last executing test programs: 2m35.642554966s ago: executing program 1 (id=1855): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setgroups(0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) 2m24.586795619s ago: executing program 1 (id=1871): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) syz_open_procfs(0x0, 0x0) io_submit(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000000000000034"], 0x118}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m23.840675933s ago: executing program 1 (id=1874): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000500)=""/200, 0xc8}], 0x1, 0x3, 0x1) 2m15.502775989s ago: executing program 1 (id=1883): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000180)={0x0, 0x4}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001040)='signal_generate\x00', r3}, 0x18) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="020010c717853417fbdfc841a7f5000200000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r5}, 0x18) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x851}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x4ee0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES64=r12], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r13}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) unshare(0x400) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r14, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000120) 2m11.870568915s ago: executing program 1 (id=1886): r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000040)={0x0, 0x7, 0x1, 0xfffffffd, 0x5, 0x9, "3000000502000000000000000400", 0x0, 0x0, 0x4a, 0x8, 0x0, 0x4, 0xe}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m10.336746515s ago: executing program 1 (id=1890): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0xfffffcdc}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$cgroup_int(r3, &(0x7f0000000000)=0x400, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0x800000d1}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) socket(0xa, 0x3, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x2000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x1, 0x2, 0xd, 0x50, 0xef1f}, 0x20) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x2, 0x400000000000003, 0x0, 0x9, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x5}, @sadb_address={0x5, 0x6, 0x6c, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x70000001}, @sadb_address={0x3, 0x17, 0x0, 0x120, 0x0, @in={0x2, 0x4e21, @local}}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd26}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd28, 0x3502}]}, 0xc0}}, 0x8080) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041319000200c90000000000000000"], 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 1m55.159073082s ago: executing program 32 (id=1890): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0xfffffcdc}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$cgroup_int(r3, &(0x7f0000000000)=0x400, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0x800000d1}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) socket(0xa, 0x3, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x2000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x1, 0x2, 0xd, 0x50, 0xef1f}, 0x20) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x2, 0x400000000000003, 0x0, 0x9, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x5}, @sadb_address={0x5, 0x6, 0x6c, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x70000001}, @sadb_address={0x3, 0x17, 0x0, 0x120, 0x0, @in={0x2, 0x4e21, @local}}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd26}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd28, 0x3502}]}, 0xc0}}, 0x8080) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041319000200c90000000000000000"], 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 1m10.285588537s ago: executing program 4 (id=1957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 1m8.114384169s ago: executing program 4 (id=1960): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002340)=0x4) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) readv(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/93) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x3c) 1m6.491599768s ago: executing program 4 (id=1963): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="e625e5e1479260f9ffff44f308060401080006040001aaaaaaaaaaaae0000002bbbb0800000000852734ab446f6b7f1d8400001b94ad50123994491a3decd05c171bd0a8c2b0f43b6fed5cca7eb41f89d4553f26d8358e8a8c1db2848c43cfe1b777d0b6335825707b590d035f6f700b14be2182898f85e3649bcd8a21553669e269e07c7b04000000703ee6935055279278d2f5f0ef62a92be44e9fc06d8c765a"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) memfd_create(&(0x7f00000004c0)='\x00', 0x1) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r2, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000040)=0x40, 0x1) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000e1e000/0x3000)=nil, 0x3000, 0xc) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x80000003) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0x3, 0x1000, 0x3a, 0x0, 0x0, 0x7}, 0x75) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r7 = dup2(0xffffffffffffffff, r6) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1c080}, 0x4000004) 1m5.393762755s ago: executing program 4 (id=1965): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) 1m4.900391244s ago: executing program 4 (id=1967): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50401, 0x1b) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000000)={0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000640)=""/79, 0x328000, 0x1000}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b0010000190023090000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000040000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000002c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000f70008007f0008000106eb0073c8b90196451d7882c5d64dec21b36e4e9c8d188c3fecc4dfbdfcae9b06693c8337229ee7be4391c70430296634a60916cf9d87b61e6ddf8dff594d9557482b23ed0bec5f39aa7e575412b2473ae01bceddf9f19c40a9180f36d7c11cc1c9aaa236453c64882c908cb0b72331641abbac65d40d9af0455451cb119e3fca446fe8ce04fada8b41d4d08a7bfa78d700402300773232b2bcffb8f8f1491688f236771d7948d76768ec8a5e06ffdb3187a416d1d70a7a9835212d8ca31a3c450e6a892d54c0a7c29281dc5e562915a94ffd7a44023e6027090b3aacb745f882477f5942c950f07a5a1ce75f3f00"], 0x1b0}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000"], 0x80}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400000007000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r5, r5, 0x0, 0x200900) 1m1.923076286s ago: executing program 4 (id=1971): socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) 46.66190359s ago: executing program 33 (id=1971): socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) 18.157279662s ago: executing program 3 (id=2024): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0x40d, 0xffffffffffffffff, 0x102, 0x101, 0x804, 0x4, 0xc000, 0xfffffffc, r1, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0xc048aec8, &(0x7f0000000080)={0x6}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000080)=0xffffbffa) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000000)={{0x20, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x10}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0x9, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x6000, 0x0, 0xa, 0x7, 0x2, 0x1, 0x6, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x1, 0x9}, {0x100002, 0xeeee8000, 0x9, 0xa, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x3, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x42, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0xdddd0000, 0x40, 0x7, 0x2100, 0xdddd0000, [0x5, 0x8002, 0x8]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.163651427s ago: executing program 3 (id=2025): openat(0xffffffffffffff9c, 0x0, 0x50401, 0x1b) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000000)={0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$int_out(r1, 0x0, &(0x7f0000000040)) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000640)=""/79, 0x328000, 0x1000}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b0010000190023090000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000040000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000"], 0x80}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r5, r5, 0x0, 0x200900) 10.370868895s ago: executing program 3 (id=2028): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x8000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x150, 0x1403, 0x100, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4040091}, 0x40000850) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a", 0x73, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="30003300c0100e00080211000001080211000000505050505050930000008c10040b8101c39cce7e3961bc13d6679f1e"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28004800) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) keyctl$chown(0x4, r3, 0xffffffffffffffff, 0xee00) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 9.306126579s ago: executing program 2 (id=2029): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$caif_stream(0x25, 0x1, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$inet6(0xa, 0x3, 0x8) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000000)=0x1000, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x8000) 9.169455252s ago: executing program 3 (id=2030): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 8.982735161s ago: executing program 0 (id=2031): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000bc0)={0x1, 0x0, [{0x5000, 0x9e, &(0x7f0000000700)=""/158}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 8.969168252s ago: executing program 5 (id=1983): syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028000080080003"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) mmap(&(0x7f0000479000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x11, r6, 0x0) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) 8.836238155s ago: executing program 2 (id=2032): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000180)={0x0, 0x4}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001040)='signal_generate\x00', r3}, 0x18) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="020010c717853417fbdfc841a7f5000200000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r5}, 0x18) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x851}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x4ee0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r12}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) unshare(0x400) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r13, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000120) 8.675752741s ago: executing program 3 (id=2033): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 7.76361402s ago: executing program 0 (id=2034): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000003bc0)=0x1, 0x4) r1 = io_uring_setup(0x7f17, &(0x7f0000000840)={0x0, 0xc627, 0x40, 0x1, 0x51, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffdc29, 0x1}}, 0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) sendto(r3, &(0x7f0000000400)="a0b7f4681b2c5a98568dcde245c59f04ad5c8c27c22f55a05985de53f9d50647958899b3909b4f26a0115aae78e12e5844470229939cfdba9360cbc7a19e7b5a87dcd9a0309cb46e8746b5ffccdc3aba786d0d42942ddaf3766a6f9f503048effc9a", 0x62, 0x4000054, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x9}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000200)={&(0x7f0000000800)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x87, 0xd}, &(0x7f00000005c0)=0x4, 0x0, 0x0, 0x9, 0x96, 0x5, 0x50}}], 0x58, 0x20008011}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2.104751584s ago: executing program 0 (id=2035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xe1, 0x0, 0xff000000000c0000}]}) 1.488696095s ago: executing program 3 (id=2036): socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) socketpair$unix(0x1, 0x3, 0x0, 0x0) iopl(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, 0x0) 1.481640655s ago: executing program 5 (id=2037): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0x40d, 0xffffffffffffffff, 0x102, 0x101, 0x804, 0x4, 0xc000, 0xfffffffc, r1, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0xc048aec8, &(0x7f0000000080)={0x6}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000080)=0xffffbffa) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000000)={{0x20, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x10}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0x9, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x6000, 0x0, 0xa, 0x7, 0x2, 0x1, 0x6, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x1, 0x9}, {0x100002, 0xeeee8000, 0x9, 0xa, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x3, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x42, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0xdddd0000, 0x40, 0x7, 0x2100, 0xdddd0000, [0x5, 0x8002, 0x8]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.323579691s ago: executing program 0 (id=2038): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef000000280012800b0001006d616373656300001800028005000300080000003fd13f06e934556800000000080005", @ANYRES32=r1], 0x50}}, 0x0) syz_emit_ethernet(0xb8, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00020008001086dd60122d9200823afffe8000000000000000000000000000bbff020000000000000000000000000001860090780000000000000000000000000e0aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af020200010000000500000080260004002602fe906d26efe39393fe08f73eabc5977be5a92ffbf9117ebafb7c1e7d599516e5cc54fb46e48adb7e389faa"], 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000700)=0xffffffff, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x0, 0xfe, {{0x6, 0x4, 0x0, 0x10, 0x18, 0x0, 0x0, 0xd7, 0x5e55b37311de6d89, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0x4, 0x4b}]}}}}}) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0x22, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b08009f59d351f20c83a50ee033cf5f0759cfc67cb3a4", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, r9, 0x80000000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002200000000000000000080071107b00000000009500"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r12 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r12, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) bind$rxrpc(r12, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x13}, 0x40}}, 0x24) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000005480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100fa00ffff090000000800000008000300", @ANYRES32=r11], 0x5c}}, 0x0) 1.073145005s ago: executing program 2 (id=2039): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) 836.083758ms ago: executing program 2 (id=2040): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$caif_stream(0x25, 0x1, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$inet6(0xa, 0x3, 0x8) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000000)=0x1000, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x8000) 385.138023ms ago: executing program 0 (id=2041): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x9) 343.681017ms ago: executing program 2 (id=2042): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000bc0)={0x1, 0x0, [{0x5000, 0x9e, &(0x7f0000000700)=""/158}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 540.23µs ago: executing program 0 (id=2043): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x401, @loopback, 0x8001}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_emit_ethernet(0x6e, &(0x7f00000024c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000382b00fc020000000000000000000000000000fe80000000000000000000000c0000aa67000000000000002100000000309078210600008fbab2e630c3e6a031fd2ad9265431d968f1028b8c7271bda9f785aa6887dd17aea49bf2"], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000280)="e28b769bb93b42be40c24711dbb26e5420d80ea810e61a348ed85234abf82cda75ff296378ec02fe6d3f54050fcf33b10b9cf7342090ec9ea452785a19e8886c19023a163ccc075bf83d2e68060c8a753682d1c67adcd251a1321dbc7b80e4543626f0e4e261ffec738711", 0x6b}, {&(0x7f0000000200)="7023de126e0fa90c60a8f5cd28b8e5df0f7bd00a2106750960c417a6", 0x1c}, {&(0x7f0000000380)="5a478125894977d6faef020925b0df5b2627ce6be322506616036f505263ff31b1e163e3883668ce4dd8b6b1e73bdd3fc4451e33b4df8230bd98f5bfb54c2edc79601f66e54b2737", 0x48}, {&(0x7f0000000400)="8e7fc53f54af5acfbd2e30d149c93a3a53981a5030b43aabe5de1905be1062efafbe23fbc1e7d976194c7764fb5bf0c4b7ab21171b0fa3063b557c7b73842ad67bcad8ba", 0x44}, {&(0x7f0000000480)="a2b2275b40e94c0503553b78bd86115e183a4b94d730f90048c840dc39afe1ad5f53a8337bf2fb29073cb8f2833155ff8ba4ca3495409b67aa49147615554ba82781635484fa5dccaf55dcd9b36a174d2d55b213721025d1d53de9027b9eab9f1551da", 0x63}, {&(0x7f0000003000)="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", 0x1000}, {&(0x7f0000000580)="e98ea540e1916315392718c215c7aac40077758dfaa29f68a68d9112c64da558ff4af53438e35bab253e75b47e8de32c6b2c7be71d2abc5ca910d33c0702b1d3efe4bd9d99e0d153d64952115070de8bcba19a28e2cb33b37e826ee0e9fceb24ad1db58c5514f0e7ce86667a8de67e0b434312d9bba1839d4c33152508414da219b2860402723e72fbde6d41beea342e93616d67beba453c050c48083763b1f68e1769cf4462abce39c50dee1b33", 0xae}, {&(0x7f0000000640)="3bc24b9206a1b5914e996c98d0eb975fab89fc3d39609b11d92f16523b678ba13fb2d07f925e6e515f5bb6c6ea3b19abd3f7ac4b3b1f1ada775f453acca2ba3f9e4beb5dba525d17ee671cfa481dc529b7208ad2db2f2f31e28a903c4fb47fcc1f26b33d0b7484910a5d2ec98faff2230f477e6cd774fb330bd0ef6a5da20ccb80f5", 0x82}, {&(0x7f0000000900)="09c09e734498dd98deedf82cebd1ffcbf020dd719c6799ef6f230f719822f8886552160abb0c830261c6792b9d22e906c6596dc41269546146cc12bf20a15007fae64390b986c314d57fd32b2a9dfc1d5ecbd33b4accca3da1801c1786116d7340dfe597de5737e6f259d61fdc261035773d1b8e67ee1f1ea031b3a3f307bedc4d66421e650b38c34fc19cc735bdd6ba018c214fbe59440a6cf517038f143be2e7ffc0b2e5b2c6e3c752102666a3cd", 0xaf}, {&(0x7f00000007c0)="2b5331ef0a1e58165c0c3ff1b9985171ecd1cf0b5ac2b6a893cd774b52c2c333c5df4069284b509b40f3090a417a5aabcdc88c5160ff4bcfc459bb4d32eb1aae26c32c9e7696995160ac50a65a2e577564405f0ee4fa43dc9c9e935c50485271fe39350a1aeb4114871a9e330e7a6c56ecc3f90fb9ba8d4603a2719e59b2b5b179b35c9e9e792fccd0d32e8cf63deeb898c5896f6de7", 0x96}], 0xa}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, &(0x7f0000002fc0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e1f, @loopback}], 0x10) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000140)=0x5, 0x4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 0s ago: executing program 2 (id=2044): syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600180f200130600fe800000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000002640)={'team_slave_0\x00', @random="76e04c34b99d"}) socket$pppoe(0x18, 0x1, 0x0) r2 = socket(0x11, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0xfffffffffffffffc, 0x12) setsockopt(r2, 0x107, 0x14, &(0x7f0000000000)="11106e00", 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') statx(r4, 