last executing test programs: 15.676909471s ago: executing program 2 (id=114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) 15.180707945s ago: executing program 2 (id=115): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}}) sendmsg$inet(r0, 0x0, 0x0) 11.38219732s ago: executing program 2 (id=124): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r4}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) close(0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 11.25619855s ago: executing program 0 (id=125): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r2, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 9.762568912s ago: executing program 1 (id=127): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 9.3121536s ago: executing program 4 (id=128): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ff8, 0x0, 0x0, 0x10, 0xd, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc964e3e2874df2cfc06c89f3d9e234b305d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1ef800", "715200601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0x100, 0xa]}}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 9.298522914s ago: executing program 0 (id=129): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002b40), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x88}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) r3 = socket(0x2a, 0x803, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x3a, 0x1, 0x0, 0x30) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x4e24, @empty}, 0x2a0}) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r7, &(0x7f00000000c0), 0x0}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000390400000000fbdbdf2500000000", @ANYRES32=r6, @ANYBLOB="01980400419a04002800128008000100736974001c0002"], 0x48}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="0d000000010001", 0x7) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000001000), &(0x7f0000001040)=0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000440)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) r9 = accept$inet(r3, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) pwrite64(r9, &(0x7f0000000200)="ad063c3fb584acc8acb9ade0f441bf546b71c62bb73913949f3e39e0f0043b73e1f74ce0c97b5099628f74b99f862387368e28e9d934c59f133680c00be5228ddca0804a1f880402fb4ac1362232e7a9099f434a73e342e6bb489e8be7556e9298f9f4660ebb6173c50a436b5cbfa4bfccdc7248af908600a44d8f269fef67e95051e4ad8a9c7f7f9172cbe7b1309223bbaaa10fd605e0176cba5db819", 0x9d, 0x5) 9.267304091s ago: executing program 3 (id=130): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 9.208186768s ago: executing program 1 (id=131): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2040400) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x40003) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f00000000c0)=0xfd83, 0x4) 8.908947396s ago: executing program 3 (id=132): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 8.854734716s ago: executing program 0 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x7) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f00000001c0)=0x3f3, 0x4) syz_clone(0x80, &(0x7f0000000100), 0x0, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)="44318670f3bc9b96332fc6d7") 7.083874446s ago: executing program 0 (id=134): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x88}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) r4 = socket(0x2a, 0x803, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x3a, 0x1, 0x0, 0x30) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x4e24, @empty}, 0x2a0}) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r8, &(0x7f00000000c0), 0x0}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000390400000000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="01980400419a04002800128008000100736974001c0002"], 0x48}}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000040)="0d000000010001", 0x7) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000001000), &(0x7f0000001040)=0x4) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000440)={0x11, 0x86dd, r7, 0x1, 0x4, 0x6, @local}, 0x14) r10 = accept$inet(r4, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) pwrite64(r10, &(0x7f0000000200)="ad063c3fb584acc8acb9ade0f441bf546b71c62bb73913949f3e39e0f0043b73e1f74ce0c97b5099628f74b99f862387368e28e9d934c59f133680c00be5228ddca0804a1f880402fb4ac1362232e7a9099f434a73e342e6bb489e8be7556e9298f9f4660ebb6173c50a436b5cbfa4bfccdc7248af908600a44d8f269fef67e95051e4ad8a9c7f7f9172cbe7b1309223bbaaa10fd605e0176cba5db819", 0x9d, 0x5) 6.983318773s ago: executing program 3 (id=135): unshare(0x28000600) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x5, 0xe, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@remote, @in6=@mcast2, 0x26, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x9}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x0, 0x3505}]}, 0x70}}, 0x0) shutdown(r0, 0x8c5d47e95537ac9b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x2e, 0x61, 0x30, 0x61, 0x2e, 0x20]}}, 0x0, 0x20, 0x0, 0x1, 0x8}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2, 0x80000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 6.043412722s ago: executing program 3 (id=136): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x34004000) 5.520425784s ago: executing program 3 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019440)=""/102400, 0x19000) r4 = fsopen(&(0x7f0000000000)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 5.369751702s ago: executing program 4 (id=138): r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r0, 0x0, 0x24008004) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 4.886699895s ago: executing program 1 (id=139): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x10000, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 3.451259778s ago: executing program 4 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x33, 0x701, 0x0, 0x0, {0x8}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x8, 0x0, 0x2, 0x3, {{0x5, 0x4, 0x2, 0x38, 0x14, 0x65, 0x0, 0x6c, 0x4, 0x0, @rand_addr=0x64010101, @multicast1}}}}) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x23) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r3) sendmsg$nl_route_sched(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=@gettclass={0x24, 0x2a, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xd316a137443f4233, 0x1}, {0xf, 0x5}, {0xc, 0x4}}, ["", ""]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x14, r5, 0x101, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x91) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x36, &(0x7f0000000200)={@initdev, @broadcast, 0x0}, &(0x7f0000000240)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x3, 0x1, @private0, @mcast1, 0x7800, 0x7, 0x6, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f00000003c0)={0x3e8, r1, 0xb00, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x338, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd51d}, @ETHTOOL_A_BITSET_MASK={0xf0, 0x5, "72c21659870cd7ae90c475bf910d1cc30d643b7e6180612f7b907cb91f57849e7fb2d82c4489c69907ebe07f9fcb7dec2d301aea103e01f865f1c1a8b01044aa0b3251515d16991045ce4da8c3911d4dcb70c94431a46b4309f7a0d1ee3d278f566ed0b839e7b98e62b2225cca4ea3a7065d5acaee8de8bdd7bb4c2db9b21d775326f283c403a9de5296fbc39b57e6de6153b43c3038bff2727bb94703daf00a9044ca95d583e882e0b18db85013d4f9134de0d156fc36953b52ed003b568b64c04201f6e682ef663d0ee382bfeaf7617524448d8259ff5e7711c6891fb1589f97743d99967bb22750a88f0c"}, @ETHTOOL_A_BITSET_VALUE={0xc4, 0x4, "d084d49bf6911386851493d07ed1004b6dc67df24618612a4874f631a28a45f33785dc775e91aae17cc9f037da6865ce9a0fc22299052bef71c8aba5c27bfc3ebc5f4f06c0a10aa4e9b70c7a613cc6e720615d721dcff5bf89ad04b467086c5c80c59d69430f96d89b9cb7470fb82975f172a00baba40bac060cdfa7ca69f0bd5141d61d3dce40631d0a45ec1b16ba70a1c64d864fb18f8f5cda9ba2295f994a4e6c4f2ec969f5813183eb839c5168ac9cfa2ed79056cd50b51ef61c95293621"}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']#].