last executing test programs: 1m0.773422275s ago: executing program 0 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff0500140002000000050005000200000005000100"], 0x6c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) syz_io_uring_setup(0x3c20, &(0x7f0000000400)={0x0, 0x2050, 0x3380, 0x8003, 0xd2}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r8}) 58.085626577s ago: executing program 0 (id=91): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) faccessat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x20, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xd6, 0x8}}]}, 0x2c}}, 0x20004804) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x495, 0x0, &(0x7f0000000340), 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), 0xffffffffffffffff) 56.575847312s ago: executing program 0 (id=97): r0 = fsopen(0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x1a003, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x80) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r8 = socket(0x2c, 0x3, 0x0) bind$packet(r8, 0x0, 0x0) 53.95840851s ago: executing program 0 (id=101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000200)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f903, 0x0, '\x00', @string=0x0}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 51.796995033s ago: executing program 0 (id=107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) faccessat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x20, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xd6, 0x8}}]}, 0x2c}}, 0x20004804) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x495, 0x0, &(0x7f0000000340), 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), 0xffffffffffffffff) 48.346967782s ago: executing program 0 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0xfffffffc, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d, 0x65d, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x42) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) 33.109041409s ago: executing program 32 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0xfffffffc, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d, 0x65d, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x42) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) 13.074904926s ago: executing program 3 (id=192): syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r1) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) 11.146065973s ago: executing program 1 (id=196): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) writev(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') semget(0x0, 0x0, 0x2) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_SUBDINFO(r2, 0x80486402, &(0x7f0000000000)) 10.874156284s ago: executing program 1 (id=198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, 0x0, 0x24044884) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, 0x0, 0xa000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 9.170423242s ago: executing program 2 (id=201): r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$sock(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)}, 0x81) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) 8.0402901s ago: executing program 2 (id=202): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x20, 0xe, 0x8e, "590313a9379034069546ec47ee0015fda064cedbcef27a12f2f8decff81b00555c92c441b6dd06f54325ea63888fb477e4dd8e657d31aa2f51624a0b186d02342ebd57e8dbe0bdd826f74a45c9ff559b856a1498445212f89e2ab10f89d224a0054cfd632d9af3be294fa2347e3fd86296e80994b5f613830b51ab435b5039ad9660048ff6b85c5df4c1f12571be"}, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x2}}) 7.835301448s ago: executing program 1 (id=203): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) r6 = syz_open_dev$evdev(0x0, 0x0, 0x0) readv(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000040)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 7.745751095s ago: executing program 3 (id=204): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(0x0, 0x14) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x830200) mkdir(0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000200)=""/56, 0x38, 0x100000000) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x22, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000100)={{0x3, 0x8}, {0xe, 0xfc}, 0x7, 0x1, 0x9c}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r7 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r8 = fanotify_init(0xf00, 0x1) fanotify_mark(r8, 0x105, 0x40009975, r7, 0x0) fallocate(r6, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001e80), 0x100, 0x0) 7.077105097s ago: executing program 1 (id=205): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f00000004c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001dc0)={{0x1}, 0x0, &(0x7f0000001d80)='%pi6 \x00'}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mount(&(0x7f0000000140)=@filename='./file1\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f"], 0x48) 5.584915204s ago: executing program 4 (id=210): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x2}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) signalfd(r2, &(0x7f0000000080)={[0x211]}, 0x8) r3 = fsopen(&(0x7f0000000100)='ceph\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040f0401010308"], 0x7) setreuid(0xffffffffffffffff, 0xee01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000440), 0x18, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r7) close(r3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) 4.815392006s ago: executing program 4 (id=211): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) gettid() write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x1e8, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60d6069b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14477454}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x482bad72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a7ae7c7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b4c010b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x218c3e9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fe87bbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x100, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76667d2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1993cc0d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ed36283}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f040942}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b2519d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3312fcc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2659698f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e96df5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x383d85a4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}]}, {0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638f4cbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa2b30a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eacbc29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b67cb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a4e45a7}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3028862c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d42}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x439da543}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x681867ad}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b034fe5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73787787}]}]}]}, 