0x0, 0x1000, 0x1, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) unshare(0x2a020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x4, [0x8000, 0xc95a, 0xf, 0x8, 0x7d, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x800, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0xc, 0x4, 0x80080000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x20000017, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0xbb5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432e6, 0xc8, 0x5, 0xe, 0x2bf, 0x6ca, 0x4, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x1, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x9, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x7e78, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x1, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x10000, 0x80000001, 0x7fff, 0xffff, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x200fff]}, 0x45c) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r5, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): e 10 has an invalid length. [ 121.727258][ T6658] bond0: (slave dummy0): Releasing backup interface [ 121.756929][ T6658] team0: Port device dummy0 added [ 121.781563][ T6659] netlink: 'syz.2.295': attribute type 10 has an invalid length. [ 121.876786][ T6659] team0: Port device dummy0 removed [ 121.908311][ T6659] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 122.570527][ T6665] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.094063][ T6668] netlink: 72 bytes leftover after parsing attributes in process `syz.3.298'. [ 123.189117][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 123.252511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.327771][ T6665] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.415328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.493617][ T6665] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.642577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.671454][ T6665] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.735473][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 123.750035][ T6692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.304'. [ 123.851222][ T6696] syzkaller0: entered promiscuous mode [ 123.863877][ T6696] syzkaller0: entered allmulticast mode [ 123.912586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.925001][ T6665] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.988628][ T6665] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.021397][ T6665] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.148983][ T6665] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.225857][ T6704] bond0: (slave dummy0): Releasing backup interface [ 124.381150][ T6704] bond0: (slave wlan1): Releasing backup interface [ 124.431584][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.313'. [ 124.517613][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 124.538296][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.316'. [ 125.065394][ T6737] bridge_slave_0: left allmulticast mode [ 125.071247][ T6737] bridge_slave_0: left promiscuous mode [ 125.077575][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.091970][ T5794] Bluetooth: hci0: unexpected event for opcode 0x0c7d [ 125.109659][ T6737] bridge_slave_1: left allmulticast mode [ 125.141110][ T6737] bridge_slave_1: left promiscuous mode [ 125.156862][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.245925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 125.261016][ T6737] bond0: (slave bond_slave_0): Releasing backup interface [ 125.730461][ T6737] bond0: (slave bond_slave_1): Releasing backup interface [ 125.757968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 126.122907][ T6737] team0: Port device team_slave_0 removed [ 126.140955][ T6737] team0: Port device team_slave_1 removed [ 126.159954][ T6737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.197297][ T6737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.225601][ T6737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.239010][ T6737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.264876][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.326'. [ 126.646962][ T6763] netlink: 216 bytes leftover after parsing attributes in process `syz.3.334'. [ 126.836973][ T6769] tipc: Enabled bearer , priority 0 [ 126.879009][ T6769] syzkaller0: entered promiscuous mode [ 126.888971][ T6769] syzkaller0: entered allmulticast mode [ 126.931957][ T6769] tipc: Resetting bearer [ 126.955520][ T6768] tipc: Resetting bearer [ 127.021445][ T6768] tipc: Disabling bearer [ 127.271641][ T6777] netlink: 48 bytes leftover after parsing attributes in process `syz.1.339'. [ 128.339261][ T6804] overlayfs: failed to resolve './bus': -2 [ 128.386353][ T6804] __nla_validate_parse: 3 callbacks suppressed [ 128.386734][ T6804] netlink: 108 bytes leftover after parsing attributes in process `syz.0.350'. [ 129.202457][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.352'. [ 129.982593][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.359'. [ 130.002346][ T6827] bridge0: entered promiscuous mode [ 130.149742][ T6836] netlink: 72 bytes leftover after parsing attributes in process `syz.0.362'. [ 130.194078][ T6837] netlink: 64 bytes leftover after parsing attributes in process `syz.1.359'. [ 130.506524][ T6846] tipc: Enabled bearer , priority 0 [ 130.741147][ T6846] syzkaller0: entered promiscuous mode [ 130.768449][ T6846] syzkaller0: entered allmulticast mode [ 130.782686][ T6846] tipc: Resetting bearer [ 130.802555][ T6857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.372'. [ 130.834851][ T6845] tipc: Resetting bearer [ 131.563631][ T27] tipc: Node number set to 3754180617 [ 132.393613][ T6845] tipc: Disabling bearer [ 132.405951][ T6859] netlink: 72 bytes leftover after parsing attributes in process `syz.3.373'. [ 132.481753][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.375'. [ 132.675553][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.376'. [ 132.730416][ T6871] netlink: 64 bytes leftover after parsing attributes in process `syz.3.375'. [ 133.118337][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.162651][ T6894] tipc: Enabling of bearer rejected, failed to enable media [ 133.174031][ T6894] syzkaller0: entered promiscuous mode [ 133.179582][ T6894] syzkaller0: entered allmulticast mode [ 133.684307][ T6913] __nla_validate_parse: 2 callbacks suppressed [ 133.684324][ T6913] netlink: 64 bytes leftover after parsing attributes in process `syz.0.390'. [ 133.714819][ T6912] netlink: 'syz.3.393': attribute type 10 has an invalid length. [ 133.743927][ T6912] team0: Port device dummy0 added [ 133.771755][ T6912] netlink: 'syz.3.393': attribute type 10 has an invalid length. [ 133.826779][ T6912] team0: Port device dummy0 removed [ 133.854514][ T6912] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 134.279163][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.399'. [ 134.465989][ T6939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.401'. [ 134.744337][ T6947] netlink: 64 bytes leftover after parsing attributes in process `syz.3.404'. [ 135.000549][ T6953] input: syz1 as /devices/virtual/input/input5 [ 135.133622][ T6956] tipc: Enabling of bearer rejected, failed to enable media [ 135.620263][ T6970] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 136.152744][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.410'. [ 136.634243][ T6978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.411'. [ 140.959665][ T7029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.422'. [ 141.426446][ T7007] tipc: Enabling of bearer rejected, failed to enable media [ 141.436911][ T7020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.420'. [ 141.729966][ T7040] netlink: 'syz.0.424': attribute type 21 has an invalid length. [ 141.763821][ T7040] netlink: 128 bytes leftover after parsing attributes in process `syz.0.424'. [ 141.789028][ T7040] netlink: 'syz.0.424': attribute type 4 has an invalid length. [ 141.807480][ T7040] netlink: 'syz.0.424': attribute type 3 has an invalid length. [ 141.833865][ T7040] netlink: 3 bytes leftover after parsing attributes in process `syz.0.424'. [ 141.905510][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.429'. [ 142.287675][ T7060] tipc: Enabling of bearer rejected, failed to enable media [ 142.433240][ T7068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.433'. [ 142.682767][ T7072] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 142.794708][ T7072] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.083751][ T7083] binder: 7081:7083 unknown command 1074553619 [ 143.111711][ T7083] binder: 7081:7083 ioctl c0306201 200000000540 returned -22 [ 143.177532][ T7088] binder: 7081:7088 unknown command 1074291477 [ 143.185781][ T7088] binder: 7081:7088 ioctl c0306201 200000000640 returned -22 [ 145.070453][ T7087] tipc: Enabling of bearer rejected, failed to enable media [ 145.080062][ T7090] syzkaller0: entered promiscuous mode [ 145.086344][ T7090] syzkaller0: entered allmulticast mode [ 145.186101][ T7105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.442'. [ 145.224578][ T7115] tipc: Enabled bearer , priority 0 [ 145.243031][ T7115] syzkaller0: entered promiscuous mode [ 145.248578][ T7115] syzkaller0: entered allmulticast mode [ 145.363358][ T7115] tipc: Resetting bearer [ 145.383175][ T7114] tipc: Resetting bearer [ 145.440726][ T7114] tipc: Disabling bearer [ 147.021117][ T7146] netlink: 'syz.3.455': attribute type 10 has an invalid length. [ 147.034181][ T5794] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 147.042888][ T5794] Bluetooth: hci2: Injecting HCI hardware error event [ 147.051977][ T5797] Bluetooth: hci2: hardware error 0x00 [ 147.102548][ T7146] bond0: (slave dummy0): Releasing backup interface [ 147.129219][ T7146] team0: Port device dummy0 added [ 147.161807][ T7152] netlink: 'syz.3.455': attribute type 10 has an invalid length. [ 147.290128][ T7152] team0: Port device dummy0 removed [ 147.795156][ T7152] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 147.811442][ T7145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.453'. [ 148.718147][ T7165] syz.1.460[7165]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 148.764734][ T7170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.462'. [ 148.777818][ T7165] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 149.113114][ T5797] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 150.087046][ T7191] netlink: 'syz.3.470': attribute type 1 has an invalid length. [ 150.190476][ T7191] bond1: entered promiscuous mode [ 150.196090][ T7191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.205303][ T7193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.470'. [ 150.214767][ T7193] bond1: entered allmulticast mode [ 150.761915][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.473'. [ 150.801271][ T7193] bond1: (slave bridge2): making interface the new active one [ 150.811841][ T7193] bridge2: entered promiscuous mode [ 150.821858][ T7193] bridge2: entered allmulticast mode [ 150.831312][ T7193] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 150.981661][ T7206] netlink: 'syz.0.475': attribute type 10 has an invalid length. [ 151.017323][ T7206] team0: Port device dummy0 added [ 151.044445][ T7207] netlink: 'syz.0.475': attribute type 10 has an invalid length. [ 151.109337][ T7207] team0: Port device dummy0 removed [ 151.137209][ T7207] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.412526][ T7238] netlink: 'syz.2.485': attribute type 1 has an invalid length. [ 153.421111][ T7238] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 153.432363][ T7241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.485'. [ 153.537056][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 153.900459][ T7255] syzkaller0: entered promiscuous mode [ 153.909733][ T7255] syzkaller0: entered allmulticast mode [ 153.933705][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 154.372595][ T7276] netlink: 64 bytes leftover after parsing attributes in process `syz.1.490'. [ 156.166564][ T7301] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 156.271083][ T7301] bond2: entered promiscuous mode [ 156.277017][ T5797] Bluetooth: hci3: link tx timeout [ 156.282937][ T5797] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.298027][ T7301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.408478][ T7304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.497'. [ 156.428647][ T7304] bond2: entered allmulticast mode [ 156.451289][ T7301] bond2: (slave bridge3): making interface the new active one [ 156.482272][ T7301] bridge3: entered promiscuous mode [ 156.492576][ T7301] bridge3: entered allmulticast mode [ 156.510493][ T7301] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 156.546262][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.499'. [ 156.586976][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.501'. [ 157.839950][ T5794] Bluetooth: hci3: link tx timeout [ 157.846445][ T5794] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 158.312644][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 159.829920][ T7335] syzkaller0: entered promiscuous mode [ 159.835620][ T7335] syzkaller0: entered allmulticast mode [ 159.846840][ T7354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.511'. [ 161.687716][ T7359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.512'. [ 161.773001][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'. [ 162.289427][ T5797] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 162.303147][ T7396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.523'. [ 162.524599][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.521'. [ 163.101260][ T7395] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 163.109063][ T7395] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 163.122251][ T7395] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 163.130485][ T7395] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 163.138006][ T7395] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 163.146120][ T7395] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 163.156033][ T7395] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.162409][ T7395] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 163.342916][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'. [ 163.561251][ T7434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.534'. [ 163.732482][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 163.749507][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.536'. [ 163.778282][ T7441] process 'syz.2.537' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 163.807182][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.535'. [ 164.572421][ T5797] Bluetooth: hci0: command tx timeout [ 165.192248][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 165.198351][ T5797] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.332894][ T7450] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 166.388168][ T7450] bond0 (unregistering): Released all slaves [ 166.632444][ T5797] Bluetooth: hci0: command tx timeout [ 167.059577][ T7477] __nla_validate_parse: 2 callbacks suppressed [ 167.059593][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.546'. [ 167.076663][ T7479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.545'. [ 167.093732][ T7480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'. [ 167.211604][ T7485] netlink: 64 bytes leftover after parsing attributes in process `syz.3.547'. [ 167.352423][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 167.387554][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 167.397494][ T7488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.548'. [ 167.649892][ T7498] tipc: Started in network mode [ 167.683356][ T7498] tipc: Node identity 6298b21542e2, cluster identity 4711 [ 167.720128][ T7498] tipc: Enabled bearer , priority 0 [ 167.758480][ T7498] tipc: Resetting bearer [ 167.897597][ T7496] tipc: Disabling bearer [ 168.004238][ T7506] syzkaller0: entered promiscuous mode [ 168.009792][ T7506] syzkaller0: entered allmulticast mode [ 168.067601][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.557'. [ 168.153358][ T5797] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.208844][ T7513] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 168.229332][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'. [ 168.447197][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 168.502751][ T7522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.560'. [ 168.712360][ T5794] Bluetooth: hci0: command tx timeout [ 168.775896][ T7532] netlink: 'syz.2.563': attribute type 10 has an invalid length. [ 168.839830][ T7532] team0: Port device dummy0 added [ 168.856565][ T7532] netlink: 'syz.2.563': attribute type 10 has an invalid length. [ 168.891732][ T7532] team0: Port device dummy0 removed [ 168.928312][ T7532] syz.2.563 (7532) used greatest stack depth: 19912 bytes left [ 169.349456][ T7540] tipc: Enabled bearer , priority 0 [ 169.385493][ T7540] tipc: Resetting bearer [ 169.421973][ T7539] tipc: Disabling bearer [ 170.103621][ T7561] netlink: 'syz.1.573': attribute type 10 has an invalid length. [ 170.141190][ T7561] bond0: (slave dummy0): Releasing backup interface [ 170.206055][ T7561] team0: Port device dummy0 added [ 170.211934][ T7562] netlink: 'syz.1.573': attribute type 10 has an invalid length. [ 170.232225][ T5797] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.286642][ T7562] team0: Port device dummy0 removed [ 170.295319][ T7562] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 170.712325][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 171.209465][ T7584] syzkaller0: entered promiscuous mode [ 171.215517][ T7584] syzkaller0: entered allmulticast mode [ 171.537249][ T7596] 9pnet_virtio: no channels available for device syz [ 172.064762][ T7608] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 172.795235][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 174.952166][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 175.226384][ T7648] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.236697][ T7648] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.245977][ T7648] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.256469][ T7648] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.374825][ T7690] __nla_validate_parse: 5 callbacks suppressed [ 175.374843][ T7690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.610'. [ 175.880997][ T7702] tipc: Enabled bearer , priority 0 [ 176.448138][ T7704] syzkaller0: entered promiscuous mode [ 176.458964][ T7704] syzkaller0: entered allmulticast mode [ 176.508428][ T7702] tipc: Resetting bearer [ 176.575067][ T7701] tipc: Resetting bearer [ 176.619972][ T7701] tipc: Disabling bearer [ 177.032480][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 177.243724][ T7713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.616'. [ 177.814840][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.623'. [ 177.858820][ T7736] netlink: 88 bytes leftover after parsing attributes in process `syz.0.624'. [ 177.935476][ T7739] netlink: 64 bytes leftover after parsing attributes in process `syz.2.623'. [ 178.138407][ T7741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.625'. [ 178.349484][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 178.458251][ T7750] tipc: Enabled bearer , priority 0 [ 178.480516][ T7750] tipc: Resetting bearer [ 178.508763][ T7749] tipc: Disabling bearer [ 178.664241][ T7753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.630'. [ 178.975586][ T7762] netlink: 88 bytes leftover after parsing attributes in process `syz.1.634'. [ 179.054911][ T7763] syzkaller0: entered promiscuous mode [ 179.060458][ T7763] syzkaller0: entered allmulticast mode [ 179.164439][ T7770] netlink: 'syz.0.637': attribute type 10 has an invalid length. [ 179.173982][ T7770] bond0: (slave dummy0): Releasing backup interface [ 179.187021][ T7770] team0: Port device dummy0 added [ 179.198711][ T7770] netlink: 'syz.0.637': attribute type 10 has an invalid length. [ 179.227729][ T7770] team0: Port device dummy0 removed [ 179.246447][ T7770] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 179.427969][ T7778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.640'. [ 179.752343][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 180.406252][ T7796] syzkaller0: entered promiscuous mode [ 180.432263][ T7796] syzkaller0: entered allmulticast mode [ 180.656304][ T7813] netlink: 'syz.2.654': attribute type 10 has an invalid length. [ 180.719967][ T7813] team0: Port device dummy0 added [ 180.736746][ T7815] netlink: 'syz.2.654': attribute type 10 has an invalid length. [ 180.769169][ T7815] team0: Port device dummy0 removed [ 181.210085][ T7832] __nla_validate_parse: 2 callbacks suppressed [ 181.210101][ T7832] netlink: 88 bytes leftover after parsing attributes in process `syz.2.660'. [ 181.341826][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.661'. [ 181.586377][ T7840] syzkaller0: entered promiscuous mode [ 181.600506][ T7840] syzkaller0: entered allmulticast mode [ 181.688759][ T7842] syzkaller0: entered promiscuous mode [ 181.696963][ T7842] syzkaller0: entered allmulticast mode [ 181.842165][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 183.608041][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'. [ 183.743876][ T7865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.670'. [ 183.922226][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 184.164418][ T7886] syzkaller0: entered promiscuous mode [ 184.171365][ T7886] syzkaller0: entered allmulticast mode [ 184.596018][ T7903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.682'. [ 184.750754][ T7905] tipc: Enabled bearer , priority 0 [ 184.786857][ T7904] tipc: Disabling bearer [ 185.219174][ T7924] netlink: 88 bytes leftover after parsing attributes in process `syz.2.689'. [ 185.454920][ T7928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.691'. [ 186.199092][ T7954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.700'. [ 186.301968][ T7956] netlink: 'syz.3.701': attribute type 10 has an invalid length. [ 186.337503][ T7956] bond0: (slave dummy0): Releasing backup interface [ 186.355936][ T7956] team0: Port device dummy0 added [ 186.364712][ T7961] netlink: 'syz.3.701': attribute type 10 has an invalid length. [ 186.379868][ T7961] team0: Port device dummy0 removed [ 186.391388][ T7961] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 186.402755][ T7958] tipc: Enabled bearer , priority 0 [ 186.415359][ T7958] syzkaller0: entered promiscuous mode [ 186.420902][ T7958] syzkaller0: entered allmulticast mode [ 186.441458][ T7957] tipc: Resetting bearer [ 186.467813][ T7957] tipc: Disabling bearer [ 187.112789][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 188.164338][ T7988] netlink: 'syz.1.712': attribute type 10 has an invalid length. [ 188.201041][ T7988] bond0: (slave dummy0): Releasing backup interface [ 188.231159][ T7988] team0: Port device dummy0 added [ 188.271392][ T7990] netlink: 'syz.1.712': attribute type 10 has an invalid length. [ 188.373168][ T7990] team0: Port device dummy0 removed [ 188.402017][ T7990] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 188.412534][ T7991] tipc: Enabled bearer , priority 0 [ 188.438332][ T7994] syzkaller0: entered promiscuous mode [ 188.444069][ T7994] syzkaller0: entered allmulticast mode [ 188.460930][ T7987] tipc: Resetting bearer [ 188.523592][ T7984] tipc: Resetting bearer [ 188.659177][ T7984] tipc: Disabling bearer [ 189.192279][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 189.571996][ T8017] Mount JFS Failure: -22 [ 189.576801][ T8017] jfs_mount failed w/return code = -22 [ 190.414658][ T8021] capability: warning: `syz.1.723' uses deprecated v2 capabilities in a way that may be insecure [ 190.461533][ T8025] syzkaller0: entered promiscuous mode [ 190.467436][ T8025] syzkaller0: entered allmulticast mode [ 190.628105][ T8027] tipc: Enabled bearer , priority 0 [ 190.654699][ T8027] syzkaller0: entered promiscuous mode [ 190.660241][ T8027] syzkaller0: entered allmulticast mode [ 190.702882][ T8027] tipc: Resetting bearer [ 190.744846][ T8026] tipc: Resetting bearer [ 190.785509][ T8026] tipc: Disabling bearer [ 192.139434][ T8032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.722'. [ 192.209490][ T8043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 193.262697][ T8072] syzkaller0: entered promiscuous mode [ 193.281800][ T8072] syzkaller0: entered allmulticast mode [ 193.379576][ T8069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.741'. [ 194.152510][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 194.419609][ T8102] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 194.557037][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.232383][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 196.712113][ T8144] Mount JFS Failure: -22 [ 196.716463][ T8144] jfs_mount failed w/return code = -22 [ 198.322619][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 199.549730][ T8189] tipc: Enabled bearer , priority 0 [ 199.570734][ T8189] syzkaller0: entered promiscuous mode [ 199.589519][ T8189] syzkaller0: entered allmulticast mode [ 199.622831][ T8189] tipc: Resetting bearer [ 199.633778][ T8188] tipc: Resetting bearer [ 199.667268][ T8188] tipc: Disabling bearer [ 199.710522][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 200.632366][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 201.414226][ T8221] Mount JFS Failure: -22 [ 201.418542][ T8221] jfs_mount failed w/return code = -22 [ 201.707367][ T8228] tipc: Enabled bearer , priority 0 [ 201.731084][ T8228] syzkaller0: entered promiscuous mode [ 201.745740][ T8228] syzkaller0: entered allmulticast mode [ 201.789258][ T8228] tipc: Resetting bearer [ 202.229956][ T8226] tipc: Resetting bearer [ 202.367171][ T8226] tipc: Disabling bearer [ 202.410949][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 202.712163][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 204.872904][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 205.753727][ T8270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.808'. [ 205.937794][ T8283] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 205.988117][ T8283] bond3: entered promiscuous mode [ 205.999554][ T8283] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.008070][ T8291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.815'. [ 206.116197][ T8283] bond3: (slave bridge7): making interface the new active one [ 206.134174][ T8283] bridge7: entered promiscuous mode [ 206.159310][ T8283] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 206.199763][ T8298] tipc: Enabled bearer , priority 0 [ 206.245531][ T8303] netlink: 'syz.0.819': attribute type 21 has an invalid length. [ 206.260397][ T8303] netlink: 128 bytes leftover after parsing attributes in process `syz.0.819'. [ 206.284554][ T8303] netlink: 'syz.0.819': attribute type 4 has an invalid length. [ 206.294216][ T8303] netlink: 'syz.0.819': attribute type 3 has an invalid length. [ 206.302040][ T8303] netlink: 3 bytes leftover after parsing attributes in process `syz.0.819'. [ 206.320843][ T8295] tipc: Resetting bearer [ 206.354984][ T8294] tipc: Disabling bearer [ 206.758728][ T8318] netlink: 'syz.2.825': attribute type 10 has an invalid length. [ 206.782855][ T8318] team0: Port device dummy0 added [ 206.789657][ T8319] netlink: 'syz.2.825': attribute type 10 has an invalid length. [ 206.839283][ T8319] team0: Port device dummy0 removed [ 206.847361][ T8315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.822'. [ 209.115919][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 210.428255][ T8333] tipc: Enabling of bearer rejected, failed to enable media [ 210.973265][ T8370] netlink: 'syz.1.836': attribute type 10 has an invalid length. [ 211.022912][ T8370] bond0: (slave dummy0): Releasing backup interface [ 211.057626][ T8370] team0: Port device dummy0 added [ 211.082639][ T8372] netlink: 'syz.1.836': attribute type 10 has an invalid length. [ 211.143301][ T8372] team0: Port device dummy0 removed [ 211.169006][ T8372] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 213.277174][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 214.086578][ T8402] tipc: Enabling of bearer rejected, failed to enable media [ 216.770371][ T8445] Mount JFS Failure: -22 [ 216.774774][ T8445] jfs_mount failed w/return code = -22 [ 218.388953][ T8460] netlink: 64 bytes leftover after parsing attributes in process `syz.2.853'. [ 218.455978][ T8459] syzkaller0: entered promiscuous mode [ 218.481804][ T8459] syzkaller0: entered allmulticast mode [ 219.215496][ T8464] tipc: Enabled bearer , priority 0 [ 219.269625][ T8464] syzkaller0: entered promiscuous mode [ 219.283428][ T8464] syzkaller0: entered allmulticast mode [ 219.343531][ T8464] tipc: Resetting bearer [ 219.395627][ T8463] tipc: Resetting bearer [ 219.621912][ T8463] tipc: Disabling bearer [ 221.064684][ T8486] block device autoloading is deprecated and will be removed. [ 221.802555][ T8491] binder: 8488:8491 ioctl 0 200000000040 returned -22 [ 221.823979][ T8491] netlink: 248 bytes leftover after parsing attributes in process `syz.3.862'. [ 223.090887][ T8500] netlink: 'syz.1.864': attribute type 1 has an invalid length. [ 223.149685][ T8505] netlink: 64 bytes leftover after parsing attributes in process `syz.3.865'. [ 223.151925][ T8500] bond1: entered promiscuous mode [ 223.169326][ T8500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.205502][ T8499] tipc: Enabling of bearer rejected, failed to enable media [ 223.217918][ T8500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.864'. [ 223.260197][ T8500] bond1: (slave bridge2): making interface the new active one [ 223.272465][ T8500] bridge2: entered promiscuous mode [ 223.288726][ T8500] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 224.608651][ T8525] tipc: Enabled bearer , priority 0 [ 224.653861][ T8525] syzkaller0: entered promiscuous mode [ 224.659404][ T8525] syzkaller0: entered allmulticast mode [ 224.684628][ T8525] tipc: Resetting bearer [ 224.704704][ T8523] tipc: Resetting bearer [ 224.795008][ T8523] tipc: Disabling bearer [ 225.992751][ T8537] netlink: 108 bytes leftover after parsing attributes in process `syz.0.872'. [ 226.877163][ T8539] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 227.813672][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 228.198384][ T8556] tipc: Enabling of bearer rejected, failed to enable media [ 228.231335][ T8558] netlink: 'syz.2.881': attribute type 1 has an invalid length. [ 228.362323][ T8558] bond0: entered promiscuous mode [ 228.398146][ T8558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.433761][ T8563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.881'. [ 228.608665][ T8558] bond0: (slave bridge2): making interface the new active one [ 228.657636][ T8558] bridge2: entered promiscuous mode [ 228.691664][ T8558] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 231.227842][ T8594] syzkaller0: entered promiscuous mode [ 231.276655][ T8594] syzkaller0: entered allmulticast mode [ 231.283879][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 231.309581][ T8600] tipc: Enabling of bearer rejected, failed to enable media [ 232.320480][ T8633] netlink: 'syz.1.901': attribute type 10 has an invalid length. [ 232.362126][ T8633] bond0: (slave dummy0): Releasing backup interface [ 232.616310][ T8633] team0: Port device dummy0 added [ 232.696155][ T8636] netlink: 'syz.1.901': attribute type 10 has an invalid length. [ 233.245444][ T8636] team0: Port device dummy0 removed [ 233.255005][ T8636] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 233.387613][ T8643] tipc: Enabling of bearer rejected, failed to enable media [ 236.220863][ T8680] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 236.245453][ T8680] bond0: (slave dummy0): Releasing backup interface [ 236.259346][ T8680] team0: Port device dummy0 added [ 236.270269][ T8680] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 236.345728][ T8680] team0: Port device dummy0 removed [ 236.368458][ T8680] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 236.678164][ T8691] tipc: Enabling of bearer rejected, failed to enable media [ 238.531331][ T8732] tipc: Enabling of bearer rejected, failed to enable media [ 238.810674][ T8740] netlink: 48 bytes leftover after parsing attributes in process `syz.1.933'. [ 239.511325][ T8747] netlink: 64 bytes leftover after parsing attributes in process `syz.1.933'. [ 240.072396][ T8759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.939'. [ 240.599713][ T8778] netlink: 'syz.1.943': attribute type 1 has an invalid length. [ 240.679679][ T8778] bond2: entered promiscuous mode [ 240.688329][ T8778] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.788964][ T8778] bond2: (slave bridge3): making interface the new active one [ 240.797060][ T8778] bridge3: entered promiscuous mode [ 240.807574][ T8778] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 240.853958][ T8782] syzkaller0: entered promiscuous mode [ 240.878610][ T8782] syzkaller0: entered allmulticast mode [ 240.890207][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.945'. [ 242.211320][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 242.323405][ T8802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.951'. [ 242.445452][ T8810] tipc: Enabled bearer , priority 0 [ 242.466964][ T8810] syzkaller0: entered promiscuous mode [ 242.481801][ T8810] syzkaller0: entered allmulticast mode [ 242.523012][ T8810] tipc: Resetting bearer [ 242.913493][ T8816] Mount JFS Failure: -22 [ 242.917791][ T8816] jfs_mount failed w/return code = -22 [ 243.813472][ T8809] tipc: Resetting bearer [ 243.921008][ T8809] tipc: Disabling bearer [ 243.969706][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.957'. [ 244.456114][ T8843] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 244.849388][ T8853] netlink: 14 bytes leftover after parsing attributes in process `syz.3.964'. [ 245.130799][ T8853] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 245.155069][ T8853] bond0 (unregistering): Released all slaves [ 245.183383][ T8856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.963'. [ 245.201933][ T8861] syzkaller0: entered promiscuous mode [ 245.209110][ T8861] syzkaller0: entered allmulticast mode [ 245.228965][ T8860] tipc: Enabled bearer , priority 0 [ 245.274399][ T8858] tipc: Resetting bearer [ 245.322792][ T8857] tipc: Resetting bearer [ 245.372715][ T8857] tipc: Disabling bearer [ 245.748206][ T8871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.970'. [ 246.235879][ T5797] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 246.281654][ T8888] netlink: 'syz.0.974': attribute type 10 has an invalid length. [ 246.381229][ T8888] bond0: (slave dummy0): Releasing backup interface [ 246.416228][ T8888] team0: Port device dummy0 added [ 246.447413][ T8891] netlink: 'syz.0.974': attribute type 10 has an invalid length. [ 246.561745][ T8891] team0: Port device dummy0 removed [ 246.611174][ T8891] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 246.638117][ T8894] tipc: Enabling of bearer rejected, failed to enable media [ 247.673353][ T8922] Mount JFS Failure: -22 [ 247.677642][ T8922] jfs_mount failed w/return code = -22 [ 248.712636][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 249.683897][ T8946] syzkaller0: entered promiscuous mode [ 249.697641][ T8946] syzkaller0: entered allmulticast mode [ 250.103393][ T8951] tipc: Enabling of bearer rejected, failed to enable media [ 250.314199][ T5794] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 250.323862][ T5794] Bluetooth: hci3: Injecting HCI hardware error event [ 250.331821][ T5794] Bluetooth: hci3: hardware error 0x00 [ 251.108595][ T8975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.994'. [ 251.354589][ T8982] netlink: 48 bytes leftover after parsing attributes in process `syz.3.996'. [ 251.480931][ T8986] netlink: 64 bytes leftover after parsing attributes in process `syz.3.996'. [ 251.818500][ T8992] random: crng reseeded on system resumption [ 252.402222][ T5794] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 252.712376][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 252.819580][ T9003] tipc: Enabled bearer , priority 0 [ 252.915941][ T9003] tipc: Resetting bearer [ 252.954010][ T9002] tipc: Disabling bearer [ 253.550922][ T9010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1005'. [ 256.016744][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.201252][ T9029] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1010'. [ 256.236850][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1009'. [ 256.455062][ T9033] Mount JFS Failure: -22 [ 256.459445][ T9033] jfs_mount failed w/return code = -22 [ 256.485037][ T9027] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1009'. [ 256.820108][ T9040] netlink: 'syz.2.1013': attribute type 10 has an invalid length. [ 256.841832][ T9040] team0: Port device dummy0 added [ 256.861976][ T9040] netlink: 'syz.2.1013': attribute type 10 has an invalid length. [ 256.918184][ T9040] team0: Port device dummy0 removed [ 257.093395][ T9042] netlink: 'syz.3.1014': attribute type 1 has an invalid length. [ 257.112192][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 257.219916][ T9042] bond0: entered promiscuous mode [ 257.225553][ T9042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.238617][ T9049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1014'. [ 261.952446][ T9081] Mount JFS Failure: -22 [ 261.956785][ T9081] jfs_mount failed w/return code = -22 [ 262.843076][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1022'. [ 264.098174][ T9107] netlink: 'syz.2.1034': attribute type 1 has an invalid length. [ 264.154425][ T9107] bond3: entered promiscuous mode [ 264.166778][ T9107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 264.183067][ T9109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1034'. [ 264.428475][ T9115] netlink: 'syz.3.1037': attribute type 10 has an invalid