e36af449913ffeb70a77595af8c77b987e3736910f18"}}, @peer_mgmt={0x75, 0x6, {0x0, 0x2, @val=0xb, @void, @void}}]}, @NL80211_ATTR_FTM_RESPONDER={0x21e4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x2e, 0x3, "614aacbe949b77ad0293b9fa256ebba595ad9324ab053734c42ac96e8375d40c5abbee1c88b1df7babf8"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x96, 0x3, "1825dfd05bd18ce34ff0f51054017ada11558dea550305a574f8763ba98c105ac44b33157dfd5e616325a41c8d334b701c8f12da83773fc40cfb08ecacbd55cabb71458bfb3654ac92342def14b35cdec06ea925fdbaaa468681ffec6b455191165df6ca4545f74ae9425f1eba58b301f7012305419580e4e26887b0bbc3217867c37b649ae0f424e8b7cab0f92b833d8e49"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x8, 0x3, "8cde0935"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xfd, 0x3, "d50b609b7a019b4d25c8a51f33289484f6f129db1b248211c45bcc444d1f7c7dc1f3d6fda5ee71519d0d14eed37fc6e0320b5771d874c687b9407d31ff82ae60cc5368e83bd38a6897a858a6ccb04633ccada190a6ede25117af225eb042774edf8ff3d09d0f831ad6de94ae85a75e156676e55f905ce76b4256e1255915c3b688d9bf5ffee467a619aadbbdde11eeac17f1bf275e69dc3dbee466e168413dbbb1a6c5620936d31ac4bec1763caa394abbd90572b1000070961cfa90018890f17fd3e2febe260a6dff084ecc9fcd1b9327836b3bc4d800d5bb17939b255ae7c5a757d1356a9034aa184548a5b62ba784eaa250144867ff835e"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "469f0625b71aca60175d1fb385840d7e0cad5e36a1e271300d01d8f874e58de6feeb6e27b38017754373b92d2532a9e720307ce6d3ef01aa8965ce76a6f1d58e3b0c2dbbd7eec8352b58aae270156a77f7f20b5220f2b32ce5605f24f12403e7d843e5ceb6fc53c8355c527c42dec170c68a945199a441889b8d22db91d5173fc5a6ec66e95dbabe321801ea7c9c0717567083ff2d1aa47a14393e56e1f512d51875867434fb6ac4972bda6d17c0e4ed36808ec946e69b4ff9fa941a920220fa2940cc2e06ec8c1255fe8072fd95a7fc8967bb7d6f0f18ea55a014864c2a0031413744119f8734f58fe8959b0adae966e2ce94048e8b344ba6f0a4417ffa62bedbb1dab7037026276e2d830085fa385133458b716b08ace1bd0e2865f97dcef7c06bcc188f55e4693231071a8df4c96f4f869b29ebd5f87e39bfd8530e1a57919feae17611562c8ff41191244155f5626c4441cf9d86ea178f34ce7d1125c0634c0352a6cc228e0051ad067e5719b988ddc96dc0e9da7e648d912996c9615b3e32b96092f788169326a8a111af109cf872d0fd5e3e5e244177739632eaff4a68e4aad86c3a00a40c12bd92e522913b46a2c617171a22debbdb474e381e5a3832cdc6745e67566ab626d88e42a03a603661a0252bbf63d4f855abdfa5cb12595e8462271a7b5376be04ff7cd2645d19ad4832f76c6f086371b3744e77034c18a4188993f70ec55f4f1064b11a7e2933ad7ab5b64d69037097bd8a2713010d8a29d007288a30911219e0c65df404c698611e44d708dc6855ba2449c5a23fe7dc8e17a757d1937b09a3977f087e0a3ac1db7c423af5be7855afedf6dbe2150c073b01736af8e967e60175aee854011fa4cd11aa3af4893e529c0229a57a64e400b7734cf021410050c2d846bf4fc972497b6faea03481f8339ff9f51f4702849fd7049f8cd54c07944f9a225506485476425aeffcf95eed2d8a6d71e28309267813898895cd136deb14182dc39017dfcbffbc61170d03a9df054349b42018b77926dd4e060e887a21061156955b42d32ab0ce0861553420ce8bf743555dc776333222cea72c68d9ccfa9d8de16538e73a4e25a652dadea9155849a47f441d9e235ded46e4bd3af616c6953efc25a9a90913918b849799487c68baf54caa1f05f7da996356768f115de5a2bae4d07d284ebf5cacabe65dc8c7af933bc087786df89d8d56f93e66e5a0c3dc71f660dc4e5d3a818de5d5019548a4109d14e1d1cf166539ddc2c9496da785cd0943326f2d544f3d0e75dbf6397f8a82b19acd692004e9665024b18aae8827b08a19609df8e70c1c466f295b371f2384699f662c09b7c245ac96c81bedee7e3773ef399cc2ae56dcf7487fa892d278a542c48df1721efdb91df40e96193c05ade55a6330b4b0ebf6daac446dacbb9979a789805a8d3b0e5aa7749b55d92ce049892878ef03bcd6f83ae6c24f4695a842ebc6ffc0701a07149904ba3048603b31d7e71f7e7ed584fd1271a3200eee6b7175e3c83802078e76b8a6ffeb1006816837c7b00738b2400d91cfc57ff283105af032e81c95cd6648f0a4b9acbc17d71445563fb0ac1a725244a36342d67c5e4e0485f86d67782e41a918156614af296b6e9219a76a3134a910e59f329f27ccce92ac831a4cbc6cf695e0095700dd17098a2fa4072afc802ba146e32ae05d761e8c6d2f6ca534e97f863f5891423994d26cbda185d1d6c96d7fa020066e89f0a8ddee531e9c7a22a3cd188a80f855abbe64918dff3bee8dac59517507c9b935facd2d5de8d08cb48b83aff94c01fc56bbceadd2d4d1cf95fe57a0d389826399512b0d329f6816465e8e08f92f3a5aaed6057bdedf8b70d6692ba708630f4da384e5f700d7f7a4b2d20321fa1d4215ffc207d0269c63b3d696d70dda20ba9bfec5be958e273b6ad50fb4be379f4cec209e3c566acf57e3f20d9bcb8263c115617c948973ded40a07b93701dd59589d129c4b292ea1767b09bac641b25ee37c6a1eb718b11e9f44cb97ff8774b08f85c986b36229ac680b1919a17c3dd11eaf7152ca11a81100c78ad625dfacc9cba43ae715ec497dcae0b576655b40eedae64932e64d8f719c360fa63049ea8eaef357faec105e8172ebb73018a90fc3ff83d75c5932faae032454ded10bdc238ff16ac0132dca56cfdca9fbfaad0b306b2580bf5b35dadb8c9414429520bcc077019a0d4165a9f54dbff33ea70db18c02b2fff09a926d50fd8829f45d3a3d21a015fb89df4828b587e29b8d7f488ea7d9dc8fa64b872bb3d8720e7d0b7363b34c9ae488ed368491e412630ff5760d7d34f52e0c653c16dbea5ef88c1155fccac3fc463864b307f1b35907192ada22ec47c40f8780146230a905f1c260c52cc26465e4a1e66820e9d1e0525d67c5076634a0dfbab89b7fbe79cf530abd5b28f9e9f6c4b6a909c2542c731ace7a8821834629f23e6c0d59b1f5f8225f8f7ac2559e0451b7c400f5f9a2d1e0208ccf7b8ab57ac2e9a76f2aaa3ddfe24d1122000fa1168c618bfd3a24aa844ff524b435bc81050ff62d4399708ab85c303a533f4d69fff7ed7dfcbbabb1550194e3b5262a4a68a977fc9583456f6f62c057318da9e1ad7164812892a83f8b348246d34107dad50fc8b63c30f9413c6e1e3d789590a430985e541d5cfd836d70651ddefce616e6ec0f9520d5eda82b71f118efa647d7e3cb3488431ba14bc0c723331ab90c1867812b30648bff95662c0b3b25f8650247861758a6b0c5e47f9cc9d03ae5e65d632aa23675905b54a6ef061b9e645353553f1b10226ad6a26cdceed540bee90f4a7258401de7965e332c51d057e17a2058c53e689aafd02dffb3e8a041d8a6d1082309cf751f953e6e69e0a800800a0f7f00754cd01b93b657f884c94ef41fbf12695773340f3aec345a75d5d17e0161bced25e277c16350402fc18c7b411a34b232de3a0c6d57e1c0fc31ddce43d51ea16395885b16f63127a07b6a66f58d2db80aca967cd696cc936a058e22f7d0f8449623f5819300d5eb3768cc48a800b625eff3942ff8e99197b00685da9f73e7b1f42e743e1523ad9c6919ffc97ba9fad7d366c7f594182a74b5245d713b592114f06074591912e230f3ab54c9ccd24191eed19f845a8837f2fca73c34ee328141eb18d9bb07746eb8b6e47d281b99498261a45727fe54359af8ee44d10a82e65583d70c480f9bef664d572cf344293e2fe04552cbcb58d51fc113aecd033d0bb6a90972ef5ff07590cbd0a5af67b4abef3ab910cb8f95620a61b5dff248dd1584c9136035883cad0603d4fdf754c42a53fa5a323c29b75c739fbe3b4ed0e01e866af6de30051028c2e188015858f94fe08a0a05b20654d51374b29e6a7697a4b91a96c8d0a1811a1c898ebac4df78d6083bc3668ff11db9311b72bb0b961100ad126cf04fdaaa3e932c93bcac04e9db9129f1c3f8848493105cc04b8c735c566c3b558e599ed3a45ff7fbf89f79162f30dca79da4535b4f504f3023e95a7102daef42effb81ddf6a8571a86381a04196e518138afa9b09fdfa9cfd32370f37c14b7e9e873c94915fcbe2c08fddd23ea6781b43b9747a5011b72887c24584670c44738ec0391b0d771e8924e94b361a03559df7f024bb4976497e66e0903bb0aea0a4bdc7aa231023ef836f69edb572788dc0a3048cce76fda57d42cdf71751df09263f5e20c56b60f5b400014f5a2e841903a6bfdc5447f91a28989826367795055d7da2045bcabcd973e00928935aa0d108dcad80a8db674925e6039c54035c32d1d3b28f3425de8f2a7edfd26cbc4328c4c785ea7bc6b3bc509610081238b3f27b14cdaeeb6ac348cc6274019a0156136d1d164ef6b670e65851eef6f715bc553d22830a5284786b91c79cbea1096f2cd8471e8e41375a6aedcf426ac02b60d9cc6c04dd3564c09f9a8984fcd6bca4f7a7edf7d8cf4bdcb211c9e4356ff37dbc7f50e55aa29d6f4c7c65249f79ad75e96e6bd468bc8a2d41925c63dc635a38c4d329b8676ba6c4e49140f89a34c3d6b8f6272dacfd7ccfb2c3c080121c2adab5fe9523fe3bc4ebd3184c77109afa5fe35e42fc13be27578230a0d04510058924b022acbee3bd54a614739f1360f57b40965a369b6a7c60c837730496f9fb9742171c35314b894b9498f55b4fdef94301e605a64df50b6fda72ef6bede44512f286a7d7e6fd07e4cc4c662bafad00315492c64522fc3ca20e72a319dd8bd5a2ff7ffa172e60988f09d1f49fd68467a9689ba621a4e5e5a62f974280fddeabea85ebed34c9223a6a13a6b89f9108894dffe60be44d26666a9c944350bac23d706a508d77d513053b5c719bb175a862f1482659961b0f97a2525eab0adbaf974c7a186e13e238271f9ee9f5de142e0a3f40e86e144361699161d1d38807d1f61f55578d63c23e5d48a27343ae6240b292e5f9b8199e5e5d8c045aea920b77974ec3721e8c07113535e0a719ec165f236b172ca04757f869f6c31d0513dac41fa62ffe5e0459bb8e6bf4379160ca19728967e52ba8f3a8492ec8e766fc72a1bdf2693134366bb955f123ea842eb60c685e169946842c3ee6221d64d48c622732058ed234da90fda91625fe8bcbbd282cb6abdc1d8ac009c7e1a4ffd580e3e9d09a8b4c4e2565dab474d0ae6724edaa21d4af5d71c7b09fd5f6bab9c6b0a1c9bc7bb914b3aacfb7e9bf370f0854eacc1840ed8766dc7e9b83fb83ae5082a89b54b83e7ab953f89f88033419eb69bbd50eb424b136ec651992920d6e2c50ae4f8ed3fbaced3b49a831f93beb56c05eb476fdb7335f56230e1b1f5a6c67891e55ce6f1236df02bc3bbda9f8797f7a0bb8fd80ad2f468748913e76c83d1ae65f7087f84e40d517b30ebd4e9814159f58aeaac89c472c0b01d67b313fc4c7a37ce4e42887fd0919e4b8841c47055e77876cf19150bc3d47e48310e831c4cac94ecb959d1e49460577d9839c469103e7fd679272abe908d0351d6e714d98f312c5a8cf6eddc8014ec649456c8a9a5b256fed2cd27090e29c1a613a9ef7c01a550922cd145b572568b4b884a23320e5665db1fb010e7f59e696fc59f821da18e5d0c06f17b0d79e854d171a9dcd884e27071034cd43d49c5e39de45b7aa86aad94867cf94a001f6001eaf83a648b60dbd59278d8ec9f7812a51b012ce9d7f4c11829c34e14e44bb347928396780f61ddd21715706857bdcea1253de0ff893844b2992f577a91b4328bf6fa0dd50ce1b2f0459afd8d0ac5518892c901f106b9c1d614ebdf02029baee395f1f2db4836339f42f87ca223016977832449867219769ff2ebbb5037f38345919c8f18f5ba0d1287226bcb9be90adfdd1d056a94bb4debc0d0db27109ed629bc38952b8eef9bd2c38322743f97104f70f780e43f196cdc72def9613b4c74e4570625e798beec0617180e3bda1eb4197aaea921717bd478d8fc789e34349fad440127fe6ad95c60dfd871af3de526e8f1508bf9da3193200e7aac009920a0228fe53165611ab88836a3c6ee211d9a69ff4a63e500f66bf87059336938da250e24b7f49cda5c436ddaaed2268a52139c00d23cd15d178c678862985714ecfc5899a671229d40d302038572a38dff7b8424201ae4b8d1eb96e932dab75bdd7aec0bb25cc0a773bead1e84c75237f7fddec546e798a1c0c718fb28e9a00f142d2d325dc3d11e6ab9312ecbf68d449f670c59780812eaa41f051a06a750d9ed643acbb10786abeeb0d7d56d5aa099d04ff3906f4b9178"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}]}]}, 0x25a8}}, 0x20008081) recvmmsg(r9, &(0x7f000000bc40)=[{{&(0x7f00000030c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003180)=[{&(0x7f0000003140)=""/58, 0x3a}], 0x1, &(0x7f00000031c0)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f00000041c0)=""/226, 0xe2}, {&(0x7f00000042c0)=""/28, 0x1c}, {&(0x7f0000004300)=""/132, 0x84}], 0x3, &(0x7f0000004400)=""/250, 0xfa}, 0x5}, {{&(0x7f0000004500)=@qipcrtr, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004580)=""/42, 0x2a}, {&(0x7f00000045c0)=""/108, 0x6c}, {&(0x7f0000004640)=""/33, 0x21}, {&(0x7f0000004680)=""/121, 0x79}, {&(0x7f0000004700)=""/152, 0x98}], 0x5, &(0x7f0000004840)=""/254, 0xfe}, 0x4}, {{&(0x7f0000004940)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000004ec0)=[{&(0x7f00000049c0)=""/117, 0x75}, {&(0x7f0000004a40)=""/19, 0x13}, {&(0x7f0000004a80)=""/95, 0x5f}, {&(0x7f0000004b00)=""/174, 0xae}, {&(0x7f0000004bc0)=""/210, 0xd2}, {&(0x7f0000004cc0)=""/220, 0xdc}, {&(0x7f0000004dc0)=""/165, 0xa5}, {&(0x7f0000004e80)=""/42, 0x2a}], 0x8}}, {{0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)}, {&(0x7f0000005f80)=""/4096, 0x1000}, {&(0x7f0000006f80)=""/4096, 0x1000}], 0x4, &(0x7f0000007fc0)=""/98, 0x62}, 0xa}, {{0x0, 0x0, &(0x7f0000009040)=[{&(0x7f0000008040)=""/4096, 0x1000}], 0x1, &(0x7f0000009080)=""/3, 0x3}, 0x100}, {{0x0, 0x0, &(0x7f00000090c0), 0x0, &(0x7f0000009100)=""/48, 0x30}, 0x9}, {{&(0x7f0000009140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f000000a400)=[{&(0x7f00000091c0)=""/38, 0x26}, {&(0x7f0000009200)=""/80, 0x50}, {&(0x7f0000009280)=""/4096, 0x1000}, {&(0x7f000000a280)=""/68, 0x44}, {&(0x7f000000a300)=""/212, 0xd4}], 0x5, &(0x7f000000a480)=""/4096, 0x1000}, 0x200}, {{&(0x7f000000b480)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f000000b900)=[{&(0x7f000000b500)=""/248, 0xf8}, {&(0x7f000000b600)=""/122, 0x7a}, {&(0x7f000000b680)=""/93, 0x5d}, {&(0x7f000000b700)=""/76, 0x4c}, {&(0x7f000000b780)}, {&(0x7f000000b7c0)=""/248, 0xf8}, {&(0x7f000000b8c0)=""/43, 0x2b}], 0x7, &(0x7f000000b980)=""/10, 0xa}, 0x8}, {{&(0x7f000000b9c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f000000bbc0)=[{&(0x7f000000ba40)=""/125, 0x7d}, {&(0x7f000000bac0)=""/254, 0xfe}], 0x2, &(0x7f000000bc00)=""/22, 0x16}, 0xe}], 0xa, 0x10020, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) sched_setattr(r6, &(0x7f000000bec0)={0x38, 0x5, 0x0, 0x7, 0xfffeffff, 0x0, 0x7e, 0xf130, 0x0, 0xcf}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f000000c900)={&(0x7f000000bf00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f000000c8c0)={&(0x7f000000bf80)={0x940, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xb4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/proc/consoles\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9757}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x308, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x17c, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, '/dev/btrfs-control\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xccc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@]}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'b:.-,!&]%@@@[\'*\xffS)+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x88d1}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '$*$##.!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@$%)\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x27, 0x2, '/proc/sys/kernel/yama/ptrace_scope\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':!,-:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x15, 0x5, "231fe69a498ada289c806f18b52ec47e22"}, @ETHTOOL_A_BITSET_MASK={0x80, 0x5, "0fbfc61a7ad3ca79a8147445db3411af70d4aa793a639990e173464c9efd03665ee9b73fd50fc08a7647b008a00aa3b9d6e6be664ca4f63bb65ea156b89fc7d66fcebfd7ab419737e99df42602a27cf28033d698c904f8890ea6884e26caf023ebfd2b3b51e9ef6122ee4b1468c760f58e8e5884b4b932793e6eee89"}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "0b76bbdb61a4117db7d77e40e538c015833eed365865933eceeeb19328c63b3736166940cd2e9bd562358177d4a4e76eca437ecc69a2ed627f1aa574daf927399d71fc5e72289db091d1d14d62d5fa91998d3960984f766a92a818108e94f897cd9c3ee183"}, @ETHTOOL_A_BITSET_VALUE={0x7b, 0x4, "d2c8208b5a5e0f98332b2ecbd4b43e5599f89511a6aa229583be66d935fdc73e278b0e68f05ffb809e4ad4fcd7a965d73bc4a1179e0c887965d1b689f0a0e368c5702a017e96fd2f103ba7589f8744a880b863eb977266d6c4e40ad48d954edc6e95e0b8db4be43a4cff40bf7271d11bf7f6ba8caaed92"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x334, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5f, 0x4, "17d2998dfb1f79cc89681a08be3887bf4feb00273ad9259c4516afdd7bb9750c3afcbd7553a29bbfbe1759eca99ee52d508762106797f0203a0f7410719622ebbfb9abb9a0107cc389f72cd40ccd1834657524eda2e208503facf1"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_VALUE={0x69, 0x4, "8f3b0a1f0295bd89fa30904e424b7856bb7bb8b248ee92413edce1a588dfce91ab9e98e973bd67cca167da7d736144226efef3939c46cab66e846c83ae4dcb7785218e335be0ff6c078b1c0588632cb1581163f6eaa5a07ef5c5b704c5a75534b84c062da7"}, @ETHTOOL_A_BITSET_BITS={0x170, 0x3, 0x0, 0x1, [{0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'uid_map\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '-{]{(%.-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/proc/consoles\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '[@,-+{/{-$[\'[)*)\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa96}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/sys/fs/smackfs/load\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/sys/fs/smackfs/load\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4dd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, '/dev/btrfs-control\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/sys/fs/smackfs/load\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$)@^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1e800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '{}::&.^#^x]!!\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '!}($\'@.-\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x54, 0x4, "a692836b1526bdd3e6a38849287d6a141e381da7a60f262eab2606b29079481c097ce47956bbb53af4551d73d8901a6a9cf88807839634cf27ba86f5e6b033fa157f4199fb7d6ad1616f2c9a342ea7b5"}, @ETHTOOL_A_BITSET_MASK={0x9e, 0x5, "1ef1b14901ea4d0ca2858f1d4eaabe1253a94496396bcfc54d090087d74bf45f00c88a505fe66ca513e8ebe1f0786a21623121efdfdf6f4cd1c45bc3644b19d611ec2b078eee4b59f668dd6bf4874bf7ac85b986f5095db1046e61a18ed8375a3d6c9714d84a32d5908fe367bd03361f3c6a0c30d8a6b76807b126c5e6698d1cf13ab48f66794e689acc5c5869dbd1810f74fb797b48efe5895d"}, @ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "d901eec2a45ec9e226348e445f94b12a40d5cd65d2f6cea42f364c0af4961da4635505603a27b018abde2d3afd4aa8270e82640f885eecfaefcbd9ec45d27e12591d19aff72d0f3f108e4010e520566eb727897e1d4b08153e47a61a056c7d0f5a48d73b9f361dd91fad2380ea8a83ba25f01fd4f58251459033ddcc89f2c4fcf3c16c38f78b15f25ee0d35693c7b3e37d0d06ccb8ccc4ba705962429ffad69215fa4b2d6f17ddce8944c7959bec6467cdc9766d949dbec899a839a8c44b09765e9049f7ec97d0d7583dcc984a6c8b80b97e4c49cf9844f0f117856442dcee"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x940}}, 0x40000c0) 4m1.114270837s ago: executing program 8 (id=4383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 4m0.264871966s ago: executing program 8 (id=4385): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x20, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r2, 0x0, 0x0) 3m57.14959093s ago: executing program 7 (id=4388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x8940, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5bba}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9b}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x18000) 3m56.586413087s ago: executing program 7 (id=4389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a1001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 3m56.261157231s ago: executing program 7 (id=4390): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) close_range(r1, r1, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x9, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 3m55.052962091s ago: executing program 7 (id=4391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x20000, {0x0, 0x0, 0x0, r2, {0x1, 0xfff2}, {}, {0x8, 0xf}}}, 0x24}}, 0x40004) 3m54.412266746s ago: executing program 7 (id=4392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 3m53.544396257s ago: executing program 7 (id=4393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000083}, 0x80) 3m44.811334841s ago: executing program 39 (id=4385): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x20, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r2, 0x0, 0x0) 3m37.802185003s ago: executing program 40 (id=4393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000083}, 0x80) 3m24.131342018s ago: executing program 9 (id=4396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003"], 0xec}}, 0x0) 3m23.987439123s ago: executing program 9 (id=4397): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='pagemap\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000000)=[{&(0x7f00000018c0)=""/15, 0xf}], 0x1}) io_uring_enter(r1, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 3m23.903305818s ago: executing program 9 (id=4398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003"], 0xec}}, 0x0) (fail_nth: 4) 3m23.770337439s ago: executing program 9 (id=4399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x20000, {0x0, 0x0, 0x0, r2, {0x1, 0xfff2}, {}, {0x8, 0xf}}}, 0x24}}, 0x40004) 3m19.047414287s ago: executing program 9 (id=4400): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 3m18.141559353s ago: executing program 9 (id=4401): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r2, 0x1, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x30, 0x1411, 0x1, 0xfffffffe, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}}, 0x40) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x76, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2, 0x2}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x1800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203b}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) sendmmsg$inet(r3, &(0x7f0000000900), 0x0, 0x0) (async) getsockopt(r3, 0x1, 0x418b, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) 3m2.751554041s