0x1e8}}, 0x80) syz_open_procfs$namespace(0x0, 0x0) 4.473593306s ago: executing program 2 (id=212): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, 0x0, 0x24044884) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, 0x0, 0xa000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4.387673952s ago: executing program 3 (id=213): syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r1) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) 3.572015009s ago: executing program 4 (id=214): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) sendmmsg$inet(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) r7 = syz_open_dev$evdev(0x0, 0x0, 0x0) readv(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000040)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 2.695570755s ago: executing program 4 (id=215): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) epoll_create(0x3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmsg$SMC_PNETID_ADD(r3, 0x0, 0xc800) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ldst={0x3, 0x2, 0x2, 0x1, 0x1, 0x30, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.635297347s ago: executing program 2 (id=216): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000340), 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x14880, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 2.546142997s ago: executing program 3 (id=217): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) writev(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') semget(0x0, 0x0, 0x2) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_SUBDINFO(r2, 0x80486402, &(0x7f0000000000)) 2.313429497s ago: executing program 3 (id=218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = semget$private(0x0, 0x6, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x900) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x80000) unshare(0x2a020480) pselect6(0x40, &(0x7f0000004600)={0x2, 0x0, 0x8, 0x7, 0xffffffffffffffe8, 0x401, 0xffffffff, 0x6}, 0x0, &(0x7f0000004680)={0x9, 0x4, 0xd3, 0x5, 0x7, 0x400, 0x9, 0xa1}, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) bind$bt_hci(r2, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000080)=""/53) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 1.385281274s ago: executing program 2 (id=219): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x6, 0x9}, {0x4, 0x9}, {0x9, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x94) 1.225997385s ago: executing program 1 (id=220): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x2}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) signalfd(r2, &(0x7f0000000080)={[0x211]}, 0x8) r3 = fsopen(&(0x7f0000000100)='ceph\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040f0401010308"], 0x7) setreuid(0xffffffffffffffff, 0xee01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r7) close(r3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) 1.203312068s ago: executing program 3 (id=221): r0 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f000001ea00), 0x0, 0x4) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) 1.079895692s ago: executing program 4 (id=222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 582.661071ms ago: executing program 2 (id=223): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0xfffffff8}}, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 135.128808ms ago: executing program 1 (id=224): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) sendmmsg$inet(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) r7 = syz_open_dev$evdev(0x0, 0x0, 0x0) readv(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000040)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 0s ago: executing program 4 (id=225): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 83.657232][ T5824] cgroup: Unknown subsys name 'net' [ 83.832845][ T5824] cgroup: Unknown subsys name 'cpuset' [ 83.842599][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.470855][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.133478][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.148539][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.156319][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.164327][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.193491][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.201859][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.221435][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.229993][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.239800][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.268248][ T5158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.342315][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.342395][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.350841][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.359250][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.365702][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.371931][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.379754][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.387856][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.393223][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.400228][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.413761][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.426353][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.434014][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.443296][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.451099][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.076303][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 89.184053][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.208084][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 89.277703][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 89.401575][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.551185][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.559726][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.567200][ T5846] bridge_slave_0: entered allmulticast mode [ 89.577577][ T5846] bridge_slave_0: entered promiscuous mode [ 89.586790][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.594239][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.601617][ T5846] bridge_slave_1: entered allmulticast mode [ 89.609562][ T5846] bridge_slave_1: entered promiscuous mode [ 89.616858][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.624237][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.631724][ T5845] bridge_slave_0: entered allmulticast mode [ 89.639470][ T5845] bridge_slave_0: entered promiscuous mode [ 89.693857][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.701515][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.709276][ T5834] bridge_slave_0: entered allmulticast mode [ 89.716609][ T5834] bridge_slave_0: entered promiscuous mode [ 89.753729][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.761562][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.769412][ T5845] bridge_slave_1: entered allmulticast mode [ 89.776669][ T5845] bridge_slave_1: entered promiscuous mode [ 89.790827][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.798076][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.806087][ T5839] bridge_slave_0: entered allmulticast mode [ 89.814210][ T5839] bridge_slave_0: entered promiscuous mode [ 89.821783][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.829078][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.836397][ T5834] bridge_slave_1: entered allmulticast mode [ 89.844290][ T5834] bridge_slave_1: entered promiscuous mode [ 89.867088][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.897685][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.905461][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.913253][ T5839] bridge_slave_1: entered allmulticast mode [ 89.920643][ T5839] bridge_slave_1: entered promiscuous mode [ 89.942876][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.008043][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.038049][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.077665][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.104678][ T5846] team0: Port device team_slave_0 added [ 90.113970][ T5846] team0: Port device team_slave_1 added [ 90.122743][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.147573][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.156804][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.164545][ T5844] bridge_slave_0: entered allmulticast mode [ 90.172929][ T5844] bridge_slave_0: entered promiscuous mode [ 90.181751][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.188956][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.196206][ T5844] bridge_slave_1: entered allmulticast mode [ 90.205580][ T5844] bridge_slave_1: entered promiscuous mode [ 90.217570][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.249467][ T5838] Bluetooth: hci0: command tx timeout [ 90.286078][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.314189][ T5834] team0: Port device team_slave_0 added [ 90.323567][ T5834] team0: Port device team_slave_1 added [ 90.334508][ T5838] Bluetooth: hci1: command tx timeout [ 90.357844][ T5845] team0: Port device team_slave_0 added [ 90.368244][ T5845] team0: Port device team_slave_1 added [ 90.414167][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.424292][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.450565][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.477923][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.488456][ T5838] Bluetooth: hci2: command tx timeout [ 90.488536][ T5842] Bluetooth: hci3: command tx timeout [ 90.493954][ T51] Bluetooth: hci4: command tx timeout [ 90.506322][ T5839] team0: Port device team_slave_0 added [ 90.527585][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.534967][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.561785][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.589575][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.615602][ T5839] team0: Port device team_slave_1 added [ 90.637020][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.646859][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.674124][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.694141][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.701196][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.727360][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.766396][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.773561][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.799643][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.821276][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.829326][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.855627][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.869938][ T5844] team0: Port device team_slave_0 added [ 90.876626][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.884202][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.910260][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.924343][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.931422][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.958070][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.998062][ T5844] team0: Port device team_slave_1 added [ 91.038146][ T5834] hsr_slave_0: entered promiscuous mode [ 91.045128][ T5834] hsr_slave_1: entered promiscuous mode [ 91.134895][ T5846] hsr_slave_0: entered promiscuous mode [ 91.143865][ T5846] hsr_slave_1: entered promiscuous mode [ 91.150564][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.158453][ T5846] Cannot create hsr debugfs directory [ 91.235613][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.243033][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.269745][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.282985][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.290053][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.316490][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.332883][ T5839] hsr_slave_0: entered promiscuous mode [ 91.339857][ T5839] hsr_slave_1: entered promiscuous mode [ 91.346049][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.353740][ T5839] Cannot create hsr debugfs directory [ 91.432723][ T5845] hsr_slave_0: entered promiscuous mode [ 91.440285][ T5845] hsr_slave_1: entered promiscuous mode [ 91.446560][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.454681][ T5845] Cannot create hsr debugfs directory [ 91.733268][ T5844] hsr_slave_0: entered promiscuous mode [ 91.740691][ T5844] hsr_slave_1: entered promiscuous mode [ 91.746859][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.755837][ T5844] Cannot create hsr debugfs directory [ 92.009390][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.044923][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.076907][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.090467][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.193577][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.236982][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.250272][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.261963][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.328907][ T51] Bluetooth: hci0: command tx timeout [ 92.343663][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.380359][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.412506][ T51] Bluetooth: hci1: command tx timeout [ 