length. [ 264.449612][ T9115] team0: Port device dummy0 added [ 264.484328][ T9115] netlink: 'syz.3.1037': attribute type 10 has an invalid length. [ 264.567928][ T9115] team0: Port device dummy0 removed [ 264.839298][ T9131] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1044'. [ 264.951728][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1045'. [ 265.943044][ T9157] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 266.021768][ T11] syzkaller0: tun_net_xmit 76 [ 266.022023][ T11] syzkaller0: tun_net_xmit 48 [ 266.042378][ T9] syzkaller0: tun_net_xmit 76 [ 269.552875][ T9203] Mount JFS Failure: -22 [ 269.557195][ T9203] jfs_mount failed w/return code = -22 [ 271.176778][ T9215] syzkaller0: entered promiscuous mode [ 271.196904][ T9215] syzkaller0: entered allmulticast mode [ 272.178758][ T9224] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 273.820412][ T9222] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1066'. [ 274.075575][ T9222] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 274.093064][ T9222] bond0 (unregistering): Released all slaves [ 275.689876][ T12] syzkaller0: tun_net_xmit 76 [ 275.724454][ T9] syzkaller0: tun_net_xmit 76 [ 275.748341][ T9261] binder: 9258:9261 ioctl 0 200000000040 returned -22 [ 275.754791][ T12] syzkaller0: tun_net_xmit 48 [ 275.764269][ T9261] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1079'. [ 276.082906][ T9] syzkaller0: tun_net_xmit 76 [ 277.186947][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 277.360589][ T9] syzkaller0: tun_net_xmit 76 [ 282.231666][ T5794] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 282.643914][ T9274] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1082'. [ 283.059160][ T9294] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 283.272176][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 283.912540][ T9294] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 284.523130][ T9331] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 284.657200][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'. [ 284.714896][ T9333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.802282][ T5794] Bluetooth: hci0: command tx timeout [ 284.806797][ T9335] bond3: (slave wlan0): Enslaving as an active interface with an up link [ 285.993166][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.643921][ T9343] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1102'. [ 287.672316][ T9347] tipc: Enabling of bearer rejected, failed to enable media [ 287.738160][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1105'. [ 288.082367][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 288.544111][ T9393] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 290.154809][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 292.277229][ T9400] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1115'. [ 292.456887][ T9400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.471005][ T9400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.488322][ T9400] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 292.506791][ T9400] bond0 (unregistering): Released all slaves [ 292.549837][ T9405] tipc: Enabling of bearer rejected, failed to enable media [ 292.560446][ T9417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1117'. [ 292.915112][ T9439] tipc: Enabled bearer , priority 0 [ 292.940476][ T9436] tipc: Disabling bearer [ 294.217592][ T9452] syzkaller0: entered promiscuous mode [ 294.226776][ T9452] syzkaller0: entered allmulticast mode [ 294.882218][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 296.142108][ T9462] tipc: Enabled bearer , priority 0 [ 296.149850][ T9466] syzkaller0: entered promiscuous mode [ 296.156387][ T9466] syzkaller0: entered allmulticast mode [ 296.168380][ T9467] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 296.196033][ T9469] tipc: Resetting bearer [ 296.203824][ T9456] tipc: Resetting bearer [ 296.212702][ T9465] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 296.232396][ T9465] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.253186][ T9456] tipc: Disabling bearer [ 296.360750][ T9473] tipc: Enabled bearer , priority 0 [ 296.381126][ T9472] tipc: Disabling bearer [ 296.850575][ T9493] netlink: 'syz.2.1142': attribute type 1 has an invalid length. [ 296.885458][ T9493] bond4: entered promiscuous mode [ 296.891105][ T9493] 8021q: adding VLAN 0 to HW filter on device bond4 [ 296.910684][ T9493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1142'. [ 296.921526][ T9491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1141'. [ 298.205788][ T9503] tipc: Enabling of bearer rejected, failed to enable media [ 298.232386][ T5794] Bluetooth: hci0: command tx timeout [ 298.260635][ T9515] syzkaller0: entered promiscuous mode [ 298.275236][ T9515] syzkaller0: entered allmulticast mode [ 298.328152][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 298.448699][ T9542] syzkaller0: entered promiscuous mode [ 298.454723][ T9542] syzkaller0: entered allmulticast mode [ 300.392402][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 300.654148][ T9552] netlink: 'syz.3.1152': attribute type 1 has an invalid length. [ 300.679081][ T9552] bond4: entered promiscuous mode [ 300.686319][ T9552] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.694840][ T9553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1152'. [ 300.718160][ T9562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1154'. [ 300.731231][ T9551] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 300.764438][ T9551] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 301.114051][ T9571] syzkaller0: entered promiscuous mode [ 301.121837][ T9571] syzkaller0: entered allmulticast mode [ 301.201342][ T9575] Mount JFS Failure: -22 [ 301.205744][ T9575] jfs_mount failed w/return code = -22 [ 301.531998][ T992] syzkaller0: tun_net_xmit 76 [ 301.622599][ T23] syzkaller0: tun_net_xmit 76 [ 301.635928][ T992] syzkaller0: tun_net_xmit 48 [ 302.002378][ T9] syzkaller0: tun_net_xmit 76 [ 302.802283][ T50] Bluetooth: hci0: command tx timeout [ 302.807166][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 304.117588][ T9587] tipc: Enabling of bearer rejected, failed to enable media [ 304.326512][ T9610] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 304.354859][ T9610] bond5: entered promiscuous mode [ 304.360264][ T9610] 8021q: adding VLAN 0 to HW filter on device bond5 [ 304.378583][ T9610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1164'. [ 304.499658][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1165'. [ 304.543562][ T9618] fuse: Bad value for 'user_id' [ 305.052817][ T9625] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 305.628396][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'. [ 305.889111][ T9628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.931131][ T9629] bond3: (slave wlan0): Releasing backup interface [ 305.946739][ T9629] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 306.251805][ T9639] tipc: Enabled bearer , priority 0 [ 306.260909][ T9639] syzkaller0: entered promiscuous mode [ 306.271520][ T9639] syzkaller0: entered allmulticast mode [ 306.292003][ T9639] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 306.346961][ T9639] tipc: Resetting bearer [ 306.418233][ T9638] tipc: Resetting bearer [ 306.508133][ T9638] tipc: Disabling bearer [ 306.993366][ T9648] fuse: Bad value for 'user_id' [ 308.156761][ T9665] binder: 9659:9665 ioctl 0 200000000040 returned -22 [ 308.170727][ T9665] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1179'. [ 309.752289][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 311.807065][ T9680] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 311.822438][ T9680] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 312.096732][ T9695] fuse: Bad value for 'user_id' [ 312.104236][ T9692] tipc: Enabled bearer , priority 0 [ 312.115715][ T9692] syzkaller0: entered promiscuous mode [ 312.121217][ T9692] syzkaller0: entered allmulticast mode [ 312.249141][ T9692] tipc: Resetting bearer [ 312.341773][ T9691] tipc: Resetting bearer [ 312.464134][ T9691] tipc: Disabling bearer [ 313.517519][ T9708] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 313.832265][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 313.832333][ T50] Bluetooth: hci0: command tx timeout [ 313.856122][ T50] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 314.112166][ T9723] fuse: Bad value for 'fd' [ 314.236553][ T9727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1198'. [ 314.381609][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 315.872804][ T9748] fuse: Bad value for 'fd' [ 316.298208][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'. [ 316.489152][ T9762] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 316.602822][ T9765] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 316.609801][ T9765] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 316.618519][ T9765] vhci_hcd vhci_hcd.0: Device attached [ 318.074028][ T9768] sched: RT throttling activated [ 318.076038][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.086663][ T50] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 318.495271][ T50] Bluetooth: hci1: Injecting HCI hardware error event [ 318.504120][ T5794] Bluetooth: hci1: hardware error 0x00 [ 319.181936][ T9766] vhci_hcd: connection closed [ 319.329216][ T3545] vhci_hcd: stop threads [ 319.470914][ T3545] vhci_hcd: release socket [ 319.529434][ T3545] vhci_hcd: disconnect device [ 319.672993][ T7693] syzkaller0: tun_net_xmit 76 [ 319.841797][ T9782] fuse: Bad value for 'fd' [ 320.296767][ T9788] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 320.560039][ T5794] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 322.155992][ C1] syzkaller0 (unregistering): delete flow: hash 692203375 index 0 [ 324.756477][ T9820] fuse: Bad value for 'fd' [ 324.840773][ T9823] binder: 9816:9823 ioctl 0 200000000040 returned -22 [ 324.857587][ T9823] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1227'. [ 326.011418][ T50] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 326.666293][ T9849] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 326.811790][ T9829] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 328.156913][ T50] Bluetooth: hci0: command tx timeout [ 328.262534][ T9863] binder: 9857:9863 ioctl 0 200000000040 returned -22 [ 328.275297][ T9863] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1236'. [ 328.285715][ T9862] fuse: Bad value for 'fd' [ 331.026514][ T9876] syzkaller0: entered promiscuous mode [ 331.032456][ T9876] syzkaller0: entered allmulticast mode [ 332.839977][ T5794] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 334.349700][ T9897] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1250'. [ 334.431716][ T9888] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 334.658351][ T9907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1254'. [ 335.851131][ T9912] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 335.939652][ T9918] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1259'. [ 336.073286][ T9919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1257'. [ 337.081410][ T9924] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 338.131086][ T9946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1266'. [ 338.392359][ T5794] Bluetooth: hci0: command tx timeout [ 338.645545][ T9960] syzkaller0: entered promiscuous mode [ 338.651404][ T9960] syzkaller0: entered allmulticast mode [ 338.659549][ T9957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1271'. [ 339.646249][ T9975] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 341.522613][ T9966] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 341.652515][ T5794] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 341.872989][ T9987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1282'. [ 341.996420][ T9991] netlink: 'syz.2.1283': attribute type 10 has an invalid length. [ 342.029326][ T9991] team0: Port device dummy0 added [ 342.046695][ T9994] netlink: 'syz.2.1283': attribute type 10 has an invalid length. [ 342.107478][ T9994] team0: Port device dummy0 removed [ 342.535272][T10003] syzkaller0: entered promiscuous mode [ 342.542536][T10003] syzkaller0: entered allmulticast mode [ 343.218637][T10010] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 345.687928][ T5794] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 345.706356][ T5794] Bluetooth: hci0: Injecting HCI hardware error event [ 345.715091][ T50] Bluetooth: hci0: hardware error 0x00 [ 346.535708][T10026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1293'. [ 347.752833][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 348.314390][T10048] syzkaller0: entered promiscuous mode [ 348.320904][T10048] syzkaller0: entered allmulticast mode [ 350.038443][T10058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1300'. [ 352.058664][T10078] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1306'. [ 352.135344][T10084] netlink: 'syz.1.1307': attribute type 10 has an invalid length. [ 352.160541][T10084] team0: Port device dummy0 added [ 352.201266][T10084] netlink: 'syz.1.1307': attribute type 10 has an invalid length. [ 352.321597][T10084] team0: Port device dummy0 removed [ 353.636476][T10093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1312'. [ 357.156707][T10110] syzkaller0: entered promiscuous mode [ 357.169892][T10110] syzkaller0: entered allmulticast mode [ 362.740084][T10140] binder: 10135:10140 ioctl 0 200000000040 returned -22 [ 362.752398][T10140] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1325'. [ 362.874425][T10139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1326'. [ 363.889853][T10150] syzkaller0: entered promiscuous mode [ 363.910139][T10150] syzkaller0: entered allmulticast mode [ 363.942138][T10145] Mount JFS Failure: -22 [ 363.946489][T10145] jfs_mount failed w/return code = -22 [ 369.626477][T10177] binder: 10173:10177 ioctl 0 200000000040 returned -22 [ 369.637620][T10177] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1338'. [ 371.573737][T10182] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1339'. [ 371.647770][T10184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1341'. [ 371.802853][T10186] tipc: Enabled bearer , priority 0 [ 371.823361][T10186] syzkaller0: entered promiscuous mode [ 371.829058][T10186] syzkaller0: entered allmulticast mode [ 371.920775][T10186] tipc: Resetting bearer [ 371.963633][T10185] tipc: Resetting bearer [ 372.014400][T10185] tipc: Disabling bearer [ 372.059679][T10188] syzkaller0: entered promiscuous mode [ 372.086642][T10188] syzkaller0: entered allmulticast mode [ 377.560720][T10217] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1350'. [ 378.703437][T10220] Driver unsupported XDP return value 0 on prog (id 203) dev N/A, expect packet loss! [ 378.853071][T10223] fuse: Unknown parameter 'user_i00000000000000000000' [ 378.887603][T10224] tipc: Enabled bearer , priority 0 [ 378.888841][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.924093][T10224] syzkaller0: entered promiscuous mode [ 378.954430][T10224] syzkaller0: entered allmulticast mode [ 379.043019][T10224] tipc: Resetting bearer [ 379.063224][T10222] tipc: Resetting bearer [ 379.161928][T10222] tipc: Disabling bearer [ 379.213150][T10228] syzkaller0: entered promiscuous mode [ 379.218728][T10228] syzkaller0: entered allmulticast mode [ 379.286917][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 379.484650][T10235] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 379.631800][T10230] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1356'. [ 379.681762][T10244] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1359'. [ 379.741306][T10235] block device autoloading is deprecated and will be removed. [ 380.177552][T10251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1358'. [ 380.222620][T10256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1361'. [ 380.372715][T10260] fuse: Unknown parameter 'user_id00000000000000000000' [ 381.088810][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1370'. [ 381.108813][T10272] syzkaller0: entered promiscuous mode [ 381.122514][T10272] syzkaller0: entered allmulticast mode [ 381.144158][T10274] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 381.337136][T10273] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1370'. [ 381.589472][T10284] netlink: 'syz.3.1372': attribute type 10 has an invalid length. [ 381.616293][T10284] team0: Port device dummy0 added [ 381.723425][T10284] netlink: 'syz.3.1372': attribute type 10 has an invalid length. [ 381.771844][T10288] fuse: Unknown parameter 'user_id00000000000000000000' [ 381.788147][T10284] team0: Port device dummy0 removed [ 382.272566][T10299] overlayfs: failed to resolve './file0': -2 [ 383.102479][T10286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1373'. [ 384.815382][T10325] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 385.036561][T10330] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1382'. [ 385.773503][T10337] fuse: Unknown parameter 'user_id00000000000000000000' [ 385.812342][T10335] netlink: 'syz.2.1384': attribute type 10 has an invalid length. [ 385.849373][T10335] team0: Port device dummy0 added [ 385.903702][T10335] netlink: 'syz.2.1384': attribute type 10 has an invalid length. [ 385.915387][T10339] Mount JFS Failure: -22 [ 385.919695][T10339] jfs_mount failed w/return code = -22 [ 385.961199][T10335] team0: Port device dummy0 removed [ 386.025380][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1386'. [ 387.225740][T10345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1388'. [ 388.875320][T10363] fuse: Bad value for 'fd' [ 389.082802][T10367] syzkaller0: entered promiscuous mode [ 389.088550][T10367] syzkaller0: entered allmulticast mode [ 389.095905][T10369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1397'. [ 389.486615][T10373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1398'. [ 389.984118][T10385] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 389.984118][T10385] program syz.0.1400 not setting count and/or reply_len properly [ 390.860166][T10402] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1401'. [ 392.377177][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'. [ 392.920179][T10411] fuse: Bad value for 'fd' [ 393.162477][T10416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1407'. [ 393.917230][T10420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1408'. [ 394.917149][T10429] Mount JFS Failure: -22 [ 394.921655][T10429] jfs_mount failed w/return code = -22 [ 395.155115][T10406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1403'. [ 395.555419][T10431] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1412'. [ 395.985173][T10436] syzkaller0: entered promiscuous mode [ 396.009179][T10436] syzkaller0: entered allmulticast mode [ 396.217089][T10442] fuse: Bad value for 'fd' [ 399.521326][T10481] Mount JFS Failure: -22 [ 399.525926][T10481] jfs_mount failed w/return code = -22 [ 400.555850][T10465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1422'. [ 