ago: executing program 41 (id=4401): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r2, 0x1, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x30, 0x1411, 0x1, 0xfffffffe, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}}, 0x40) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x76, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2, 0x2}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x1800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203b}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) sendmmsg$inet(r3, &(0x7f0000000900), 0x0, 0x0) (async) getsockopt(r3, 0x1, 0x418b, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) 2m32.250665108s ago: executing program 4 (id=4436): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[], 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "c1"}]}, 0x24}}, 0x0) 2m30.913224673s ago: executing program 4 (id=4438): creat(&(0x7f0000000300)='./file0\x00', 0x28) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004500), 0x4000, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2caaa9e9b1205dfaf417fbd5e713756e616d653d7472616ef33d66d7c02c00"]) 2m30.706180522s ago: executing program 4 (id=4439): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x1344}, 0x8) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x20000840) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac0500003aeb010203010902120001000020000904c40100fffd0180"], 0x0) shutdown(r4, 0x1) unshare(0x22020600) 2m28.494071053s ago: executing program 4 (id=4443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x900) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x10b) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x3}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="000000940100"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1809090, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x517a20f7, 0x8040000000000000}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r7, 0x4140, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) 2m20.216869425s ago: executing program 4 (id=4446): creat(&(0x7f0000000300)='./file0\x00', 0x28) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004500), 0x4000, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2caaa9e9b1205dfaf417fbd5e713756e616d653d7472616ef33d66d7c02c00"]) 2m16.96916664s ago: executing program 4 (id=4450): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x19, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x7, @vbi={0x5, 0x851, 0x7, 0x32314d48, [0x100025, 0x7], [0x1, 0xfffffffc], 0x13a}}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000180)={0x5, r0, 0x11, {0x8, 0x10000}, 0xfe}, 0x1) close(r3) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) landlock_create_ruleset(&(0x7f0000000000)={0x8b28, 0x3}, 0x18, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @map_val={0x18, 0x4, 0x2, 0x0, r6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @alu={0x7, 0x0, 0xb, 0xa, 0x8, 0xffffffffffffffff, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6a}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) pwritev(r2, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000340)="527302587e", 0x5}], 0x2, 0x0, 0x0) 2m16.612536615s ago: executing program 42 (id=4450): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x19, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000900)={0x7, @vbi={0x5, 0x851, 0x7, 0x32314d48, [0x100025, 0x7], [0x1, 0xfffffffc], 0x13a}}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000180)={0x5, r0, 0x11, {0x8, 0x10000}, 0xfe}, 0x1) close(r3) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) landlock_create_ruleset(&(0x7f0000000000)={0x8b28, 0x3}, 0x18, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @map_val={0x18, 0x4, 0x2, 0x0, r6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @alu={0x7, 0x0, 0xb, 0xa, 0x8, 0xffffffffffffffff, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6a}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) pwritev(r2, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000340)="527302587e", 0x5}], 0x2, 0x0, 0x0) 32.766153242s ago: executing program 5 (id=4521): openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001680)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8000, 0x0, 0xfffc}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) ptrace$pokeuser(0x6, r4, 0x7, 0x7) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040c4) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001440)="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", 0x2000, 0x0) 31.234669494s ago: executing program 5 (id=4522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x40090}, 0x4008004) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(r5, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) 29.096955624s ago: executing program 5 (id=4523): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1ffffffe) r1 = fcntl$dupfd(r0, 0x0, r0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6) ioctl$TCFLSH(r0, 0x400455c8, 0x1) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x97ff) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1905}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) eventfd(0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x100) 25.239735847s ago: executing program 5 (id=4524): openat2(0xffffffffffffffff, &(0x7f00000000c0)='./cgroup/file0\x00', &(0x7f0000000080)={0x140, 0x1e8, 0x2}, 0x18) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x1f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x40305828, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) (fail_nth: 3) 20.7405036s ago: executing program 5 (id=4525): r0 = socket$kcm(0x11, 0x200000000000006, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000004a00)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48e5", 0x2}], 0x1, &(0x7f00000018c0)=[@iv={0x18}], 0x18}], 0x1, 0x40840) syz_open_dev$MSR(&(0x7f0000000040), 0x80000000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000200)={r6, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r6, @in6={{0xa, 0x4e23, 0x6, @private0, 0x4}}, 0x6, 0x4bce, 0x2, 0x7, 0x4, 0x1, 0x3}, 0x9c) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 16.162483035s ago: executing program 5 (id=4526): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getpgid(0xffffffffffffffff) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa880003"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r7], 0x108}}], 0x1, 0xc040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x20, 0xe, 0x0, &(0x7f0000000300)="b53ee5d6bb0f50dbd01b54d22a52", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 0s ago: executing program 43 (id=4526): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getpgid(0xffffffffffffffff) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa880003"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r7], 0x108}}], 0x1, 0xc040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x20, 0xe, 0x0, &(0x7f0000000300)="b53ee5d6bb0f50dbd01b54d22a52", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): 1837.081625][ T5809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.081653][ T5809] usb 8-1: Product: syz [ 1837.081663][ T5809] usb 8-1: Manufacturer: syz [ 1837.081671][ T5809] usb 8-1: SerialNumber: syz [ 1837.090569][ T5809] usb 8-1: config 0 descriptor?? [ 1837.111789][ T5809] input: KB Gear Tablet as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input49 [ 1837.464146][T18984] usb 8-1: USB disconnect, device number 42 [ 1837.977203][T11490] Bluetooth: hci6: command tx timeout [ 1838.000307][T20163] chnl_net:caif_netlink_parms(): no params data found [ 1838.759716][T20271] No control pipe specified [ 1842.152025][T20163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.157233][T20163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.157469][T20163] bridge_slave_0: entered allmulticast mode [ 1842.171354][T20163] bridge_slave_0: entered promiscuous mode [ 1842.181903][T20309] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4362'. [ 1842.192909][T20192] chnl_net:caif_netlink_parms(): no params data found [ 1842.206224][T20163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.206390][T20163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.206599][T20163] bridge_slave_1: entered allmulticast mode [ 1842.209722][T20163] bridge_slave_1: entered promiscuous mode [ 1843.080388][T20163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1843.342863][T20163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1843.987348][T20163] team0: Port device team_slave_0 added [ 1844.100522][T20163] team0: Port device team_slave_1 added [ 1844.218656][T20192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.218805][T20192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.218954][T20192] bridge_slave_0: entered allmulticast mode [ 1844.220952][T20192] bridge_slave_0: entered promiscuous mode [ 1844.653592][T20192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.653694][T20192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.653974][T20192] bridge_slave_1: entered allmulticast mode [ 1844.656108][T20192] bridge_slave_1: entered promiscuous mode [ 1844.881244][T20163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1844.881258][T20163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1844.881273][T20163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1844.970778][T20163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1844.970799][T20163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1844.970824][T20163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1844.986320][T20192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1845.114070][T20192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1846.239486][ T12] bridge_slave_1: left allmulticast mode [ 1846.239518][ T12] bridge_slave_1: left promiscuous mode [ 1846.239822][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1846.325351][ T12] bridge_slave_0: left allmulticast mode [ 1846.325383][ T12] bridge_slave_0: left promiscuous mode [ 1846.325686][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1846.397685][ T12] bridge_slave_1: left allmulticast mode [ 1846.397719][ T12] bridge_slave_1: left promiscuous mode [ 1846.398001][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1846.473914][ T12] bridge_slave_0: left allmulticast mode [ 1846.473938][ T12] bridge_slave_0: left promiscuous mode [ 1846.474115][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.038250][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1848.123262][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1848.164900][ T12] bond0 (unregistering): Released all slaves [ 1848.733427][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1848.813302][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1848.874750][ T12] bond0 (unregistering): Released all slaves [ 1849.327944][T20192] team0: Port device team_slave_0 added [ 1849.498322][T20192] team0: Port device team_slave_1 added [ 1849.621242][T20163] hsr_slave_0: entered promiscuous mode [ 1849.622244][T20163] hsr_slave_1: entered promiscuous mode [ 1849.625382][T20163] debugfs: 'hsr0' already exists in 'hsr' [ 1849.625408][T20163] Cannot create hsr debugfs directory [ 1850.092820][ T12] hsr_slave_0: left promiscuous mode [ 1850.112641][ T12] hsr_slave_1: left promiscuous mode [ 1850.113531][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1850.153703][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1850.302844][ T12] hsr_slave_0: left promiscuous mode [ 1850.322659][ T12] hsr_slave_1: left promiscuous mode [ 1850.323520][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1850.383807][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1851.111215][ T996] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1851.163189][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1851.282493][ T996] usb 8-1: Using ep0 maxpacket: 8 [ 1851.284575][ T996] usb 8-1: config 0 has no interfaces? [ 1851.287501][ T996] usb 8-1: New USB device found, idVendor=19d2, idProduct=0167, bcdDevice=bc.89 [ 1851.287531][ T996] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.287547][ T996] usb 8-1: Product: syz [ 1851.287556][ T996] usb 8-1: Manufacturer: syz [ 1851.287564][ T996] usb 8-1: SerialNumber: syz [ 1851.291103][ T996] usb 8-1: config 0 descriptor?? [ 1851.323422][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1851.776139][ T996] usb 8-1: USB disconnect, device number 43 [ 1852.753460][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1852.943990][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1853.955224][T20192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1853.955239][T20192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1853.955254][T20192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1854.048383][T20192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1854.048403][T20192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1854.048433][T20192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1854.049121][T20014] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1854.356024][T20014] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1854.395516][T20014] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1854.440281][T20014] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1854.826692][T20192] hsr_slave_0: entered promiscuous mode [ 1854.828444][T20192] hsr_slave_1: entered promiscuous mode [ 1854.829653][T20192] debugfs: 'hsr0' already exists in 'hsr' [ 1854.829680][T20192] Cannot create hsr debugfs directory [ 1856.511743][T20014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1856.565212][T20014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1856.571590][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1856.571754][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1856.592797][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1856.593100][ T4233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1857.161717][T20014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1857.452037][ T12] bridge_slave_1: left allmulticast mode [ 1857.452078][ T12] bridge_slave_1: left promiscuous mode [ 1857.466775][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.543793][ T12] bridge_slave_0: left allmulticast mode [ 1857.543831][ T12] bridge_slave_0: left promiscuous mode [ 1857.544025][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1857.883626][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1857.963317][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1858.024693][ T12] bond0 (unregistering): Released all slaves [ 1858.310043][T20014] veth0_vlan: entered promiscuous mode [ 1858.311244][T20163] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1858.367065][T20163] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1858.399912][T20163] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1858.511157][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.511259][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.592563][ T12] hsr_slave_0: left promiscuous mode [ 1858.632539][ T12] hsr_slave_1: left promiscuous mode [ 1858.633276][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1858.664108][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1859.375254][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1859.533617][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1860.201950][T20163] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1860.265935][T20014] veth1_vlan: entered promiscuous mode [ 1860.417327][T20192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1860.477400][T20192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1860.519455][T20192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1860.579849][T20192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1860.717434][T20014] veth0_macvtap: entered promiscuous mode [ 1860.779316][T20014] veth1_macvtap: entered promiscuous mode [ 1860.864649][T20014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1861.115771][T20163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1861.260917][T20163] 8021q: adding VLAN 0 to HW filter on device team0 [ 1861.312108][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1861.312283][ T6650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1861.326432][T20192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1861.343308][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1861.343476][ T6650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1861.421408][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1861.446872][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1861.448725][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1861.481271][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1861.491526][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1861.568783][T20192] 8021q: adding VLAN 0 to HW filter on device team0 [ 1861.646352][ T1526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1861.646646][ T1526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1861.686075][ T1526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1861.686241][ T1526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1862.399874][T20459] chnl_net:caif_netlink_parms(): no params data found [ 1862.987580][T20163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1863.435809][T20459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.436053][T20459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.436316][T20459] bridge_slave_0: entered allmulticast mode [ 1863.439817][T20459] bridge_slave_0: entered promiscuous mode [ 1863.448673][T20459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.448845][T20459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.449035][T20459] bridge_slave_1: entered allmulticast mode [ 1863.463621][T20459] bridge_slave_1: entered promiscuous mode [ 1863.532679][T11490] Bluetooth: hci2: command tx timeout [ 1863.872728][T20459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1863.908892][T20459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1863.911112][T20192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1864.075343][T20459] team0: Port device team_slave_0 added [ 1864.090624][T20459] team0: Port device team_slave_1 added [ 1864.328454][T20459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1864.328475][T20459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1864.328505][T20459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1864.371606][T20459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1864.371624][T20459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1864.371648][T20459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1864.628363][T20459] hsr_slave_0: entered promiscuous mode [ 1864.629282][T20459] hsr_slave_1: entered promiscuous mode [ 1864.629915][T20459] debugfs: 'hsr0' already exists in 'hsr' [ 1864.629933][T20459] Cannot create hsr debugfs directory [ 1864.691339][T16474] bridge_slave_1: left allmulticast mode [ 1864.691370][T16474] bridge_slave_1: left promiscuous mode [ 1864.691601][T16474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.743596][T16474] bridge_slave_0: left allmulticast mode [ 1864.743620][T16474] bridge_slave_0: left promiscuous mode [ 1864.743837][T16474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.613340][T11490] Bluetooth: hci2: command tx timeout [ 1866.420054][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1866.476681][ T62] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1866.478239][ T62] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1866.479988][ T62] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1866.481080][ T62] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1866.934858][T16474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1866.993190][T16474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1867.035257][T16474] bond0 (unregistering): Released all slaves [ 1867.063247][T20163] veth0_vlan: entered promiscuous mode [ 1867.692650][T11490] Bluetooth: hci2: command tx timeout [ 1867.762565][T16474] hsr_slave_0: left promiscuous mode [ 1867.782597][T16474] hsr_slave_1: left promiscuous mode [ 1867.783399][T16474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1867.783419][T16474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1867.833567][T16474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1867.905489][T16474] veth1_macvtap: left promiscuous mode [ 1867.905573][T16474] veth0_macvtap: left promiscuous mode [ 1867.905745][T16474] veth1_vlan: left promiscuous mode [ 1867.905871][T16474] veth0_vlan: left promiscuous mode [ 1868.652824][T11490] Bluetooth: hci4: command tx timeout [ 1869.772562][T11490] Bluetooth: hci2: command tx timeout [ 1870.443144][T16474] team0 (unregistering): Port device team_slave_1 removed [ 1870.716123][T16474] team0 (unregistering): Port device team_slave_0 removed [ 1870.754493][T11490] Bluetooth: hci4: command tx timeout [ 1872.812791][T11490] Bluetooth: hci4: command tx timeout [ 1873.309492][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1873.335014][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1873.336814][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1873.403549][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1873.406782][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1874.090176][T20192] veth0_vlan: entered promiscuous mode [ 1874.107436][T20163] veth1_vlan: entered promiscuous mode [ 1874.344372][T20192] veth1_vlan: entered promiscuous mode [ 1874.896524][ T62] Bluetooth: hci4: command tx timeout [ 1874.959100][T20163] veth0_macvtap: entered promiscuous mode [ 1875.081515][T20163] veth1_macvtap: entered promiscuous mode [ 1875.191072][T20192] veth0_macvtap: entered promiscuous mode [ 1875.368621][T20192] veth1_macvtap: entered promiscuous mode [ 1875.392042][T20482] chnl_net:caif_netlink_parms(): no params data found [ 1875.452522][ T62] Bluetooth: hci0: command tx timeout [ 1875.459959][T20163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1875.885466][T20485] chnl_net:caif_netlink_parms(): no params data found [ 1875.924094][T20163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1876.106086][T16474] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.356330][T20192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1876.569392][T16474] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.621468][T20482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1876.621731][T20482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.621958][T20482] bridge_slave_0: entered allmulticast mode [ 1876.628135][T20482] bridge_slave_0: entered promiscuous mode [ 1876.648072][T15677] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.650414][T20482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1876.650934][T20482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.651159][T20482] bridge_slave_1: entered allmulticast mode [ 1876.656500][T20482] bridge_slave_1: entered promiscuous mode [ 1876.701122][T15677] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.706650][T20192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1876.855831][T15677] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.068028][T16474] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.174823][T15677] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.197357][T20482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1877.224379][T20485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1877.224516][T20485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.224670][T20485] bridge_slave_0: entered allmulticast mode [ 1877.226388][T20485] bridge_slave_0: entered promiscuous mode [ 1877.248315][T20482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1877.404911][T16474] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.454145][T20485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.454259][T20485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1877.454450][T20485] bridge_slave_1: entered allmulticast mode [ 1877.456209][T20485] bridge_slave_1: entered promiscuous mode [ 1877.457952][T20459] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1877.532529][ T62] Bluetooth: hci0: command tx timeout [ 1877.547641][ T4233] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.703910][T20459] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1877.729336][ T4233] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.885574][T20459] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1877.906637][ T4233] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.913602][T20482] team0: Port device team_slave_0 added [ 1877.927585][T20485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1877.927690][ T4233] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.927788][T20459] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1877.998209][T20482] team0: Port device team_slave_1 added [ 1878.032924][T20485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1878.624704][T20482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1878.624718][T20482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.624734][T20482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1878.627046][T20485] team0: Port device team_slave_0 added [ 1878.631952][T20482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1878.631967][T20482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.631996][T20482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1878.637761][T20485] team0: Port device team_slave_1 added [ 1879.008527][T20485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1879.008545][T20485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1879.008570][T20485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1879.199453][T15677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1879.199476][T15677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1879.215680][T20485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1879.215698][T20485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1879.215723][T20485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1879.353383][T20482] hsr_slave_0: entered promiscuous mode [ 1879.354712][T20482] hsr_slave_1: entered promiscuous mode [ 1879.355369][T20482] debugfs: 'hsr0' already exists in 'hsr' [ 1879.355387][T20482] Cannot create hsr debugfs directory [ 1879.612583][ T62] Bluetooth: hci0: command tx timeout [ 1881.704109][ T62] Bluetooth: hci0: command tx timeout [ 1881.843158][T16474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1881.903254][T16474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1881.930372][T16474] bond0 (unregistering): Released all slaves [ 1882.101084][ T1526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1882.101106][ T1526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1882.247750][T20485] hsr_slave_0: entered promiscuous mode [ 1882.248711][T20485] hsr_slave_1: entered promiscuous mode [ 1882.249348][T20485] debugfs: 'hsr0' already exists in 'hsr' [ 1882.249365][T20485] Cannot create hsr debugfs directory [ 1882.739149][ T4233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1882.739173][ T4233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1883.315456][ T1526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1883.315480][ T1526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1883.535744][T16474] hsr_slave_0: left promiscuous mode [ 1883.552797][T16474] hsr_slave_1: left promiscuous mode [ 1883.553501][T16474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1883.553521][T16474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1883.593412][T16474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1883.593445][T16474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1883.642868][ T5809] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1883.671020][T16474] veth1_macvtap: left promiscuous mode [ 1883.671097][T16474] veth0_macvtap: left promiscuous mode [ 1883.671269][T16474] veth1_vlan: left promiscuous mode [ 1883.671394][T16474] veth0_vlan: left promiscuous mode [ 1883.809101][ T5809] usb 10-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1883.809136][ T5809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.809157][ T5809] usb 10-1: Product: syz [ 1883.809173][ T5809] usb 10-1: Manufacturer: syz [ 1883.809187][ T5809] usb 10-1: SerialNumber: syz [ 1883.848088][ T5809] usb 10-1: config 0 descriptor?? [ 1884.411525][ T5809] usb 10-1: ignoring: probably an ADSL modem [ 1886.458876][ T5809] cxacru 10-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1886.470641][ T5809] usb 10-1: USB disconnect, device number 2 [ 1886.830878][T20514] FAULT_INJECTION: forcing a failure. [ 1886.830878][T20514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1886.830915][T20514] CPU: 0 UID: 0 PID: 20514 Comm: syz.9.4398 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1886.830939][T20514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1886.830952][T20514] Call Trace: [ 1886.830960][T20514] [ 1886.830969][T20514] dump_stack_lvl+0x189/0x250 [ 1886.831004][T20514] ? __pfx____ratelimit+0x10/0x10 [ 1886.831031][T20514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1886.831062][T20514] ? __pfx__printk+0x10/0x10 [ 1886.831088][T20514] ? __might_fault+0xb0/0x130 [ 1886.831129][T20514] should_fail_ex+0x46c/0x600 [ 1886.831161][T20514] _copy_from_iter+0x1de/0x1790 [ 1886.831198][T20514] ? kmalloc_reserve+0xbd/0x290 [ 1886.831217][T20514] ? rcu_is_watching+0x15/0xb0 [ 1886.831237][T20514] ? kmalloc_reserve+0xbd/0x290 [ 1886.831254][T20514] ? __alloc_skb+0x112/0x2d0 [ 1886.831272][T20514] ? __pfx__copy_from_iter+0x10/0x10 [ 1886.831292][T20514] ? __build_skb_around+0x262/0x3f0 [ 1886.831306][T20514] ? netlink_sendmsg+0x642/0xb30 [ 1886.831317][T20514] ? skb_put+0x11b/0x210 [ 1886.831332][T20514] netlink_sendmsg+0x6b2/0xb30 [ 1886.831343][T20514] ? is_bpf_text_address+0x26/0x2b0 [ 1886.831366][T20514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1886.831383][T20514] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1886.831399][T20514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1886.831412][T20514] __sock_sendmsg+0x21c/0x270 [ 1886.831430][T20514] ____sys_sendmsg+0x508/0x820 [ 1886.831447][T20514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1886.831467][T20514] ? import_iovec+0x74/0xa0 [ 1886.831482][T20514] ___sys_sendmsg+0x21f/0x2a0 [ 1886.831496][T20514] ? __pfx____sys_sendmsg+0x10/0x10 [ 1886.831532][T20514] ? __fget_files+0x2a/0x420 [ 1886.831548][T20514] ? __fget_files+0x3a6/0x420 [ 1886.831571][T20514] __x64_sys_sendmsg+0x1a1/0x260 [ 1886.831586][T20514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1886.831614][T20514] ? __pfx_ksys_write+0x10/0x10 [ 1886.831631][T20514] ? do_syscall_64+0xbe/0xfa0 [ 1886.831648][T20514] do_syscall_64+0xfa/0xfa0 [ 1886.831667][T20514] ? lockdep_hardirqs_on+0x9c/0x150 [ 1886.831682][T20514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.831694][T20514] ? clear_bhb_loop+0x60/0xb0 [ 1886.831708][T20514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.831720][T20514] RIP: 0033:0x7f327698efc9 [ 1886.831732][T20514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1886.831743][T20514] RSP: 002b:00007f3274bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1886.831757][T20514] RAX: ffffffffffffffda RBX: 00007f3276be5fa0 RCX: 00007f327698efc9 [ 1886.831765][T20514] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1886.831773][T20514] RBP: 00007f3274bee090 R08: 0000000000000000 R09: 0000000000000000 [ 1886.831780][T20514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1886.831788][T20514] R13: 00007f3276be6038 R14: 00007f3276be5fa0 R15: 00007ffc40ccd168 [ 1886.831807][T20514] [ 1887.637612][T16474] team0 (unregistering): Port device team_slave_1 removed [ 1887.914735][T16474] team0 (unregistering): Port device team_slave_0 removed [ 1889.668396][T11490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1889.675995][T11490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1889.677698][T11490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1889.679918][T11490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1889.690379][T11490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1891.813062][ T62] Bluetooth: hci3: command tx timeout [ 1892.589807][T20459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1893.201865][T16474] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.286385][T20459] 8021q: adding VLAN 0 to HW filter on device team0 [ 1893.324464][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1893.333881][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1893.361484][ T6108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.370021][ T6108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1893.520345][T20525] chnl_net:caif_netlink_parms(): no params data found [ 1893.688586][T16474] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.852866][ T62] Bluetooth: hci3: command tx timeout [ 1894.098553][T16474] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1894.370910][T16474] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1894.666765][T20525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1894.667002][T20525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1894.667247][T20525] bridge_slave_0: entered allmulticast mode [ 1894.670505][T20525] bridge_slave_0: entered promiscuous mode [ 1894.680315][T20525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1894.680456][T20525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1894.680644][T20525] bridge_slave_1: entered allmulticast mode [ 1894.684315][T20525] bridge_slave_1: entered promiscuous mode [ 1894.858713][T20525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1894.927753][T20525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1895.178092][T20525] team0: Port device team_slave_0 added [ 1895.195072][T20525] team0: Port device team_slave_1 added [ 1895.554958][T20525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1895.554972][T20525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1895.554989][T20525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1895.569225][T16474] bridge_slave_1: left allmulticast mode [ 1895.569256][T16474] bridge_slave_1: left promiscuous mode [ 1895.569518][T16474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1895.633709][T16474] bridge_slave_0: left allmulticast mode [ 1895.633730][T16474] bridge_slave_0: left promiscuous mode [ 1895.633911][T16474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1895.935030][ T62] Bluetooth: hci3: command tx timeout [ 1897.863221][T16474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1897.943235][T16474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1897.965681][T16474] bond0 (unregistering): Released all slaves [ 1898.006269][T20525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1898.006283][T20525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1898.006299][T20525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1898.012635][ T62] Bluetooth: hci3: command tx timeout [ 1898.117143][T20482] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1898.318890][T20482] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1898.676447][T20482] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1898.802079][T20525] hsr_slave_0: entered promiscuous mode [ 1898.803793][T20525] hsr_slave_1: entered promiscuous mode [ 1898.837539][T20482] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1899.350547][T20459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1899.534578][T16474] hsr_slave_0: left promiscuous mode [ 1899.572956][T16474] hsr_slave_1: left promiscuous mode [ 1899.573740][T16474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1899.573760][T16474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1899.596277][T16474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1899.596304][T16474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1899.666759][T16474] veth1_macvtap: left promiscuous mode [ 1899.666836][T16474] veth0_macvtap: left promiscuous mode [ 1899.667001][T16474] veth1_vlan: left promiscuous mode [ 1899.667116][T16474] veth0_vlan: left promiscuous mode [ 1902.323138][T16474] team0 (unregistering): Port device team_slave_1 removed [ 1902.594242][T16474] team0 (unregistering): Port device team_slave_0 removed [ 1905.795710][T20485] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1905.853941][T20485] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1905.958922][T20485] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1906.030876][T20485] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1906.779482][T20459] veth0_vlan: entered promiscuous mode [ 1906.875987][T20459] veth1_vlan: entered promiscuous mode [ 1906.920518][T20482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1907.009117][T20482] 8021q: adding VLAN 0 to HW filter on device team0 [ 1907.025234][T20485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1907.045746][T15677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.045939][T15677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1907.047691][T20459] veth0_macvtap: entered promiscuous mode [ 1907.084403][T15677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.084547][T15677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1907.086067][T20459] veth1_macvtap: entered promiscuous mode [ 1907.120632][T20485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1907.155728][T16474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.155896][T16474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1907.170013][T20459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1907.182877][T16474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.183088][T16474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1907.206717][T20459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1907.311916][T15677] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.320519][T15677] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.329701][T15677] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.354636][T15677] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.491822][T20525] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1907.546893][T20525] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1907.595688][T20525] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1907.712495][T20525] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1907.898142][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1907.898167][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1908.105371][T15677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1908.105395][T15677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1908.151076][T20482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1908.538772][T20482] veth0_vlan: entered promiscuous mode [ 1908.883899][T11490] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1908.907558][T11490] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1908.920074][T11490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1908.930474][T11490] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1908.933405][T11490] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1908.967181][T20485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1909.004869][T20482] veth1_vlan: entered promiscuous mode [ 1909.062942][T20525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1909.538804][T20525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1909.821395][T20585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4403'. [ 1910.174347][ T6650] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1910.268326][ T1526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.268475][ T1526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1910.284087][T20482] veth0_macvtap: entered promiscuous mode [ 1910.347508][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1910.347652][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1910.383732][T20482] veth1_macvtap: entered promiscuous mode [ 1910.579297][ T6650] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1910.933957][ T6650] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1910.983396][T11490] Bluetooth: hci5: command tx timeout [ 1911.102828][T20482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1911.256965][ T6650] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.347818][T20482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1911.427338][T20574] chnl_net:caif_netlink_parms(): no params data found [ 1911.450552][T20485] veth0_vlan: entered promiscuous mode [ 1911.472750][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.491615][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.508682][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.542628][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.710822][T20485] veth1_vlan: entered promiscuous mode [ 1912.196696][T20616] FAULT_INJECTION: forcing a failure. [ 1912.196696][T20616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1912.196734][T20616] CPU: 1 UID: 0 PID: 20616 Comm: syz.5.4408 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1912.196758][T20616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1912.196771][T20616] Call Trace: [ 1912.196780][T20616] [ 1912.196790][T20616] dump_stack_lvl+0x189/0x250 [ 1912.196827][T20616] ? __pfx____ratelimit+0x10/0x10 [ 1912.196855][T20616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1912.196886][T20616] ? __pfx__printk+0x10/0x10 [ 1912.196912][T20616] ? __might_fault+0xb0/0x130 [ 1912.196954][T20616] should_fail_ex+0x46c/0x600 [ 1912.196989][T20616] _copy_from_user+0x2d/0xb0 [ 1912.197013][T20616] __se_sys_mount+0x18b/0x410 [ 1912.197050][T20616] ? __pfx___se_sys_mount+0x10/0x10 [ 1912.197084][T20616] ? do_syscall_64+0xbe/0xfa0 [ 1912.197109][T20616] ? __x64_sys_mount+0x20/0xc0 [ 1912.197140][T20616] do_syscall_64+0xfa/0xfa0 [ 1912.197165][T20616] ? lockdep_hardirqs_on+0x9c/0x150 [ 1912.197192][T20616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.197213][T20616] ? clear_bhb_loop+0x60/0xb0 [ 1912.197240][T20616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.197270][T20616] RIP: 0033:0x7fb91634efc9 [ 1912.197289][T20616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1912.197308][T20616] RSP: 002b:00007fb9145ae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1912.197331][T20616] RAX: ffffffffffffffda RBX: 00007fb9165a5fa0 RCX: 00007fb91634efc9 [ 1912.197347][T20616] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 1912.197362][T20616] RBP: 00007fb9145ae090 R08: 0000200000000140 R09: 0000000000000000 [ 1912.197376][T20616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1912.197389][T20616] R13: 00007fb9165a6038 R14: 00007fb9165a5fa0 R15: 00007ffed958ebc8 [ 1912.197427][T20616] [ 1912.435356][T20574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.435500][T20574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.435685][T20574] bridge_slave_0: entered allmulticast mode [ 1912.437461][T20574] bridge_slave_0: entered promiscuous mode [ 1912.446174][T20574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.450619][T20574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.450862][T20574] bridge_slave_1: entered allmulticast mode [ 1912.454336][T20574] bridge_slave_1: entered promiscuous mode [ 1912.936577][T20574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1912.958501][T20574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1913.052609][T11490] Bluetooth: hci5: command tx timeout [ 1913.055563][ T6650] bridge_slave_1: left allmulticast mode [ 1913.055595][ T6650] bridge_slave_1: left promiscuous mode [ 1913.055872][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1913.124637][ T6650] bridge_slave_0: left allmulticast mode [ 1913.124662][ T6650] bridge_slave_0: left promiscuous mode [ 1913.124856][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1915.142478][T11490] Bluetooth: hci5: command tx timeout [ 1915.202493][ T5809] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1915.355016][ T5809] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1915.355055][ T5809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1915.355083][ T5809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1915.355111][ T5809] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1915.355156][ T5809] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1915.355181][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.428094][ T5809] usb 6-1: config 0 descriptor?? [ 1915.429012][T20632] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1915.889951][ T5809] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1915.889977][ T5809] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1915.889992][ T5809] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1915.890007][ T5809] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1915.890021][ T5809] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1915.890035][ T5809] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1915.890049][ T5809] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1915.890063][ T5809] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1915.890078][ T5809] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1915.890092][ T5809] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1915.920030][ T5809] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1916.179891][ T44] usb 6-1: USB disconnect, device number 4 [ 1916.713175][ T6650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1916.834421][ T6650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1916.878953][ T6650] bond0 (unregistering): Released all slaves [ 1917.229575][T11490] Bluetooth: hci5: command tx timeout [ 1917.244886][T14324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1917.244909][T14324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.257766][T20574] team0: Port device team_slave_0 added [ 1917.605674][T20574] team0: Port device team_slave_1 added [ 1918.331115][T20574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1918.331136][T20574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1918.331163][T20574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1918.349078][T20525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1918.350723][T20485] veth0_macvtap: entered promiscuous mode [ 1918.360471][T20574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1918.360488][T20574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1918.360520][T20574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1918.401339][T16474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1918.401360][T16474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1918.562532][ T6650] hsr_slave_0: left promiscuous mode [ 1918.602562][ T6650] hsr_slave_1: left promiscuous mode [ 1918.603462][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1918.603492][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1918.654262][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1918.654293][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1919.877221][ T6650] veth1_macvtap: left promiscuous mode [ 1919.877318][ T6650] veth0_macvtap: left promiscuous mode [ 1919.877971][ T6650] veth1_vlan: left promiscuous mode [ 1919.878121][ T6650] veth0_vlan: left promiscuous mode [ 1919.950582][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.950665][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1922.773339][ T6650] team0 (unregistering): Port device team_slave_1 removed [ 1923.063871][ T6650] team0 (unregistering): Port device team_slave_0 removed [ 1926.121313][T20485] veth1_macvtap: entered promiscuous mode [ 1926.605822][T20674] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4421'. [ 1926.815136][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1926.826094][ T62] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1926.838409][ T62] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1926.844538][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1926.845476][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1926.943941][T20574] hsr_slave_0: entered promiscuous mode [ 1926.945882][T20574] hsr_slave_1: entered promiscuous mode [ 1926.946614][T20574] debugfs: 'hsr0' already exists in 'hsr' [ 1926.946633][T20574] Cannot create hsr debugfs directory [ 1928.493740][T20485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1928.619153][T20485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1928.826487][ T4233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.850890][ T4233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.893087][ T62] Bluetooth: hci1: command tx timeout [ 1928.954350][ T4233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.961431][T20525] veth0_vlan: entered promiscuous mode [ 1928.975642][ T4233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1929.122616][T16298] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1929.223830][T20525] veth1_vlan: entered promiscuous mode [ 1929.305573][T16298] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1929.305609][T16298] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1929.322198][T16298] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1929.322230][T16298] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1929.322252][T16298] usb 6-1: Product: syz [ 1929.322267][T16298] usb 6-1: Manufacturer: syz [ 1929.322281][T16298] usb 6-1: SerialNumber: syz [ 1929.380305][T16298] usb 6-1: config 0 descriptor?? [ 1929.428256][T16298] usb 6-1: selecting invalid altsetting 0 [ 1930.972608][ T62] Bluetooth: hci1: command tx timeout [ 1931.437401][ T6650] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.600731][T14324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1931.600754][T14324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1931.798404][ T6650] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.851842][T20677] chnl_net:caif_netlink_parms(): no params data found [ 1932.083003][T19868] usb 6-1: USB disconnect, device number 5 [ 1932.368273][ T6650] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.446503][ T6108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1932.446527][ T6108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1932.667823][ T6650] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.825223][T20525] veth0_macvtap: entered promiscuous mode [ 1933.069159][T20677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1933.069410][T20677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1933.069698][T20677] bridge_slave_0: entered allmulticast mode [ 1933.072274][ T62] Bluetooth: hci1: command tx timeout [ 1933.131818][T20677] bridge_slave_0: entered promiscuous mode [ 1933.248214][T20525] veth1_macvtap: entered promiscuous mode [ 1933.282000][T20677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1933.282118][T20677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1933.282274][T20677] bridge_slave_1: entered allmulticast mode [ 1933.286070][T20677] bridge_slave_1: entered promiscuous mode [ 1934.367710][T20719] 9pnet: Could not find request transport: fd0x0000000000000000 [ 1934.380212][T13997] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1934.447191][T20677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1934.460626][T20677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1934.461105][T20574] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1934.522527][T13997] usb 6-1: Using ep0 maxpacket: 32 [ 1934.526033][T13997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1934.526080][T13997] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1934.526104][T13997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.566386][T13997] usb 6-1: config 0 descriptor?? [ 1934.650999][T20722] sp0: Synchronizing with TNC [ 1934.654788][T20574] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1934.789325][T20574] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1934.867633][T20677] team0: Port device team_slave_0 added [ 1934.869381][T20574] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1934.911539][T20677] team0: Port device team_slave_1 added [ 1934.926886][T20525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1935.005854][T13997] magicmouse 0003:05AC:0265.0029: item fetching failed at offset 3/5 [ 1935.006491][T13997] magicmouse 0003:05AC:0265.0029: magicmouse hid parse failed [ 1935.006555][T13997] magicmouse 0003:05AC:0265.0029: probe with driver magicmouse failed with error -22 [ 1935.132547][ T62] Bluetooth: hci1: command tx timeout [ 1935.201037][T13997] usb 6-1: USB disconnect, device number 6 [ 1935.247743][ T6650] bridge_slave_1: left allmulticast mode [ 1935.247778][ T6650] bridge_slave_1: left promiscuous mode [ 1935.247987][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.333449][ T6650] bridge_slave_0: left allmulticast mode [ 1935.333473][ T6650] bridge_slave_0: left promiscuous mode [ 1935.333637][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.781898][T20739] FAULT_INJECTION: forcing a failure. [ 1936.781898][T20739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1936.781924][T20739] CPU: 1 UID: 0 PID: 20739 Comm: syz.5.4433 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1936.781939][T20739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1936.781946][T20739] Call Trace: [ 1936.781951][T20739] [ 1936.781957][T20739] dump_stack_lvl+0x189/0x250 [ 1936.781981][T20739] ? __pfx____ratelimit+0x10/0x10 [ 1936.781997][T20739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1936.782015][T20739] ? __pfx__printk+0x10/0x10 [ 1936.782029][T20739] ? __might_fault+0xb0/0x130 [ 1936.782051][T20739] should_fail_ex+0x46c/0x600 [ 1936.782073][T20739] set_fd_set+0x3a/0xa0 [ 1936.782089][T20739] core_sys_select+0x8dc/0xa20 [ 1936.782110][T20739] ? __pfx_core_sys_select+0x10/0x10 [ 1936.782140][T20739] ? __pfx_set_user_sigmask+0x10/0x10 [ 1936.782154][T20739] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1936.782166][T20739] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1936.782183][T20739] __se_sys_pselect6+0x27a/0x300 [ 1936.782201][T20739] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1936.782216][T20739] ? __pfx_ksys_write+0x10/0x10 [ 1936.782233][T20739] ? __x64_sys_pselect6+0x21/0xf0 [ 1936.782250][T20739] do_syscall_64+0xfa/0xfa0 [ 1936.782264][T20739] ? lockdep_hardirqs_on+0x9c/0x150 [ 1936.782278][T20739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.782290][T20739] ? clear_bhb_loop+0x60/0xb0 [ 1936.782304][T20739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.782338][T20739] RIP: 0033:0x7fb91634efc9 [ 1936.782357][T20739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1936.782374][T20739] RSP: 002b:00007fb91458d038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1936.782397][T20739] RAX: ffffffffffffffda RBX: 00007fb9165a6090 RCX: 00007fb91634efc9 [ 1936.782412][T20739] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000040 [ 1936.782425][T20739] RBP: 00007fb91458d090 R08: 0000000000000000 R09: 0000000000000000 [ 1936.782439][T20739] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1936.782451][T20739] R13: 00007fb9165a6128 R14: 00007fb9165a6090 R15: 00007ffed958ebc8 [ 1936.782486][T20739] [ 1937.973487][ T6650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1938.033214][ T6650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1938.058111][ T6650] bond0 (unregistering): Released all slaves [ 1938.095637][T20677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1938.095651][T20677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1938.095667][T20677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1938.099290][T20525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1938.288777][T20677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1938.288791][T20677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1938.288807][T20677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1938.433843][T16473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.894092][T16473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.695520][T16473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.931443][T20752] 9pnet: Could not find request transport: fd0x0000000000000000 [ 1940.043298][T20677] hsr_slave_0: entered promiscuous mode [ 1940.044880][T20677] hsr_slave_1: entered promiscuous mode [ 1940.045947][T20677] debugfs: 'hsr0' already exists in 'hsr' [ 1940.045984][T20677] Cannot create hsr debugfs directory [ 1941.033057][T16473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1941.140819][T20758] bridge: RTM_NEWNEIGH with invalid ether address [ 1941.144434][T20760] bridge: RTM_NEWNEIGH with invalid ether address [ 1941.196756][T20758] batadv1: entered promiscuous mode [ 1941.206174][T20758] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1941.492556][ T9566] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1941.642531][ T9566] usb 5-1: Using ep0 maxpacket: 32 [ 1941.659350][T20765] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4441'. [ 1942.086877][ T9566] usb 5-1: device descriptor read/all, error -71 [ 1942.283298][ T6650] hsr_slave_0: left promiscuous mode [ 1942.854529][ T6650] hsr_slave_1: left promiscuous mode [ 1942.856467][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1942.856495][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1942.938389][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1942.938422][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1943.066879][ T6650] veth1_macvtap: left promiscuous mode [ 1943.066930][ T6650] veth0_macvtap: left promiscuous mode [ 1943.067050][ T6650] veth1_vlan: left promiscuous mode [ 1943.067151][ T6650] veth0_vlan: left promiscuous mode [ 1946.375355][ T6650] team0 (unregistering): Port device team_slave_1 removed [ 1946.663582][ T6650] team0 (unregistering): Port device team_slave_0 removed [ 1949.834061][T20791] syzkaller1: entered promiscuous mode [ 1949.834082][T20791] syzkaller1: entered allmulticast mode [ 1951.718202][T11490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1951.726784][T11490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1951.729148][T11490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1951.730994][T11490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1951.731911][T11490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1952.075240][T20574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1952.188440][T20574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1952.258113][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1952.258823][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1953.105115][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1953.105377][ T4233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1953.372568][ T9566] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1953.545403][ T9566] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1953.545469][ T9566] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1953.545484][ T9566] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.548721][ T9566] usb 6-1: config 0 descriptor?? [ 1953.556614][ T9566] pwc: Askey VC010 type 2 USB webcam detected. [ 1953.772604][T11490] Bluetooth: hci4: command tx timeout [ 1953.966194][ T9566] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1953.970779][ T9566] pwc: recv_control_msg error -32 req 02 val 2700 [ 1953.971880][ T9566] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1953.996252][ T9566] pwc: recv_control_msg error -32 req 04 val 1000 [ 1954.001703][ T9566] pwc: recv_control_msg error -32 req 04 val 1300 [ 1954.004588][ T9566] pwc: recv_control_msg error -32 req 04 val 1400 [ 1954.240990][ T9566] pwc: recv_control_msg error -71 req 02 val 2100 [ 1954.242754][ T9566] pwc: recv_control_msg error -71 req 04 val 1500 [ 1954.243291][ T9566] pwc: recv_control_msg error -71 req 02 val 2500 [ 1954.243812][ T9566] pwc: recv_control_msg error -71 req 02 val 2400 [ 1954.244342][ T9566] pwc: recv_control_msg error -71 req 02 val 2600 [ 1954.244872][ T9566] pwc: recv_control_msg error -71 req 02 val 2900 [ 1954.245572][ T9566] pwc: recv_control_msg error -71 req 02 val 2800 [ 1954.246345][ T9566] pwc: recv_control_msg error -71 req 04 val 1100 [ 1954.262450][ T9566] pwc: recv_control_msg error -71 req 04 val 1200 [ 1954.306246][ T9566] pwc: Registered as video103. [ 1954.310032][ T9566] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input50 [ 1954.339819][ T9566] usb 6-1: USB disconnect, device number 7 [ 1954.647001][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1954.651563][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1954.654275][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1954.671003][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1954.671956][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1955.881011][T11490] Bluetooth: hci4: command tx timeout [ 1956.043117][T20801] chnl_net:caif_netlink_parms(): no params data found [ 1956.406095][T20826] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4456'. [ 1956.742146][T11490] Bluetooth: hci0: command tx timeout [ 1957.932609][T11490] Bluetooth: hci4: command tx timeout [ 1958.018056][T11490] Bluetooth: hci2: Invalid handle: 0xfd00 > 0x0eff [ 1958.105443][ T6650] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.445724][ T6650] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.756438][T20696] hid_parser_main: 5 callbacks suppressed [ 1958.756455][T20696] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x4 [ 1958.756474][T20696] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x2 [ 1958.757252][T20696] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x3 [ 1958.759374][T20696] hid-generic 0000:3000000:0000.002A: hidraw0: HID v0.00 Device [sy] on syz0 [ 1958.812420][ T62] Bluetooth: hci0: command tx timeout [ 1959.059733][ T6650] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1959.100743][T20801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1959.101071][T20801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1959.101294][T20801] bridge_slave_0: entered allmulticast mode [ 1959.104913][T20801] bridge_slave_0: entered promiscuous mode [ 1959.133439][T19868] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1959.137715][T20801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1959.137878][T20801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1959.138153][T20801] bridge_slave_1: entered allmulticast mode [ 1959.141233][T20801] bridge_slave_1: entered promiscuous mode [ 1959.144374][T20677] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1959.257755][T20677] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1959.325513][T19868] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1959.325572][T19868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1959.325593][T19868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1959.325605][T19868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1959.327364][T19868] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1959.327391][T19868] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1959.327405][T19868] usb 6-1: Manufacturer: syz [ 1959.330795][T19868] usb 6-1: config 0 descriptor?? [ 1959.608317][ T6650] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1959.653478][T20677] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1959.714842][T20801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1959.726617][T20677] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1959.744508][T19868] appleir 0003:05AC:8243.002B: unknown main item tag 0x0 [ 1959.748764][T19868] appleir 0003:05AC:8243.002B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1959.780883][T20801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1960.018501][ T62] Bluetooth: hci4: command tx timeout [ 1960.079333][T20801] team0: Port device team_slave_0 added [ 1960.138344][T20801] team0: Port device team_slave_1 added [ 1960.198776][T18984] usb 6-1: USB disconnect, device number 8 [ 1960.311052][T20574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1960.514795][T20801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1960.514815][T20801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1960.514840][T20801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1960.570326][T20801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1960.570340][T20801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1960.570355][T20801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1960.571088][T20812] chnl_net:caif_netlink_parms(): no params data found [ 1960.892864][ T62] Bluetooth: hci0: command tx timeout [ 1961.150139][ T6650] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1961.332782][T20858] FAULT_INJECTION: forcing a failure. [ 1961.332782][T20858] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.332821][T20858] CPU: 0 UID: 0 PID: 20858 Comm: syz.5.4462 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1961.332845][T20858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1961.332857][T20858] Call Trace: [ 1961.332866][T20858] [ 1961.332875][T20858] dump_stack_lvl+0x189/0x250 [ 1961.332911][T20858] ? __pfx____ratelimit+0x10/0x10 [ 1961.332937][T20858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1961.332968][T20858] ? __pfx__printk+0x10/0x10 [ 1961.333009][T20858] should_fail_ex+0x46c/0x600 [ 1961.333042][T20858] ? skb_clone+0x212/0x3a0 [ 1961.333066][T20858] should_failslab+0xa8/0x100 [ 1961.333095][T20858] ? skb_clone+0x212/0x3a0 [ 1961.333115][T20858] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 1961.333148][T20858] skb_clone+0x212/0x3a0 [ 1961.333177][T20858] __netlink_deliver_tap+0x404/0x850 [ 1961.333214][T20858] ? netlink_deliver_tap+0x2e/0x1b0 [ 1961.333238][T20858] netlink_deliver_tap+0x19c/0x1b0 [ 1961.333261][T20858] __netlink_sendskb+0x47/0x90 [ 1961.333290][T20858] netlink_dump+0xa84/0xe90 [ 1961.333325][T20858] ? __pfx_netlink_dump+0x10/0x10 [ 1961.333363][T20858] ? netlink_recvmsg+0x5b2/0xa30 [ 1961.333384][T20858] ? netlink_recvmsg+0x5b2/0xa30 [ 1961.333409][T20858] netlink_recvmsg+0x676/0xa30 [ 1961.333428][T20858] ? __lock_acquire+0xab9/0xd20 [ 1961.333464][T20858] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1961.333498][T20858] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1961.333525][T20858] ? security_socket_recvmsg+0x7e/0x2e0 [ 1961.333567][T20858] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1961.333589][T20858] sock_recvmsg+0x22c/0x270 [ 1961.333624][T20858] ____sys_recvmsg+0x1ce/0x470 [ 1961.333660][T20858] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1961.333704][T20858] ? import_iovec+0x74/0xa0 [ 1961.333731][T20858] ___sys_recvmsg+0x1b5/0x510 [ 1961.333776][T20858] ? __pfx____sys_recvmsg+0x10/0x10 [ 1961.333830][T20858] ? __fget_files+0x3a6/0x420 [ 1961.333872][T20858] do_recvmmsg+0x30d/0x770 [ 1961.333902][T20858] ? __pfx_do_recvmmsg+0x10/0x10 [ 1961.333922][T20858] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1961.333950][T20858] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1961.333990][T20858] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1961.334029][T20858] __x64_sys_recvmmsg+0x190/0x240 [ 1961.334060][T20858] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1961.334090][T20858] ? do_syscall_64+0xbe/0xfa0 [ 1961.334121][T20858] do_syscall_64+0xfa/0xfa0 [ 1961.334145][T20858] ? lockdep_hardirqs_on+0x9c/0x150 [ 1961.334172][T20858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1961.334193][T20858] ? clear_bhb_loop+0x60/0xb0 [ 1961.334219][T20858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1961.334239][T20858] RIP: 0033:0x7fb91634efc9 [ 1961.334258][T20858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1961.334276][T20858] RSP: 002b:00007fb9145ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1961.334298][T20858] RAX: ffffffffffffffda RBX: 00007fb9165a5fa0 RCX: 00007fb91634efc9 [ 1961.334313][T20858] RDX: 0000000000000001 RSI: 0000200000005800 RDI: 0000000000000003 [ 1961.334327][T20858] RBP: 00007fb9145ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1961.334340][T20858] R10: 0000000000014000 R11: 0000000000000246 R12: 0000000000000001 [ 1961.334353][T20858] R13: 00007fb9165a6038 R14: 00007fb9165a5fa0 R15: 00007ffed958ebc8 [ 1961.334392][T20858] [ 1961.347072][T20801] hsr_slave_0: entered promiscuous mode [ 1961.349320][T20801] hsr_slave_1: entered promiscuous mode [ 1961.350271][T20801] debugfs: 'hsr0' already exists in 'hsr' [ 1961.350295][T20801] Cannot create hsr debugfs directory [ 1961.857792][ T6650] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.494938][ T6650] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.533014][T20812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1962.533103][T20812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.533306][T20812] bridge_slave_0: entered allmulticast mode [ 1962.535200][T20812] bridge_slave_0: entered promiscuous mode [ 1962.569754][T20812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1962.569840][T20812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1962.570021][T20812] bridge_slave_1: entered allmulticast mode [ 1962.571802][T20812] bridge_slave_1: entered promiscuous mode [ 1962.972452][ T62] Bluetooth: hci0: command tx timeout [ 1963.036166][ T6650] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.087991][T20812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1963.246174][T20812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1963.671164][T20812] team0: Port device team_slave_0 added [ 1963.705800][T20812] team0: Port device team_slave_1 added [ 1964.012544][T20871] FAULT_INJECTION: forcing a failure. [ 1964.012544][T20871] name failslab, interval 1, probability 0, space 0, times 0 [ 1964.012611][T20871] CPU: 1 UID: 0 PID: 20871 Comm: syz.5.4464 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1964.012637][T20871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1964.012650][T20871] Call Trace: [ 1964.012659][T20871] [ 1964.012668][T20871] dump_stack_lvl+0x189/0x250 [ 1964.012706][T20871] ? __pfx____ratelimit+0x10/0x10 [ 1964.012733][T20871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1964.012764][T20871] ? __pfx__printk+0x10/0x10 [ 1964.012796][T20871] ? __pfx___might_resched+0x10/0x10 [ 1964.012820][T20871] ? fs_reclaim_acquire+0x7d/0x100 [ 1964.012855][T20871] should_fail_ex+0x46c/0x600 [ 1964.012890][T20871] should_failslab+0xa8/0x100 [ 1964.012922][T20871] __kmalloc_cache_noprof+0x6f/0x6c0 [ 1964.012950][T20871] ? kfree+0x197/0x950 [ 1964.012971][T20871] ? kstrdup_quotable_cmdline+0x324/0x390 [ 1964.012995][T20871] ? kstrdup_quotable_cmdline+0x59/0x390 [ 1964.013035][T20871] kstrdup_quotable_cmdline+0x59/0x390 [ 1964.013069][T20871] __report_access+0x79/0x330 [ 1964.013097][T20871] ? _raw_spin_unlock_irq+0x23/0x50 [ 1964.013124][T20871] ? lockdep_hardirqs_on+0x9c/0x150 [ 1964.013154][T20871] task_work_run+0x1d4/0x260 [ 1964.013179][T20871] ? __pfx_task_work_run+0x10/0x10 [ 1964.013206][T20871] ? schedule+0x16f/0x360 [ 1964.013233][T20871] exit_to_user_mode_loop+0xe9/0x130 [ 1964.013263][T20871] do_syscall_64+0x2bd/0xfa0 [ 1964.013292][T20871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1964.013313][T20871] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1964.013333][T20871] ? clear_bhb_loop+0x60/0xb0 [ 1964.013358][T20871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1964.013379][T20871] RIP: 0033:0x7fb91634efc9 [ 1964.013399][T20871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1964.013417][T20871] RSP: 002b:00007fb91456c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 1964.013440][T20871] RAX: ffffffffffffffff RBX: 00007fb9165a6180 RCX: 00007fb91634efc9 [ 1964.013455][T20871] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010 [ 1964.013469][T20871] RBP: 00007fb91456c090 R08: 0000000000000000 R09: 0000000000000000 [ 1964.013482][T20871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1964.013496][T20871] R13: 00007fb9165a6218 R14: 00007fb9165a6180 R15: 00007ffed958ebc8 [ 1964.013533][T20871] [ 1964.013573][T20871] ptrace attach of "./syz-executor exec"[20459] was attempted by "(null)"[20871] [ 1964.843459][T20873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4465'. [ 1965.215167][T20574] veth0_vlan: entered promiscuous mode [ 1965.228232][T20812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1965.228249][T20812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1965.228276][T20812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1966.211967][T20812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1966.211986][T20812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1966.212010][T20812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1966.588244][T20574] veth1_vlan: entered promiscuous mode [ 1966.612554][T16355] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1966.772467][T16355] usb 6-1: Using ep0 maxpacket: 16 [ 1966.779284][T16355] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1966.779302][T16355] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1966.803129][T16355] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1966.803150][T16355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.803162][T16355] usb 6-1: Product: syz [ 1966.803170][T16355] usb 6-1: Manufacturer: syz [ 1966.803179][T16355] usb 6-1: SerialNumber: syz [ 1966.848939][ T6650] bridge_slave_1: left allmulticast mode [ 1966.848961][ T6650] bridge_slave_1: left promiscuous mode [ 1966.849167][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1966.903895][ T6650] bridge_slave_0: left allmulticast mode [ 1966.903928][ T6650] bridge_slave_0: left promiscuous mode [ 1966.904176][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.967142][ T6650] bridge_slave_1: left allmulticast mode [ 1966.967175][ T6650] bridge_slave_1: left promiscuous mode [ 1966.967404][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.074359][ T6650] bridge_slave_0: left allmulticast mode [ 1967.074392][ T6650] bridge_slave_0: left promiscuous mode [ 1967.074664][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1967.081191][T16355] usb 6-1: 0:2 : does not exist [ 1967.110996][T16355] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1967.136144][T16355] usb 6-1: USB disconnect, device number 9 [ 1967.717600][T20883] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:64767 [ 1969.472017][T20892] FAULT_INJECTION: forcing a failure. [ 1969.472017][T20892] name failslab, interval 1, probability 0, space 0, times 0 [ 1969.472054][T20892] CPU: 0 UID: 0 PID: 20892 Comm: syz.5.4471 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1969.472079][T20892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1969.472092][T20892] Call Trace: [ 1969.472101][T20892] [ 1969.472111][T20892] dump_stack_lvl+0x189/0x250 [ 1969.472147][T20892] ? __pfx____ratelimit+0x10/0x10 [ 1969.472174][T20892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1969.472205][T20892] ? __pfx__printk+0x10/0x10 [ 1969.472239][T20892] ? __pfx___might_resched+0x10/0x10 [ 1969.472260][T20892] ? fs_reclaim_acquire+0x7d/0x100 [ 1969.472300][T20892] should_fail_ex+0x46c/0x600 [ 1969.472333][T20892] ? security_file_alloc+0x34/0x330 [ 1969.472352][T20892] should_failslab+0xa8/0x100 [ 1969.472381][T20892] ? security_file_alloc+0x34/0x330 [ 1969.472399][T20892] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 1969.472435][T20892] security_file_alloc+0x34/0x330 [ 1969.472457][T20892] init_file+0x99/0x320 [ 1969.472480][T20892] alloc_empty_file+0x6e/0x1d0 [ 1969.472501][T20892] path_openat+0x10d/0x3840 [ 1969.472531][T20892] ? try_to_take_rt_mutex+0x840/0xb00 [ 1969.472565][T20892] ? rtlock_slowlock_locked+0xd8/0x4010 [ 1969.472600][T20892] ? __pfx_path_openat+0x10/0x10 [ 1969.472623][T20892] ? do_raw_spin_lock+0x121/0x290 [ 1969.472657][T20892] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1969.472685][T20892] ? lockdep_hardirqs_on+0x9c/0x150 [ 1969.472713][T20892] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1969.472749][T20892] do_filp_open+0x1fa/0x410 [ 1969.472776][T20892] ? __pfx_do_filp_open+0x10/0x10 [ 1969.472797][T20892] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1969.472848][T20892] ? alloc_fd+0x64f/0x6c0 [ 1969.472899][T20892] do_sys_openat2+0x121/0x1c0 [ 1969.472925][T20892] ? __pfx_do_sys_openat2+0x10/0x10 [ 1969.472951][T20892] ? ksys_write+0x230/0x260 [ 1969.472980][T20892] ? __pfx_ksys_write+0x10/0x10 [ 1969.473009][T20892] __x64_sys_openat+0x138/0x170 [ 1969.473037][T20892] do_syscall_64+0xfa/0xfa0 [ 1969.473062][T20892] ? lockdep_hardirqs_on+0x9c/0x150 [ 1969.473088][T20892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.473110][T20892] ? clear_bhb_loop+0x60/0xb0 [ 1969.473136][T20892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.473156][T20892] RIP: 0033:0x7fb91634d810 [ 1969.473176][T20892] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1969.473194][T20892] RSP: 002b:00007fb9145adb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1969.473218][T20892] RAX: ffffffffffffffda RBX: 0000000000000081 RCX: 00007fb91634d810 [ 1969.473233][T20892] RDX: 0000000000000081 RSI: 00007fb9145adc10 RDI: 00000000ffffff9c [ 1969.473247][T20892] RBP: 00007fb9145adc10 R08: 0000000000000000 R09: 002367732f766564 [ 1969.473262][T20892] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1969.473276][T20892] R13: 00007fb9165a6038 R14: 00007fb9165a5fa0 R15: 00007ffed958ebc8 [ 1969.473312][T20892] [ 1969.542588][T20894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4472'. [ 1969.744907][T11490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1969.765323][T11490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1969.767151][T11490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1969.770524][T11490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1969.771478][T11490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1971.064586][ T6650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1971.123571][ T6650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1971.145156][ T6650] bond0 (unregistering): Released all slaves [ 1971.880320][T11490] Bluetooth: hci3: command tx timeout [ 1973.103437][ T6650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1973.163880][ T6650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1973.185740][ T6650] bond0 (unregistering): Released all slaves [ 1973.231470][T20812] hsr_slave_0: entered promiscuous mode [ 1973.236863][T20812] hsr_slave_1: entered promiscuous mode [ 1973.237904][T20812] debugfs: 'hsr0' already exists in 'hsr' [ 1973.237928][T20812] Cannot create hsr debugfs directory [ 1973.929261][T20677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1973.932991][T11490] Bluetooth: hci3: command tx timeout [ 1974.682631][ T5809] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1974.857745][ T5809] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1974.857779][ T5809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.857793][ T5809] usb 6-1: Product: syz [ 1974.857801][ T5809] usb 6-1: Manufacturer: syz [ 1974.857809][ T5809] usb 6-1: SerialNumber: syz [ 1975.356237][T20677] 8021q: adding VLAN 0 to HW filter on device team0 [ 1975.512781][ T6650] hsr_slave_0: left promiscuous mode [ 1975.534230][ T6650] hsr_slave_1: left promiscuous mode [ 1975.535272][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1975.535297][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1975.573744][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1975.573775][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1975.754402][ T6650] hsr_slave_0: left promiscuous mode [ 1975.776606][ T6650] hsr_slave_1: left promiscuous mode [ 1975.777678][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1975.777705][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1975.813722][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1975.813754][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1975.936155][ T6650] veth1_macvtap: left promiscuous mode [ 1975.936237][ T6650] veth0_macvtap: left promiscuous mode [ 1975.936413][ T6650] veth1_vlan: left promiscuous mode [ 1975.936575][ T6650] veth0_vlan: left promiscuous mode [ 1976.012511][T11490] Bluetooth: hci3: command tx timeout [ 1976.043210][ T6650] veth1_macvtap: left promiscuous mode [ 1976.043330][ T6650] veth0_macvtap: left promiscuous mode [ 1976.043599][ T6650] veth1_vlan: left promiscuous mode [ 1976.046474][ T6650] veth0_vlan: left promiscuous mode [ 1978.105760][T11490] Bluetooth: hci3: command tx timeout [ 1979.383907][ T6650] team0 (unregistering): Port device team_slave_1 removed [ 1979.713821][ T6650] team0 (unregistering): Port device team_slave_0 removed [ 1980.751092][ T5809] cdc_ncm 6-1:1.0: failed to get mac address [ 1980.767973][ T5809] cdc_ncm 6-1:1.0: bind() failure [ 1980.782831][ T5809] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -32 [ 1980.823449][ T5809] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -32 [ 1980.824622][ T5809] usbtest 6-1:1.1: probe with driver usbtest failed with error -32 [ 1981.383156][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.383243][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1985.548709][ T6650] team0 (unregistering): Port device team_slave_1 removed [ 1985.813655][ T6650] team0 (unregistering): Port device team_slave_0 removed [ 1987.168133][T20908] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1987.173877][T20908] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1987.183320][T19106] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1987.185017][T19106] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1987.187204][T19106] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1988.572637][T11490] Bluetooth: hci2: command 0x0406 tx timeout [ 1989.163442][ T44] usb 6-1: USB disconnect, device number 10 [ 1989.222718][ T62] Bluetooth: hci5: command tx timeout [ 1989.813238][T20801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1990.763082][T20801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1990.772224][T20920] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4479'. [ 1990.849236][T20801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1990.886593][T20924] Bluetooth: MGMT ver 1.23 [ 1991.003872][T20924] tmpfs: Unknown parameter '017777777777777777777770x0000000000000000' [ 1991.292638][ T62] Bluetooth: hci5: command tx timeout [ 1991.362894][T20801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1991.965438][T20896] chnl_net:caif_netlink_parms(): no params data found [ 1992.543146][T20896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1992.543302][T20896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1992.543569][T20896] bridge_slave_0: entered allmulticast mode [ 1992.546349][T20896] bridge_slave_0: entered promiscuous mode [ 1992.587638][T20896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1992.587833][T20896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1992.588109][T20896] bridge_slave_1: entered allmulticast mode [ 1992.591368][T20896] bridge_slave_1: entered promiscuous mode [ 1993.269227][T20896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1993.351142][T20896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1993.372836][ T62] Bluetooth: hci5: command tx timeout [ 1993.654318][T20906] chnl_net:caif_netlink_parms(): no params data found [ 1993.886806][T20896] team0: Port device team_slave_0 added [ 1993.927211][T20896] team0: Port device team_slave_1 added [ 1994.052797][T20812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1994.213386][T20812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1994.318734][T20812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1994.347825][T20896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1994.347840][T20896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1994.347855][T20896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1994.369349][T20812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1994.442221][T20896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1994.442240][T20896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1994.442270][T20896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1994.813909][T20906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1994.814141][T20906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1994.814449][T20906] bridge_slave_0: entered allmulticast mode [ 1994.819934][T20906] bridge_slave_0: entered promiscuous mode [ 1994.880146][T20906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1994.880329][T20906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1994.880579][T20906] bridge_slave_1: entered allmulticast mode [ 1994.884760][T20906] bridge_slave_1: entered promiscuous mode [ 1994.986351][T20948] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1994.986493][T20948] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1995.083055][T20948] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1995.083402][T20948] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1995.197707][T20948] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1995.258512][T20948] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1995.258642][T20948] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1995.343356][T20948] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1995.423547][T20948] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1995.423659][T20948] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1995.452964][ T62] Bluetooth: hci5: command tx timeout [ 1995.503960][T20948] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1995.564498][T20948] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1995.565472][T20948] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1995.645395][T20948] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1995.699192][T20896] hsr_slave_0: entered promiscuous mode [ 1995.700151][T20896] hsr_slave_1: entered promiscuous mode [ 1995.706573][T20906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1995.726213][T20906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1996.348214][T20906] team0: Port device team_slave_0 added [ 1996.412522][ T62] Bluetooth: hci2: command 0x0406 tx timeout [ 1996.446525][T20906] team0: Port device team_slave_1 added [ 1996.515417][T20967] program syz.5.4486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1996.628117][T20969] tmpfs: Unknown parameter '017777777777777777777770x0000000000000000' [ 1996.946694][T20906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1996.946715][T20906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1996.946744][T20906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1996.970961][T20801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1997.005198][T20906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1997.005216][T20906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1997.005245][T20906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1997.134503][ T62] Bluetooth: hci4: command 0x0c1a tx timeout [ 1997.302959][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 1997.452848][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 1997.509802][T20906] hsr_slave_0: entered promiscuous mode [ 1997.510910][T20906] hsr_slave_1: entered promiscuous mode [ 1997.511592][T20906] debugfs: 'hsr0' already exists in 'hsr' [ 1997.511609][T20906] Cannot create hsr debugfs directory [ 1997.612468][ T62] Bluetooth: hci5: command 0x0c1a tx timeout [ 1997.659639][T20973] tmpfs: Unknown parameter '017777777777777777777770x0000000000000000' [ 1997.744818][T20801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1998.052534][ T44] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1998.233908][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 1998.250165][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1998.250201][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1998.250218][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1998.250245][ T44] usb 6-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1998.250258][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.285324][ T44] usb 6-1: config 0 descriptor?? [ 1998.407032][T15677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1998.407277][T15677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1998.495068][ T62] Bluetooth: hci2: command 0x0406 tx timeout [ 1998.748413][T15677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1998.748739][T15677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1999.178442][T20812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1999.212513][ T62] Bluetooth: hci4: command 0x0c1a tx timeout [ 1999.325461][ T44] usbhid 6-1:0.0: can't add hid device: -71 [ 1999.325604][ T44] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1999.335216][ T44] usb 6-1: USB disconnect, device number 11 [ 1999.372664][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 1999.431449][ T6650] bridge_slave_1: left allmulticast mode [ 1999.431492][ T6650] bridge_slave_1: left promiscuous mode [ 1999.431773][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.503586][ T6650] bridge_slave_0: left allmulticast mode [ 1999.503609][ T6650] bridge_slave_0: left promiscuous mode [ 1999.503798][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.532970][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 1999.567593][ T6650] bridge_slave_1: left allmulticast mode [ 1999.567623][ T6650] bridge_slave_1: left promiscuous mode [ 1999.567787][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.623768][ T6650] bridge_slave_0: left allmulticast mode [ 1999.623791][ T6650] bridge_slave_0: left promiscuous mode [ 1999.623979][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.692555][ T44] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1999.692666][ T62] Bluetooth: hci5: command 0x0c1a tx timeout [ 1999.867660][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 1999.871898][ T44] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1999.871926][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.871938][ T44] usb 6-1: Product: syz [ 1999.871946][ T44] usb 6-1: Manufacturer: syz [ 1999.871955][ T44] usb 6-1: SerialNumber: syz [ 1999.877389][ T44] usb 6-1: config 0 descriptor?? [ 2001.293156][ T62] Bluetooth: hci4: command 0x0c1a tx timeout [ 2001.494325][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 2001.650849][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 2001.802854][ T62] Bluetooth: hci5: command 0x0c1a tx timeout [ 2001.942415][ T44] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: failure sending bit rate [ 2001.942465][ T44] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 2002.203331][ T6650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2002.303174][ T6650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2002.367780][ T6650] bond0 (unregistering): Released all slaves [ 2004.173207][ T6650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2004.233760][ T6650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2004.255961][ T6650] bond0 (unregistering): Released all slaves [ 2004.338177][T18984] usb 6-1: USB disconnect, device number 12 [ 2004.638015][T20812] 8021q: adding VLAN 0 to HW filter on device team0 [ 2004.822893][T16437] bridge0: port 1(bridge_slave_0) entered blocking state [ 2004.823064][T16437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2005.263312][T20992] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4492'. [ 2006.162136][ T6650] hsr_slave_0: left promiscuous mode [ 2006.272476][ T6650] hsr_slave_1: left promiscuous mode [ 2006.273625][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2006.324174][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2006.502472][ T6650] hsr_slave_0: left promiscuous mode [ 2006.522734][ T6650] hsr_slave_1: left promiscuous mode [ 2006.523503][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2006.584464][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2006.662011][ T6650] veth1_vlan: left promiscuous mode [ 2006.662110][ T6650] veth0_vlan: left promiscuous mode [ 2007.455232][ T6650] team0 (unregistering): Port device team_slave_1 removed [ 2007.663475][ T6650] team0 (unregistering): Port device team_slave_0 removed [ 2011.063104][ T6650] team0 (unregistering): Port device team_slave_1 removed [ 2011.404908][ T6650] team0 (unregistering): Port device team_slave_0 removed [ 2011.468804][T11490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2011.483982][T11490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2011.495982][T11490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2011.497956][T11490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2011.498959][T11490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2013.555870][T11490] Bluetooth: hci1: command tx timeout [ 2014.417660][ T9627] bridge0: port 2(bridge_slave_1) entered blocking state [ 2014.417963][ T9627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2014.653016][ T44] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2014.793368][ T44] usb 6-1: device descriptor read/64, error -71 [ 2015.103242][ T44] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2015.300268][ T44] usb 6-1: device descriptor read/64, error -71 [ 2015.331324][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2015.348481][ T62] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2015.350913][ T62] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2015.352257][ T62] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2015.359606][ T62] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2015.412452][ T44] usb usb6-port1: attempt power cycle [ 2015.625995][T11490] Bluetooth: hci1: command tx timeout [ 2015.802806][ T44] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2015.823449][ T44] usb 6-1: device descriptor read/8, error -71 [ 2016.084469][ T44] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2016.113275][ T44] usb 6-1: device descriptor read/8, error -71 [ 2016.219974][T20896] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2016.233228][ T44] usb usb6-port1: unable to enumerate USB device [ 2016.269809][T20896] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2016.313816][T20896] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2016.477002][T20896] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2016.542855][T20998] chnl_net:caif_netlink_parms(): no params data found [ 2016.988390][T20906] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2017.141662][T20906] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2017.207909][T20998] bridge0: port 1(bridge_slave_0) entered blocking state [ 2017.208145][T20998] bridge0: port 1(bridge_slave_0) entered disabled state [ 2017.208403][T20998] bridge_slave_0: entered allmulticast mode [ 2017.211570][T20998] bridge_slave_0: entered promiscuous mode [ 2017.237337][T20906] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2017.266575][T20998] bridge0: port 2(bridge_slave_1) entered blocking state [ 2017.266752][T20998] bridge0: port 2(bridge_slave_1) entered disabled state [ 2017.266968][T20998] bridge_slave_1: entered allmulticast mode [ 2017.268818][T20998] bridge_slave_1: entered promiscuous mode [ 2017.274013][T20906] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2017.484444][T21021] loop8: detected capacity change from 0 to 8 [ 2017.501743][T21021] Dev loop8: unable to read RDB block 8 [ 2017.501772][T21021] loop8: unable to read partition table [ 2017.501915][T21021] loop8: partition table beyond EOD, truncated [ 2017.501928][T21021] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2017.532985][T11490] Bluetooth: hci4: command tx timeout [ 2017.562201][T21026] FAULT_INJECTION: forcing a failure. [ 2017.562201][T21026] name failslab, interval 1, probability 0, space 0, times 0 [ 2017.562227][T21026] CPU: 1 UID: 0 PID: 21026 Comm: syz.5.4496 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2017.562242][T21026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2017.562249][T21026] Call Trace: [ 2017.562254][T21026] [ 2017.562259][T21026] dump_stack_lvl+0x189/0x250 [ 2017.562297][T21026] ? __pfx____ratelimit+0x10/0x10 [ 2017.562324][T21026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2017.562354][T21026] ? __pfx__printk+0x10/0x10 [ 2017.562385][T21026] ? __lock_acquire+0xab9/0xd20 [ 2017.562410][T21026] should_fail_ex+0x46c/0x600 [ 2017.562429][T21026] ? skb_clone+0x212/0x3a0 [ 2017.562443][T21026] should_failslab+0xa8/0x100 [ 2017.562461][T21026] ? skb_clone+0x212/0x3a0 [ 2017.562473][T21026] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 2017.562494][T21026] skb_clone+0x212/0x3a0 [ 2017.562507][T21026] ? ip_rcv_core+0x126/0xd00 [ 2017.562520][T21026] ip_rcv_core+0x148/0xd00 [ 2017.562540][T21026] ip_rcv+0x4d/0x90 [ 2017.562557][T21026] ? __pfx_ip_rcv+0x10/0x10 [ 2017.562572][T21026] __netif_receive_skb_core+0x3b9b/0x4380 [ 2017.562599][T21026] ? __pfx___skb_flow_dissect+0x10/0x10 [ 2017.562613][T21026] ? kernel_text_address+0xa5/0xe0 [ 2017.562626][T21026] ? __kernel_text_address+0xd/0x40 [ 2017.562641][T21026] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 2017.562659][T21026] ? __lock_acquire+0xab9/0xd20 [ 2017.562679][T21026] ? __lock_acquire+0xab9/0xd20 [ 2017.562701][T21026] ? netif_receive_skb+0x115/0x790 [ 2017.562720][T21026] __netif_receive_skb+0x72/0x380 [ 2017.562735][T21026] ? get_desc+0x298/0x440 [ 2017.562746][T21026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2017.562761][T21026] ? netif_receive_skb+0x115/0x790 [ 2017.562776][T21026] netif_receive_skb+0x1cb/0x790 [ 2017.562794][T21026] ? __pfx_netif_receive_skb+0x10/0x10 [ 2017.562812][T21026] ? __local_bh_enable+0x28c/0x410 [ 2017.562826][T21026] ? tun_rx_batched+0x166/0x730 [ 2017.562843][T21026] tun_rx_batched+0x1bf/0x730 [ 2017.562861][T21026] ? __pfx_tun_rx_batched+0x10/0x10 [ 2017.562876][T21026] ? __lock_acquire+0xab9/0xd20 [ 2017.562898][T21026] ? tun_get_user+0x272f/0x3ec0 [ 2017.562922][T21026] tun_get_user+0x2b7a/0x3ec0 [ 2017.562942][T21026] ? tun_get_user+0x6f6/0x3ec0 [ 2017.562957][T21026] ? tun_get_user+0x272f/0x3ec0 [ 2017.562974][T21026] ? __might_fault+0xb0/0x130 [ 2017.562990][T21026] ? __pfx_tun_get_user+0x10/0x10 [ 2017.563013][T21026] ? __lock_acquire+0xab9/0xd20 [ 2017.563032][T21026] ? ref_tracker_alloc+0x2fe/0x450 [ 2017.563047][T21026] ? __lock_acquire+0xab9/0xd20 [ 2017.563063][T21026] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2017.563083][T21026] ? tun_get+0x1c/0x2f0 [ 2017.563101][T21026] ? tun_get+0x1c/0x2f0 [ 2017.563115][T21026] ? tun_get+0x1c/0x2f0 [ 2017.563203][T21026] tun_chr_write_iter+0x119/0x200 [ 2017.563219][T21026] vfs_write+0x5d5/0xb40 [ 2017.563237][T21026] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2017.563252][T21026] ? __pfx_vfs_write+0x10/0x10 [ 2017.563274][T21026] ? __fget_files+0x2a/0x420 [ 2017.563297][T21026] ksys_write+0x14b/0x260 [ 2017.563314][T21026] ? __pfx_ksys_write+0x10/0x10 [ 2017.563331][T21026] ? do_syscall_64+0xbe/0xfa0 [ 2017.563349][T21026] do_syscall_64+0xfa/0xfa0 [ 2017.563362][T21026] ? lockdep_hardirqs_on+0x9c/0x150 [ 2017.563377][T21026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2017.563388][T21026] ? clear_bhb_loop+0x60/0xb0 [ 2017.563403][T21026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2017.563414][T21026] RIP: 0033:0x7fb91634da7f [ 2017.563426][T21026] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2017.563436][T21026] RSP: 