92.423775][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.457691][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.556267][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.568882][ T5838] Bluetooth: hci4: command tx timeout [ 92.568900][ T5842] Bluetooth: hci2: command tx timeout [ 92.574399][ T51] Bluetooth: hci3: command tx timeout [ 92.587861][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.610654][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.623571][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.735329][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.752344][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.789450][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.796888][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.810497][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.836424][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.854952][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.885851][ T772] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.893290][ T772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.934624][ T772] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.941824][ T772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.982688][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.056603][ T772] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.063807][ T772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.075735][ T772] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.082903][ T772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.135891][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.207836][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.234399][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.241845][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.259871][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.267090][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.324818][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.403218][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.465852][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.473078][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.486505][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.493753][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.574954][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.707572][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.726455][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.765327][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.806981][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.814196][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.860965][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.868159][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.998012][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.083859][ T5834] veth0_vlan: entered promiscuous mode [ 94.126583][ T5834] veth1_vlan: entered promiscuous mode [ 94.230744][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.238140][ T5839] veth0_vlan: entered promiscuous mode [ 94.318164][ T5839] veth1_vlan: entered promiscuous mode [ 94.351941][ T5834] veth0_macvtap: entered promiscuous mode [ 94.376658][ T5834] veth1_macvtap: entered promiscuous mode [ 94.409405][ T51] Bluetooth: hci0: command tx timeout [ 94.448146][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.488954][ T51] Bluetooth: hci1: command tx timeout [ 94.510292][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.520140][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.537576][ T5839] veth0_macvtap: entered promiscuous mode [ 94.550172][ T5839] veth1_macvtap: entered promiscuous mode [ 94.563724][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.573293][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.582468][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.591385][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.646769][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.654163][ T5842] Bluetooth: hci4: command tx timeout [ 94.655959][ T51] Bluetooth: hci3: command tx timeout [ 94.661528][ T5842] Bluetooth: hci2: command tx timeout [ 94.684107][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.746093][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.764343][ T5846] veth0_vlan: entered promiscuous mode [ 94.785369][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.795885][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.805000][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.814095][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.864814][ T5846] veth1_vlan: entered promiscuous mode [ 94.954750][ T772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.977165][ T5845] veth0_vlan: entered promiscuous mode [ 94.984839][ T772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.070506][ T5845] veth1_vlan: entered promiscuous mode [ 95.105117][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.133233][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.148037][ T5846] veth0_macvtap: entered promiscuous mode [ 95.227529][ T5846] veth1_macvtap: entered promiscuous mode [ 95.261470][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.268252][ T5845] veth0_macvtap: entered promiscuous mode [ 95.276804][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.291455][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.336055][ T5845] veth1_macvtap: entered promiscuous mode [ 95.441752][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.464000][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.476573][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.487622][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.496607][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.505485][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.522113][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.530662][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.549982][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.572609][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.586188][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.597178][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.607261][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.621223][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.638694][ T978] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.709627][ T5844] veth0_vlan: entered promiscuous mode [ 95.801609][ T5844] veth1_vlan: entered promiscuous mode [ 95.820095][ T978] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.833062][ T5956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.860737][ T978] usb 4-1: config 1 has an invalid interface number: 193 but max is 1 [ 95.889569][ T978] usb 4-1: config 1 has no interface number 1 [ 95.895717][ T978] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 95.924398][ T978] usb 4-1: config 1 interface 0 has no altsetting 0 [ 95.942489][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.958524][ T978] usb 4-1: config 1 interface 193 has no altsetting 0 [ 95.963467][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.979264][ T978] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 96.023574][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.056812][ T978] usb 4-1: Product: syz [ 96.063166][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.079593][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.086091][ T978] usb 4-1: Manufacturer: syz [ 96.095666][ T978] usb 4-1: SerialNumber: syz [ 96.177835][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.181344][ T5844] veth0_macvtap: entered promiscuous mode [ 96.191878][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.220932][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.247834][ T5844] veth1_macvtap: entered promiscuous mode [ 96.262643][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.320034][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.353441][ T978] smsusb:smsusb_probe: board id=8, interface number 0 [ 96.390865][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.403617][ T978] smsusb:smsusb_probe: board id=8, interface number 193 [ 96.423629][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.469420][ T978] usb 4-1: USB disconnect, device number 2 [ 96.472352][ T5966] tmpfs: Cannot enable quota on remount [ 96.481149][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.492618][ T51] Bluetooth: hci0: command tx timeout [ 96.525912][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.544507][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.569569][ T51] Bluetooth: hci1: command tx timeout [ 96.664922][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.731350][ T51] Bluetooth: hci2: command tx timeout [ 96.732275][ T5842] Bluetooth: hci3: command tx timeout [ 96.738026][ T51] Bluetooth: hci4: command tx timeout [ 96.885350][ T5975] misc userio: Invalid payload size [ 96.912833][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.937437][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.959979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.044314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.183644][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.220108][ T44] cfg80211: failed to load regulatory.db [ 97.238948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.247450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.265225][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.628800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.658734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 97.667283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 97.676922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.705932][ T5987] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET) [ 98.071159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.509277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.357389][ T6013] warning: `syz.1.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.436407][ T6014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.038691][ T5959] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.290033][ T5959] usb 1-1: Using ep0 maxpacket: 16 [ 102.374486][ T5959] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.841091][ T5959] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 102.875198][ T5959] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.905328][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 102.923851][ T5959] usb 1-1: SerialNumber: syz [ 103.208597][ T6029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.450792][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 106.654830][ T6039] nvme_fabrics: missing parameter 'transport=%s' [ 106.703019][ T6039] nvme_fabrics: missing parameter 'nqn=%s' [ 106.758472][ T5959] usb 1-1: USB disconnect, device number 2 [ 108.421935][ T6061] netlink: 72 bytes leftover after parsing attributes in process `syz.2.28'. [ 109.161624][ T5959] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.301743][ T6067] mmap: syz.1.31 (6067) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.585252][ T5959] usb 5-1: Using ep0 maxpacket: 8 [ 109.614895][ T5959] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.337676][ T5959] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 110.349661][ T5959] usb 5-1: config 1 has no interface number 1 [ 110.357121][ T5959] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 110.399873][ T5959] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 110.464272][ T5959] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.479223][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.496760][ T5959] usb 5-1: Product: syz [ 110.512433][ T5959] usb 5-1: Manufacturer: syz [ 110.524320][ T5959] usb 5-1: SerialNumber: syz [ 110.689041][ T978] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.796198][ T5959] usb 5-1: 2:1 : unsupported sample bitwidth 5 in 253 bytes [ 110.869253][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 110.889888][ T978] usb 3-1: config 0 interface 0 has no altsetting 0 [ 110.900587][ T978] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 110.918594][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.947106][ T978] usb 3-1: Product: syz [ 110.947158][ T5959] usb 5-1: USB disconnect, device number 2 [ 110.957302][ T978] usb 3-1: Manufacturer: syz [ 111.013469][ T978] usb 3-1: SerialNumber: syz [ 111.664583][ T6081] udevd[6081]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.690759][ T978] usb 3-1: config 0 descriptor?? [ 112.052791][ T6092] ./file1: Can't lookup blockdev [ 112.277499][ T978] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 112.779035][ T978] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 113.507825][ T978] usb 3-1: USB disconnect, device number 2 [ 113.791237][ T6094] nvme_fabrics: missing parameter 'transport=%s' [ 113.799706][ T6094] nvme_fabrics: missing parameter 'nqn=%s' [ 114.231730][ T6101] mkiss: ax0: crc mode is auto. [ 120.534184][ T6161] Zero length message leads to an empty skb [ 121.723973][ T6171] syz.0.58 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 125.551908][ T6202] netlink: 64 bytes leftover after parsing attributes in process `syz.3.67'. [ 125.563466][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 128.958556][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 129.367171][ T6248] netlink: 64 bytes leftover after parsing attributes in process `syz.0.81'. [ 129.378640][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.81'. [ 131.288678][ T6258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.186605][ T6287] netlink: 64 bytes leftover after parsing attributes in process `syz.2.93'. [ 133.326805][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.350222][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.404468][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 137.770360][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 137.782687][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 137.859758][ T51] Bluetooth: hci1: hardware error 0x00 [ 138.907750][ T6331] nvme_fabrics: missing parameter 'transport=%s' [ 138.917731][ T6331] nvme_fabrics: missing parameter 'nqn=%s' [ 140.809752][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 142.168020][ T6362] random: crng reseeded on system resumption [ 142.410792][ T6367] netlink: 104 bytes leftover after parsing attributes in process `syz.2.113'. [ 144.409467][ T6381] can0: slcan on ttyS3. [ 145.269985][ T6381] can0 (unregistered): slcan off ttyS3. [ 145.485885][ T6387] netlink: 76 bytes leftover after parsing attributes in process `syz.2.120'. [ 151.682045][ T51] Bluetooth: hci2: link tx timeout [ 151.687453][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.787715][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 158.810768][ T6479] netlink: 'syz.4.146': attribute type 1 has an invalid length. [ 159.026031][ T6481] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 159.038499][ T6479] netlink: 48 bytes leftover after parsing attributes in process `syz.4.146'. [ 159.133602][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.145337][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.148052][ T6482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.146'. [ 159.170301][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 159.204955][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.214010][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 159.260836][ T6482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.269540][ T36] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 160.131395][ T772] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 160.793291][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.998309][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.378606][ T51] Bluetooth: hci5: command tx timeout [ 161.700479][ T6514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.707993][ T6514] IPv6: NLM_F_CREATE should be set when creating new route [ 161.715525][ T6514] IPv6: NLM_F_CREATE should be set when creating new route [ 161.722904][ T6514] IPv6: NLM_F_CREATE should be set when creating new route [ 162.655569][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.598224][ T51] Bluetooth: hci5: command tx timeout [ 163.765654][ T6530] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 163.781266][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.873201][ T6483] chnl_net:caif_netlink_parms(): no params data found [ 164.106603][ T6537] netlink: 17 bytes leftover after parsing attributes in process `syz.4.162'. [ 164.116560][ T6537] netlink: zone id is out of range [ 164.123480][ T6537] netlink: zone id is out of range [ 164.129057][ T6537] netlink: zone id is out of range [ 164.134264][ T6537] netlink: zone id is out of range [ 164.139664][ T6537] netlink: zone id is out of range [ 164.144960][ T6537] netlink: zone id is out of range [ 164.150470][ T6537] netlink: zone id is out of range [ 164.156041][ T6537] netlink: zone id is out of range [ 164.160642][ T6538] netlink: 48 bytes leftover after parsing attributes in process `syz.3.159'. [ 164.518742][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.159'. [ 165.502360][ T6534] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 165.610718][ T51] Bluetooth: hci5: command tx timeout [ 165.760853][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.785245][ T772] net_ratelimit: 74 callbacks suppressed [ 165.785268][ T772] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 165.786471][ T6539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.909036][ T772] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 167.279148][ T978] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 167.300314][ T6571] netlink: 76 bytes leftover after parsing attributes in process `syz.1.171'. [ 167.379446][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.400377][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.411994][ T6483] bridge_slave_0: entered allmulticast mode [ 167.418963][ T981] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 167.436502][ T6483] bridge_slave_0: entered promiscuous mode [ 167.444797][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 167.456002][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.471190][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.496515][ T978] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 167.523776][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.548529][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.565057][ T6483] bridge_slave_1: entered allmulticast mode [ 167.581394][ T981] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 167.603549][ T6483] bridge_slave_1: entered promiscuous mode [ 167.607452][ T6573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.173'. [ 167.618970][ T981] usb 3-1: config 0 has no interface number 0 [ 167.619023][ T981] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 167.621047][ T978] usb 5-1: config 0 descriptor?? [ 167.654151][ T981] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 167.690057][ T51] Bluetooth: hci5: command tx timeout [ 167.710777][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.865097][ T981] usb 3-1: Product: syz [ 168.007823][ T6575] fuse: Bad value for 'fd' [ 168.025427][ T981] usb 3-1: Manufacturer: syz [ 168.231533][ T981] usb 3-1: SerialNumber: syz [ 168.318988][ T981] usb 3-1: config 0 descriptor?? [ 168.325785][ T6565] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 168.376248][ T981] ums-karma 3-1:0.46: USB Mass Storage device detected [ 168.488752][ T981] ums-karma 3-1:0.46: probe with driver ums-karma failed with error -5 [ 168.511809][ T6483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.566965][ T6483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.570043][ T978] hid-generic 0003:04F3:0754.0001: failed to start in urb: -90 [ 168.664525][ T981] usb 3-1: USB disconnect, device number 3 [ 168.672656][ T978] hid-generic 0003:04F3:0754.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.4-1/input0 [ 168.761600][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.770943][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.273915][ T981] usb 5-1: USB disconnect, device number 3 [ 169.346852][ T12] bridge_slave_1: left allmulticast mode [ 169.379616][ T12] bridge_slave_1: left promiscuous mode [ 169.386729][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.058191][ T12] bridge_slave_0: left allmulticast mode [ 170.081612][ T6587] fido_id[6587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 170.126919][ T12] bridge_slave_0: left promiscuous mode [ 170.143355][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.488115][ T6598] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 171.316473][ T6602] netlink: 48 bytes leftover after parsing attributes in process `syz.2.178'. [ 171.413160][ T6603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.178'. [ 172.650108][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.862187][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.875995][ T12] bond0 (unregistering): Released all slaves [ 172.914707][ T6483] team0: Port device team_slave_0 added [ 172.934173][ T6598] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 173.063988][ T6483] team0: Port device team_slave_1 added [ 173.333542][ T6619] netlink: 76 bytes leftover after parsing attributes in process `syz.4.182'. [ 174.272940][ T6630] netlink: 64 bytes leftover after parsing attributes in process `syz.4.185'. [ 175.187591][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.244818][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.297941][ T6483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.317349][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.185'. [ 175.366471][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 175.377428][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 175.404548][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 175.468071][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.483765][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 175.525783][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.556468][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 175.571337][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 175.603037][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 175.612369][ T6483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.664343][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 175.674742][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 176.343820][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 176.354429][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 176.362251][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 176.428400][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 176.466478][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 176.476475][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 176.515320][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 176.533475][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 176.548602][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 176.566317][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 176.589449][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 176.596921][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 176.738993][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.476229][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.508472][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.530996][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.562867][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.608633][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.616102][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.685197][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.705619][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.714112][ T12] hsr_slave_0: left promiscuous mode [ 177.728334][ T12] hsr_slave_1: left promiscuous mode [ 177.749876][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.769504][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.776938][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.803282][ T6668] netlink: 'syz.3.192': attribute type 1 has an invalid length. [ 177.818493][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.832162][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.873217][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.898407][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.907752][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.937589][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 178.003185][ T981] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz1] on syz0 [ 178.128619][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.192'. [ 178.141422][ T6676] fido_id[6676]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 178.157887][ T12] veth1_macvtap: left promiscuous mode [ 178.376028][ T12] veth0_macvtap: left promiscuous mode [ 178.383758][ T12] veth1_vlan: left promiscuous mode [ 178.389668][ T12] veth0_vlan: left promiscuous mode [ 180.893587][ T12] team0 (unregistering): Port device team_slave_1 removed [ 181.196391][ T12] team0 (unregistering): Port device team_slave_0 removed [ 182.483744][ T6668] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 182.527511][ T6673] veth3: entered promiscuous mode [ 182.626760][ T6693] bridge0: entered promiscuous mode [ 182.632438][ T6693] macvlan2: entered promiscuous mode [ 182.817701][ T6483] hsr_slave_0: entered promiscuous mode [ 182.919453][ T6483] hsr_slave_1: entered promiscuous mode [ 182.961573][ T6483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.050847][ T6483] Cannot create hsr debugfs directory [ 183.148693][ T5959] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 183.591867][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 183.617006][ T6713] evm: overlay not supported [ 183.624310][ T5959] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.656103][ T5959] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 183.695805][ T5959] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 183.733224][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.787074][ T5959] usb 3-1: Product: syz [ 183.812475][ T5959] usb 3-1: Manufacturer: syz [ 183.851909][ T5959] usb 3-1: SerialNumber: syz [ 183.871640][ T5959] usb 3-1: config 0 descriptor?? [ 184.668007][ T6729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.209'. [ 184.727169][ T6483] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 184.793254][ T6483] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 184.926341][ T6483] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 184.969601][ T6483] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 185.065931][ T6733] ./file1: Can't lookup blockdev [ 185.269737][ T51] Bluetooth: hci2: unexpected event for opcode 0x0803 [ 185.872813][ T981] usb 3-1: USB disconnect, device number 4 [ 185.924155][ T6483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.698748][ T6483] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.837202][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.844491][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.063758][ T6755] netlink: 'syz.3.213': attribute type 1 has an invalid length. [ 187.336396][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.213'. [ 187.515284][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.522533][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.760682][ T6761] veth3: entered promiscuous mode [ 187.797143][ T6761] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 188.372517][ T6780] can0: slcan on ttyS3. [ 189.080355][ T6780] can0 (unregistered): slcan off ttyS3. [ 189.462809][ T6789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.219'. [ 191.331930][ T6812] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 191.338050][ T6812] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 191.887279][ T6812] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.893443][ T6812] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 