400.584199][T10487] fuse: Unknown parameter '00000000000000000004' [ 400.734815][T10463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1420'. [ 400.848669][T10492] tipc: Enabled bearer , priority 0 [ 400.873633][T10492] syzkaller0: entered promiscuous mode [ 400.889451][T10492] syzkaller0: entered allmulticast mode [ 400.951356][T10492] tipc: Resetting bearer [ 400.975195][T10491] tipc: Resetting bearer [ 401.067192][T10491] tipc: Disabling bearer [ 401.389688][T10498] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 402.231839][T10511] binder: 10508:10511 ioctl 0 200000000040 returned -22 [ 404.795122][T10513] netlink: 'syz.1.1434': attribute type 10 has an invalid length. [ 404.867093][T10513] team0: Port device dummy0 added [ 404.890415][T10515] netlink: 'syz.1.1434': attribute type 10 has an invalid length. [ 404.989003][T10515] team0: Port device dummy0 removed [ 405.654693][T10516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1435'. [ 406.018095][T10518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1436'. [ 406.800615][T10520] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.815654][T10520] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.825818][T10520] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.834877][T10520] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.866453][T10520] bond1: left promiscuous mode [ 406.871687][T10520] bond1: left allmulticast mode [ 406.915221][T10520] bond0: left promiscuous mode [ 406.932209][T10520] bridge2: left promiscuous mode [ 406.971304][T10520] bond3: left promiscuous mode [ 406.989649][T10520] bond4: left promiscuous mode [ 406.998880][T10520] bond5: left promiscuous mode [ 407.010969][T10526] tipc: Enabled bearer , priority 0 [ 407.019842][T10527] syzkaller0: entered promiscuous mode [ 407.032358][T10527] syzkaller0: entered allmulticast mode [ 407.106682][T10556] binder: 10553:10556 ioctl 0 200000000040 returned -22 [ 407.136506][T10537] tipc: Resetting bearer [ 407.877264][T10551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1442'. [ 408.090055][ T8] tipc: Node number set to 2650527918 [ 408.099774][T10522] tipc: Resetting bearer [ 408.167710][T10522] tipc: Disabling bearer [ 408.195554][T10562] tipc: Enabling of bearer rejected, failed to enable media [ 408.207844][T10558] syzkaller0: entered promiscuous mode [ 408.213534][T10558] syzkaller0: entered allmulticast mode [ 409.091534][T10571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1449'. [ 409.310956][T10579] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1452'. [ 409.407220][T10582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1453'. [ 409.517443][T10585] tipc: Enabled bearer , priority 0 [ 409.526243][T10585] syzkaller0: entered promiscuous mode [ 409.531870][T10585] syzkaller0: entered allmulticast mode [ 409.559633][T10584] tipc: Resetting bearer [ 409.603113][T10584] tipc: Disabling bearer [ 409.983423][T10542] Failed to register nexthop notifier [ 410.223624][T10597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1460'. [ 410.337922][T10603] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1462'. [ 410.430930][T10606] tipc: Enabled bearer , priority 0 [ 410.439619][T10606] syzkaller0: entered promiscuous mode [ 410.446301][T10606] syzkaller0: entered allmulticast mode [ 410.476703][T10605] tipc: Resetting bearer [ 410.543882][T10605] tipc: Disabling bearer [ 410.763269][T10610] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1465'. [ 410.909067][T10608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1464'. [ 410.974720][T10612] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1465'. [ 412.069671][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1472'. [ 412.189161][T10648] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1473'. [ 412.401812][T10655] tipc: Enabled bearer , priority 0 [ 412.486386][T10651] tipc: Disabling bearer [ 412.535138][T10659] fuse: Bad value for 'fd' [ 413.321027][T10658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1477'. [ 413.480495][T10667] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 415.990350][T10679] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1483'. [ 416.039316][T10686] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1485'. [ 416.302663][T10694] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1488'. [ 416.573762][T10703] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1488'. [ 417.305763][T10693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1489'. [ 417.332370][T10712] tipc: Enabling of bearer rejected, failed to enable media [ 417.376895][T10712] syzkaller0: entered promiscuous mode [ 417.393255][T10712] syzkaller0: entered allmulticast mode [ 418.567281][T10719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1495'. [ 418.593618][T10727] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1497'. [ 418.788610][T10729] binder: 10728:10729 ioctl 4018620d 0 returned -22 [ 418.993695][T10737] netlink: 'syz.1.1502': attribute type 10 has an invalid length. [ 419.014787][T10737] team0: Port device dummy0 added [ 419.044070][T10737] netlink: 'syz.1.1502': attribute type 10 has an invalid length. [ 419.158103][T10737] team0: Port device dummy0 removed [ 420.292866][T10757] Mount JFS Failure: -22 [ 420.297183][T10757] jfs_mount failed w/return code = -22 [ 422.451771][T10770] binder: 10769:10770 ioctl 4018620d 0 returned -22 [ 422.685863][T10760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1508'. [ 424.009156][T10791] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 425.083553][T10802] tipc: Enabled bearer , priority 0 [ 425.121800][T10802] syzkaller0: entered promiscuous mode [ 425.142236][T10802] syzkaller0: entered allmulticast mode [ 425.263684][T10801] tipc: Resetting bearer [ 425.434406][T10801] tipc: Disabling bearer [ 425.775827][T10806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1521'. [ 428.732371][T10842] tipc: Enabled bearer , priority 0 [ 428.750605][T10842] syzkaller0: entered promiscuous mode [ 428.757449][T10842] syzkaller0: entered allmulticast mode [ 428.791908][T10841] tipc: Resetting bearer [ 428.907125][T10841] tipc: Disabling bearer [ 428.985829][ T7693] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 429.102311][ T5845] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 429.143976][T10845] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 429.276358][ T7693] usb 3-1: Using ep0 maxpacket: 32 [ 429.319172][ T7693] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.336819][ T7693] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 429.354694][ T7693] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 429.372448][ T7693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.403780][ T7693] usb 3-1: config 0 descriptor?? [ 429.434718][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.612083][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.655862][ T5845] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 429.682084][ T5845] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 429.703448][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.787295][ T5845] usb 4-1: config 0 descriptor?? [ 429.791110][T10849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1534'. [ 430.213390][ T5845] usbhid 4-1:0.0: can't add hid device: -71 [ 430.219723][ T5845] usbhid: probe of 4-1:0.0 failed with error -71 [ 430.301894][ T5845] usb 4-1: USB disconnect, device number 2 [ 430.426252][T10855] overlayfs: missing 'lowerdir' [ 430.818002][T10861] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 430.937445][T10861] fuse: Unknown parameter 'use00000000000000000000' [ 431.245561][ T7693] usb 3-1: USB disconnect, device number 2 [ 431.561128][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1541'. [ 432.087035][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1543'. [ 432.157493][T10877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1540'. [ 432.213322][T10880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1543'. [ 432.779260][T10863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1538'. [ 433.006594][T10889] kvm: MWAIT instruction emulated as NOP! [ 433.598991][T10904] tipc: Enabled bearer , priority 0 [ 433.611040][T10904] syzkaller0: entered promiscuous mode [ 433.618264][T10904] syzkaller0: entered allmulticast mode [ 433.647501][T10904] tipc: Resetting bearer [ 433.658349][T10903] tipc: Resetting bearer [ 433.692340][T10903] tipc: Disabling bearer [ 433.820877][T10906] Mount JFS Failure: -22 [ 433.825389][T10906] jfs_mount failed w/return code = -22 [ 434.190157][T10911] netlink: 'syz.0.1552': attribute type 10 has an invalid length. [ 434.215502][T10911] team0: Port device dummy0 added [ 434.263525][T10910] bond5: entered promiscuous mode [ 434.273604][T10910] 8021q: adding VLAN 0 to HW filter on device bond5 [ 434.282924][T10911] netlink: 'syz.0.1552': attribute type 10 has an invalid length. [ 434.327221][T10911] team0: Port device dummy0 removed [ 434.344337][T10913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1553'. [ 434.374507][T10913] bond5: entered allmulticast mode [ 434.417289][T10910] bridge11: entered promiscuous mode [ 434.423165][T10910] bridge11: entered allmulticast mode [ 434.429261][T10910] bond5: (slave bridge11): Enslaving as an active interface with an up link [ 435.087820][T10919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1555'. [ 435.187221][T10926] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.958790][T10924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1557'. [ 436.413069][T10944] Mount JFS Failure: -22 [ 436.417567][T10944] jfs_mount failed w/return code = -22 [ 439.254387][T10980] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1573'. [ 439.508002][T10983] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1573'. [ 440.000527][T10995] netlink: 'syz.3.1575': attribute type 10 has an invalid length. [ 440.035749][T10995] team0: Port device dummy0 added [ 440.057467][T10996] netlink: 'syz.3.1575': attribute type 10 has an invalid length. [ 440.126928][T10996] team0: Port device dummy0 removed [ 440.252780][T11001] binder: 10997:11001 ioctl 0 200000000040 returned -22 [ 440.265104][T11001] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1576'. [ 440.316756][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.441194][T11008] syzkaller0: entered promiscuous mode [ 441.461204][T11008] syzkaller0: entered allmulticast mode [ 442.932228][ T7693] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 443.136158][ T7693] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 443.145284][ T7693] usb 3-1: config 0 has no interface number 0 [ 443.151751][ T7693] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 443.176339][ T7693] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 443.199575][ T7693] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 443.220036][ T7693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.246678][ T7693] usb 3-1: config 0 descriptor?? [ 443.260869][T11030] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 443.332680][ T7693] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 443.850827][ T5858] usb 3-1: USB disconnect, device number 3 [ 443.850914][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 448.546542][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1599'. [ 448.589806][T11082] 8021q: adding VLAN 0 to HW filter on device bond6 [ 448.731744][T11089] syzkaller0: entered promiscuous mode [ 448.747234][T11089] syzkaller0: entered allmulticast mode [ 448.955258][T11095] tipc: Enabling of bearer rejected, failed to enable media [ 448.964193][ T7693] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 449.033825][T11095] syzkaller0: entered promiscuous mode [ 449.039462][T11095] syzkaller0: entered allmulticast mode [ 449.164714][ T7693] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.197266][ T7693] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 449.219812][ T7693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 449.230514][ T7693] usb 3-1: Product: syz [ 449.239542][ T7693] usb 3-1: Manufacturer: syz [ 449.244803][ T7693] usb 3-1: SerialNumber: syz [ 449.489710][ T7693] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 451.370963][ C1] usblp0: nonzero write bulk status received: -71 [ 451.390181][ T5845] usb 3-1: USB disconnect, device number 4 [ 451.419838][ T5845] usblp0: removed [ 451.844187][T11100] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1605'. [ 453.584136][T11139] tipc: Enabling of bearer rejected, failed to enable media [ 453.652077][ T7656] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 454.012678][T11139] syzkaller0: entered promiscuous mode [ 454.018477][T11139] syzkaller0: entered allmulticast mode [ 454.072142][ T7656] usb 4-1: Using ep0 maxpacket: 32 [ 454.216213][ T7656] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.270084][ T7656] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 454.280450][ T7656] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 454.306694][ T7656] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.336415][ T7656] usb 4-1: config 0 descriptor?? [ 458.478659][ T5630] usb 4-1: USB disconnect, device number 3 [ 460.377670][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1625'. [ 460.404815][T11166] 8021q: adding VLAN 0 to HW filter on device bond4 [ 460.430355][T11167] bond0: (slave wlan0): Releasing backup interface [ 463.514008][T11187] tipc: Enabling of bearer rejected, failed to enable media [ 463.702698][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1636'. [ 463.769686][T11208] 8021q: adding VLAN 0 to HW filter on device bond7 [ 463.779775][T11212] netlink: 'syz.2.1638': attribute type 10 has an invalid length. [ 463.830984][T11208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1636'. [ 465.036969][T11226] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1643'. [ 465.267853][T11231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.425895][T11231] bond0: (slave rose0): Enslaving as an active interface with an up link [ 466.074105][ C1] llc_conn_state_process: llc_conn_service failed [ 466.872843][T11251] Mount JFS Failure: -22 [ 466.877259][T11251] jfs_mount failed w/return code = -22 [ 467.605246][T11256] tipc: Enabled bearer , priority 0 [ 468.017796][T11233] syz.3.1643: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 468.045881][T11233] CPU: 1 PID: 11233 Comm: syz.3.1643 Not tainted syzkaller #0 [ 468.053414][T11233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 468.063534][T11233] Call Trace: [ 468.066863][T11233] [ 468.069862][T11233] dump_stack_lvl+0x16c/0x230 [ 468.074615][T11233] ? show_regs_print_info+0x20/0x20 [ 468.079887][T11233] ? load_image+0x3b0/0x3b0 [ 468.084474][T11233] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 468.090959][T11233] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 468.097529][T11233] warn_alloc+0x210/0x300 [ 468.101935][T11233] ? zone_watermark_ok_safe+0x230/0x230 [ 468.107556][T11233] ? _raw_spin_unlock+0x28/0x40 [ 468.112492][T11233] __vmalloc_node_range+0x662/0x1320 [ 468.117870][T11233] ? free_vm_area+0x50/0x50 [ 468.122452][T11233] ? __might_fault+0xaa/0x120 [ 468.127179][T11233] ? do_replace+0x211/0x410 [ 468.131731][T11233] __vmalloc+0x7a/0x90 [ 468.135865][T11233] ? do_replace+0x211/0x410 [ 468.140428][T11233] do_replace+0x211/0x410 [ 468.144820][T11233] ? end_current_label_crit_section+0x170/0x170 [ 468.151238][T11233] ? do_ebt_get_ctl+0x1c40/0x1c40 [ 468.156332][T11233] ? bpf_lsm_capable+0x9/0x10 [ 468.161296][T11233] ? security_capable+0x89/0xb0 [ 468.166221][T11233] do_ebt_set_ctl+0x1fd/0xd60 [ 468.171039][T11233] ? ebt_standard_compat_to_user+0x140/0x140 [ 468.177210][T11233] ? print_unlock_imbalance_bug+0x160/0x160 [ 468.183207][T11233] ? do_ip_setsockopt+0x1b86/0x2cf0 [ 468.188512][T11233] ? nf_setsockopt+0x21c/0x280 [ 468.193326][T11233] ? __lock_acquire+0x7c80/0x7c80 [ 468.199213][T11233] ? rcu_is_watching+0x15/0xb0 [ 468.204037][T11233] ? trace_contention_end+0x39/0xe0 [ 468.209321][T11233] ? __mutex_lock+0x304/0xcc0 [ 468.214092][T11233] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 468.219802][T11233] ? mutex_unlock+0x10/0x10 [ 468.224390][T11233] ? __might_sleep+0xe0/0xe0 [ 468.229123][T11233] ? mutex_lock_nested+0x20/0x20 [ 468.234140][T11233] nf_setsockopt+0x263/0x280 [ 468.238827][T11233] ? sock_common_recvmsg+0x1b0/0x1b0 [ 468.244171][T11233] smc_setsockopt+0x229/0xab0 [ 468.248912][T11233] ? smc_shutdown+0x9b0/0x9b0 [ 468.253633][T11233] ? __fget_files+0x28/0x4d0 [ 468.258556][T11233] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 468.264167][T11233] ? security_socket_setsockopt+0x7e/0xa0 [ 468.270074][T11233] ? smc_shutdown+0x9b0/0x9b0 [ 468.275079][T11233] do_sock_setsockopt+0x175/0x1a0 [ 468.280167][T11233] ? __fdget+0x180/0x210 [ 468.284462][T11233] __x64_sys_setsockopt+0x184/0x200 [ 468.289808][T11233] do_syscall_64+0x55/0xb0 [ 468.294364][T11233] ? clear_bhb_loop+0x40/0x90 [ 468.299232][T11233] ? clear_bhb_loop+0x40/0x90 [ 468.303970][T11233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.310189][T11233] RIP: 0033:0x7fb5f918efc9 [ 468.314668][T11233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.334428][T11233] RSP: 002b:00007fb5fa0c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 468.342990][T11233] RAX: ffffffffffffffda RBX: 00007fb5f93e6180 RCX: 00007fb5f918efc9 [ 468.351064][T11233] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 000000000000000b [ 468.359080][T11233] RBP: 00007fb5f9211f91 R08: 0000000000000108 R09: 0000000000000000 [ 468.367278][T11233] R10: 0000200000001680 R11: 0000000000000246 R12: 0000000000000000 [ 468.375381][T11233] R13: 00007fb5f93e6218 R14: 00007fb5f93e6180 R15: 00007ffcc5a15378 [ 468.383415][T11233] [ 468.399978][T11233] Mem-Info: [ 468.403382][T11233] active_anon:4975 inactive_anon:3 isolated_anon:0 [ 468.403382][T11233] active_file:1226 inactive_file:40014 isolated_file:0 [ 468.403382][T11233] unevictable:768 dirty:130 writeback:1 [ 468.403382][T11233] slab_reclaimable:10031 slab_unreclaimable:93493 [ 468.403382][T11233] mapped:25348 shmem:1380 pagetables:569 [ 468.403382][T11233] sec_pagetables:0 bounce:0 [ 468.403382][T11233] kernel_misc_reclaimable:0 [ 468.403382][T11233] free:1338311 free_pcp:15680 free_cma:0 [ 468.448937][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.457011][T11233] Node 0 active_anon:19856kB inactive_anon:12kB active_file:4904kB inactive_file:159856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101332kB dirty:536kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12116kB pagetables:2208kB sec_pagetables:0kB all_unreclaimable? no [ 468.490016][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.586181][T11233] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 468.672945][ T5858] tipc: Node number set to 3970601537 [ 468.773856][T11233] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.875771][T11233] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 468.920011][T11233] Node 0 DMA32 free:1451648kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:19812kB