002b:00007fb9145ae000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2017.563451][T21026] RAX: ffffffffffffffda RBX: 00007fb9165a5fa0 RCX: 00007fb91634da7f [ 2017.563460][T21026] RDX: 0000000000000066 RSI: 0000200000000600 RDI: 00000000000000c8 [ 2017.563468][T21026] RBP: 00007fb9145ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2017.563476][T21026] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001 [ 2017.563483][T21026] R13: 00007fb9165a6038 R14: 00007fb9165a5fa0 R15: 00007ffed958ebc8 [ 2017.563505][T21026] [ 2017.650235][T20998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2017.692541][T11490] Bluetooth: hci1: command tx timeout [ 2017.699536][T20998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2018.282441][T16355] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2018.313191][T20998] team0: Port device team_slave_0 added [ 2018.340728][T20998] team0: Port device team_slave_1 added [ 2018.464151][T16355] usb 6-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 2018.464186][T16355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.464209][T16355] usb 6-1: Product: syz [ 2018.464224][T16355] usb 6-1: Manufacturer: syz [ 2018.464240][T16355] usb 6-1: SerialNumber: syz [ 2018.478977][T16355] usb 6-1: config 0 descriptor?? [ 2018.842653][T16355] int51x1 6-1:0.0: probe with driver int51x1 failed with error -22 [ 2019.211841][T19868] usb 6-1: USB disconnect, device number 17 [ 2019.329989][T20998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2019.330010][T20998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2019.330040][T20998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2019.331883][T21005] chnl_net:caif_netlink_parms(): no params data found [ 2019.527529][T20998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2019.527550][T20998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2019.527579][T20998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2019.622693][T11490] Bluetooth: hci4: command tx timeout [ 2019.773796][T11490] Bluetooth: hci1: command tx timeout [ 2019.834598][T21041] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4499'. [ 2019.834619][T21041] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4499'. [ 2019.834629][T21041] netlink: 'syz.5.4499': attribute type 5 has an invalid length. [ 2019.834637][T21041] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4499'. [ 2021.692737][T11490] Bluetooth: hci4: command tx timeout [ 2021.869216][T21047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2021.869721][T21047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2022.112632][ T996] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2022.265523][ T996] usb 6-1: device descriptor read/64, error -71 [ 2022.502521][ T996] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2022.632603][ T996] usb 6-1: device descriptor read/64, error -71 [ 2022.744867][ T996] usb usb6-port1: attempt power cycle [ 2023.082578][ T996] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2023.101079][T20998] hsr_slave_0: entered promiscuous mode [ 2023.115517][ T996] usb 6-1: device descriptor read/8, error -71 [ 2023.116399][T20998] hsr_slave_1: entered promiscuous mode [ 2023.117778][T20998] debugfs: 'hsr0' already exists in 'hsr' [ 2023.117807][T20998] Cannot create hsr debugfs directory [ 2023.352508][ T996] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2023.389257][ T996] usb 6-1: device descriptor read/8, error -71 [ 2023.493141][ T996] usb usb6-port1: unable to enumerate USB device [ 2023.772737][T11490] Bluetooth: hci4: command tx timeout [ 2024.091294][T21005] bridge0: port 1(bridge_slave_0) entered blocking state [ 2024.091458][T21005] bridge0: port 1(bridge_slave_0) entered disabled state [ 2024.091754][T21005] bridge_slave_0: entered allmulticast mode [ 2024.119519][T21005] bridge_slave_0: entered promiscuous mode [ 2024.157376][T21005] bridge0: port 2(bridge_slave_1) entered blocking state [ 2024.157613][T21005] bridge0: port 2(bridge_slave_1) entered disabled state [ 2024.157845][T21005] bridge_slave_1: entered allmulticast mode [ 2024.162017][T21005] bridge_slave_1: entered promiscuous mode [ 2025.061947][T21005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2025.106610][T21005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2025.372070][T21005] team0: Port device team_slave_0 added [ 2025.548260][T21005] team0: Port device team_slave_1 added [ 2025.596596][T20896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2027.232838][T21062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4505'. [ 2027.593059][ T44] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2027.913777][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 2027.944372][ T44] usb 6-1: config 1 interface 0 altsetting 248 bulk endpoint 0x3 has invalid maxpacket 32 [ 2027.944463][ T44] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2028.015165][ T44] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2028.015395][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.015603][ T44] usb 6-1: Product: syz [ 2028.015805][ T44] usb 6-1: Manufacturer: syz [ 2028.016031][ T44] usb 6-1: SerialNumber: syz [ 2028.159808][T21062] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2028.372954][T21061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2028.373470][T21061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2030.122665][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2030.149436][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2030.160153][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2030.161541][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2030.182936][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2030.504465][ T44] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 2030.760575][T21067] tmpfs: Unknown parameter '017777777777777777777770x0000000000000000' [ 2030.784507][ T44] usb 6-1: USB disconnect, device number 22 [ 2032.186152][T21005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2032.186172][T21005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2032.186201][T21005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2032.252716][T11490] Bluetooth: hci0: command tx timeout [ 2032.353703][T21005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2032.353723][T21005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2032.353755][T21005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2032.694841][T21077] Smack: duplicate mount options [ 2032.695477][T21077] Smack: duplicate mount options [ 2032.695975][T21077] Smack: duplicate mount options [ 2032.696482][T21077] Smack: duplicate mount options [ 2032.696976][T21077] Smack: duplicate mount options [ 2033.086061][ C0] vkms_vblank_simulate: vblank timer overrun [ 2033.375478][ C0] vkms_vblank_simulate: vblank timer overrun [ 2034.339501][T11490] Bluetooth: hci0: command tx timeout [ 2034.561396][ C0] vkms_vblank_simulate: vblank timer overrun [ 2035.538713][T21086] tmpfs: Unknown parameter '017777777777777777777770x0000000000000000' [ 2036.415845][T11490] Bluetooth: hci0: command tx timeout [ 2037.383971][ C0] vkms_vblank_simulate: vblank timer overrun [ 2038.053864][T21089] vlan0: entered promiscuous mode [ 2038.557781][T11490] Bluetooth: hci0: command tx timeout [ 2040.075840][ C1] vkms_vblank_simulate: vblank timer overrun [ 2040.761583][ C1] vkms_vblank_simulate: vblank timer overrun [ 2040.959298][T21100] netlink: 'syz.5.4517': attribute type 72 has an invalid length. [ 2040.959323][T21100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4517'. [ 2041.071986][ C1] vkms_vblank_simulate: vblank timer overrun [ 2041.119379][ C1] vkms_vblank_simulate: vblank timer overrun [ 2041.170731][ C1] vkms_vblank_simulate: vblank timer overrun [ 2041.217015][ C1] vkms_vblank_simulate: vblank timer overrun [ 2041.266142][ C1] vkms_vblank_simulate: vblank timer overrun [ 2041.313966][ C1] vkms_vblank_simulate: vblank timer overrun [ 2041.361041][ C1] vkms_vblank_simulate: vblank timer overrun [ 2041.411261][ C1] vkms_vblank_simulate: vblank timer overrun [ 2041.458978][ C1] vkms_vblank_simulate: vblank timer overrun [ 2041.508683][ C1] vkms_vblank_simulate: vblank timer overrun [ 2041.555920][ C1] vkms_vblank_simulate: vblank timer overrun [ 2041.606961][ C1] vkms_vblank_simulate: vblank timer overrun [ 2042.038800][T21005] hsr_slave_0: entered promiscuous mode [ 2042.040998][T21005] hsr_slave_1: entered promiscuous mode [ 2042.053211][T21005] debugfs: 'hsr0' already exists in 'hsr' [ 2042.053238][T21005] Cannot create hsr debugfs directory [ 2042.121269][T20906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2042.335242][ C1] vkms_vblank_simulate: vblank timer overrun [ 2042.720491][ C1] vkms_vblank_simulate: vblank timer overrun [ 2043.493612][ C1] vkms_vblank_simulate: vblank timer overrun [ 2043.518395][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2043.518593][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2044.194132][T20906] 8021q: adding VLAN 0 to HW filter on device team0 [ 2044.450588][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 2044.450917][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2044.523322][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 2044.523523][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2044.918739][T21064] chnl_net:caif_netlink_parms(): no params data found [ 2047.138901][ T62] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2047.164725][ T62] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2047.166590][ T62] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2047.167976][ T62] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2047.169372][ T62] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2048.079301][T21064] bridge0: port 1(bridge_slave_0) entered blocking state [ 2048.089793][T21064] bridge0: port 1(bridge_slave_0) entered disabled state [ 2048.090106][T21064] bridge_slave_0: entered allmulticast mode [ 2048.142560][T21064] bridge_slave_0: entered promiscuous mode [ 2048.158528][T21064] bridge0: port 2(bridge_slave_1) entered blocking state [ 2048.158701][T21064] bridge0: port 2(bridge_slave_1) entered disabled state [ 2048.159030][T21064] bridge_slave_1: entered allmulticast mode [ 2048.192612][T21064] bridge_slave_1: entered promiscuous mode [ 2049.302455][ T62] Bluetooth: hci3: command tx timeout [ 2051.382530][ T62] Bluetooth: hci3: command tx timeout [ 2053.452593][ T62] Bluetooth: hci3: command tx timeout [ 2053.799503][T21064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2053.835685][T21064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2054.412523][T19868] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2054.572854][T19868] usb 6-1: Using ep0 maxpacket: 8 [ 2054.576445][T19868] usb 6-1: config 0 has an invalid interface number: 96 but max is 0 [ 2054.576473][T19868] usb 6-1: config 0 has no interface number 0 [ 2054.576509][T19868] usb 6-1: config 0 interface 96 has no altsetting 0 [ 2054.580278][T19868] usb 6-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 2054.580305][T19868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.580326][T19868] usb 6-1: Product: syz [ 2054.580341][T19868] usb 6-1: Manufacturer: syz [ 2054.580356][T19868] usb 6-1: SerialNumber: syz [ 2054.655132][T19868] usb 6-1: config 0 descriptor?? [ 2054.682338][T19868] usbhid 6-1:0.96: couldn't find an input interrupt endpoint [ 2054.689479][T21064] team0: Port device team_slave_0 added [ 2054.730378][T21064] team0: Port device team_slave_1 added [ 2055.532404][ T62] Bluetooth: hci3: command tx timeout [ 2055.630746][ T996] usb 6-1: USB disconnect, device number 23 [ 2055.685692][T21064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2055.685722][T21064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2055.685752][T21064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2055.812201][T21064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2055.812221][T21064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2055.812249][T21064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2056.570667][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4520'. [ 2056.570692][T21124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4520'. [ 2056.570717][T21124] netlink: 'syz.5.4520': attribute type 11 has an invalid length. [ 2059.524072][T21064] hsr_slave_0: entered promiscuous mode [ 2059.525761][T21064] hsr_slave_1: entered promiscuous mode [ 2059.526975][T21064] debugfs: 'hsr0' already exists in 'hsr' [ 2059.527003][T21064] Cannot create hsr debugfs directory [ 2068.413534][T21141] 9pnet_fd: Insufficient options for proto=fd [ 2068.490342][T21142] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 2075.316419][T21149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4526'. [ 2075.588694][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030c2b400: rx timeout, send abort [ 2076.092920][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030c2bc00: rx timeout, send abort [ 2076.092978][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030c2b400: abort rx timeout. Force session deactivation [ 2076.710455][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030c2bc00: abort rx timeout. Force session deactivation [ 2083.463639][T11490] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2083.494122][T19106] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2083.534921][T19106] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2083.559598][T19106] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2083.707629][T21158] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2083.875595][T20908] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2083.877031][T20908] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2083.879204][T20908] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2083.917291][T11490] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2083.918237][T11490] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2085.152963][T21117] chnl_net:caif_netlink_parms(): no params data found [ 2086.176180][T20908] Bluetooth: hci5: command tx timeout [ 2086.177053][T20908] Bluetooth: hci6: command tx timeout [ 2088.332735][T20908] Bluetooth: hci6: command tx timeout [ 2088.423882][T20908] Bluetooth: hci5: command tx timeout [ 2092.901538][T20908] Bluetooth: hci6: command tx timeout [ 2092.901552][T11490] Bluetooth: hci5: command tx timeout [ 2094.972638][T11490] Bluetooth: hci5: command tx timeout [ 2095.123774][T11490] Bluetooth: hci6: command tx timeout [ 2100.444472][T20908] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2100.461261][T20908] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2100.463094][T20908] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2100.464368][T20908] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2100.465201][T20908] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2100.734151][T11490] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2100.740593][T11490] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2100.752815][T11490] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2100.767675][T11490] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2100.773250][T11490] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2101.744012][T21117] bridge0: port 1(bridge_slave_0) entered blocking state [ 2101.744171][T21117] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.744458][T21117] bridge_slave_0: entered allmulticast mode [ 2101.782998][T21117] bridge_slave_0: entered promiscuous mode [ 2101.937051][T21117] bridge0: port 2(bridge_slave_1) entered blocking state [ 2101.952740][T21117] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.953066][T21117] bridge_slave_1: entered allmulticast mode [ 2102.067384][T21117] bridge_slave_1: entered promiscuous mode [ 2102.572425][T20908] Bluetooth: hci8: command tx timeout [ 2103.772530][T20908] Bluetooth: hci7: command tx timeout [ 2104.625730][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.625815][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.654090][T20908] Bluetooth: hci8: command tx timeout [ 2106.122368][T20908] Bluetooth: hci7: command tx timeout [ 2106.732674][T20908] Bluetooth: hci8: command tx timeout [ 2108.172449][T20908] Bluetooth: hci7: command tx timeout [ 2108.812778][T20908] Bluetooth: hci8: command tx timeout [ 2110.252480][T20908] Bluetooth: hci7: command tx timeout [ 2117.414301][T11490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2117.429888][T11490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2117.432865][T11490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2117.462613][T11490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2117.469134][T11490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2119.822353][T11490] Bluetooth: hci0: command tx timeout [ 2121.852372][T11490] Bluetooth: hci0: command tx timeout [ 2123.934152][T11490] Bluetooth: hci0: command tx timeout [ 2126.012958][T11490] Bluetooth: hci0: command tx timeout [ 2136.520078][T21155] chnl_net:caif_netlink_parms(): no params data found [ 2137.117676][T11490] Bluetooth: hci1: command 0x0406 tx timeout [ 2142.672378][ T62] Bluetooth: hci4: command 0x0406 tx timeout [ 2144.283528][ T62] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2144.318028][ T62] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2144.319885][ T62] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2144.372853][ T62] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2144.422734][T11490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2145.603438][T21165] chnl_net:caif_netlink_parms(): no params data found [ 2146.541155][T11490] Bluetooth: hci3: command tx timeout [ 2146.940802][T21164] chnl_net:caif_netlink_parms(): no params data found [ 2147.065386][T20908] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2147.103030][T20908] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2147.105456][T20908] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2147.106890][T20908] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2147.108863][T20908] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2148.652374][T11490] Bluetooth: hci3: command tx timeout [ 2149.212626][T11490] Bluetooth: hci9: command tx timeout [ 2150.853383][T11490] Bluetooth: hci3: command tx timeout [ 2151.575394][T11490] Bluetooth: hci9: command tx timeout [ 2153.072763][T11490] Bluetooth: hci3: command tx timeout [ 2153.632350][T20908] Bluetooth: hci9: command tx timeout [ 2156.173847][T20908] Bluetooth: hci9: command tx timeout [ 2158.593656][T11490] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2158.598651][T11490] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2158.620200][T11490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2158.662544][T11490] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2158.680094][T11490] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2161.852445][T20908] Bluetooth: hci5: command tx timeout [ 2163.932327][T20908] Bluetooth: hci5: command tx timeout [ 2165.926708][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.941203][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.012404][T20908] Bluetooth: hci5: command tx timeout [ 2168.092633][T20908] Bluetooth: hci5: command tx timeout [ 2168.163840][T11490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2168.168953][T11490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2168.178287][T11490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2168.523584][T11490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2168.558991][T11490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2170.663190][T20908] Bluetooth: hci6: command tx timeout [ 2172.742911][T20908] Bluetooth: hci6: command tx timeout [ 2174.812546][T20908] Bluetooth: hci6: command tx timeout [ 