\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}+:%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@[.:\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\x80&\'+&(^[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '+)%\'G(--\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa56}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'F$))^\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4fdf10a0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x4b, 0x5, "e6e310d59535c787cdf9b7f6bc1901652c48cde8bebbe9a9a21ad222f4e5b0ba038f40360bc665708f1ce27005aa7c94fbf3d0b84b215b0bf4b6fa52097d9231817917414b51f2"}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "94fd1f1bd19d9540c18ba5f1f3e6cd0308927f3006c2b550d68864843c70ebb774b5748c076616a65011"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x4004095}, 0x4000011) 2.54672284s ago: executing program 2 (id=141): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 2.300612034s ago: executing program 1 (id=142): socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.140093078s ago: executing program 4 (id=143): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30024404, 0x0, 0xfffe, 0x9, 0xfffffffe, 0x0, 0x0, 0x10, 0x4}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) close(r0) r2 = epoll_create1(0x0) pselect6(0x40, &(0x7f0000000080)={0x2, 0x0, 0x1, 0x0, 0x3, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000001, 0x4, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) 1.919022363s ago: executing program 2 (id=144): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, 0x0, 0xfdef) 1.793558138s ago: executing program 3 (id=145): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.559802025s ago: executing program 1 (id=146): unshare(0x28000600) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x5, 0xe, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@remote, @in6=@mcast2, 0x26, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x9}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x0, 0x3505}]}, 0x70}}, 0x0) shutdown(r0, 0x8c5d47e95537ac9b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x2e, 0x61, 0x30, 0x61, 0x2e, 0x20]}}, 0x0, 0x20, 0x0, 0x1, 0x8}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2, 0x80000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.380201413s ago: executing program 0 (id=147): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000) 1.289511963s ago: executing program 2 (id=148): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ff8, 0x0, 0x0, 0x10, 0xd, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc964e3e2874df2cfc06c89f3d9e234b305d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1ef800", "715200601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0x100, 0xa]}}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 1.057640668s ago: executing program 0 (id=149): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2040400) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x40003) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f00000000c0)=0xfd83, 0x4) 942.113408ms ago: executing program 4 (id=150): socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 459.933893ms ago: executing program 1 (id=151): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r4}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) close(0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 0s ago: executing program 4 (id=152): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x10000, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts. [ 75.025480][ T5606] cgroup: Unknown subsys name 'net' [ 75.140097][ T5606] cgroup: Unknown subsys name 'cpuset' [ 75.148710][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.804186][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.218029][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.219397][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.225738][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.227515][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.236190][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.236262][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.236363][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.237463][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.238085][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.241282][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.247943][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.270105][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.275552][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.282871][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.315120][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.357030][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.359891][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.365676][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.380151][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.388456][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.433326][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.439003][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.440806][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.444744][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.452485][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.146278][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.148171][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.148566][ T5624] bridge_slave_0: entered allmulticast mode [ 81.154222][ T5624] bridge_slave_0: entered promiscuous mode [ 81.214457][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.214721][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.215134][ T5624] bridge_slave_1: entered allmulticast mode [ 81.223923][ T5624] bridge_slave_1: entered promiscuous mode [ 81.316903][ T5619] Bluetooth: hci0: command tx timeout [ 81.394485][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.403781][ T5619] Bluetooth: hci2: command tx timeout [ 81.403801][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.411666][ T5619] Bluetooth: hci1: command tx timeout [ 81.452109][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.452321][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.453600][ T5618] bridge_slave_0: entered allmulticast mode [ 81.458957][ T5618] bridge_slave_0: entered promiscuous mode [ 81.486826][ T5619] Bluetooth: hci4: command tx timeout [ 81.486845][ T52] Bluetooth: hci3: command tx timeout [ 81.503606][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.503958][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.504899][ T5628] bridge_slave_0: entered allmulticast mode [ 81.510729][ T5628] bridge_slave_0: entered promiscuous mode [ 81.515067][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.515473][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.515852][ T5618] bridge_slave_1: entered allmulticast mode [ 81.524405][ T5618] bridge_slave_1: entered promiscuous mode [ 81.558727][ T5624] team0: Port device team_slave_0 added [ 81.573972][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.574285][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.579308][ T5628] bridge_slave_1: entered allmulticast mode [ 81.583732][ T5628] bridge_slave_1: entered promiscuous mode [ 81.616493][ T5624] team0: Port device team_slave_1 added [ 81.631130][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.631451][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.632473][ T5617] bridge_slave_0: entered allmulticast mode [ 81.638521][ T5617] bridge_slave_0: entered promiscuous mode [ 81.695596][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.695785][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.695943][ T5617] bridge_slave_1: entered allmulticast mode [ 81.701038][ T5617] bridge_slave_1: entered promiscuous mode [ 81.733222][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.761944][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.762074][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.762159][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.810458][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.821304][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.838778][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.839173][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.839637][ T5631] bridge_slave_0: entered allmulticast mode [ 81.844374][ T5631] bridge_slave_0: entered promiscuous mode [ 81.872246][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.872290][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.873205][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.890574][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.936642][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.936959][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.938034][ T5631] bridge_slave_1: entered allmulticast mode [ 81.943262][ T5631] bridge_slave_1: entered promiscuous mode [ 81.972935][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.993190][ T5618] team0: Port device team_slave_0 added [ 82.022079][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.032307][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.051839][ T5628] team0: Port device team_slave_0 added [ 82.058655][ T5618] team0: Port device team_slave_1 added [ 82.075343][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.106454][ T5628] team0: Port device team_slave_1 added [ 82.144225][ T5617] team0: Port device team_slave_0 added [ 82.176893][ T5624] hsr_slave_0: entered promiscuous mode [ 82.179970][ T5624] hsr_slave_1: entered promiscuous mode [ 82.189066][ T5631] team0: Port device team_slave_0 added [ 82.195860][ T5617] team0: Port device team_slave_1 added [ 82.221918][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.221955][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.221982][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.229557][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.229571][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.229597][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.232528][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.232557][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.232623][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.242228][ T5631] team0: Port device team_slave_1 added [ 82.380555][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.380713][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.380793][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.388523][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.388562][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.388641][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.485622][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.485665][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.485692][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.552251][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.552287][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.552331][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.628808][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.628851][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.628894][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.715268][ T5617] hsr_slave_0: entered promiscuous mode [ 82.719915][ T5617] hsr_slave_1: entered promiscuous mode [ 82.721577][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 82.721659][ T5617] Cannot create hsr debugfs directory [ 82.744328][ T5618] hsr_slave_0: entered promiscuous mode [ 82.748372][ T5618] hsr_slave_1: entered promiscuous mode [ 82.750128][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 82.750148][ T5618] Cannot create hsr debugfs directory [ 82.780349][ T5628] hsr_slave_0: entered promiscuous mode [ 82.782830][ T5628] hsr_slave_1: entered promiscuous mode [ 82.784890][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 82.784939][ T5628] Cannot create hsr debugfs directory [ 82.853389][ T5631] hsr_slave_0: entered promiscuous mode [ 82.856827][ T5631] hsr_slave_1: entered promiscuous mode [ 82.859007][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 82.859049][ T5631] Cannot create hsr debugfs directory [ 83.317574][ T5624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.329624][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.335284][ T5624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.348519][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.371033][ T5624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.381666][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.397296][ T5619] Bluetooth: hci0: command tx timeout [ 83.412427][ T5624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.421498][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.476724][ T5619] Bluetooth: hci1: command tx timeout [ 83.476739][ T52] Bluetooth: hci2: command tx timeout [ 83.493749][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.507033][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.513187][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.525848][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.537015][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.548246][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.556162][ T52] Bluetooth: hci3: command tx timeout [ 83.561696][ T52] Bluetooth: hci4: command tx timeout [ 83.575060][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.585243][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.666569][ T5617] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.681241][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.690345][ T5617] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.701578][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.715927][ T5617] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.728203][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.747822][ T5617] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.758226][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.851414][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.862606][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.879725][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.892746][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.898890][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.909496][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.913306][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.924560][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.983419][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.045785][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.055472][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.072684][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.082187][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.092473][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.100664][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.110760][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.122738][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.132233][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.141825][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.186545][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.187057][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.220455][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.220776][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.227582][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.260547][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.260639][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.302441][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.302659][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.378851][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.474938][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.502562][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.555553][ T766] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.555824][ T766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.592819][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.592966][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.618124][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.649493][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.649732][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.678115][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.701717][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.701942][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.811450][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.854107][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.854525][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.901090][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.901298][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.476571][ T52] Bluetooth: hci0: command tx timeout [ 85.556111][ T52] Bluetooth: hci2: command tx timeout [ 85.557200][ T52] Bluetooth: hci1: command tx timeout [ 85.636304][ T52] Bluetooth: hci4: command tx timeout [ 85.638582][ T52] Bluetooth: hci3: command tx timeout [ 85.731993][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.858696][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.953496][ T5624] veth0_vlan: entered promiscuous mode [ 86.033789][ T5624] veth1_vlan: entered promiscuous mode [ 86.101879][ T5618] veth0_vlan: entered promiscuous mode [ 86.111355][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.161223][ T5618] veth1_vlan: entered promiscuous mode [ 86.216620][ T5624] veth0_macvtap: entered promiscuous mode [ 86.229008][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.240199][ T5624] veth1_macvtap: entered promiscuous mode [ 86.288021][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.334652][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.352461][ T5618] veth0_macvtap: entered promiscuous mode [ 86.368126][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.402293][ T5628] veth0_vlan: entered promiscuous mode [ 86.415522][ T5618] veth1_macvtap: entered promiscuous mode [ 86.437925][ T27] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.439663][ T27] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.439799][ T27] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.439905][ T27] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.482382][ T5628] veth1_vlan: entered promiscuous mode [ 86.563581][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.619284][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.690366][ T5631] veth0_vlan: entered promiscuous mode [ 86.700474][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.700525][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.707208][ T5628] veth0_macvtap: entered promiscuous mode [ 86.737535][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.800843][ T5628] veth1_macvtap: entered promiscuous mode [ 86.810698][ T5631] veth1_vlan: entered promiscuous mode [ 86.899975][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.900017][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.953230][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.990096][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.990436][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.990539][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.037765][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.102661][ T5624] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.106895][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.107028][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.107125][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.107226][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.110963][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.111007][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.208378][ T5617] veth0_vlan: entered promiscuous mode [ 87.278986][ T5617] veth1_vlan: entered promiscuous mode [ 87.292450][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.292497][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.310727][ T5631] veth0_macvtap: entered promiscuous mode [ 87.342492][ T5631] veth1_macvtap: entered promiscuous mode [ 87.557534][ T5619] Bluetooth: hci0: command tx timeout [ 88.593553][ T5619] Bluetooth: hci1: command tx timeout [ 88.593607][ T5619] Bluetooth: hci2: command tx timeout [ 88.593695][ T5619] Bluetooth: hci3: command tx timeout [ 88.593723][ T5619] Bluetooth: hci4: command tx timeout [ 88.846745][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.855260][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.884142][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.895095][ T5617] veth0_macvtap: entered promiscuous mode [ 88.946173][ T5617] veth1_macvtap: entered promiscuous mode [ 89.234759][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.290167][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.290211][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.473018][ T1169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.485795][ T1169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.570419][ T5818] Invalid ELF header magic: != ELF [ 89.733369][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.962186][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.987462][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.254709][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.433000][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.443164][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.496244][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.505123][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.052623][ T189] cfg80211: failed to load regulatory.db [ 92.097736][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.256980][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.257019][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.356847][ T5823] configfs-gadget.g1 gadget.0: HOST MAC 56:5c:82:90:f7:ba [ 92.369793][ T5823] configfs-gadget.g1 gadget.0: MAC 76:54:68:b9:52:2a [ 