inactive_anon:12kB active_file:4904kB inactive_file:158524kB unevictable:1536kB writepending:536kB present:3129332kB managed:2589604kB mlocked:0kB bounce:0kB free_pcp:38640kB local_pcp:19520kB free_cma:0kB [ 469.060511][T11233] lowmem_reserve[]: 0 0 1 1 1 [ 469.079276][T11233] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1332kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 469.242184][T11233] lowmem_reserve[]: 0 0 0 0 0 [ 469.263897][T11233] Node 1 Normal free:3885976kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24012kB local_pcp:14112kB free_cma:0kB [ 469.395428][T11233] lowmem_reserve[]: 0 0 0 0 0 [ 469.421334][T11233] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 469.503909][T11233] Node 0 DMA32: 1*4kB (U) 14*8kB (E) 14*16kB (UME) 84*32kB (ME) 1*64kB (E) 57*128kB (UME) 25*256kB (UME) 8*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 347*4096kB (M) = 1450388kB [ 469.575982][T11233] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 469.652095][T11233] Node 1 Normal: 182*4kB (UME) 70*8kB (UME) 29*16kB (UME) 154*32kB (UME) 40*64kB (UME) 11*128kB (UM) 2*256kB (M) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 944*4096kB (M) = 3885976kB [ 469.772152][T11233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 469.823206][T11233] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 469.879238][T11233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 469.939591][T11233] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 469.995508][T11233] 46961 total pagecache pages [ 470.021396][T11233] 3 pages in swap cache [ 470.047584][T11233] Free swap = 124360kB [ 470.071104][T11233] Total swap = 124996kB [ 470.096008][T11233] 2097051 pages RAM [ 470.122343][T11233] 0 pages HighMem/MovableOnly [ 470.147558][T11233] 416136 pages reserved [ 470.166677][T11233] 0 pages cma reserved [ 472.344042][T11254] tipc: Disabling bearer [ 472.469210][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1649'. [ 472.580385][T11268] 8021q: adding VLAN 0 to HW filter on device bond8 [ 472.708258][T11269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1649'. [ 472.789547][T11274] netlink: 'syz.2.1650': attribute type 10 has an invalid length. [ 475.683472][T11304] tipc: Enabled bearer , priority 0 [ 475.773559][T11304] syzkaller0: entered promiscuous mode [ 475.795401][T11304] syzkaller0: entered allmulticast mode [ 475.826563][T11304] tipc: Resetting bearer [ 476.032188][ T7693] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 476.129679][ T58] tipc: Resetting bearer [ 476.148131][T11303] tipc: Resetting bearer [ 476.265981][ T7693] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 476.288175][ T7693] usb 4-1: config 0 has no interface number 0 [ 476.330566][ T7693] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 476.360950][ T7693] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 476.377661][ T7693] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 476.387383][ T7693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.426918][ T7693] usb 4-1: config 0 descriptor?? [ 476.433138][T11314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 476.448294][ T7693] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 482.587482][T11303] tipc: Disabling bearer [ 482.603393][T11324] netlink: 'syz.0.1663': attribute type 10 has an invalid length. [ 482.642379][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1667'. [ 485.720360][T11389] binder: 11388:11389 ioctl 0 200000000040 returned -22 [ 486.323765][T11397] tipc: Enabled bearer , priority 0 [ 486.339215][T11398] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1677'. [ 486.550792][T11401] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1679'. [ 486.760252][T11397] syzkaller0: entered promiscuous mode [ 486.766464][T11397] syzkaller0: entered allmulticast mode [ 486.775748][T11397] tipc: Resetting bearer [ 487.024212][T11396] tipc: Resetting bearer [ 487.263038][T11413] binder: 11407:11413 ioctl 0 200000000040 returned -22 [ 487.276120][T11413] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1682'. [ 487.332141][ T5876] tipc: Node number set to 544911893 [ 490.902656][T11396] tipc: Disabling bearer [ 490.914431][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1683'. [ 490.924793][T11410] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 490.932799][T11412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1683'. [ 490.952152][T11412] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 491.286803][T11426] binder: 11424:11426 ioctl 0 200000000040 returned -22 [ 495.733860][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1695'. [ 495.777615][ T28] audit: type=1326 audit(1761187319.974:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b958efc9 code=0x7ffc0000 [ 495.814311][T11460] 8021q: adding VLAN 0 to HW filter on device bond6 [ 495.880878][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1695'. [ 495.920809][ T28] audit: type=1326 audit(1761187319.984:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b958efc9 code=0x7ffc0000 [ 495.943741][ T28] audit: type=1326 audit(1761187320.074:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f31b958efc9 code=0x7ffc0000 [ 495.971582][ T28] audit: type=1326 audit(1761187320.074:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b958efc9 code=0x7ffc0000 [ 496.003104][ T28] audit: type=1326 audit(1761187320.094:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31b958efc9 code=0x7ffc0000 [ 496.057214][ T28] audit: type=1326 audit(1761187320.104:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b958efc9 code=0x7ffc0000 [ 496.224620][ T28] audit: type=1326 audit(1761187320.174:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31b958efc9 code=0x7ffc0000 [ 496.278421][ T28] audit: type=1326 audit(1761187320.174:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b958efc9 code=0x7ffc0000 [ 496.430400][ T28] audit: type=1326 audit(1761187320.174:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f31b958efc9 code=0x7ffc0000 [ 496.452977][ C0] vkms_vblank_simulate: vblank timer overrun [ 496.591783][ T28] audit: type=1326 audit(1761187320.174:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b958efc9 code=0x7ffc0000 [ 497.777004][T11488] netlink: 'syz.3.1700': attribute type 72 has an invalid length. [ 499.618273][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1709'. [ 499.680387][T11512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.699900][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 499.822774][T11516] netlink: 'syz.2.1710': attribute type 72 has an invalid length. [ 500.004566][T11520] binder: 11517:11520 ioctl 0 200000000040 returned -22 [ 501.758121][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.216992][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1719'. [ 509.349477][T11544] 8021q: adding VLAN 0 to HW filter on device bond5 [ 509.373299][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 509.397266][T11547] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 509.469176][T11549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1720'. [ 511.142943][T11574] binder: 11573:11574 ioctl 0 200000000040 returned -22 [ 512.203214][T11586] binder: 11581:11586 ioctl 0 200000000040 returned -22 [ 512.217714][T11586] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1726'. [ 515.265741][T11600] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1729'. [ 515.885550][T11605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1732'. [ 517.552444][T11616] binder: 11612:11616 ioctl 0 200000000040 returned -22 [ 518.105035][T11626] binder: 11623:11626 ioctl 0 200000000040 returned -22 [ 518.117658][T11626] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1738'. [ 522.151646][T11639] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1741'. [ 522.193591][T11640] netlink: 'syz.0.1742': attribute type 10 has an invalid length. [ 526.005244][T11663] binder: 11658:11663 ioctl 0 200000000040 returned -22 [ 527.557690][T11680] macsec1: entered promiscuous mode [ 527.610899][T11680] team0: entered promiscuous mode [ 528.042895][T11680] macsec1: entered allmulticast mode [ 528.055877][T11680] team0: entered allmulticast mode [ 528.722748][T11680] team0: Device macsec1 is already an upper device of the team interface [ 528.796919][T11680] team0: left allmulticast mode [ 528.812185][T11680] team0: left promiscuous mode [ 529.602912][ T5858] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 529.891854][ T5858] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 529.963456][ T5858] usb 2-1: config 0 has no interface number 0 [ 530.027611][ T5858] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 530.123186][ T5858] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 530.172076][ T5858] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 530.198443][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.242035][ T5858] usb 2-1: config 0 descriptor?? [ 530.247956][T11694] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 530.329279][ T5858] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 530.656042][T11710] binder: 11703:11710 ioctl 0 200000000040 returned -22 [ 530.927253][ T5630] usb 2-1: USB disconnect, device number 2 [ 531.067189][T11712] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1762'. [ 532.002426][T11718] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 535.976148][T11736] syzkaller0: entered promiscuous mode [ 535.981806][T11736] syzkaller0: entered allmulticast mode [ 540.892408][T11762] team_slave_0: entered promiscuous mode [ 540.898529][T11762] team_slave_1: entered promiscuous mode [ 540.912737][T11762] macsec2: entered promiscuous mode [ 540.927643][T11762] team0: entered promiscuous mode [ 540.934571][T11762] macsec2: entered allmulticast mode [ 540.945040][T11762] team0: entered allmulticast mode [ 540.958235][T11762] team_slave_0: entered allmulticast mode [ 540.965018][T11762] team_slave_1: entered allmulticast mode [ 540.974413][T11762] team0: Device macsec2 is already an upper device of the team interface [ 540.992907][T11762] team0: left allmulticast mode [ 540.997879][T11762] team_slave_0: left allmulticast mode [ 541.011596][T11762] team_slave_1: left allmulticast mode [ 541.018121][T11762] team0: left promiscuous mode [ 541.028271][T11762] team_slave_0: left promiscuous mode [ 541.033818][T11762] team_slave_1: left promiscuous mode [ 542.829587][T11797] tipc: Enabled bearer , priority 0 [ 542.840961][T11797] syzkaller0: entered promiscuous mode [ 542.847474][T11797] syzkaller0: entered allmulticast mode [ 543.031127][T11800] tipc: Resetting bearer [ 543.058265][T11796] tipc: Resetting bearer [ 543.173759][T11796] tipc: Disabling bearer [ 543.206156][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1786'. [ 543.266549][T11804] 8021q: adding VLAN 0 to HW filter on device bond6 [ 546.585497][T11808] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.595662][T11808] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.605204][T11808] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.616689][T11808] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.707350][T11808] bond1: left promiscuous mode [ 546.712665][T11808] bridge2: left promiscuous mode [ 546.726247][T11808] bond1: left allmulticast mode [ 546.731186][T11808] bridge2: left allmulticast mode [ 546.805742][T11808] bond2: left promiscuous mode [ 546.810605][T11808] bridge3: left promiscuous mode [ 546.816830][T11808] bond2: left allmulticast mode [ 546.821743][T11808] bridge3: left allmulticast mode [ 546.866346][T11808] bond3: left promiscuous mode [ 546.871346][T11808] bridge7: left promiscuous mode [ 546.898542][T11808] bond0: left promiscuous mode [ 546.941239][T11808] bond4: left promiscuous mode [ 546.959346][T11808] bond5: left promiscuous mode [ 546.964421][T11808] bridge11: left promiscuous mode [ 546.969849][T11808] bond5: left allmulticast mode [ 546.975085][T11808] bridge11: left allmulticast mode [ 547.126256][T11825] macsec1: entered promiscuous mode [ 547.131508][T11825] team0: entered promiscuous mode [ 547.147113][T11825] macsec1: entered allmulticast mode [ 547.176212][T11825] team0: entered allmulticast mode [ 547.187445][T11825] team0: Device macsec1 is already an upper device of the team interface [ 547.201701][T11825] team0: left allmulticast mode [ 547.223120][T11825] team0: left promiscuous mode [ 547.302393][T11832] Failed to register nexthop notifier [ 547.683834][T11848] tipc: Enabled bearer , priority 0 [ 547.700083][T11848] syzkaller0: entered promiscuous mode [ 547.706184][T11848] syzkaller0: entered allmulticast mode [ 548.564899][T11850] Mount JFS Failure: -22 [ 548.569227][T11850] jfs_mount failed w/return code = -22 [ 549.595395][T11848] tipc: Resetting bearer [ 549.760460][T11845] tipc: Resetting bearer [ 550.743000][T11845] tipc: Disabling bearer [ 551.816662][T11862] syzkaller0: entered promiscuous mode [ 551.840319][T11862] syzkaller0: entered allmulticast mode [ 551.848334][T11861] netlink: 'syz.3.1803': attribute type 10 has an invalid length. [ 553.779625][T11881] random: crng reseeded on system resumption [ 556.908564][T11884] Mount JFS Failure: -22 [ 556.913039][T11884] jfs_mount failed w/return code = -22 [ 557.411204][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1809'. [ 559.498512][T11877] macsec1: entered promiscuous mode [ 559.504051][T11877] team0: entered promiscuous mode [ 559.509450][T11877] macsec1: entered allmulticast mode [ 559.515450][T11877] team0: entered allmulticast mode [ 559.521473][T11877] team0: Device macsec1 is already an upper device of the team interface [ 559.540948][T11877] team0: left allmulticast mode [ 559.547750][T11877] team0: left promiscuous mode [ 559.841016][T11900] netlink: 'syz.3.1812': attribute type 10 has an invalid length. [ 560.036369][T11905] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1814'. [ 561.402346][T11919] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1817'. [ 561.757735][T11922] random: crng reseeded on system resumption [ 563.197533][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.360774][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1819'. [ 569.080042][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1829'. [ 569.263843][T11965] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1829'. [ 569.338114][T11969] random: crng reseeded on system resumption [ 574.230520][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1835'. [ 575.571288][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1840'. [ 575.693835][T12007] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1840'. [ 577.936485][T12019] binder: 12012:12019 ioctl 0 200000000040 returned -22 [ 582.501308][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1850'. [ 582.649387][T12050] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1850'. [ 584.129581][T12062] binder: 12058:12062 ioctl 0 200000000040 returned -22 [ 585.282830][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1858'. [ 586.970689][T12070] 8021q: adding VLAN 0 to HW filter on device bond9 [ 587.268659][T12080] macsec1: entered promiscuous mode [ 587.285008][T12080] team0: entered promiscuous mode [ 587.291507][T12080] macsec1: entered allmulticast mode [ 587.319714][T12080] team0: entered allmulticast mode [ 587.326876][T12080] team0: Device macsec1 is already an upper device of the team interface [ 587.339342][T12080] team0: left allmulticast mode [ 587.344880][T12080] team0: left promiscuous mode [ 587.403476][T12089] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 587.745419][T12095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1862'. [ 587.877966][T12098] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1862'. [ 592.821160][T12114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1868'. [ 594.027893][T12114] 8021q: adding VLAN 0 to HW filter on device bond7 [ 594.146542][T12123] tipc: Enabled bearer , priority 0 [ 594.236770][T12116] tipc: Resetting bearer [ 594.356579][T12125] syzkaller0: entered promiscuous mode [ 594.385916][T12125] syzkaller0: entered allmulticast mode [ 594.418576][T12115] tipc: Resetting bearer [ 594.513472][T12115] tipc: Disabling bearer [ 595.255145][T12146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1873'. [ 595.503677][T12149] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1873'. [ 603.683740][T12182] tipc: Enabled bearer , priority 0 [ 603.884901][T12182] syzkaller0: entered promiscuous mode [ 603.898941][T12182] syzkaller0: entered allmulticast mode [ 603.907019][T12182] tipc: Resetting bearer [ 603.945669][T12180] tipc: Resetting bearer [ 604.170756][T12192] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 605.398500][T12202] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1885'. [ 606.998416][T12180] tipc: Disabling bearer [ 607.020983][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1885'. [ 607.497514][T12216] tipc: Enabled bearer , priority 0 [ 607.537716][T12216] syzkaller0: entered promiscuous mode [ 607.582309][T12216] syzkaller0: entered allmulticast mode [ 607.646787][T12216] tipc: Resetting bearer [ 607.686304][T12213] tipc: Resetting bearer [ 608.269374][T12213] tipc: Disabling bearer [ 609.063501][T12227] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1890'. [ 609.082742][T12227] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1890'. [ 613.561579][T12262] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 615.987785][T12276] binder: 12273:12276 ioctl 0 200000000040 returned -22 [ 617.795265][T12284] netlink: 'syz.2.1906': attribute type 1 has an invalid length. [ 617.835240][T12284] bond8: entered promiscuous mode [ 617.841004][T12284] 8021q: adding VLAN 0 to HW filter on device bond8 [ 617.941966][T12284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1906'. [ 618.018503][T12284] bond8: (slave bridge10): making interface the new active one [ 618.039955][T12284] bridge10: entered promiscuous mode [ 618.060609][T12284] bond8: (slave bridge10): Enslaving as an active interface with an up link [ 618.365774][T12289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1907'. [ 618.585304][T12293] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1907'. [ 618.853037][T12298] random: crng reseeded on system resumption [ 623.275219][ T8] libceph: connect (1)[c::]:6789 error -101 [ 623.313706][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 623.363620][T12308] ceph: No mds server is up or the cluster is laggy [ 623.671256][T12308] vxfs: WRONG superblock magic 00000000 at 1 [ 623.713087][T12308] vxfs: WRONG superblock magic 00000000 at 8 [ 623.719395][T12308] vxfs: can't find superblock. [ 624.652329][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.630074][T12324] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 628.640721][T12324] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 628.650071][T12324] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 628.669255][T12324] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 628.683735][T12324] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 628.701339][T12324] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 