2176.551059][T11490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2176.568421][T11490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2176.570225][T11490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2176.587064][T11490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2176.621216][T11490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2176.893040][T11490] Bluetooth: hci6: command tx timeout [ 2179.844010][T11490] Bluetooth: hci0: command tx timeout [ 2181.852326][T20908] Bluetooth: hci0: command tx timeout [ 2183.932500][T20908] Bluetooth: hci0: command tx timeout [ 2186.015834][T20908] Bluetooth: hci0: command tx timeout [ 2191.980687][ T38] INFO: task kworker/u8:17:6650 blocked for more than 143 seconds. [ 2191.980716][ T38] Not tainted syzkaller #0 [ 2191.980729][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2191.980740][ T38] task:kworker/u8:17 state:D stack:19664 pid:6650 tgid:6650 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2191.980803][ T38] Workqueue: netns cleanup_net [ 2191.980830][ T38] Call Trace: [ 2191.980838][ T38] [ 2191.980854][ T38] __schedule+0x16f3/0x4c20 [ 2191.980895][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 2191.980927][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2191.980968][ T38] ? __pfx___schedule+0x10/0x10 [ 2191.981024][ T38] rt_mutex_schedule+0x77/0xf0 [ 2191.981047][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 2191.981087][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 2191.981116][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 2191.981142][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 2191.981167][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2191.981187][ T38] ? __lock_acquire+0xab9/0xd20 [ 2191.981229][ T38] ? devlink_pernet_pre_exit+0x10a/0x3d0 [ 2191.981282][ T38] ? devlinks_xa_find_get+0x2b/0x310 [ 2191.981317][ T38] ? devlink_pernet_pre_exit+0x10a/0x3d0 [ 2191.981346][ T38] mutex_lock_nested+0x16a/0x1d0 [ 2191.981365][ T38] ? devlinks_xa_find_get+0x2b/0x310 [ 2191.981399][ T38] devlink_pernet_pre_exit+0x10a/0x3d0 [ 2191.981435][ T38] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 2191.981476][ T38] ? class_remove_file_ns+0x124/0x160 [ 2191.981502][ T38] ops_undo_list+0x187/0x990 [ 2191.981531][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 2191.981550][ T38] ? rt_spin_unlock+0x150/0x200 [ 2191.981578][ T38] ? rt_spin_unlock+0x161/0x200 [ 2191.981604][ T38] cleanup_net+0x4de/0x820 [ 2191.981630][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 2191.981655][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 2191.981681][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 2191.981707][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 2191.981736][ T38] process_scheduled_works+0xae1/0x17b0 [ 2191.981799][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 2191.981847][ T38] worker_thread+0x8a0/0xda0 [ 2191.981878][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2191.981917][ T38] ? __kthread_parkme+0x7b/0x200 [ 2191.981957][ T38] kthread+0x711/0x8a0 [ 2191.981993][ T38] ? __pfx_worker_thread+0x10/0x10 [ 2191.982019][ T38] ? __pfx_kthread+0x10/0x10 [ 2191.982046][ T38] ? rt_spin_unlock+0x150/0x200 [ 2191.982074][ T38] ? rt_spin_unlock+0x161/0x200 [ 2191.982092][ T38] ? __pfx_kthread+0x10/0x10 [ 2191.982125][ T38] ret_from_fork+0x4bc/0x870 [ 2191.982155][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2191.982191][ T38] ? __switch_to_asm+0x39/0x70 [ 2191.995741][ T38] ? __switch_to_asm+0x33/0x70 [ 2191.995773][ T38] ? __pfx_kthread+0x10/0x10 [ 2191.995808][ T38] ret_from_fork_asm+0x1a/0x30 [ 2191.995853][ T38] [ 2191.995902][ T38] INFO: task syz-executor:21005 blocked for more than 143 seconds. [ 2191.995919][ T38] Not tainted syzkaller #0 [ 2191.995931][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2191.995942][ T38] task:syz-executor state:D stack:18168 pid:21005 tgid:21005 ppid:1 task_flags:0x400140 flags:0x00080002 [ 2191.995999][ T38] Call Trace: [ 2191.996007][ T38] [ 2191.996022][ T38] __schedule+0x16f3/0x4c20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2191.996082][ T38] ? __pfx___schedule+0x10/0x10 [ 2191.996138][ T38] rt_mutex_schedule+0x77/0xf0 [ 2191.996160][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 2191.996199][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 2191.996228][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 2191.996254][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 2191.996287][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2191.996307][ T38] ? __lock_acquire+0xab9/0xd20 [ 2191.996349][ T38] ? del_device_store+0xd1/0x360 [ 2191.996388][ T38] ? __pfx_sscanf+0x10/0x10 [ 2191.996416][ T38] ? del_device_store+0xd1/0x360 [ 2191.996444][ T38] mutex_lock_nested+0x16a/0x1d0 [ 2191.996474][ T38] del_device_store+0xd1/0x360 [ 2191.996503][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 2191.996537][ T38] ? __pfx_del_device_store+0x10/0x10 [ 2191.996568][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 2191.996600][ T38] ? sysfs_kf_write+0x166/0x260 [ 2191.996625][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2191.996642][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 2191.996682][ T38] vfs_write+0x5d5/0xb40 [ 2191.996716][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2191.996747][ T38] ? __pfx_vfs_write+0x10/0x10 [ 2191.996786][ T38] ? do_sys_openat2+0x154/0x1c0 [ 2191.996820][ T38] ksys_write+0x14b/0x260 [ 2191.996851][ T38] ? __pfx_ksys_write+0x10/0x10 [ 2191.996882][ T38] ? do_syscall_64+0xbe/0xfa0 [ 2191.996915][ T38] do_syscall_64+0xfa/0xfa0 [ 2191.996940][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 2191.996966][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2191.996988][ T38] ? clear_bhb_loop+0x60/0xb0 [ 2191.997015][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2191.997037][ T38] RIP: 0033:0x7fc29d49da7f [ 2191.997056][ T38] RSP: 002b:00007ffd72c21770 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2191.997078][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fc29d49da7f [ 2191.997094][ T38] RDX: 0000000000000001 RSI: 00007ffd72c217c0 RDI: 0000000000000005 [ 2191.997108][ T38] RBP: 00007fc29d523256 R08: 0000000000000000 R09: 00007ffd72c215c7 [ 2191.997123][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2191.997137][ T38] R13: 00007ffd72c217c0 R14: 00007fc29e224620 R15: 0000000000000003 [ 2191.997174][ T38] [ 2191.997213][ T38] [ 2191.997213][ T38] Showing all locks held in the system: [ 2191.997224][ T38] 4 locks held by rcuc/0/20: [ 2191.997237][ T38] 3 locks held by rcuc/1/28: [ 2191.997249][ T38] 1 lock held by khungtaskd/38: [ 2191.997261][ T38] #0: ffffffff8d5aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2191.997351][ T38] 3 locks held by kworker/u8:12/4233: [ 2191.997364][ T38] #0: ffff88802fc21138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2191.997417][ T38] #1: ffffc9000ee1fba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2191.997471][ T38] #2: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 2191.997521][ T38] 2 locks held by getty/5562: [ 2191.997532][ T38] #0: ffff88823bf5e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2191.997584][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 2191.997643][ T38] 4 locks held by kworker/u8:14/6111: [ 2191.997655][ T38] 4 locks held by kworker/u8:17/6650: [ 2191.997667][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2191.997719][ T38] #1: ffffc9000d357ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2191.997771][ T38] #2: ffffffff8e855fa0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 2191.997818][ T38] #3: ffff88805c2d70d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 2191.997879][ T38] 4 locks held by kworker/u8:8/15677: [ 2191.997897][ T38] 7 locks held by syz-executor/20998: [ 2191.997909][ T38] #0: ffff888034472480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 2191.997965][ T38] #1: ffff88804e8b7478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 2191.998019][ T38] #2: ffff888026b4ba58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 2191.998077][ T38] #3: ffffffff8e0f3c58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2191.998151][ T38] #4: ffff88805c2d70d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 2191.998207][ T38] #5: ffff88805c2d5300 (&devlink->lock_key#45){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 2191.998271][ T38] #6: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2191.998322][ T38] 4 locks held by syz-executor/21005: [ 2191.998334][ T38] #0: ffff888034472480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 2191.998392][ T38] #1: ffff88804b785078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 2191.998448][ T38] #2: ffff888026b4ba58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 2191.998508][ T38] #3: ffffffff8e0f3c58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2191.998568][ T38] 1 lock held by syz-executor/21064: [ 2191.998580][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2191.998630][ T38] 1 lock held by syz-executor/21117: [ 2191.998643][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2191.998694][ T38] 1 lock held by syz.5.4526/21149: [ 2191.998706][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2191.998756][ T38] 1 lock held by syz-executor/21154: [ 2191.998768][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2191.998819][ T38] 1 lock held by syz-executor/21155: [ 2191.998831][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2191.998881][ T38] 1 lock held by syz-executor/21164: [ 2191.998892][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2191.998942][ T38] 1 lock held by syz-executor/21165: [ 2191.998954][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2191.999010][ T38] 1 lock held by syz-executor/21171: [ 2191.999023][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2191.999072][ T38] 2 locks held by syz-executor/21183: [ 2191.999085][ T38] #0: ffffffff8ed7e228 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 2191.999138][ T38] #1: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 2191.999196][ T38] 1 lock held by syz-executor/21188: [ 2191.999208][ T38] #0: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 2191.999270][ T38] 3 locks held by syz-executor/21193: [ 2191.999283][ T38] 2 locks held by syz-executor/21195: [ 2191.999295][ T38] #0: ffffffff8e855fa0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 2191.999352][ T38] #1: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 2191.999403][ T38] 2 locks held by syz-executor/21198: [ 2191.999415][ T38] #0: ffffffff8e855fa0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 2191.999470][ T38] #1: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 2191.999534][ T38] [ 2191.999540][ T38] ============================================= [ 2191.999540][ T38] [ 2191.999550][ T38] NMI backtrace for cpu 0 [ 2191.999565][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2191.999588][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2191.999600][ T38] Call Trace: [ 2191.999609][ T38] [ 2191.999618][ T38] dump_stack_lvl+0x189/0x250 [ 2191.999654][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2191.999685][ T38] ? __pfx__printk+0x10/0x10 [ 2191.999723][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 2191.999749][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2191.999773][ T38] ? __pfx__printk+0x10/0x10 [ 2191.999804][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2191.999832][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2191.999857][ T38] watchdog+0xf60/0xfa0 [ 2191.999892][ T38] ? watchdog+0x1e2/0xfa0 [ 2191.999927][ T38] kthread+0x711/0x8a0 [ 2191.999969][ T38] ? __pfx_watchdog+0x10/0x10 [ 2191.999997][ T38] ? __pfx_kthread+0x10/0x10 [ 2192.000024][ T38] ? rt_spin_unlock+0x150/0x200 [ 2192.000051][ T38] ? rt_spin_unlock+0x161/0x200 [ 2192.000070][ T38] ? __pfx_kthread+0x10/0x10 [ 2192.000102][ T38] ret_from_fork+0x4bc/0x870 [ 2192.000129][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2192.000163][ T38] ? __switch_to_asm+0x39/0x70 [ 2192.000183][ T38] ? __switch_to_asm+0x33/0x70 [ 2192.000203][ T38] ? __pfx_kthread+0x10/0x10 [ 2192.000234][ T38] ret_from_fork_asm+0x1a/0x30 [ 2192.000283][ T38] [ 2192.000292][ T38] Sending NMI from CPU 0 to CPUs 1: [ 2192.000322][ C1] NMI backtrace for cpu 1 [ 2192.000338][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2192.000357][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2192.000367][ C1] RIP: 0010:__lock_acquire+0x55e/0xd20 [ 2192.000390][ C1] Code: 22 83 3d 28 43 3a 0d 00 75 19 90 48 c7 c7 f9 22 f6 8c 48 c7 c6 0e 5c e6 8c e8 de 0e e7 ff 90 0f 0b 90 90 90 31 c9 48 8b 3c 24 <0f> b6 81 c4 00 00 00 84 c0 0f 84 68 ff ff ff 41 0f b6 f4 0f b6 d0 [ 2192.000405][ C1] RSP: 0018:ffffc90000a2e088 EFLAGS: 00000002 [ 2192.000420][ C1] RAX: 0000000000000898 RBX: 0000000000000002 RCX: ffffffff924aeba8 [ 2192.000433][ C1] RDX: 0000000000000003 RSI: 0000000000000003 RDI: ffff88801ba90000 [ 2192.000444][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81737cf5 [ 2192.000455][ C1] R10: ffffc90000a2e338 R11: fffff52000145c69 R12: 0000000000000003 [ 2192.000467][ C1] R13: 0000000000000001 R14: ffff88801ba90c00 R15: ffff88801ba90bd0 [ 2192.000479][ C1] FS: 0000000000000000(0000) GS:ffff888126efc000(0000) knlGS:0000000000000000 [ 2192.000493][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2192.000505][ C1] CR2: 00007f251290fd68 CR3: 000000007ed7a000 CR4: 00000000003526f0 [ 2192.000529][ C1] DR0: 0000000000001764 DR1: 00000000000001f8 DR2: 0000000000007a8d [ 2192.000541][ C1] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2192.000552][ C1] Call Trace: [ 2192.000558][ C1] [ 2192.000569][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2192.000590][ C1] lock_acquire+0x120/0x360 [ 2192.000610][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2192.000634][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2192.000653][ C1] ? arch_stack_walk+0xe4/0x150 [ 2192.000673][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2192.000693][ C1] unwind_next_frame+0xc2/0x2390 [ 2192.000713][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2192.000735][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2192.000754][ C1] ? __unwind_start+0xf8/0x760 [ 2192.000776][ C1] __unwind_start+0x5b9/0x760 [ 2192.000798][ C1] ? nf_conntrack_free+0x2e8/0x380 [ 2192.000816][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2192.000834][ C1] arch_stack_walk+0xe4/0x150 [ 2192.000856][ C1] ? arch_stack_walk+0xe4/0x150 [ 2192.000877][ C1] stack_trace_save+0x9c/0xe0 [ 2192.000894][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2192.000914][ C1] kasan_save_track+0x3e/0x80 [ 2192.000953][ C1] __kasan_save_free_info+0x46/0x50 [ 2192.000970][ C1] __kasan_slab_free+0x5c/0x80 [ 2192.000990][ C1] kfree+0x197/0x950 [ 2192.001008][ C1] ? nf_conntrack_free+0x2e8/0x380 [ 2192.001028][ C1] nf_conntrack_free+0x2e8/0x380 [ 2192.001048][ C1] nf_conntrack_in+0x9f5/0x15d0 [ 2192.001075][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 2192.001098][ C1] ? __lock_acquire+0xab9/0xd20 [ 2192.001122][ C1] ? nf_hook+0x9d/0x380 [ 2192.001138][ C1] ? ipv4_conntrack_defrag+0x2aa/0x5c0 [ 2192.001160][ C1] ? ipv4_conntrack_local+0x126/0x210 [ 2192.001177][ C1] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 2192.001196][ C1] nf_hook_slow+0xc5/0x220 [ 2192.001215][ C1] nf_hook+0x217/0x380 [ 2192.001233][ C1] ? nf_hook+0x9d/0x380 [ 2192.001249][ C1] ? __pfx_nf_hook+0x10/0x10 [ 2192.001267][ C1] ? __pfx_dst_output+0x10/0x10 [ 2192.001286][ C1] ? ip_fast_csum+0x1ee/0x2b0 [ 2192.001304][ C1] __ip_local_out+0x4db/0x600 [ 2192.001320][ C1] ? __pfx_dst_output+0x10/0x10 [ 2192.001339][ C1] ip_local_out+0x26/0x70 [ 2192.001357][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 2192.001380][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 2192.001398][ C1] ? nft_socket_cgroup_subtree_level+0xf8/0x340 [ 2192.001418][ C1] ? synproxy_pernet+0x45/0x270 [ 2192.001440][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 2192.001462][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 2192.001484][ C1] ? nf_ip_checksum+0x13c/0x510 [ 2192.001504][ C1] nft_synproxy_do_eval+0x345/0x570 [ 2192.001534][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 2192.001561][ C1] nft_do_chain+0x40c/0x1920 [ 2192.001582][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2192.001605][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 2192.001627][ C1] ? nf_ct_pernet+0x45/0x270 [ 2192.001656][ C1] nft_do_chain_inet+0x25d/0x340 [ 2192.001676][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2192.001696][ C1] ? __lock_acquire+0xab9/0xd20 [ 2192.001720][ C1] ? NF_HOOK+0x9a/0x3a0 [ 2192.001742][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2192.001762][ C1] nf_hook_slow+0xc5/0x220 [ 2192.001780][ C1] NF_HOOK+0x206/0x3a0 [ 2192.001803][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2192.001825][ C1] ? NF_HOOK+0x9a/0x3a0 [ 2192.001847][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2192.001868][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 2192.001884][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2192.001908][ C1] ? skb_dst+0x4f/0xd0 [ 2192.001922][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 2192.001946][ C1] NF_HOOK+0x30c/0x3a0 [ 2192.001969][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2192.001983][ C1] ? NF_HOOK+0x9a/0x3a0 [ 2192.002004][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2192.002027][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2192.002045][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 2192.002067][ C1] __netif_receive_skb+0x143/0x380 [ 2192.002091][ C1] ? process_backlog+0x27b/0x900 [ 2192.002112][ C1] process_backlog+0x31e/0x900 [ 2192.002138][ C1] __napi_poll+0xb6/0x540 [ 2192.002161][ C1] net_rx_action+0x5f7/0xda0 [ 2192.002188][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2192.002218][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 2192.002242][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2192.002257][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 2192.002280][ C1] handle_softirqs+0x22f/0x710 [ 2192.002303][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2192.002326][ C1] __local_bh_enable_ip+0x1a0/0x2e0 [ 2192.002346][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2192.002368][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 2192.002390][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 2192.002411][ C1] rcu_cpu_kthread+0xc3d/0x1b50 [ 2192.002435][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 2192.002461][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 2192.002483][ C1] ? preempt_schedule_irq+0xde/0x150 [ 2192.002503][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2192.002529][ C1] ? __pfx___schedule+0x10/0x10 [ 2192.002548][ C1] ? irqentry_exit+0x74/0x90 [ 2192.002567][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2192.002587][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 2192.002608][ C1] ? smpboot_thread_fn+0xf9/0xa60 [ 2192.002629][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 2192.002646][ C1] smpboot_thread_fn+0x542/0xa60 [ 2192.002666][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 2192.002687][ C1] kthread+0x711/0x8a0 [ 2192.002710][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2192.002728][ C1] ? __pfx_kthread+0x10/0x10 [ 2192.002749][ C1] ? rt_spin_unlock+0x150/0x200 [ 2192.002767][ C1] ? rt_spin_unlock+0x161/0x200 [ 2192.002781][ C1] ? __pfx_kthread+0x10/0x10 [ 2192.002803][ C1] ret_from_fork+0x4bc/0x870 [ 2192.002822][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2192.002843][ C1] ? __switch_to_asm+0x39/0x70 [ 2192.002858][ C1] ? __switch_to_asm+0x33/0x70 [ 2192.002873][ C1] ? __pfx_kthread+0x10/0x10 [ 2192.002895][ C1] ret_from_fork_asm+0x1a/0x30 [ 2192.002918][ C1]