191.895293][ T6483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.954831][ T981] ------------[ cut here ]------------ [ 191.960586][ T981] workqueue: cannot queue hci_tx_work on wq hci2 [ 191.967061][ T981] WARNING: CPU: 0 PID: 981 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0 [ 191.976073][ T981] Modules linked in: [ 191.980295][ T981] CPU: 0 UID: 0 PID: 981 Comm: kworker/0:3 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 191.992315][ T981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.002405][ T981] Workqueue: events l2cap_chan_timeout [ 192.007918][ T981] RIP: 0010:__queue_work+0xd62/0xfe0 [ 192.013236][ T981] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 a9 2d 95 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 00 e9 89 8b 4c 89 fa e8 5f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 c0 46 35 00 90 0f 0b 90 e9 dd fc ff [ 192.032888][ T981] RSP: 0018:ffffc90003a4f728 EFLAGS: 00010046 [ 192.039002][ T981] RAX: 2e4141edcce3d000 RBX: 0000000000000020 RCX: ffff8880256a8000 [ 192.047021][ T981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 192.055061][ T981] RBP: 1ffff11028876538 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 192.063185][ T981] R10: dffffc0000000000 R11: ffffed10170c4853 R12: dffffc0000000000 [ 192.071196][ T981] R13: ffff88806c564b68 R14: ffff88801a494008 R15: ffff8881443b2978 [ 192.079218][ T981] FS: 0000000000000000(0000) GS:ffff888125c59000(0000) knlGS:0000000000000000 [ 192.088348][ T981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.094956][ T981] CR2: 000000110c25779d CR3: 000000003202e000 CR4: 00000000003526f0 [ 192.102953][ T981] Call Trace: [ 192.106278][ T981] [ 192.109260][ T981] ? rcu_is_watching+0x15/0xb0 [ 192.114107][ T981] queue_work_on+0x181/0x270 [ 192.118766][ T981] ? hci_send_acl+0x91c/0xc90 [ 192.123522][ T981] ? __pfx_queue_work_on+0x10/0x10 [ 192.128681][ T981] l2cap_send_disconn_req+0x255/0x3c0 [ 192.134105][ T981] ? __pfx_l2cap_send_disconn_req+0x10/0x10 [ 192.140063][ T981] ? l2cap_set_timer+0x8b/0x2b0 [ 192.145039][ T981] l2cap_chan_close+0x3ad/0x980 [ 192.149936][ T981] ? __pfx_l2cap_chan_close+0x10/0x10 [ 192.155429][ T981] ? process_scheduled_works+0x9ef/0x17b0 [ 192.161175][ T981] l2cap_chan_timeout+0x158/0x390 [ 192.166271][ T981] ? process_scheduled_works+0x9ef/0x17b0 [ 192.172010][ T981] process_scheduled_works+0xade/0x17b0 [ 192.177606][ T981] ? __pfx_process_scheduled_works+0x10/0x10 [ 192.183628][ T981] worker_thread+0x8a0/0xda0 [ 192.188338][ T981] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 192.194714][ T981] ? __kthread_parkme+0x7b/0x200 [ 192.199684][ T981] kthread+0x711/0x8a0 [ 192.203780][ T981] ? __pfx_worker_thread+0x10/0x10 [ 192.208918][ T981] ? __pfx_kthread+0x10/0x10 [ 192.213530][ T981] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.218753][ T981] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.224149][ T981] ? __pfx_kthread+0x10/0x10 [ 192.228761][ T981] ret_from_fork+0x3fc/0x770 [ 192.233378][ T981] ? __pfx_ret_from_fork+0x10/0x10 [ 192.238544][ T981] ? __switch_to_asm+0x39/0x70 [ 192.243324][ T981] ? __switch_to_asm+0x33/0x70 [ 192.248105][ T981] ? __pfx_kthread+0x10/0x10 [ 192.252723][ T981] ret_from_fork_asm+0x1a/0x30 [ 192.257550][ T981] [ 192.260608][ T981] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 192.267924][ T981] CPU: 0 UID: 0 PID: 981 Comm: kworker/0:3 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 192.279924][ T981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.290003][ T981] Workqueue: events l2cap_chan_timeout [ 192.295500][ T981] Call Trace: [ 192.298803][ T981] [ 192.301748][ T981] dump_stack_lvl+0x99/0x250 [ 192.306365][ T981] ? __asan_memcpy+0x40/0x70 [ 192.310994][ T981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.316216][ T981] ? __pfx__printk+0x10/0x10 [ 192.320843][ T981] panic+0x2db/0x790 [ 192.324850][ T981] ? __pfx_panic+0x10/0x10 [ 192.329281][ T981] ? show_trace_log_lvl+0x4fb/0x550 [ 192.334521][ T981] ? ret_from_fork_asm+0x1a/0x30 [ 192.339500][ T981] __warn+0x31b/0x4b0 [ 192.343532][ T981] ? __queue_work+0xd62/0xfe0 [ 192.348246][ T981] ? __queue_work+0xd62/0xfe0 [ 192.353174][ T981] report_bug+0x2be/0x4f0 [ 192.357574][ T981] ? __queue_work+0xd62/0xfe0 [ 192.362303][ T981] ? __queue_work+0xd62/0xfe0 [ 192.367028][ T981] ? __queue_work+0xd64/0xfe0 [ 192.371750][ T981] handle_bug+0x84/0x160 [ 192.376232][ T981] exc_invalid_op+0x1a/0x50 [ 192.380761][ T981] asm_exc_invalid_op+0x1a/0x20 [ 192.385634][ T981] RIP: 0010:__queue_work+0xd62/0xfe0 [ 192.390949][ T981] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 a9 2d 95 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 00 e9 89 8b 4c 89 fa e8 5f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 c0 46 35 00 90 0f 0b 90 e9 dd fc ff [ 192.410591][ T981] RSP: 0018:ffffc90003a4f728 EFLAGS: 00010046 [ 192.416691][ T981] RAX: 2e4141edcce3d000 RBX: 0000000000000020 RCX: ffff8880256a8000 [ 192.424766][ T981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 192.432795][ T981] RBP: 1ffff11028876538 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 192.440812][ T981] R10: dffffc0000000000 R11: ffffed10170c4853 R12: dffffc0000000000 [ 192.448813][ T981] R13: ffff88806c564b68 R14: ffff88801a494008 R15: ffff8881443b2978 [ 192.456825][ T981] ? __queue_work+0xd61/0xfe0 [ 192.461641][ T981] ? rcu_is_watching+0x15/0xb0 [ 192.466450][ T981] queue_work_on+0x181/0x270 [ 192.471094][ T981] ? hci_send_acl+0x91c/0xc90 [ 192.475912][ T981] ? __pfx_queue_work_on+0x10/0x10 [ 192.481091][ T981] l2cap_send_disconn_req+0x255/0x3c0 [ 192.486521][ T981] ? __pfx_l2cap_send_disconn_req+0x10/0x10 [ 192.492454][ T981] ? l2cap_set_timer+0x8b/0x2b0 [ 192.497333][ T981] l2cap_chan_close+0x3ad/0x980 [ 192.502219][ T981] ? __pfx_l2cap_chan_close+0x10/0x10 [ 192.507619][ T981] ? process_scheduled_works+0x9ef/0x17b0 [ 192.513367][ T981] l2cap_chan_timeout+0x158/0x390 [ 192.518420][ T981] ? process_scheduled_works+0x9ef/0x17b0 [ 192.524157][ T981] process_scheduled_works+0xade/0x17b0 [ 192.529753][ T981] ? __pfx_process_scheduled_works+0x10/0x10 [ 192.535851][ T981] worker_thread+0x8a0/0xda0 [ 192.540526][ T981] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 192.546884][ T981] ? __kthread_parkme+0x7b/0x200 [ 192.551849][ T981] kthread+0x711/0x8a0 [ 192.555945][ T981] ? __pfx_worker_thread+0x10/0x10 [ 192.561071][ T981] ? __pfx_kthread+0x10/0x10 [ 192.565771][ T981] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.571012][ T981] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.576224][ T981] ? __pfx_kthread+0x10/0x10 [ 192.580840][ T981] ret_from_fork+0x3fc/0x770 [ 192.585467][ T981] ? __pfx_ret_from_fork+0x10/0x10 [ 192.590602][ T981] ? __switch_to_asm+0x39/0x70 [ 192.595407][ T981] ? __switch_to_asm+0x33/0x70 [ 192.600192][ T981] ? __pfx_kthread+0x10/0x10 [ 192.604803][ T981] ret_from_fork_asm+0x1a/0x30 [ 192.609613][ T981] [ 192.612937][ T981] Kernel Offset: disabled [ 192.617279][ T981] Rebooting in 86400 seconds..