last executing test programs: 7.289913903s ago: executing program 4 (id=331): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './bus\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000380)={{&(0x7f0000715000/0x4000)=nil, 0x4000}}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{0x0}, {&(0x7f0000000040)=""/4, 0x4}], 0x2, 0x83, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000340)={0x62, @rand_addr=0x64010101, 0x4e21, 0x4, 'lc\x00', 0x9, 0x8001, 0x40}, 0x2c) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r6 = socket(0x10, 0x2, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000240)=""/24, &(0x7f0000000280)=0x18) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r7) shmctl$IPC_SET(0x0, 0x1, 0x0) fstat(r0, &(0x7f0000000100)) 5.165317278s ago: executing program 4 (id=352): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x120, 0x1f0, 0x2c0, 0x3a0, 0x2c0, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0x3a010000}, [@common=@hl={{0x28}, {0x2, 0x3}}, @common=@eui64={{0x28}}]}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [0xff000000], 'tunl0\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x120}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'wg1\x00', {0xff}, {0x7f}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @empty, [0x0, 0x0, 0xffffffff, 0xff], [0x0, 0xff, 0xff000000, 0xffffff00], 'nicvf0\x00', 'vlan0\x00', {0xff}, {}, 0x87, 0x1, 0x5, 0x42}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x6}, {0x0, 0x4, 0x4}, {0xffffffffffffffff, 0x12, 0x4}, 0x2020000, 0x80}}}, {{@ipv6={@loopback, @empty, [0x0, 0x0, 0xff000000], [], 'gretap0\x00', 'veth0_to_batadv\x00', {}, {}, 0x32}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x18, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 4.61617633s ago: executing program 0 (id=359): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='pids.current\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 4.299417059s ago: executing program 0 (id=362): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad", 0x1) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 4.15051198s ago: executing program 3 (id=364): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 3.777060923s ago: executing program 3 (id=366): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)}}], 0x2, 0x44008004) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) 3.721573775s ago: executing program 1 (id=367): write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x178, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x151, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0xe8, {0x5, 0x97, 0x5, "840713d363c6724d98bf35001c09bfc3ef576ef4cbdedd44f1719d86e7202598ad5ab2b4e5dff62ed61751909b8422ef7be7fa9aeee03cce1881434df3bc53402458604b55890de2298e22ae5eb55d3e14358d8172d3caffea4c3165a9936a26aa4560071601df38cfb687a86ed61c704879c02c575dcc5f792ca84bd70fc9a24035370ffe3e5d14541c8831eed97732a996891591391a05b51387596e4634cf9ec3255fc6c4d68b86c2b73f110f4dc0b014af75ddf00689ee90b8c538f8b8c339a9001075d96398a054919d1d2e964f97e1c3fa5f18c163f39db24915e7f31273264dbcc7"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x178}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) 3.610122931s ago: executing program 0 (id=368): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d0000", 0x6, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x40000, 0x3b) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 3.568974737s ago: executing program 1 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x31}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) 3.430039531s ago: executing program 3 (id=370): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x18000, 0x0, 0x0}, &(0x7f0000000340)=0x40) eventfd2(0xe2f4, 0x80801) 3.26101055s ago: executing program 1 (id=372): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) close(r4) 2.955055191s ago: executing program 2 (id=374): sched_setscheduler(0x0, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 2.612568779s ago: executing program 0 (id=375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) 2.602298481s ago: executing program 2 (id=376): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 2.345225909s ago: executing program 2 (id=377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.344520573s ago: executing program 0 (id=378): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r2, 0x16) 2.070203912s ago: executing program 2 (id=379): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8000000000000000}) 1.839069407s ago: executing program 2 (id=380): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)}}], 0x2, 0x44008004) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) 1.830259372s ago: executing program 3 (id=381): socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1.574203153s ago: executing program 4 (id=382): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="03", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) sendto$inet6(r0, &(0x7f0000000080)="d0", 0x1, 0x0, 0x0, 0x0) 1.490806529s ago: executing program 2 (id=383): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) r3 = openat$random(0xffffffffffffff9c, 0x0, 0x400, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {}, 0x1}, 0x18) connect$can_j1939(r4, &(0x7f0000000640)={0x1d, r5, 0x0, {0x0, 0x0, 0x1}, 0x1}, 0x18) sendfile(r4, r3, 0x0, 0x1000000000000a) 1.288320306s ago: executing program 4 (id=384): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5432, 0x0) 1.025964266s ago: executing program 4 (id=385): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d0000", 0x6, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x40000, 0x3b) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 890.101439ms ago: executing program 3 (id=386): sched_setscheduler(0x0, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 799.544284ms ago: executing program 0 (id=387): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'dummy0\x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d10402064d8c57ff202030109021b0001000000000904"], 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, 0x0, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002580)={&(0x7f00000000c0)=[{0x0, 0x4001, 0x0, 0x0}], 0x1}) 746.851858ms ago: executing program 3 (id=388): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f00000000c0)=0x117) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) r3 = syz_io_uring_setup(0x3200, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x22, 0x335}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff00000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e200", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r10 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a9}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r9, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r10, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 489.918433ms ago: executing program 1 (id=389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={0x0}, 0x18) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef) 213.912823ms ago: executing program 1 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 46.796496ms ago: executing program 4 (id=391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 0s ago: executing program 1 (id=392): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x509, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. [ 82.784852][ T5815] cgroup: Unknown subsys name 'net' [ 82.964919][ T5815] cgroup: Unknown subsys name 'cpuset' [ 82.976598][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.740803][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.614520][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.623557][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.632960][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.644262][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.655774][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.665092][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.671002][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.674409][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.691780][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.692513][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.702211][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.715947][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.727097][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.735635][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.746881][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.750314][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.755733][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.772518][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.773342][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.791556][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.799309][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.800710][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.810425][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.840184][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.855674][ T5139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.469352][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 88.608248][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.711909][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 88.915598][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.925104][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.933815][ T5845] bridge_slave_0: entered allmulticast mode [ 88.942710][ T5845] bridge_slave_0: entered promiscuous mode [ 88.959956][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.969117][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.976972][ T5845] bridge_slave_1: entered allmulticast mode [ 88.985300][ T5845] bridge_slave_1: entered promiscuous mode [ 89.033751][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 89.141366][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.174984][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.185521][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.194983][ T5843] bridge_slave_0: entered allmulticast mode [ 89.204406][ T5843] bridge_slave_0: entered promiscuous mode [ 89.215395][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.224271][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.233519][ T5843] bridge_slave_1: entered allmulticast mode [ 89.242553][ T5843] bridge_slave_1: entered promiscuous mode [ 89.263218][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.288019][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.298460][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.307865][ T5844] bridge_slave_0: entered allmulticast mode [ 89.317235][ T5844] bridge_slave_0: entered promiscuous mode [ 89.394719][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.405373][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.413151][ T5844] bridge_slave_1: entered allmulticast mode [ 89.422837][ T5844] bridge_slave_1: entered promiscuous mode [ 89.430955][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 89.448673][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.526223][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.561690][ T5845] team0: Port device team_slave_0 added [ 89.578578][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.593657][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.625833][ T5845] team0: Port device team_slave_1 added [ 89.678654][ T5843] team0: Port device team_slave_0 added [ 89.758637][ T5844] team0: Port device team_slave_0 added [ 89.767900][ T5843] team0: Port device team_slave_1 added [ 89.789561][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.800355][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.808724][ T5847] bridge_slave_0: entered allmulticast mode [ 89.818060][ T5847] bridge_slave_0: entered promiscuous mode [ 89.828834][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.838181][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.847149][ T5847] bridge_slave_1: entered allmulticast mode [ 89.855714][ T5847] bridge_slave_1: entered promiscuous mode [ 89.864170][ T5842] Bluetooth: hci1: command tx timeout [ 89.871137][ T55] Bluetooth: hci3: command tx timeout [ 89.871581][ T5842] Bluetooth: hci4: command tx timeout [ 89.888876][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.897622][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.931948][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.945864][ T5139] Bluetooth: hci0: command tx timeout [ 89.950145][ T5842] Bluetooth: hci2: command tx timeout [ 89.964997][ T5844] team0: Port device team_slave_1 added [ 90.004202][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.013105][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.046910][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.089904][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.098188][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.131213][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.163897][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.179269][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.218532][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.228593][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.255967][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.309355][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.317342][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.345722][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.367448][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.374791][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.404805][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.434882][ T5847] team0: Port device team_slave_0 added [ 90.444558][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.453292][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.461727][ T5846] bridge_slave_0: entered allmulticast mode [ 90.469422][ T5846] bridge_slave_0: entered promiscuous mode [ 90.479837][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.488578][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.497691][ T5846] bridge_slave_1: entered allmulticast mode [ 90.505888][ T5846] bridge_slave_1: entered promiscuous mode [ 90.539511][ T5847] team0: Port device team_slave_1 added [ 90.625681][ T5845] hsr_slave_0: entered promiscuous mode [ 90.633716][ T5845] hsr_slave_1: entered promiscuous mode [ 90.669654][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.679400][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.707464][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.726155][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.763680][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.771024][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.798774][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.827404][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.856855][ T5843] hsr_slave_0: entered promiscuous mode [ 90.865286][ T5843] hsr_slave_1: entered promiscuous mode [ 90.872342][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.880355][ T5843] Cannot create hsr debugfs directory [ 90.940822][ T5844] hsr_slave_0: entered promiscuous mode [ 90.948564][ T5844] hsr_slave_1: entered promiscuous mode [ 90.956274][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.963965][ T5844] Cannot create hsr debugfs directory [ 91.065281][ T5846] team0: Port device team_slave_0 added [ 91.090997][ T5847] hsr_slave_0: entered promiscuous mode [ 91.097485][ T5847] hsr_slave_1: entered promiscuous mode [ 91.104589][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.112470][ T5847] Cannot create hsr debugfs directory [ 91.122450][ T5846] team0: Port device team_slave_1 added [ 91.309958][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.319877][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.347491][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.386386][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.393634][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.420864][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.623899][ T5846] hsr_slave_0: entered promiscuous mode [ 91.633981][ T5846] hsr_slave_1: entered promiscuous mode [ 91.640516][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.648096][ T5846] Cannot create hsr debugfs directory [ 91.853237][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.867235][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.909782][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.942210][ T5842] Bluetooth: hci4: command tx timeout [ 91.942228][ T5139] Bluetooth: hci3: command tx timeout [ 91.947648][ T5842] Bluetooth: hci1: command tx timeout [ 91.971127][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.021422][ T5842] Bluetooth: hci2: command tx timeout [ 92.025467][ T5139] Bluetooth: hci0: command tx timeout [ 92.050569][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.068325][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.113425][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.127214][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.256935][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.284915][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.336152][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.360191][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.405925][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.483527][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.530632][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.546156][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.562558][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.577701][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.585440][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.624143][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.684185][ T3496] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.691469][ T3496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.738873][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.767787][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.801187][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.845064][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.853564][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.974352][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.997685][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.024100][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.031816][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.077072][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.084399][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.121660][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.134451][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.181543][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.189107][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.208794][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.227505][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.268913][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.276146][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.306906][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.315495][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.346805][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.354237][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.416376][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.442205][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.506968][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.525366][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.532720][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.567345][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.574663][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.604663][ T5845] veth0_vlan: entered promiscuous mode [ 93.639239][ T5845] veth1_vlan: entered promiscuous mode [ 93.695119][ T5843] veth0_vlan: entered promiscuous mode [ 93.738283][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.760952][ T5843] veth1_vlan: entered promiscuous mode [ 93.769970][ T5845] veth0_macvtap: entered promiscuous mode [ 93.825968][ T5845] veth1_macvtap: entered promiscuous mode [ 93.846685][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.897016][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.917074][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.966142][ T5843] veth0_macvtap: entered promiscuous mode [ 93.997367][ T5843] veth1_macvtap: entered promiscuous mode [ 94.008938][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.018341][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.028057][ T5139] Bluetooth: hci1: command tx timeout [ 94.030824][ T5139] Bluetooth: hci3: command tx timeout [ 94.034355][ T5842] Bluetooth: hci4: command tx timeout [ 94.047132][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.056584][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.077628][ T5847] veth0_vlan: entered promiscuous mode [ 94.099886][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.108493][ T5842] Bluetooth: hci2: command tx timeout [ 94.114041][ T5139] Bluetooth: hci0: command tx timeout [ 94.137900][ T5847] veth1_vlan: entered promiscuous mode [ 94.159024][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.174589][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.215004][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.224895][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.236842][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.247525][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.325275][ T5844] veth0_vlan: entered promiscuous mode [ 94.387723][ T5846] veth0_vlan: entered promiscuous mode [ 94.409631][ T5844] veth1_vlan: entered promiscuous mode [ 94.441057][ T5846] veth1_vlan: entered promiscuous mode [ 94.455108][ T5847] veth0_macvtap: entered promiscuous mode [ 94.504469][ T5847] veth1_macvtap: entered promiscuous mode [ 94.526319][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.539670][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.604060][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.652444][ T5846] veth0_macvtap: entered promiscuous mode [ 94.663003][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.672013][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.687887][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.693367][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.705532][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.709423][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.723727][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.727678][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.745646][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.784822][ T5846] veth1_macvtap: entered promiscuous mode [ 94.808109][ T5844] veth0_macvtap: entered promiscuous mode [ 94.863185][ T5844] veth1_macvtap: entered promiscuous mode [ 94.863757][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.905269][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.924631][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.927564][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.967253][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.994330][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.064738][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.100840][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.120524][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.140675][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.166188][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.214091][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.228151][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.238497][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.250409][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.260462][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.271424][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.453694][ T5893] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 95.602588][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.614747][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.685227][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.847876][ T10] usb 4-1: config 0 has no interfaces? [ 95.886901][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=57.3b [ 95.916384][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.037543][ T10] usb 4-1: Product: syz [ 96.130168][ T5842] Bluetooth: hci3: command tx timeout [ 96.136200][ T5842] Bluetooth: hci1: command tx timeout [ 96.142541][ T5139] Bluetooth: hci4: command tx timeout [ 96.190200][ T5842] Bluetooth: hci0: command tx timeout [ 96.193348][ T55] Bluetooth: hci2: command tx timeout [ 96.205276][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.213924][ T10] usb 4-1: Manufacturer: syz [ 96.220625][ T10] usb 4-1: SerialNumber: syz [ 96.227538][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.244633][ T10] usb 4-1: config 0 descriptor?? [ 96.568903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.578356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.876398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.955891][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.010995][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.080234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.090311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.117453][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.142625][ T3449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.157935][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.209867][ T47] cfg80211: failed to load regulatory.db [ 97.215149][ T3449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.410652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.670806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.860742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.900756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 98.022353][ T5915] program syz.2.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.040709][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 98.105467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.700272][ T47] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.878326][ T47] usb 2-1: config 0 has no interfaces? [ 98.894637][ T47] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=57.3b [ 98.907953][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.932022][ T5829] usb 4-1: USB disconnect, device number 2 [ 98.969051][ T47] usb 2-1: Product: syz [ 99.000923][ T47] usb 2-1: Manufacturer: syz [ 99.005689][ T47] usb 2-1: SerialNumber: syz [ 99.011790][ T95] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.127512][ T47] usb 2-1: config 0 descriptor?? [ 99.278931][ T95] usb 1-1: config 0 has no interfaces? [ 99.297588][ T95] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 99.307507][ T95] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.320950][ T95] usb 1-1: Product: syz [ 99.326323][ T95] usb 1-1: Manufacturer: syz [ 99.400540][ T95] usb 1-1: SerialNumber: syz [ 99.439114][ T95] usb 1-1: config 0 descriptor?? [ 100.388358][ T5829] IPVS: starting estimator thread 0... [ 100.490194][ T5928] IPVS: using max 30 ests per chain, 72000 per kthread [ 100.888483][ T5926] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.895127][ T5926] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.990716][ T5926] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.322152][ T5926] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.334856][ T5926] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.389917][ T5926] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.662708][ T5926] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.683599][ T5926] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.786439][ T5926] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.809262][ T5926] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 101.826194][ T5926] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 101.849386][ T5926] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 102.190211][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.236120][ T5926] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.252509][ T5926] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.292396][ T5890] usb 2-1: USB disconnect, device number 2 [ 102.387716][ T5926] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.569596][ T5938] fuse: Bad value for 'fd' [ 102.700422][ T5829] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.882266][ T5829] usb 3-1: config 0 has no interfaces? [ 102.983479][ T5829] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 103.013427][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.043760][ T5829] usb 3-1: Product: syz [ 103.057884][ T5829] usb 3-1: Manufacturer: syz [ 103.083340][ T5829] usb 3-1: SerialNumber: syz [ 103.110475][ T5829] usb 3-1: config 0 descriptor?? [ 103.126920][ T5890] usb 1-1: USB disconnect, device number 2 [ 103.390390][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.700901][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.898935][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.036039][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 104.081116][ T5933] vlan2: entered promiscuous mode [ 104.121893][ T5933] vlan2: entered allmulticast mode [ 104.127536][ T5933] hsr_slave_1: entered allmulticast mode [ 104.260502][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.261368][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.482750][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.780809][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.943055][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 106.201073][ T5890] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.275258][ T5829] usb 3-1: USB disconnect, device number 2 [ 106.340817][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.348485][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.386089][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 106.412163][ T5890] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 106.435272][ T5890] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 106.449609][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.458576][ T5890] usb 1-1: Product: syz [ 106.464410][ T5890] usb 1-1: Manufacturer: syz [ 106.469609][ T5890] usb 1-1: SerialNumber: syz [ 106.483790][ T5890] usb 1-1: config 0 descriptor?? [ 106.492571][ T6006] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 106.526994][ T5890] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 106.726340][ T95] usb 1-1: USB disconnect, device number 3 [ 107.026190][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 107.057697][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.489168][ T6013] syz.4.33 (6013): drop_caches: 2 [ 107.553542][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.860266][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.025321][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 108.218434][ T6037] pimreg: entered allmulticast mode [ 108.385401][ T6039] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 108.421388][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.517037][ T6041] binder: 6040:6041 ioctl c0306201 200000000700 returned -14 [ 108.731191][ T6043] veth3: entered promiscuous mode [ 110.226586][ T6071] bridge0: port 3(gretap0) entered blocking state [ 110.234928][ T5989] syz.3.29 (5989): drop_caches: 2 [ 110.254629][ T6071] bridge0: port 3(gretap0) entered disabled state [ 110.302424][ T6071] gretap0: entered allmulticast mode [ 110.350828][ T6071] gretap0: entered promiscuous mode [ 110.358016][ T6071] bridge0: port 3(gretap0) entered blocking state [ 110.367535][ T6071] bridge0: port 3(gretap0) entered forwarding state [ 111.538542][ T6086] capability: warning: `syz.2.65' uses 32-bit capabilities (legacy support in use) [ 111.575029][ T6088] delete_channel: no stack [ 111.615487][ T6088] delete_channel: no stack [ 112.337374][ T6109] process 'syz.1.75' launched './file1' with NULL argv: empty string added [ 113.407320][ T95] IPVS: starting estimator thread 0... [ 113.520140][ T6142] IPVS: using max 28 ests per chain, 67200 per kthread [ 114.106688][ T6149] syz.1.92 uses obsolete (PF_INET,SOCK_PACKET) [ 115.188996][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 115.253850][ T6165] vlan2: entered allmulticast mode [ 115.280407][ T6165] bond0: entered allmulticast mode [ 115.285975][ T6165] bond_slave_0: entered allmulticast mode [ 115.340294][ T6165] bond_slave_1: entered allmulticast mode [ 115.606612][ T6172] Zero length message leads to an empty skb [ 117.150320][ T5886] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 117.290370][ T5886] usb 2-1: device descriptor read/64, error -71 [ 117.572833][ T5886] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 117.720261][ T5886] usb 2-1: device descriptor read/64, error -71 [ 117.851411][ T5886] usb usb2-port1: attempt power cycle [ 118.243812][ T5886] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 118.284227][ T5886] usb 2-1: device descriptor read/8, error -71 [ 118.550132][ T5886] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 118.600887][ T5886] usb 2-1: device descriptor read/8, error -71 [ 118.717868][ T5886] usb usb2-port1: unable to enumerate USB device [ 120.308369][ T5842] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 121.778601][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.154'. [ 121.815587][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.154'. [ 121.886176][ T6303] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 121.930359][ T6303] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 124.063321][ T6347] binder: 6345:6347 ioctl c0306201 2000000001c0 returned -14 [ 127.630801][ T30] audit: type=1326 audit(1748189234.504:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.3.214" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1646d8e969 code=0x0 [ 127.925566][ T6455] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 127.934016][ T6455] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 127.971526][ T6455] vhci_hcd vhci_hcd.0: Device attached [ 128.070419][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 128.153429][ T6456] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 128.177910][ T12] vhci_hcd: stop threads [ 128.196044][ T12] vhci_hcd: release socket [ 128.217471][ T12] vhci_hcd: disconnect device [ 128.223208][ T5886] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 128.244755][ T5886] usb 37-1: enqueue for inactive port 0 [ 128.330482][ T5886] vhci_hcd: vhci_device speed not set [ 128.959084][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'. [ 129.159056][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.229'. [ 129.211582][ T6484] veth0_to_bond: entered allmulticast mode [ 129.404674][ T6488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.232'. [ 129.750055][ T6498] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 130.075625][ T5829] IPVS: starting estimator thread 0... [ 130.190390][ T6504] IPVS: using max 27 ests per chain, 64800 per kthread [ 130.730502][ T6522] capability: warning: `syz.0.246' uses deprecated v2 capabilities in a way that may be insecure [ 132.931617][ T6542] syz.1.252: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 132.991311][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.993823][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: syz.1.252 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 132.993858][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.993878][ T6542] Call Trace: [ 132.993891][ T6542] [ 132.993902][ T6542] dump_stack_lvl+0x189/0x250 [ 132.993956][ T6542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.993989][ T6542] ? __pfx__printk+0x10/0x10 [ 132.994012][ T6542] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 132.994036][ T6542] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 132.994062][ T6542] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 132.994089][ T6542] warn_alloc+0x214/0x310 [ 132.994131][ T6542] ? __pfx_warn_alloc+0x10/0x10 [ 132.994176][ T6542] ? __get_vm_area_node+0x28f/0x300 [ 132.994216][ T6542] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 132.994285][ T6542] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 132.994340][ T6542] vmalloc_user_noprof+0x74/0x80 [ 132.994373][ T6542] ? vb2_vmalloc_alloc+0xef/0x340 [ 132.994405][ T6542] vb2_vmalloc_alloc+0xef/0x340 [ 132.994438][ T6542] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 132.994473][ T6542] __vb2_queue_alloc+0x9bf/0x15a0 [ 132.994534][ T6542] vb2_core_reqbufs+0xc31/0x1420 [ 132.994587][ T6542] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 132.994615][ T6542] ? vb2_verify_memory_type+0x1fc/0x570 [ 132.994649][ T6542] ? vb2_reqbufs+0x3a9/0x630 [ 132.994688][ T6542] v4l2_m2m_ioctl_reqbufs+0x169/0x240 [ 132.994715][ T6542] __video_do_ioctl+0xc98/0xdb0 [ 132.994761][ T6542] ? __pfx___video_do_ioctl+0x10/0x10 [ 132.994824][ T6542] video_usercopy+0x86e/0x14f0 [ 132.994870][ T6542] ? __pfx___video_do_ioctl+0x10/0x10 [ 132.994903][ T6542] ? __pfx_video_usercopy+0x10/0x10 [ 132.994956][ T6542] ? __fget_files+0x3a0/0x420 [ 132.994992][ T6542] v4l2_ioctl+0x18d/0x1e0 [ 132.995025][ T6542] ? __pfx_v4l2_ioctl+0x10/0x10 [ 132.995057][ T6542] __se_sys_ioctl+0xf9/0x170 [ 132.995092][ T6542] do_syscall_64+0xf6/0x210 [ 132.995127][ T6542] ? clear_bhb_loop+0x60/0xb0 [ 132.995154][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.995177][ T6542] RIP: 0033:0x7f8def98e969 [ 132.995204][ T6542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.995224][ T6542] RSP: 002b:00007f8df07f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.995250][ T6542] RAX: ffffffffffffffda RBX: 00007f8defbb5fa0 RCX: 00007f8def98e969 [ 132.995268][ T6542] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 132.995283][ T6542] RBP: 00007f8defa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 132.995297][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.995318][ T6542] R13: 0000000000000000 R14: 00007f8defbb5fa0 R15: 00007f8defcdfa28 [ 132.995352][ T6542] [ 132.995366][ T6542] Mem-Info: [ 133.011690][ T6562] fuse: Invalid gid '00000000000000000003' [ 133.108652][ T6542] active_anon:7717 inactive_anon:0 isolated_anon:0 [ 133.108652][ T6542] active_file:1080 inactive_file:3299 isolated_file:0 [ 133.108652][ T6542] unevictable:768 dirty:110 writeback:0 [ 133.108652][ T6542] slab_reclaimable:9806 slab_unreclaimable:99130 [ 133.108652][ T6542] mapped:31754 shmem:3527 pagetables:999 [ 133.108652][ T6542] sec_pagetables:0 bounce:0 [ 133.108652][ T6542] kernel_misc_reclaimable:0 [ 133.108652][ T6542] free:1367221 free_pcp:594 free_cma:0 [ 133.290465][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.320072][ T6542] Node 0 active_anon:33512kB inactive_anon:0kB active_file:4320kB inactive_file:13052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129688kB dirty:440kB writeback:0kB shmem:15140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11060kB pagetables:4036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 133.546158][ T6542] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 133.626587][ T6542] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 133.669315][ T6542] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 133.684956][ T6542] Node 0 DMA32 free:1536388kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:38604kB inactive_anon:0kB active_file:4320kB inactive_file:12968kB unevictable:1536kB writepending:440kB present:3129332kB managed:2564108kB mlocked:0kB bounce:0kB free_pcp:1064kB local_pcp:560kB free_cma:0kB [ 133.813160][ T6542] lowmem_reserve[]: 0 0 0 0 0 [ 133.819614][ T6542] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 133.905916][ T6542] lowmem_reserve[]: 0 0 0 0 0 [ 133.911959][ T6542] Node 1 Normal free:3911080kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 133.976931][ T6542] lowmem_reserve[]: 0 0 0 0 0 [ 133.993731][ T6542] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 134.033510][ T6542] Node 0 DMA32: 7*4kB (E) 16*8kB (UME) 6*16kB (E) 35*32kB (UE) 66*64kB (UME) 80*128kB (UME) 67*256kB (M) 49*512kB (M) 27*1024kB (ME) 12*2048kB (ME) 346*4096kB (M) = 1527516kB [ 134.180361][ T6542] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 134.227688][ T6542] Node 1 Normal: 222*4kB (UME) 38*8kB (UME) 44*16kB (UME) 202*32kB (UME) 96*64kB (UME) 42*128kB (UME) 18*256kB (UM) 9*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3911080kB [ 134.307223][ T6542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.344422][ T6542] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.364279][ T6542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.389779][ T6542] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.440081][ T6542] 8625 total pagecache pages [ 134.460110][ T6542] 0 pages in swap cache [ 134.490570][ T6542] Free swap = 124996kB [ 134.532062][ T6542] Total swap = 124996kB [ 134.537006][ T6542] 2097051 pages RAM [ 134.557696][ T6574] could not allocate digest TFM handle crct10dif [ 134.584089][ T6542] 0 pages HighMem/MovableOnly [ 134.592916][ T6542] 424366 pages reserved [ 134.597979][ T6542] 0 pages cma reserved [ 138.927273][ T95] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 139.100098][ T95] usb 3-1: device descriptor read/64, error -71 [ 139.560300][ T95] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.710397][ T95] usb 3-1: device descriptor read/64, error -71 [ 139.852053][ T95] usb usb3-port1: attempt power cycle [ 140.220097][ T95] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.262007][ T95] usb 3-1: device descriptor read/8, error -71 [ 140.510416][ T95] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.562581][ T95] usb 3-1: device descriptor read/8, error -71 [ 140.692266][ T95] usb usb3-port1: unable to enumerate USB device [ 142.433584][ T6698] Cannot find del_set index 1 as target [ 142.442707][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.305'. [ 142.479880][ T6684] syz.4.304 (6684): drop_caches: 2 [ 142.512700][ T6685] syz.4.304 (6685): drop_caches: 2 [ 143.387287][ T6722] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.599219][ T6724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.320'. [ 144.024815][ T6732] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 145.147779][ T6758] netlink: 'syz.3.333': attribute type 10 has an invalid length. [ 145.190099][ T6758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.333'. [ 145.294439][ T6758] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 145.350601][ T6758] team0: Failed to send options change via netlink (err -105) [ 145.359365][ T6758] team0: Port device geneve0 added [ 147.048011][ T6798] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 147.097908][ T6798] Cannot find del_set index 0 as target [ 148.237211][ T6818] "syz.0.362" (6818) uses obsolete ecb(arc4) skcipher [ 149.143864][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.952787][ T6800] syz.4.352 (6800): drop_caches: 2 [ 151.570507][ T5829] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 151.740105][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 151.764290][ T5829] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.800820][ T5829] usb 1-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=7f.c5 [ 151.823122][ T5829] usb 1-1: New USB device strings: Mfr=242, Product=2, SerialNumber=3 [ 151.845220][ T5829] usb 1-1: Product: syz [ 151.855622][ T5829] usb 1-1: Manufacturer: syz [ 151.867981][ T5829] usb 1-1: SerialNumber: syz [ 151.893835][ T5829] usb 1-1: config 0 descriptor?? [ 151.921389][ T5829] usb 1-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 151.976703][ T5829] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 152.034640][ T5829] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 152.079602][ T5829] usb 1-1: media controller created [ 152.118053][ T6878] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN PTI [ 152.133346][ T6878] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 152.143984][ T6878] CPU: 0 UID: 0 PID: 6878 Comm: syz.0.387 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 152.158127][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.170074][ T6878] RIP: 0010:__mutex_lock+0x138/0xe80 [ 152.176976][ T6878] Code: a0 06 81 99 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 0d 0c 00 00 83 3d 16 0d 29 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 4c f3 c9 f6 4d 39 64 24 60 0f 85 7b 0b 00 [ 152.200960][ T6878] RSP: 0018:ffffc90003faf360 EFLAGS: 00010202 [ 152.207857][ T6878] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffffffff99810603 [ 152.217734][ T6878] RDX: ffff88802f181e00 RSI: ffffffff8d939088 RDI: 00000000000000c8 [ 152.226632][ T6878] RBP: ffffc90003faf4f8 R08: ffffc90003faf467 R09: 0000000000000000 [ 152.237791][ T6878] R10: ffffc90003faf440 R11: fffff520007f5e8d R12: 0000000000000068 [ 152.247789][ T6878] R13: dffffc0000000000 R14: ffff8880599ae158 R15: 0000000000000000 [ 152.257278][ T6878] FS: 00007fee8efe26c0(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 152.267749][ T6878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.275795][ T6878] CR2: 0000200000002580 CR3: 00000000322d2000 CR4: 00000000003526f0 [ 152.285585][ T6878] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.294927][ T6878] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.306147][ T6878] Call Trace: [ 152.311165][ T6878] [ 152.315083][ T6878] ? __mutex_lock+0x330/0xe80 [ 152.320889][ T6878] ? dvb_usbv2_generic_write+0x26/0x60 [ 152.328124][ T6878] ? __pfx___mutex_lock+0x10/0x10 [ 152.334823][ T6878] ? __pfx___mutex_lock+0x10/0x10 [ 152.342098][ T6878] ? __mutex_lock+0x330/0xe80 [ 152.347437][ T6878] dvb_usbv2_generic_write+0x26/0x60 [ 152.353562][ T6878] mxl111sf_ctrl_msg+0x16a/0x2e0 [ 152.359804][ T6878] mxl111sf_write_reg+0xa0/0x180 [ 152.365502][ T6878] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 152.372391][ T6878] ? __lock_acquire+0xaac/0xd20 [ 152.378803][ T6878] mxl111sf_i2c_xfer+0x461/0x4f00 [ 152.384522][ T6878] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 152.393372][ T6878] ? __lock_acquire+0xaac/0xd20 [ 152.399115][ T6878] ? __lock_acquire+0xaac/0xd20 [ 152.404414][ T6878] ? do_raw_spin_lock+0x121/0x290 [ 152.409574][ T6878] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 152.416828][ T6878] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.423056][ T6878] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 152.429420][ T6878] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 152.436962][ T6878] ? look_up_lock_class+0x74/0x170 [ 152.442747][ T6878] ? register_lock_class+0x51/0x320 [ 152.449055][ T6878] ? __lock_acquire+0xaac/0xd20 [ 152.454849][ T6878] ? do_raw_spin_lock+0x121/0x290 [ 152.462124][ T6878] __i2c_transfer+0x871/0x2170 [ 152.468731][ T6878] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.475339][ T6878] ? __pfx___i2c_transfer+0x10/0x10 [ 152.480937][ T6878] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 152.486972][ T6878] ? i2c_transfer+0x120/0x3a0 [ 152.491987][ T6878] i2c_transfer+0x25b/0x3a0 [ 152.497375][ T6878] ? __pfx_i2c_transfer+0x10/0x10 [ 152.503489][ T6878] ? _copy_from_user+0x94/0xb0 [ 152.509654][ T6878] i2cdev_ioctl_rdwr+0x460/0x740 [ 152.515255][ T6878] i2cdev_ioctl+0x64b/0x7f0 [ 152.521151][ T6878] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 152.527363][ T6878] ? __fget_files+0x3a0/0x420 [ 152.533320][ T6878] ? __fget_files+0x2a/0x420 [ 152.539631][ T6878] ? bpf_lsm_file_ioctl+0x9/0x20 [ 152.545494][ T6878] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 152.552168][ T6878] __se_sys_ioctl+0xf9/0x170 [ 152.556999][ T6878] do_syscall_64+0xf6/0x210 [ 152.562359][ T6878] ? clear_bhb_loop+0x60/0xb0 [ 152.568042][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.576275][ T6878] RIP: 0033:0x7fee8e18e969 [ 152.582381][ T6878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.607848][ T6878] RSP: 002b:00007fee8efe2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.618426][ T6878] RAX: ffffffffffffffda RBX: 00007fee8e3b5fa0 RCX: 00007fee8e18e969 [ 152.629042][ T6878] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000007 [ 152.639347][ T6878] RBP: 00007fee8e210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 152.649713][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.659753][ T6878] R13: 0000000000000000 R14: 00007fee8e3b5fa0 R15: 00007fee8e4dfa28 [ 152.668180][ T6878] [ 152.672234][ T6878] Modules linked in: [ 152.682056][ T6878] ---[ end trace 0000000000000000 ]--- [ 152.705735][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.714387][ T6878] RIP: 0010:__mutex_lock+0x138/0xe80 [ 152.751881][ T6878] Code: a0 06 81 99 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 0d 0c 00 00 83 3d 16 0d 29 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 4c f3 c9 f6 4d 39 64 24 60 0f 85 7b 0b 00 [ 152.847199][ T6878] RSP: 0018:ffffc90003faf360 EFLAGS: 00010202 [ 152.855625][ T6878] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffffffff99810603 [ 152.865466][ T5829] usb 1-1: selecting invalid altsetting 2 [ 152.879223][ T6878] RDX: ffff88802f181e00 RSI: ffffffff8d939088 RDI: 00000000000000c8 [ 152.882891][ T5829] set interface failed [ 152.911715][ T6878] RBP: ffffc90003faf4f8 R08: ffffc90003faf467 R09: 0000000000000000 [ 152.933806][ T6878] R10: ffffc90003faf440 R11: fffff520007f5e8d R12: 0000000000000068 [ 152.944494][ T6878] R13: dffffc0000000000 R14: ffff8880599ae158 R15: 0000000000000000 [ 152.953938][ T6878] FS: 00007fee8efe26c0(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 152.965901][ T6878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.975055][ T6878] CR2: 00007ff49c780178 CR3: 00000000322d2000 CR4: 00000000003526f0 [ 152.986448][ T6878] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.997913][ T6878] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.010909][ T6878] Kernel panic - not syncing: Fatal exception [ 153.028794][ T6878] Kernel Offset: disabled [ 153.033675][ T6878] Rebooting in 86400 seconds..