92.372483][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.372534][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.603983][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.604021][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.636437][ T27] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.657675][ T5727] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.818743][ T5727] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 92.839108][ T5727] usb 1-1: Dual-Role OTG device on HNP port [ 92.858653][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.920748][ T5727] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 92.985657][ T5727] rndis_host 1-1:1.2 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 56:5c:82:90:f7:ba [ 93.766193][ T5834] Invalid ELF header magic: != ELF [ 95.176638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 95.586289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 96.158835][ T5841] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 96.583640][ T5851] Invalid ELF header magic: != ELF [ 98.089385][ T5858] Invalid ELF header magic: != ELF [ 98.209308][ T5864] Invalid ELF header magic: != ELF [ 99.004255][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 100.296501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.898043][ T5881] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.958025][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 100.958083][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 100.958107][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.958119][ T52] Workqueue: hci2 hci_rx_work [ 100.958169][ T52] Call Trace: [ 100.958178][ T52] [ 100.958191][ T52] dump_stack_lvl+0xe8/0x150 [ 100.958250][ T52] sysfs_create_dir_ns+0x271/0x2a0 [ 100.958279][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 100.958307][ T52] ? do_raw_spin_unlock+0xf5/0x200 [ 100.958340][ T52] kobject_add_internal+0x622/0xcd0 [ 100.958371][ T52] kobject_add+0x163/0x240 [ 100.958398][ T52] ? __pfx_kobject_add+0x10/0x10 [ 100.958426][ T52] ? get_device_parent+0x366/0x3a0 [ 100.958453][ T52] device_add+0x3fa/0xb80 [ 100.958477][ T52] hci_conn_add_sysfs+0xd5/0x210 [ 100.958510][ T52] le_conn_complete_evt+0xfb7/0x1690 [ 100.958542][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 100.958567][ T52] ? __mutex_unlock_slowpath+0x731/0x900 [ 100.958604][ T52] ? skb_pull_data+0xf0/0x200 [ 100.958630][ T52] hci_le_enh_conn_complete_evt+0x189/0x490 [ 100.958653][ T52] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 100.958680][ T52] hci_event_packet+0x67a/0xf10 [ 100.958718][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 100.958762][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 100.958797][ T52] ? audit_update_watch+0x2a0/0xee0 [ 100.958827][ T52] ? hci_send_to_monitor+0xe2/0x590 [ 100.958859][ T52] hci_rx_work+0x3ee/0x1020 [ 100.958914][ T52] ? process_scheduled_works+0x97e/0x1630 [ 100.958953][ T52] process_scheduled_works+0xc4e/0x1630 [ 100.959008][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.959040][ T52] ? assign_work+0x3cf/0x5d0 [ 100.959087][ T52] worker_thread+0xa47/0xfb0 [ 100.959141][ T52] kthread+0x388/0x470 [ 100.959162][ T52] ? __pfx_worker_thread+0x10/0x10 [ 100.959187][ T52] ? __pfx_kthread+0x10/0x10 [ 100.959218][ T52] ret_from_fork+0x514/0xb70 [ 100.959254][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 100.959286][ T52] ? __switch_to+0xc89/0x1420 [ 100.959318][ T52] ? __pfx_kthread+0x10/0x10 [ 100.959339][ T52] ret_from_fork_asm+0x1a/0x30 [ 100.959388][ T52] [ 100.959578][ T52] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 100.959620][ T52] Bluetooth: hci2: failed to register connection device [ 101.512139][ T5892] fuse: Bad value for 'fd' [ 101.629051][ T5897] syz.3.11 uses obsolete (PF_INET,SOCK_PACKET) [ 101.837104][ T5904] netlink: 44 bytes leftover after parsing attributes in process `syz.0.22'. [ 103.316206][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.316684][ T5882] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 103.328422][ T5882] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 103.863091][ T5882] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 103.871090][ T5882] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.872491][ T5882] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.893724][ T5882] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.904524][ T5882] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.904623][ T5882] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.922874][ T5882] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.940476][ T5882] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.949569][ T5882] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.949687][ T5882] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.970891][ T5882] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.987570][ T5882] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 103.987694][ T5882] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 104.006368][ T5882] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 104.871430][ T5965] Invalid ELF header magic: != ELF [ 105.406246][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.526244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #180!!! [ 105.715979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 105.876278][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.956061][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.962299][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.036315][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 106.319271][ T5978] Invalid ELF header magic: != ELF [ 107.477119][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.076112][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.076169][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.076525][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.118368][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 108.219444][ T5989] netlink: 84 bytes leftover after parsing attributes in process `syz.0.35'. [ 108.295445][ T5989] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.341299][ T5989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.375690][ T5989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.496986][ T5996] netlink: 'syz.4.36': attribute type 1 has an invalid length. [ 108.505626][ T189] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.676843][ T189] usb 3-1: Using ep0 maxpacket: 32 [ 108.684073][ T189] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 108.705418][ T189] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 108.705477][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.742794][ T5996] loop4: detected capacity change from 0 to 64 [ 108.767201][ T189] usb 3-1: config 0 descriptor?? [ 109.034425][ T5996] vlan2: entered promiscuous mode [ 109.034481][ T5996] bridge0: entered promiscuous mode [ 109.068457][ T31] usb 3-1: USB disconnect, device number 2 [ 109.502265][ T6009] netlink: 44 bytes leftover after parsing attributes in process `syz.0.37'. [ 110.154587][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.155264][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.160721][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.212294][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.587547][ T6021] Invalid ELF header magic: != ELF [ 112.198431][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.495993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.525980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.575991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.615983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.635992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 