630.670136][T12321] chnl_net:caif_netlink_parms(): no params data found [ 630.792161][ T50] Bluetooth: hci4: command tx timeout [ 630.910543][T12350] netlink: 'syz.2.1922': attribute type 1 has an invalid length. [ 631.063050][T12350] bond9: entered promiscuous mode [ 631.068883][T12350] 8021q: adding VLAN 0 to HW filter on device bond9 [ 631.267675][T12357] bond9: (slave bridge11): making interface the new active one [ 631.292110][T12357] bridge11: entered promiscuous mode [ 631.307104][T12357] bond9: (slave bridge11): Enslaving as an active interface with an up link [ 631.622460][T12321] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.658077][T12321] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.691650][T12321] bridge_slave_0: entered allmulticast mode [ 631.729468][T12321] bridge_slave_0: entered promiscuous mode [ 631.764997][T12321] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.788605][T12321] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.810142][T12321] bridge_slave_1: entered allmulticast mode [ 631.838111][T12321] bridge_slave_1: entered promiscuous mode [ 632.055107][T12321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.127489][T12321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.377460][T12321] team0: Port device team_slave_0 added [ 632.424259][T12321] team0: Port device team_slave_1 added [ 632.755840][T12321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.774874][T12321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.872151][ T50] Bluetooth: hci4: command tx timeout [ 632.892686][T12321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.904912][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'. [ 632.909242][T12321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.921515][T12321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.960077][T12321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.358601][T12321] hsr_slave_0: entered promiscuous mode [ 633.428753][T12321] hsr_slave_1: entered promiscuous mode [ 633.606871][T12321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.769516][T12321] Cannot create hsr debugfs directory [ 634.528913][T12227] Set syz1 is full, maxelem 65536 reached [ 634.599959][T12383] netlink: 'syz.2.1929': attribute type 11 has an invalid length. [ 634.952075][ T50] Bluetooth: hci4: command tx timeout [ 636.258569][T12391] syzkaller0: entered promiscuous mode [ 636.298149][T12391] syzkaller0: entered allmulticast mode [ 636.714338][T12399] binder: 12396:12399 ioctl 0 200000000040 returned -22 [ 638.337174][ T50] Bluetooth: hci4: command tx timeout [ 642.085352][T12321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 642.139490][T12321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 642.160499][T12321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 642.539883][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.619334][T12321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 642.692299][T12414] netlink: 'syz.0.1937': attribute type 1 has an invalid length. [ 642.784050][T12414] bond1: entered promiscuous mode [ 642.789516][T12414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 642.824690][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.867608][T12420] bond1: (slave bridge5): making interface the new active one [ 642.887724][T12420] bridge5: entered promiscuous mode [ 642.895447][T12420] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 643.582475][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.999133][T12428] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1936'. [ 644.030502][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.941984][ T11] tipc: Left network mode [ 645.449452][T12321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.946632][T12321] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.164764][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.172037][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.417015][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.424268][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.102216][ T7656] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 650.192590][ T11] hsr_slave_0: left promiscuous mode [ 650.211259][ T11] hsr_slave_1: left promiscuous mode [ 650.243369][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.268904][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.313524][ T7656] usb 1-1: Using ep0 maxpacket: 8 [ 650.331141][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.331806][ T7656] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 650.358385][ T7656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.367817][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.372704][ T7656] usb 1-1: Product: syz [ 650.385702][ T7656] usb 1-1: Manufacturer: syz [ 650.399199][ T11] bridge_slave_1: left allmulticast mode [ 650.400594][ T7656] usb 1-1: SerialNumber: syz [ 650.406010][ T11] bridge_slave_1: left promiscuous mode [ 650.419040][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.439370][ T7656] usb 1-1: config 0 descriptor?? [ 650.465357][ T11] bridge_slave_0: left allmulticast mode [ 650.498947][ T11] bridge_slave_0: left promiscuous mode [ 650.505941][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.693079][ T11] bridge0: left promiscuous mode [ 650.705480][ T11] veth1_macvtap: left promiscuous mode [ 650.722716][ T11] veth0_macvtap: left promiscuous mode [ 650.728851][ T11] veth1_vlan: left promiscuous mode [ 650.739220][ T11] veth0_vlan: left promiscuous mode [ 652.189053][ T11] bond6 (unregistering): Released all slaves [ 652.466601][ T11] bond5 (unregistering): Released all slaves [ 652.723757][ T11] bond4 (unregistering): Released all slaves [ 652.877252][ T7656] usb read operation failed. (-71) [ 652.905003][ T7656] usb write operation failed. (-71) [ 652.918310][ T7656] usb write operation failed. (-71) [ 652.942816][ T7656] usb write operation failed. (-71) [ 652.962439][ T7656] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 653.035950][ T7656] usb 1-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 653.085305][ T7656] usb 1-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 653.451561][ T11] bond0 (unregistering): Released all slaves [ 654.342026][ T11] bond3 (unregistering): Released all slaves [ 654.557076][ T11] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 654.597839][ T11] bridge3 (unregistering): left promiscuous mode [ 658.199984][ T11] bond2 (unregistering): Released all slaves [ 658.237997][ T11] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 658.246731][ T11] bridge2 (unregistering): left promiscuous mode [ 658.591658][ T11] bond1 (unregistering): Released all slaves [ 662.316313][T12503] binder: 12499:12503 ioctl 0 200000000040 returned -22 [ 662.328298][T12503] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1948'. [ 662.858595][ T11] team0 (unregistering): Port device team_slave_1 removed [ 662.922724][ T11] team0 (unregistering): Port device team_slave_0 removed [ 664.086322][T12321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.338676][T12321] veth0_vlan: entered promiscuous mode [ 666.420156][T12321] veth1_vlan: entered promiscuous mode [ 666.610991][T12321] veth0_macvtap: entered promiscuous mode [ 666.747279][T12321] veth1_macvtap: entered promiscuous mode [ 666.882228][T12321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.960879][T12321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.016255][T12321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.074267][T12321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.131966][T12321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.140752][T12321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.732109][T12550] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 667.762569][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.832987][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.921382][T12504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.921430][T12504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.863602][T12563] binder: 12555:12563 ioctl 0 200000000040 returned -22 [ 668.877980][T12563] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1956'. [ 670.269048][T12566] tipc: Enabling of bearer rejected, failed to enable media [ 674.157486][T12604] Mount JFS Failure: -22 [ 674.157534][T12604] jfs_mount failed w/return code = -22 [ 675.006319][T12612] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1967'. [ 676.981320][T12614] tipc: Enabled bearer , priority 0 [ 677.115762][T12613] tipc: Disabling bearer [ 684.416783][T12649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1976'. [ 684.426400][T12649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1976'. [ 686.076931][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.917634][T12672] Mount JFS Failure: -22 [ 688.922104][T12672] jfs_mount failed w/return code = -22 [ 689.855011][T12673] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1979'. [ 693.945706][T12324] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 693.956974][T12324] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 693.965966][T12324] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 693.985689][T12324] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 693.994033][T12324] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 694.004043][T12324] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 694.104169][T12706] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 694.854496][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.344942][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.796760][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.072190][T12324] Bluetooth: hci2: command tx timeout [ 696.530158][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.646240][T12731] tipc: Enabled bearer , priority 0 [ 697.977286][T12732] syzkaller0: entered promiscuous mode [ 697.991167][T12732] syzkaller0: entered allmulticast mode [ 698.025008][T12732] tipc: Resetting bearer [ 698.055973][T12730] tipc: Resetting bearer [ 698.155983][T12324] Bluetooth: hci2: command tx timeout [ 700.233360][T12324] Bluetooth: hci2: command tx timeout [ 701.287862][T12730] tipc: Disabling bearer [ 701.298521][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1990'. [ 701.743985][T12700] chnl_net:caif_netlink_parms(): no params data found [ 702.322199][T12324] Bluetooth: hci2: command tx timeout [ 702.442793][T12700] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.512084][T12700] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.519407][T12700] bridge_slave_0: entered allmulticast mode [ 702.583508][T12700] bridge_slave_0: entered promiscuous mode [ 702.608324][T12700] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.638350][T12700] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.667724][T12700] bridge_slave_1: entered allmulticast mode [ 702.694037][T12700] bridge_slave_1: entered promiscuous mode [ 702.897901][T12700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.094593][T12700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.365989][T12700] team0: Port device team_slave_0 added [ 703.558817][T12700] team0: Port device team_slave_1 added [ 704.128374][T12778] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 704.349347][T12700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.501303][T12700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.756666][T12700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.867037][T12700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.874166][T12700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.900155][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.907144][T12700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.234650][T12700] hsr_slave_0: entered promiscuous mode [ 706.253467][T12700] hsr_slave_1: entered promiscuous mode [ 706.272197][T12700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 706.279864][T12700] Cannot create hsr debugfs directory [ 706.434888][T12794] netlink: 'syz.3.2001': attribute type 10 has an invalid length. [ 706.466728][T12794] team0: Port device dummy0 added [ 708.148633][ T11] hsr_slave_0: left promiscuous mode [ 708.165573][ T11] hsr_slave_1: left promiscuous mode [ 708.177281][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.189920][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.209900][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.221687][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.236763][ T11] bridge_slave_1: left allmulticast mode [ 708.246205][ T11] bridge_slave_1: left promiscuous mode [ 708.257807][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.274496][ T11] bridge_slave_0: left allmulticast mode [ 708.280548][ T11] bridge_slave_0: left promiscuous mode [ 708.286571][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.337771][ T11] veth1_macvtap: left promiscuous mode [ 708.343543][ T11] veth0_macvtap: left promiscuous mode [ 708.355527][ T11] veth1_vlan: left promiscuous mode [ 708.361592][ T11] veth0_vlan: left promiscuous mode [ 710.641294][T12835] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 710.951354][ T11] team0 (unregistering): Port device team_slave_1 removed [ 711.129099][ T11] team0 (unregistering): Port device team_slave_0 removed [ 711.267982][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.413596][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.785725][ T11] bond0 (unregistering): Released all slaves [ 712.898901][ T5155] udevd[5155]: worker [12407] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 712.933091][T12823] netlink: 'syz.2.2010': attribute type 10 has an invalid length. [ 712.947730][T12823] team0: Port device dummy0 added [ 716.131683][T12700] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 716.795804][ T7656] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 717.027202][ T7656] dvb_usb_az6007: probe of 1-1:0.0 failed with error -110 [ 717.075711][ T7656] usb 1-1: USB disconnect, device number 2 [ 717.244331][T12700] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 717.269155][T12700] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 717.331343][T12700] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 717.406154][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2016'. [ 717.858303][T12856] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2016'. [ 717.924169][T12700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.055966][T12700] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.123829][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.131996][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.244432][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.251659][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.282037][T12886] netlink: 'syz.0.2021': attribute type 10 has an invalid length. [ 719.334891][T12886] team0: Port device dummy0 added [ 719.988229][T12700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.640116][T12700] veth0_vlan: entered promiscuous mode [ 722.803881][T12700] veth1_vlan: entered promiscuous mode [ 722.963509][T12700] veth0_macvtap: entered promiscuous mode [ 723.045045][T12700] veth1_macvtap: entered promiscuous mode [ 723.267323][T12931] binder: 12925:12931 ioctl 0 200000000040 returned -22 [ 726.725387][T12700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.808512][T12700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.830293][T12700] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.841273][T12700] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.851443][T12700] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.861342][T12700] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.810315][T12940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2027'. [ 728.913805][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.929603][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.422403][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.498694][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.539294][T12942] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2027'. [ 729.742962][T12951] netlink: 'syz.2.2029': attribute type 10 has an invalid length. [ 730.377607][T12965] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1983'. [ 730.387050][T12965] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1983'. [ 737.099638][T12975] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 737.147073][T12975] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 737.160290][T12980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2033'. [ 737.882088][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2038'. [ 738.104610][T13003] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2038'. [ 738.437853][T13012] netlink: 'syz.2.2040': attribute type 10 has an invalid length. [ 739.254955][T13030] mkiss: ax0: crc mode is auto. [ 844.861817][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 844.861843][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12/1:b..l [ 844.862611][ C1] rcu: (detected by 1, t=10502 jiffies, g=91029, q=162 ncpus=2) [ 844.862641][ C1] task:kworker/u4:1 state:R running task stack:21512 pid:12 ppid:2 flags:0x00004000 [ 844.862685][ C1] Workqueue: bat_events batadv_nc_worker [ 844.862712][ C1] Call Trace: [ 844.862718][ C1] [ 844.862728][ C1] __schedule+0x14d2/0x44d0 [ 844.862784][ C1] ? asan.module_dtor+0x20/0x20 [ 844.862811][ C1] ? mark_lock+0x94/0x320 [ 844.862840][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 844.862874][ C1] ? preempt_schedule_irq+0xaa/0x140 [ 844.862906][ C1] preempt_schedule_irq+0xb5/0x140 [ 844.862927][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 844.862959][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 844.862991][ C1] irqentry_exit+0x67/0x70 [ 844.863010][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 844.863035][ C1] RIP: 0010:batadv_nc_worker+0x203/0x610 [ 844.863072][ C1] Code: 10 48 81 c5 38 fe ff ff 74 07 e8 78 a5 4e f7 eb b8 e8 71 a5 4e f7 e8 fc c4 37 00 89 c3 31 ff 89 c6 e8 11 a9 4e f7 85 db 74 15 18 af 38 f7 84 c0 74 18 e8 4f a5 4e f7 48 8b 5c 24 08 eb 65 e8 [ 844.863090][ C1] RSP: 0018:ffffc90000117b60 EFLAGS: 00000202 [ 844.863118][ C1] RAX: ffffffff8a36e9ff RBX: 0000000000000001 RCX: 0000000000000000 [ 844.863129][ C1] RDX: ffff888019e75a00 RSI: 0000000000000001 RDI: 0000000000000000 [ 844.863139][ C1] RBP: fffffffffffffe38 R08: dffffc0000000000 R09: 1ffffffff21b4ea0 [ 844.863150][ C1] R10: dffffc0000000000 R11: fffffbfff21b4ea1 R12: dffffc0000000000 [ 844.863162][ C1] R13: ffffffff8a36e8d2 R14: ffff88802fdd4c80 R15: 00000000000003dc [ 844.863182][ C1] ? batadv_nc_worker+0xd2/0x610 [ 844.863216][ C1] ? batadv_nc_worker+0x1ff/0x610 [ 844.863259][ C1] ? process_scheduled_works+0x957/0x15b0 [ 844.863285][ C1] process_scheduled_works+0xa45/0x15b0 [ 844.863341][ C1] ? assign_work+0x400/0x400 [ 844.863365][ C1] ? assign_work+0x39e/0x400 [ 844.863396][ C1] worker_thread+0xa55/0xfc0 [ 844.863451][ C1] kthread+0x2fa/0x390 [ 844.863471][ C1] ? pr_cont_work+0x560/0x560 [ 844.863499][ C1] ? kthread_blkcg+0xd0/0xd0 [ 844.863519][ C1] ret_from_fork+0x48/0x80 [ 844.863544][ C1] ? kthread_blkcg+0xd0/0xd0 [ 844.863558][ C1] ret_from_fork_asm+0x11/0x20 [ 844.863594][ C1] [ 844.863602][ C1] rcu: rcu_preempt kthread starved for 10324 jiffies! g91029 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 844.863628][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 844.863639][ C1] rcu: RCU grace-period kthread stack dump: [ 844.863646][ C1] task:rcu_preempt state:R running task stack:27216 pid:17 ppid:2 flags:0x00004000 [ 844.863688][ C1] Call Trace: [ 844.863695][ C1] [ 844.863707][ C1] __schedule+0x14d2/0x44d0 [ 844.863754][ C1] ? asan.module_dtor+0x20/0x20 [ 844.863776][ C1] ? enqueue_timer+0x225/0x530 [ 844.863794][ C1] ? __mod_timer+0x984/0xdb0 [ 844.863835][ C1] schedule+0xbd/0x170 [ 844.863865][ C1] schedule_timeout+0x160/0x280 [ 844.863885][ C1] ? console_conditional_schedule+0x40/0x40 [ 844.863905][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 844.863928][ C1] ? update_process_times+0x1b0/0x1b0 [ 844.863967][ C1] ? prepare_to_swait_event+0x339/0x360 [ 844.863988][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 844.864035][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 844.864071][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 844.864111][ C1] ? rcu_gp_init+0x1510/0x1510 [ 844.864139][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 844.864167][ C1] ? finish_swait+0xc7/0x1d0 [ 844.864188][ C1] rcu_gp_kthread+0x99/0x380 [ 844.864213][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 844.864248][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 844.864280][ C1] ? __kthread_parkme+0x162/0x1c0 [ 844.864318][ C1] kthread+0x2fa/0x390 [ 844.864337][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 844.864368][ C1] ? kthread_blkcg+0xd0/0xd0 [ 844.864388][ C1] ret_from_fork+0x48/0x80 [ 844.864405][ C1] ? kthread_blkcg+0xd0/0xd0 [ 844.864419][ C1] ret_from_fork_asm+0x11/0x20 [ 844.864460][ C1] [ 844.864468][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 844.864477][ C1] Sending NMI from CPU 1 to CPUs 0: [ 844.864512][ C0] NMI backtrace for cpu 0 [ 844.864522][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 844.864538][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 844.864547][ C0] RIP: 0010:unwind_next_frame+0x59e/0x2970 [ 844.864575][ C0] Code: 04 28 84 c0 75 3e 4d 63 2f 4d 01 fd 4c 89 ef 4c 89 f6 e8 a5 e8 4a 00 49 8d 47 04 4d 39 f5 48 0f 46 d8 49 8d 47 fc 48 0f 47 e8 <4d> 0f 46 e7 48 39 eb 77 28 e8 74 e6 4a 00 49 bd 00 00 00 00 00 fc [ 844.864589][ C0] RSP: 0018:ffffc90000007378 EFLAGS: 00000012 [ 844.864602][ C0] RAX: ffffffff8ec667ac RBX: ffffffff8ec4a2dc RCX: ffffffff8ca93440 [ 844.864615][ C0] RDX: 0000000000000002 RSI: ffffffff8f9c76dd RDI: ffffffff8fa12285 [ 844.864626][ C0] RBP: ffffffff8ec667ac R08: ffffc90000007510 R09: 0000000000000014 [ 844.864637][ C0] R10: dffffc0000000000 R11: fffffbfff1c9514e R12: ffffffff8ec4a2d8 [ 844.864649][ C0] R13: ffffffff8fa12285 R14: ffffffff8f9c76dd R15: ffffffff8ec667b0 [ 844.864662][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 844.864675][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 844.864687][ C0] CR2: 000056510beeb950 CR3: 000000002421d000 CR4: 00000000003506f0 [ 844.864701][ C0] Call Trace: [ 844.864706][ C0] [ 844.864713][ C0] ? is_bpf_text_address+0x28f/0x2a0 [ 844.864733][ C0] ? arch_call_rest_init+0xd/0x10 [ 844.864755][ C0] ? kernel_text_address+0xa0/0xd0 [ 844.864776][ C0] ? arch_call_rest_init+0xe/0x10 [ 844.864797][ C0] ? arch_call_rest_init+0xe/0x10 [ 844.864816][ C0] ? stack_trace_save+0xe0/0xe0 [ 844.864835][ C0] arch_stack_walk+0x144/0x190 [ 844.864854][ C0] ? arch_call_rest_init+0xe/0x10 [ 844.864877][ C0] stack_trace_save+0x9c/0xe0 [ 844.864900][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 844.864918][ C0] ? mark_lock+0x94/0x320 [ 844.864938][ C0] ? __lock_acquire+0x1334/0x7c80 [ 844.864957][ C0] kasan_set_track+0x4e/0x70 [ 844.864974][ C0] ? kasan_set_track+0x4e/0x70 [ 844.864989][ C0] ? __kasan_kmalloc+0x8f/0xa0 [ 844.865005][ C0] ? dummy_urb_enqueue+0x7c/0x780 [ 844.865020][ C0] ? usb_hcd_submit_urb+0x313/0x1a90 [ 844.865039][ C0] ? iowarrior_callback+0x4b9/0x6a0 [ 844.865064][ C0] ? __usb_hcd_giveback_urb+0x35f/0x520 [ 844.865082][ C0] ? dummy_timer+0x8a3/0x31b0 [ 844.865096][ C0] ? __hrtimer_run_queues+0x51e/0xc40 [ 844.865113][ C0] ? hrtimer_run_softirq+0x187/0x2b0 [ 844.865130][ C0] ? handle_softirqs+0x280/0x820 [ 844.865145][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 844.865159][ C0] ? irq_exit_rcu+0x9/0x20 [ 844.865173][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 844.865197][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 844.865215][ C0] ? pv_native_safe_halt+0x13/0x20 [ 844.865240][ C0] ? default_idle+0x13/0x20 [ 844.865254][ C0] ? default_idle_call+0x6c/0xa0 [ 844.865270][ C0] ? do_idle+0x1eb/0x510 [ 844.865286][ C0] ? cpu_startup_entry+0x43/0x60 [ 844.865304][ C0] ? rest_init+0x2e2/0x300 [ 844.865320][ C0] ? arch_call_rest_init+0xe/0x10 [ 844.865362][ C0] ? rcu_is_watching+0x15/0xb0 [ 844.865385][ C0] __kasan_kmalloc+0x8f/0xa0 [ 844.865403][ C0] dummy_urb_enqueue+0x7c/0x780 [ 844.865423][ C0] usb_hcd_submit_urb+0x313/0x1a90 [ 844.865449][ C0] iowarrior_callback+0x4b9/0x6a0 [ 844.865476][ C0] ? kcov_remote_start+0x8f/0x7f0 [ 844.865498][ C0] __usb_hcd_giveback_urb+0x35f/0x520 [ 844.865521][ C0] dummy_timer+0x8a3/0x31b0 [ 844.865554][ C0] ? debug_deactivate+0x1d/0x1d0 [ 844.865576][ C0] ? lock_chain_count+0x20/0x20 [ 844.865595][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 844.865616][ C0] ? dummy_free_streams+0x530/0x530 [ 844.865630][ C0] ? debug_object_deactivate+0x67/0x350 [ 844.865658][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 844.865679][ C0] ? dummy_free_streams+0x530/0x530 [ 844.865699][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 844.865716][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 844.865742][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 844.865762][ C0] handle_softirqs+0x280/0x820 [ 844.865780][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 844.865798][ C0] ? do_softirq+0x180/0x180 [ 844.865815][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 844.865838][ C0] __irq_exit_rcu+0xc7/0x190 [ 844.865853][ C0] ? irq_exit_rcu+0x20/0x20 [ 844.865872][ C0] irq_exit_rcu+0x9/0x20 [ 844.865886][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 844.865911][ C0] [ 844.865916][ C0] [ 844.865921][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 844.865939][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 844.865964][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 89 39 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 844.865978][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2 [ 844.865990][ C0] RAX: dfdd85aea53a1300 RBX: ffffffff8161877b RCX: dfdd85aea53a1300 [ 844.866003][ C0] RDX: 0000000000000001 RSI: ffffffff8aaabd60 RDI: ffffffff8afc67c0 [ 844.866014][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 844.866026][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: ffffffff8e4a8a68 [ 844.866038][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952688 [ 844.866050][ C0] ? do_idle+0x1eb/0x510 [ 844.866074][ C0] default_idle+0x13/0x20 [ 844.866088][ C0] default_idle_call+0x6c/0xa0 [ 844.866104][ C0] do_idle+0x1eb/0x510 [ 844.866124][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 844.866142][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 844.866168][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 844.866193][ C0] ? do_idle+0xc/0x510 [ 844.866212][ C0] cpu_startup_entry+0x43/0x60 [ 844.866231][ C0] rest_init+0x2e2/0x300 [ 844.866248][ C0] ? time_init+0x40/0x40 [ 844.866265][ C0] arch_call_rest_init+0xe/0x10 [ 844.866285][ C0] start_kernel+0x459/0x4e0 [ 844.866307][ C0] x86_64_start_reservations+0x2a/0x30 [ 844.866326][ C0] x86_64_start_kernel+0x60/0x60 [ 844.866343][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 844.866379][ C0] [ 900.472152][ T29] INFO: task syz.2.2044:13030 blocked for more than 143 seconds. [ 900.472202][ T29] Not tainted syzkaller #0 [ 900.472214][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 900.472357][ T29] task:syz.2.2044 state:D stack:25680 pid:13030 ppid:5784 flags:0x00004004 [ 900.472402][ T29] Call Trace: [ 900.472410][ T29] [ 900.472426][ T29] __schedule+0x14d2/0x44d0 [ 900.472566][ T29] ? asan.module_dtor+0x20/0x20 [ 900.472622][ T29] schedule+0xbd/0x170 [ 900.472855][ T29] schedule_timeout+0x9b/0x280 [ 900.472884][ T29] ? console_conditional_schedule+0x40/0x40 [ 900.472906][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 900.472936][ T29] ? lock_chain_count+0x20/0x20 [ 900.473041][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 900.473065][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 900.473090][ T29] ? wait_for_completion+0x26c/0x590 [ 900.473120][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 900.473144][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 900.473259][ T29] ? wait_for_completion+0x26c/0x590 [ 900.473291][ T29] wait_for_completion+0x2bd/0x590 [ 900.473337][ T29] ? io_schedule+0xd0/0xd0 [ 900.473448][ T29] ? try_to_wake_up+0x724/0x1140 [ 900.473495][ T29] devtmpfs_create_node+0x1d6/0x240 [ 900.473530][ T29] ? auxiliary_match_id+0x280/0x280 [ 900.473632][ T29] ? kernfs_add_one+0x14e/0x6b0 [ 900.473683][ T29] ? device_create_sys_dev_entry+0x11b/0x170 [ 900.473718][ T29] ? device_add_attrs+0x810/0x810 [ 900.473838][ T29] ? device_pm_add+0x67/0x320 [ 900.473867][ T29] ? device_create_file+0xef/0x1b0 [ 900.473901][ T29] device_add+0xa75/0xc20 [ 900.474018][ T29] device_create+0x25c/0x2e0 [ 900.474055][ T29] ? _raw_spin_unlock+0x40/0x40 [ 900.474077][ T29] ? update_attr+0x479/0x740 [ 900.474106][ T29] ? root_device_unregister+0x100/0x100 [ 900.474226][ T29] ? is_console_locked+0x9/0x20 [ 900.474251][ T29] ? csi_J+0x9ec/0xe80 [ 900.474284][ T29] vcs_make_sysfs+0x32/0x80 [ 900.474318][ T29] vc_allocate+0x611/0x6f0 [ 900.474425][ T29] ? vc_cons_allocated+0x70/0x70 [ 900.474464][ T29] con_install+0xa4/0x700 [ 900.474494][ T29] ? mutex_lock_nested+0x20/0x20 [ 900.474608][ T29] ? show_tty_active+0x30/0x30 [ 900.474650][ T29] tty_init_dev+0xd3/0x4c0 [ 900.474683][ T29] tty_open+0x5ad/0xd10 [ 900.474798][ T29] ? do_raw_spin_lock+0x121/0x2c0 [ 900.474839][ T29] ? tty_compat_ioctl+0x8b0/0x8b0 [ 900.474873][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 900.474985][ T29] chrdev_open+0x59e/0x670 [ 900.475015][ T29] ? cd_forget+0x160/0x160 [ 900.475041][ T29] ? fsnotify_perm+0x3ed/0x5e0 [ 900.475072][ T29] ? cd_forget+0x160/0x160 [ 900.475174][ T29] do_dentry_open+0x8c6/0x1500 [ 900.475217][ T29] path_openat+0x274b/0x3190 [ 900.475269][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 900.475374][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 900.475402][ T29] ? verify_lock_unused+0x140/0x140 [ 900.475432][ T29] ? do_filp_open+0x3d0/0x3d0 [ 900.475470][ T29] ? __virt_addr_valid+0x18c/0x540 [ 900.475667][ T29] do_filp_open+0x1c5/0x3d0 [ 900.475707][ T29] ? vfs_tmpfile+0x490/0x490 [ 900.475857][ T29] ? _raw_spin_unlock+0x28/0x40 [ 900.475880][ T29] ? alloc_fd+0x58f/0x630 [ 900.475918][ T29] do_sys_openat2+0x12c/0x1c0 [ 900.475948][ T29] ? do_sys_open+0xe0/0xe0 [ 900.476053][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 900.476085][ T29] ? lock_chain_count+0x20/0x20 [ 900.476116][ T29] __x64_sys_openat+0x139/0x160 [ 900.476150][ T29] do_syscall_64+0x55/0xb0 [ 900.476256][ T29] ? clear_bhb_loop+0x40/0x90 [ 900.476281][ T29] ? clear_bhb_loop+0x40/0x90 [ 900.476307][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 900.476331][ T29] RIP: 0033:0x7f11c2b8d810 [ 900.476351][ T29] RSP: 002b:00007f11c39c3b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 900.476458][ T29] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f11c2b8d810 [ 900.476475][ T29] RDX: 0000000000000002 RSI: 00007f11c39c3c10 RDI: 00000000ffffff9c [ 900.476490][ T29] RBP: 00007f11c39c3c10 R08: 0000000000000000 R09: 00007f11c39c3986 [ 900.476506][ T29] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 900.476520][ T29] R13: 00007f11c2de6038 R14: 00007f11c2de5fa0 R15: 00007ffe41b7d468 [ 900.476634][ T29] [ 900.476655][ T29] [ 900.476655][ T29] Showing all locks held in the system: [ 900.476667][ T29] 3 locks held by kworker/u4:1/12: [ 900.476685][ T29] 1 lock held by khungtaskd/29: [ 900.476697][ T29] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 900.476850][ T29] 1 lock held by khugepaged/36: [ 900.476900][ T29] 2 locks held by crond/5529: [ 900.476913][ T29] 2 locks held by getty/5547: [ 900.476925][ T29] #0: ffff88803070a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 900.477081][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 900.477240][ T29] 1 lock held by syz.3.2036/12998: [ 900.477254][ T29] #0: ffff8880796f73a0 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x168/0x400 [ 900.477322][ T29] 1 lock held by syz.3.2036/12999: [ 900.477335][ T29] #0: ffff8880796f73a0 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 900.477476][ T29] 2 locks held by syz.3.2036/13008: [ 900.477490][ T29] #0: ffff88807c64fd98 (&u->iolock){+.+.}-{3:3}, at: unix_stream_read_generic+0x14b0/0x2020 [ 900.477632][ T29] #1: ffff8880796f73a0 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 900.477694][ T29] 1 lock held by syz.3.2036/13023: [ 900.477708][ T29] 1 lock held by syz.0.2043/13027: [ 900.477802][ T29] 1 lock held by syz.0.2043/13031: [ 900.477824][ T29] #0: ffff88802e2414a0 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 900.477885][ T29] 3 locks held by syz.2.2044/13030: [ 900.477898][ T29] #0: ffffffff8d49e2c8 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x20d/0xd10 [ 900.478045][ T29] #1: ffff888076cfa1c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_init_dev+0x74/0x4c0 [ 900.478187][ T29] #2: ffffffff8cd24240 (console_lock){+.+.}-{0:0}, at: con_install+0x9c/0x700 [ 900.478257][ T29] [ 900.478263][ T29] ============================================= [ 900.478263][ T29] [ 900.478273][ T29] NMI backtrace for cpu 0 [ 900.478284][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 900.478307][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 900.478320][ T29] Call Trace: [ 900.478328][ T29] [ 900.478337][ T29] dump_stack_lvl+0x16c/0x230 [ 900.478364][ T29] ? preempt_count_add+0x91/0x1a0 [ 900.478395][ T29] ? show_regs_print_info+0x20/0x20 [ 900.478422][ T29] ? load_image+0x3b0/0x3b0 [ 900.478457][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 900.478490][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 900.478518][ T29] ? _printk+0xd0/0x110 [ 900.478539][ T29] ? load_image+0x3b0/0x3b0 [ 900.478563][ T29] ? load_image+0x3b0/0x3b0 [ 900.478589][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 900.478624][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 900.478656][ T29] watchdog+0xf41/0xf80 [ 900.478684][ T29] ? watchdog+0x1e1/0xf80 [ 900.478717][ T29] kthread+0x2fa/0x390 [ 900.478736][ T29] ? hungtask_pm_notify+0x90/0x90 [ 900.478763][ T29] ? kthread_blkcg+0xd0/0xd0 [ 900.478783][ T29] ret_from_fork+0x48/0x80 [ 900.478807][ T29] ? kthread_blkcg+0xd0/0xd0 [ 900.478835][ T29] ret_from_fork_asm+0x11/0x20 [ 900.478879][ T29] [ 900.478960][ T29] Sending NMI from CPU 0 to CPUs 1: [ 900.478987][ C1] NMI backtrace for cpu 1 [ 900.478998][ C1] CPU: 1 PID: 13028 Comm: syz.2.2044 Not tainted syzkaller #0 [ 900.479014][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 900.479023][ C1] RIP: 0010:memcpy_orig+0x1e/0x120 [ 900.479043][ C1] Code: eb 0a 48 89 f8 48 89 d1 f3 a4 c3 90 66 0f 1f 00 48 89 f8 48 83 fa 20 0f 82 86 00 00 00 40 38 fe 7c 35 48 83 ea 20 48 83 ea 20 <4c> 8b 06 4c 8b 4e 08 4c 8b 56 10 4c 8b 5e 18 48 8d 76 20 4c 89 07 [ 900.479058][ C1] RSP: 0018:ffffc9000425fbd0 EFLAGS: 00000087 [ 900.479072][ C1] RAX: ffffc9000425fe00 RBX: 0000000000000011 RCX: ffffffff815365ed [ 900.479087][ C1] RDX: fffffffffffffff0 RSI: ffff88802db2df68 RDI: ffffc9000425fe00 [ 900.479102][ C1] RBP: ffff88802db2df50 R08: ffffc9000425fe2f R09: 1ffff9200084bfc5 [ 900.479116][ C1] R10: dffffc0000000000 R11: fffff5200084bfc6 R12: ffffc9000425fe00 [ 900.479131][ C1] R13: 1ffff110043661c1 R14: dffffc0000000000 R15: ffff888021b30df8 [ 900.479146][ C1] FS: 00005555903e2500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 900.479161][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 900.479173][ C1] CR2: 00007f11c39a2f98 CR3: 000000002ef8c000 CR4: 00000000003506e0 [ 900.479189][ C1] Call Trace: [ 900.479194][ C1] [ 900.479199][ C1] __dequeue_signal+0x3bd/0x680 [ 900.479230][ C1] dequeue_signal+0xe9/0x4b0 [ 900.479253][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 900.479276][ C1] get_signal+0x551/0x1400 [ 900.479318][ C1] arch_do_signal_or_restart+0x9c/0x7b0 [ 900.479350][ C1] ? get_sigframe_size+0x20/0x20 [ 900.479390][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 900.479416][ C1] exit_to_user_mode_loop+0x70/0x110 [ 900.479440][ C1] exit_to_user_mode_prepare+0xf6/0x180 [ 900.479464][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 900.479479][ C1] do_syscall_64+0x61/0xb0 [ 900.479499][ C1] ? clear_bhb_loop+0x40/0x90 [ 900.479519][ C1] ? clear_bhb_loop+0x40/0x90 [ 900.479540][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 900.479569][ C1] RIP: 0033:0x7f11c2a558d3 [ 900.479585][ C1] Code: 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 89 10 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 0f 84 [ 900.479599][ C1] RSP: 002b:00007ffe41b7d590 EFLAGS: 00000246 [ 900.479612][ C1] RAX: 000020000000cffc RBX: 0000000000000004 RCX: 0000000000000000 [ 900.479623][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00005555903e23c8 [ 900.479633][ C1] RBP: 00007ffe41b7d698 R08: 0000000000000000 R09: 0000000000000000 [ 900.479644][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f11c2de5fac [ 900.479654][ C1] R13: 00007ffe41b7d6c0 R14: fffffffffffffffe R15: 00007ffe41b7d6e0 [ 900.479675][ C1] [ 900.479996][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 900.480008][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 900.480028][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 900.480039][ T29] Call Trace: [ 900.480046][ T29] [ 900.480057][ T29] dump_stack_lvl+0x16c/0x230 [ 900.480088][ T29] ? show_regs_print_info+0x20/0x20 [ 900.480115][ T29] ? load_image+0x3b0/0x3b0 [ 900.480149][ T29] panic+0x2c0/0x710 [ 900.480168][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 900.480195][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 900.480214][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 900.480240][ T29] ? irq_work_queue+0xbc/0x140 [ 900.480270][ T29] watchdog+0xf80/0xf80 [ 900.480296][ T29] ? watchdog+0x1e1/0xf80 [ 900.480329][ T29] kthread+0x2fa/0x390 [ 900.480347][ T29] ? hungtask_pm_notify+0x90/0x90 [ 900.480374][ T29] ? kthread_blkcg+0xd0/0xd0 [ 900.480393][ T29] ret_from_fork+0x48/0x80 [ 900.480417][ T29] ? kthread_blkcg+0xd0/0xd0 [ 900.480436][ T29] ret_from_fork_asm+0x11/0x20 [ 900.480479][ T29] [ 900.480780][ T29] Kernel Offset: disabled