115.358118][ T6049] netlink: 84 bytes leftover after parsing attributes in process `syz.2.47'. [ 115.370920][ T6043] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 115.580188][ T6043] batman_adv: batadv0: Adding interface: gretap1 [ 115.580241][ T6043] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.599110][ T6043] batman_adv: batadv0: Interface activated: gretap1 [ 115.621832][ T6049] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.386254][ T189] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 116.433914][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.443489][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.498992][ T6057] Zero length message leads to an empty skb [ 116.569829][ T189] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 116.586196][ T189] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 116.586239][ T189] usb 3-1: config 0 has no interface number 0 [ 116.586284][ T189] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 116.659386][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.659436][ T189] usb 3-1: Product: syz [ 116.659473][ T189] usb 3-1: Manufacturer: syz [ 116.659494][ T189] usb 3-1: SerialNumber: syz [ 116.738480][ T189] usb 3-1: config 0 descriptor?? [ 116.797838][ T6049] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.930807][ T6064] Invalid ELF header magic: != ELF [ 117.400784][ T189] plusb 3-1:0.231 usb2: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 86:1c:d9:18:7a:11 [ 117.536591][ T189] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.622241][ T9] usb 3-1: USB disconnect, device number 3 [ 117.654920][ T9] plusb 3-1:0.231 usb2: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 117.716342][ T189] usb 5-1: Using ep0 maxpacket: 32 [ 117.730944][ T189] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.731012][ T189] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 117.749301][ T189] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 117.749340][ T189] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 117.749381][ T189] usb 5-1: config 14 has no interface number 0 [ 117.749403][ T189] usb 5-1: config 14 has no interface number 1 [ 117.749468][ T189] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 117.749498][ T189] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 117.749535][ T189] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 117.749567][ T189] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 117.749598][ T189] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 117.749628][ T189] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.749658][ T189] usb 5-1: config 14 interface 57 has no altsetting 0 [ 117.749680][ T189] usb 5-1: config 14 interface 228 has no altsetting 0 [ 117.819914][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.819945][ T189] usb 5-1: Product: syz [ 117.819961][ T189] usb 5-1: Manufacturer: syz [ 117.819977][ T189] usb 5-1: SerialNumber: syz [ 118.347701][ T6082] Invalid ELF header magic: != ELF [ 118.853562][ T189] legousbtower 5-1:14.57: interrupt endpoints not found [ 118.912484][ T189] legousbtower 5-1:14.228: get version request failed: -71 [ 118.912693][ T189] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 118.951305][ T189] usb 5-1: USB disconnect, device number 2 [ 119.284805][ T6095] netlink: 44 bytes leftover after parsing attributes in process `syz.3.58'. [ 119.796335][ T5727] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.946048][ T5727] usb 3-1: Using ep0 maxpacket: 32 [ 119.947166][ T5727] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 119.949802][ T5727] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.949857][ T5727] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.949935][ T5727] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.127278][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.127367][ T5727] usb 3-1: Product: syz [ 120.127409][ T5727] usb 3-1: Manufacturer: syz [ 120.127428][ T5727] usb 3-1: SerialNumber: syz [ 120.169824][ T5727] usb 3-1: config 0 descriptor?? [ 120.192359][ T5727] gs_usb 3-1:0.0: Required endpoints not found [ 122.536374][ T6120] tmpfs: Unknown parameter 'obj_user' [ 122.632432][ T6123] netlink: 84 bytes leftover after parsing attributes in process `syz.0.67'. [ 122.665068][ T6123] ieee802154 phy0 wpan0: encryption failed: -22 [ 122.676033][ T6123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.688254][ T6123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.821622][ T6141] Invalid ELF header magic: != ELF [ 124.595055][ T31] usb 3-1: USB disconnect, device number 4 [ 125.167283][ T6153] Invalid ELF header magic: != ELF [ 126.026901][ T6158] netlink: 44 bytes leftover after parsing attributes in process `syz.2.71'. [ 126.116515][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.307172][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 126.336561][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.344613][ T31] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=44.07 [ 126.395185][ T31] usb 2-1: config 16 has an invalid interface descriptor of length 8, skipping [ 126.395258][ T31] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 126.395291][ T31] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 126.444776][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.444936][ T31] usb 2-1: Product: syz [ 126.447234][ T31] usb 2-1: Manufacturer: syz [ 126.447393][ T31] usb 2-1: SerialNumber: syz [ 126.957757][ T6160] netlink: 'syz.0.72': attribute type 1 has an invalid length. [ 127.649929][ T6163] loop0: detected capacity change from 0 to 64 [ 127.786409][ T6160] vlan2: entered promiscuous mode [ 127.786477][ T6160] bridge0: entered promiscuous mode [ 128.702524][ T31] usb 2-1: USB disconnect, device number 2 [ 128.933436][ T6176] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 128.948813][ T6176] batman_adv: batadv0: Adding interface: gretap1 [ 128.960894][ T6176] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.961000][ T6176] batman_adv: batadv0: Interface activated: gretap1 [ 129.262458][ T6188] netlink: 84 bytes leftover after parsing attributes in process `syz.0.79'. [ 129.345453][ T6188] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.366729][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.375919][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.834011][ T6206] Invalid ELF header magic: != ELF [ 134.244268][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.244362][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.944485][ T6227] syzkaller1: entered promiscuous mode [ 134.944536][ T6227] syzkaller1: entered allmulticast mode [ 137.621020][ T6258] netlink: 84 bytes leftover after parsing attributes in process `syz.4.95'. [ 137.658575][ T6258] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.556052][ T5727] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 138.740049][ T5727] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 138.750275][ T5727] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 138.750331][ T5727] usb 5-1: config 0 has no interface number 0 [ 138.750361][ T5727] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 138.778787][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.778868][ T5727] usb 5-1: Product: syz [ 138.778903][ T5727] usb 5-1: Manufacturer: syz [ 138.778921][ T5727] usb 5-1: SerialNumber: syz [ 138.818514][ T5727] usb 5-1: config 0 descriptor?? [ 138.830893][ T6258] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 139.219575][ T5727] plusb 5-1:0.231 usb2: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 1a:a0:bf:3c:70:6d [ 139.248829][ T5727] usb 5-1: USB disconnect, device number 3 [ 139.261912][ T5727] plusb 5-1:0.231 usb2: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 139.872489][ T5772] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 141.091003][ T5772] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 141.111413][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.111457][ T5772] usb 2-1: Product: syz [ 141.111491][ T5772] usb 2-1: Manufacturer: syz [ 141.111506][ T5772] usb 2-1: SerialNumber: syz [ 141.153062][ T5772] usb 2-1: config 0 descriptor?? [ 142.968188][ T5772] usb 2-1: USB disconnect, device number 3 [ 143.468619][ T5772] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.634005][ T5772] usb 2-1: Using ep0 maxpacket: 32 [ 143.644062][ T5772] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 143.658507][ T5772] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 143.658552][ T5772] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 143.658577][ T5772] usb 2-1: config 0 interface 0 has no altsetting 0 [ 143.671537][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.671634][ T5772] usb 2-1: Product: syz [ 143.671692][ T5772] usb 2-1: Manufacturer: syz [ 143.671739][ T5772] usb 2-1: SerialNumber: syz [ 143.743268][ T5772] usb 2-1: config 0 descriptor?? [ 144.181464][ T5772] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 144.181542][ T5772] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 144.391674][ T5772] usb 2-1: USB disconnect, device number 4 [ 144.981255][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.116'. [ 145.476675][ T5743] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.627616][ T5743] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 145.697998][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.698038][ T5743] usb 2-1: Product: syz [ 145.698081][ T5743] usb 2-1: Manufacturer: syz [ 145.698100][ T5743] usb 2-1: SerialNumber: syz [ 146.457712][ T5743] usb 2-1: config 0 descriptor?? [ 147.816546][ T6322] 9p: Bad value for 'wfdno' [ 150.016356][ T5743] usb 2-1: USB disconnect, device number 5 [ 150.453239][ T6355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.127'. [ 150.836644][ T5625] Bluetooth: hci4: command 0x0c1a tx timeout [ 150.849628][ T6362] Bluetooth: MGMT ver 1.23 [ 156.293907][ T6391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.139'. [ 157.557834][ T6397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.141'. [ 157.863907][ T6399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.142'. [ 157.938020][ T6399] vlan2: entered promiscuous mode [ 157.938118][ T6399] syz_tun: entered promiscuous mode [ 159.181118][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 159.234535][ T6417] vlan3: entered promiscuous mode [ 159.234582][ T6417] syz_tun: entered promiscuous mode [ 159.886502][ C1] [ 159.888914][ C1] ================================ [ 159.894048][ C1] WARNING: inconsistent lock state [ 159.899183][ C1] syzkaller #0 Not tainted [ 159.903621][ C1] -------------------------------- [ 159.908745][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 159.915643][ C1] syz.1.151/6419 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 159.921907][ C1] ffff88807ca06260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 159.931288][ C1] {SOFTIRQ-ON-W} state was registered at: [ 159.937033][ C1] lock_acquire+0x115/0x350 [ 159.941656][ C1] lock_sock_nested+0x41/0x100 [ 159.946539][ C1] x25_bind+0x209/0x450 [ 159.950813][ C1] __sys_bind+0x2e3/0x410 [ 159.955271][ C1] __x64_sys_bind+0x7a/0x90 [ 159.959902][ C1] do_syscall_64+0x166/0x510 [ 159.964614][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.970618][ C1] irq event stamp: 47158 [ 159.974898][ C1] hardirqs last enabled at (47158): [] __local_bh_enable_ip+0xd0/0x130 [ 159.984820][ C1] hardirqs last disabled at (47157): [] __local_bh_enable_ip+0x71/0x130 [ 159.994745][ C1] softirqs last enabled at (47068): [] __irq_exit_rcu+0xca/0x220 [ 160.004144][ C1] softirqs last disabled at (47113): [] __irq_exit_rcu+0xca/0x220 [ 160.013560][ C1] [ 160.013560][ C1] other info that might help us debug this: [ 160.021642][ C1] Possible unsafe locking scenario: [ 160.021642][ C1] [ 160.029120][ C1] CPU0 [ 160.032418][ C1] ---- [ 160.035709][ C1] lock(sk_lock-AF_X25); [ 160.040069][ C1] [ 160.043540][ C1] lock(sk_lock-AF_X25); [ 160.048070][ C1] [ 160.048070][ C1] *** DEADLOCK *** [ 160.048070][ C1] [ 160.056234][ C1] locks held by syz.1.151/6419: 1, last CPU#1: [ 160.062411][ C1] #0: ffffffff8eb5c820 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 160.072465][ C1] [ 160.072465][ C1] stack backtrace: [ 160.078385][ C1] CPU: 1 UID: 0 PID: 6419 Comm: syz.1.151 Not tainted syzkaller #0 PREEMPT(full) [ 160.087604][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.097684][ C1] Call Trace: [ 160.100989][ C1] [ 160.103858][ C1] dump_stack_lvl+0xe8/0x150 [ 160.108500][ C1] print_usage_bug+0x28b/0x2e0 [ 160.113300][ C1] valid_state+0xbe/0xf0 [ 160.117573][ C1] mark_lock_irq+0x36/0x380 [ 160.122148][ C1] mark_lock+0x117/0x190 [ 160.126419][ C1] __lock_acquire+0x6b7/0x2e50 [ 160.131234][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 160.136560][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 160.141621][ C1] ? lock_acquire+0x115/0x350 [ 160.146325][ C1] lock_acquire+0x115/0x350 [ 160.150849][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 160.155987][ C1] ? x25_kill_by_neigh+0x103/0x250 [ 160.161150][ C1] lock_sock_nested+0x41/0x100 [ 160.165954][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 160.171117][ C1] x25_kill_by_neigh+0x10d/0x250 [ 160.176089][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 160.181495][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 160.186984][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 160.192471][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 160.198395][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 160.203806][ C1] lapbeth_napi_poll+0x42/0x90 [ 160.208607][ C1] __napi_poll+0xaa/0x330 [ 160.212995][ C1] net_rx_action+0x61d/0xf50 [ 160.217627][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 160.222781][ C1] ? ktime_get+0x1f5/0x220 [ 160.227233][ C1] ? lapic_next_event+0x11/0x20 [ 160.232126][ C1] handle_softirqs+0x225/0x840 [ 160.236925][ C1] ? __irq_exit_rcu+0xca/0x220 [ 160.241723][ C1] __irq_exit_rcu+0xca/0x220 [ 160.246435][ C1] irq_exit_rcu+0x9/0x30 [ 160.250713][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 160.256413][ C1] [ 160.259368][ C1] [ 160.262320][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 160.268325][ C1] RIP: 0010:finish_task_switch+0x417/0xc60 [ 160.274170][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 d5 06 00 00 49 83 c4 48 4c 89 e7 e8 33 c4 47 0a e8 9e e4 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 160.293823][ C1] RSP: 0018:ffffc9000da5f260 EFLAGS: 00000202 [ 160.299921][ C1] RAX: 000000000000b807 RBX: ffff8880b873ca60 RCX: 0000000080000001 [ 160.307927][ C1] RDX: 0000000000000000 RSI: ffffffff8e25543f RDI: ffffffff8c4c8980 [ 160.315938][ C1] RBP: ffffc9000da5f2b0 R08: ffffffff9058fd7f R09: 1ffffffff20b1faf [ 160.323952][ C1] R10: dffffc0000000000 R11: fffffbfff20b1fb0 R12: ffff88803040ddc0 [ 160.331948][ C1] R13: ffff88803040ddc0 R14: dffffc0000000000 R15: 1ffff110170e794c [ 160.339963][ C1] __schedule+0x1b32/0x59a0 [ 160.344523][ C1] ? __pfx___schedule+0x10/0x10 [ 160.349415][ C1] ? lock_acquire+0x115/0x350 [ 160.354126][ C1] ? schedule+0x90/0x2b0 [ 160.358414][ C1] schedule+0x164/0x2b0 [ 160.362607][ C1] schedule_timeout+0xc0/0x2c0 [ 160.367406][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 160.372821][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 160.377959][ C1] unix_wait_for_peer+0x1f5/0x2f0 [ 160.382989][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 160.388555][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 160.394639][ C1] ? apparmor_unix_may_send+0x2f5/0x340 [ 160.400197][ C1] unix_dgram_sendmsg+0xaf4/0x17b0 [ 160.405340][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 160.410927][ C1] ? aa_sock_msg_perm+0xda/0x1b0 [ 160.415874][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 160.421443][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 160.426490][ C1] ____sys_sendmsg+0x54e/0x850 [ 160.431285][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.436600][ C1] ? import_iovec+0x73/0xa0 [ 160.441131][ C1] ___sys_sendmsg+0x2a5/0x360 [ 160.445817][ C1] ? __lock_acquire+0x6df/0x2e50 [ 160.450757][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.455979][ C1] ? __lock_acquire+0x6df/0x2e50 [ 160.460953][ C1] __sys_sendmmsg+0x273/0x4d0 [ 160.465643][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 160.470846][ C1] ? do_futex+0x458/0x4e0 [ 160.475183][ C1] ? __sys_connect+0x3ae/0x460 [ 160.479983][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 160.485188][ C1] ? rcu_is_watching+0x15/0xb0 [ 160.489960][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 160.494837][ C1] do_syscall_64+0x166/0x510 [ 160.499485][ C1] ? trace_irq_disable+0x3b/0x140 [ 160.504513][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.510585][ C1] ? clear_bhb_loop+0x70/0xc0 [ 160.515271][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.521189][ C1] RIP: 0033:0x7fa86c39e0d9 [ 160.525622][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.545225][ C1] RSP: 002b:00007fa86d19c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 160.553645][ C1] RAX: ffffffffffffffda RBX: 00007fa86c625fa0 RCX: 00007fa86c39e0d9 [ 160.561617][ C1] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000006 [ 160.569586][ C1] RBP: 00007fa86c435024 R08: 0000000000000000 R09: 0000000000000000 [ 160.577563][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.585543][ C1] R13: 00007fa86c626038 R14: 00007fa86c625fa0 R15: 00007fff05bd2b28 [ 160.593561][ C1] [ 160.596696][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3829 [ 160.596732][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6419, name: syz.1.151 [ 160.596755][ C1] preempt_count: 101, expected: 0 [ 160.596767][ C1] RCU nest depth: 1, expected: 0 [ 160.596806][ C1] INFO: lockdep is turned off. [ 160.596828][ C1] Preemption disabled at: [ 160.596848][ C1] [] schedule+0x15d/0x2b0 [ 160.596984][ C1] CPU: 1 UID: 0 PID: 6419 Comm: syz.1.151 Not tainted syzkaller #0 PREEMPT(full) [ 160.597037][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.597069][ C1] Call Trace: [ 160.597098][ C1] [ 160.597119][ C1] dump_stack_lvl+0xe8/0x150 [ 160.597194][ C1] __might_resched+0x378/0x4d0 [ 160.597286][ C1] ? schedule+0x15d/0x2b0 [ 160.597360][ C1] lock_sock_nested+0x56/0x100 [ 160.597442][ C1] x25_kill_by_neigh+0x10d/0x250 [ 160.597504][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 160.597569][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 160.597639][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 160.597702][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 160.597780][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 160.597858][ C1] lapbeth_napi_poll+0x42/0x90 [ 160.597926][ C1] __napi_poll+0xaa/0x330 [ 160.597998][ C1] net_rx_action+0x61d/0xf50 [ 160.598087][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 160.598179][ C1] ? ktime_get+0x1f5/0x220 [ 160.598354][ C1] ? lapic_next_event+0x11/0x20 [ 160.598433][ C1] handle_softirqs+0x225/0x840 [ 160.598506][ C1] ? __irq_exit_rcu+0xca/0x220 [ 160.598584][ C1] __irq_exit_rcu+0xca/0x220 [ 160.598648][ C1] irq_exit_rcu+0x9/0x30 [ 160.598709][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 160.598777][ C1] [ 160.598797][ C1] [ 160.598817][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 160.598878][ C1] RIP: 0010:finish_task_switch+0x417/0xc60 [ 160.598950][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 d5 06 00 00 49 83 c4 48 4c 89 e7 e8 33 c4 47 0a e8 9e e4 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 160.598992][ C1] RSP: 0018:ffffc9000da5f260 EFLAGS: 00000202 [ 160.599043][ C1] RAX: 000000000000b807 RBX: ffff8880b873ca60 RCX: 0000000080000001 [ 160.599077][ C1] RDX: 0000000000000000 RSI: ffffffff8e25543f RDI: ffffffff8c4c8980 [ 160.599118][ C1] RBP: ffffc9000da5f2b0 R08: ffffffff9058fd7f R09: 1ffffffff20b1faf [ 160.599159][ C1] R10: dffffc0000000000 R11: fffffbfff20b1fb0 R12: ffff88803040ddc0 [ 160.599212][ C1] R13: ffff88803040ddc0 R14: dffffc0000000000 R15: 1ffff110170e794c [ 160.599301][ C1] __schedule+0x1b32/0x59a0 [ 160.599408][ C1] ? __pfx___schedule+0x10/0x10 [ 160.599478][ C1] ? lock_acquire+0x115/0x350 [ 160.599540][ C1] ? schedule+0x90/0x2b0 [ 160.599616][ C1] schedule+0x164/0x2b0 [ 160.599703][ C1] schedule_timeout+0xc0/0x2c0 [ 160.599783][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 160.599865][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 160.599939][ C1] unix_wait_for_peer+0x1f5/0x2f0 [ 160.600020][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 160.600093][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 160.600159][ C1] ? apparmor_unix_may_send+0x2f5/0x340 [ 160.600263][ C1] unix_dgram_sendmsg+0xaf4/0x17b0 [ 160.600374][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 160.600456][ C1] ? aa_sock_msg_perm+0xda/0x1b0 [ 160.600522][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 160.600595][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 160.600669][ C1] ____sys_sendmsg+0x54e/0x850 [ 160.600738][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.600795][ C1] ? import_iovec+0x73/0xa0 [ 160.600867][ C1] ___sys_sendmsg+0x2a5/0x360 [ 160.600912][ C1] ? __lock_acquire+0x6df/0x2e50 [ 160.600964][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.601023][ C1] ? __lock_acquire+0x6df/0x2e50 [ 160.601157][ C1] __sys_sendmmsg+0x273/0x4d0 [ 160.601225][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 160.601286][ C1] ? do_futex+0x458/0x4e0 [ 160.601362][ C1] ? __sys_connect+0x3ae/0x460 [ 160.601456][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 160.601519][ C1] ? rcu_is_watching+0x15/0xb0 [ 160.601590][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 160.601649][ C1] do_syscall_64+0x166/0x510 [ 160.601724][ C1] ? trace_irq_disable+0x3b/0x140 [ 160.601778][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.601831][ C1] ? clear_bhb_loop+0x70/0xc0 [ 160.601894][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.601952][ C1] RIP: 0033:0x7fa86c39e0d9 [ 160.601994][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.602036][ C1] RSP: 002b:00007fa86d19c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 160.602094][ C1] RAX: ffffffffffffffda RBX: 00007fa86c625fa0 RCX: 00007fa86c39e0d9 [ 160.602135][ C1] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000006 [ 160.602168][ C1] RBP: 00007fa86c435024 R08: 0000000000000000 R09: 0000000000000000 [ 160.602207][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.602247][ C1] R13: 00007fa86c626038 R14: 00007fa86c625fa0 R15: 00007fff05bd2b28 [ 160.602310][ C1] [ 161.720934][ T6425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.152'.